last executing test programs: 30m48.231791925s ago: executing program 32 (id=156): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) r1 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r6 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f0000000880)=""/181, 0xb5}], 0x2) gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r8, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) 30m44.280985328s ago: executing program 33 (id=160): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x8, 0x55610518, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 30m41.205224741s ago: executing program 34 (id=161): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 30m40.653598849s ago: executing program 35 (id=168): r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x1a38, 0x0, 0x0, 0x0) 29m5.621642955s ago: executing program 36 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0xd, 0x10000}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) set_mempolicy(0x3, 0x0, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x22001, 0x101) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="3000000006000000000000000000000001620000000000000000000000000000070000000000000027403a835e5d2700"], 0x30) socket$inet_tcp(0x2, 0x1, 0x0) 27m29.428837668s ago: executing program 37 (id=305): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x149102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000340), &(0x7f0000000400)=0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x83) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 27m29.155451367s ago: executing program 38 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 25m43.239364545s ago: executing program 39 (id=414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f00000000c0)) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) fspick(0xffffffffffffffff, 0x0, 0x1) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x6ec8, 0x80, 0x2000007, 0x3ce}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x20, 0x0, 0x0) 25m6.82469887s ago: executing program 40 (id=453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) fcntl$setstatus(r2, 0x4, 0x42c00) write(r0, &(0x7f0000000040), 0xffffff4a) 25m6.31856313s ago: executing program 41 (id=455): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a4060001"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 25m5.838539287s ago: executing program 42 (id=452): socket(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414"], 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 24m50.518574906s ago: executing program 43 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x18, r1, 0x341, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) 23m59.196779258s ago: executing program 44 (id=462): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0xfffffffc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001680)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd31}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) close(r0) 23m54.482473355s ago: executing program 45 (id=461): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400000225023a2b90af07158d8cc185", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b36630000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 23m16.326008729s ago: executing program 46 (id=503): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000880)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0x23, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0xac}}, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) fsmount(0xffffffffffffffff, 0x0, 0x83) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000300)='y\x105\xf5\xf7\x1exa\xa3\x00\x00\aLk\xfd\xc7\x87\t\xf3\xf1<\x18}\xbe\x1c\x11x\x0f\xa1\xcf\x1a\x98S\xe5\xff7\xc9\x00\x00\x00\x00\x00\x00\xeb\x00\x00\x00\x00\xb9\x84v-\xd2\x14#\xfaes', 0x3) ftruncate(r6, 0xffff) lseek(0xffffffffffffffff, 0x40000000400016, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 23m12.520955853s ago: executing program 47 (id=513): pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x1, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9e3, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 20m57.245891846s ago: executing program 48 (id=612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000500), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) ftruncate(r0, 0xfffffd83) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$clear(0x7, r7) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r9, 0x227a, &(0x7f00000002c0)) close_range(r3, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 20m32.474213673s ago: executing program 49 (id=659): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x25}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_newroute={0x12, 0x18, 0x301}, 0x1c}}, 0x0) syz_usbip_server_init(0x6) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 19m47.769086094s ago: executing program 50 (id=713): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000080)={0x9, {0x36, 0x3, 0x400, 0xfffffede}, {0xfffffff7, 0x4, 0x8bb4d08f, 0xfdfd}, {0x2, 0x8}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000840) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x0, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000000)="944ab93384d9", 0x6}, {0x0}], 0x3}, 0x4000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000180)) 14m32.446838883s ago: executing program 51 (id=1377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000600)=[{0xe, 0x0, [0xf0c, 0x4, 0x6be9d3e7, 0x81, 0x7654, 0x8, 0x2, 0x9, 0x3, 0x8, 0x707d, 0x4802, 0x1, 0x3ff, 0x1b, 0x8]}, {0x2, 0x0, [0x40, 0x1, 0x7fff, 0x886, 0x3, 0xc5, 0x3, 0x56, 0x7, 0x5, 0xe, 0x6, 0xffff, 0x3ff, 0x7ff, 0x3f768c30]}, {0x8, 0x0, [0x2, 0x9, 0x5, 0x0, 0x7, 0xdf, 0x401, 0x2, 0x7, 0xe, 0x5, 0x2, 0x1, 0xe3c4, 0xe888, 0x4]}, {0x10, 0x0, [0x3, 0xffc, 0xf24, 0x1, 0x4, 0x8, 0x7, 0x7, 0x8000006f, 0x1000, 0x0, 0xb, 0x6, 0xf49, 0x2, 0x1]}, {0x1, 0x0, [0xfffff800, 0x5d, 0x3ae54991, 0x1, 0x4, 0x7, 0x7, 0x7, 0x7, 0x2, 0x0, 0x400, 0xfffffffa, 0xd, 0x4, 0x1]}]}}, 0x4f) openat$kvm(0xffffffffffffff9c, 0x0, 0x48002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) clock_getres(0xeaffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x8000000000000001}]}) shmat(0x0, &(0x7f0000866000/0x1000)=nil, 0x5000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_io_uring_setup(0x74, &(0x7f0000000540)={0x0, 0x203bce, 0x40, 0x800003, 0x400100}, 0x0, &(0x7f0000000100)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) 14m22.530559849s ago: executing program 52 (id=1401): unshare(0x200) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x81ad}}}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{}, [@l2cap_move_chan_cfm={{0x10, 0x5, 0xfffffffffffffef0}, {0xfff9, 0x71}}, @l2cap_move_chan_req={{0xe, 0x1}, {0xb, 0x6}}, @l2cap_conn_rsp={{}, {0xff92, 0xf229, 0x81, 0x8}}, @l2cap_info_rsp={{0xb, 0x5}, {0x200, 0xf, "4788c812e38233f07cda22a1252921b4d00ab01e1a250b4c"}}, @l2cap_conf_rsp={{0x5, 0xfe}, {0xe158, 0x6, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0x80}, {0x9, 0x10}}]}}, 0x5) 14m14.490359939s ago: executing program 53 (id=1411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 13m30.525743701s ago: executing program 54 (id=1459): syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$vcsu(&(0x7f0000000340), 0xffffffffffffffff, 0x20201) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x26004885) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000009b80)=""/102392, 0x18ff8) gettid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="320200007d00000005f1000000"], 0x232) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000300)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r5, 0x0, 0x0, 0x80800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {0x0}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xd0) 12m40.553399206s ago: executing program 5 (id=1506): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x58, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1, 0x21}}], 0x48}, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r1, 0x6a, 0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000340)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x20, 0x8, 0x1, 0x0, 0x0, 0x2, 0x8}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7fff}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x4000000) 12m24.276771864s ago: executing program 55 (id=1506): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x58, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1, 0x21}}], 0x48}, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r1, 0x6a, 0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000340)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x20, 0x8, 0x1, 0x0, 0x0, 0x2, 0x8}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7fff}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x4000000) 12m20.724559176s ago: executing program 56 (id=1509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 12m9.731259534s ago: executing program 57 (id=1520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x1007}, 0x1c) 11m12.104637652s ago: executing program 58 (id=1565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x892, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 11m8.935009672s ago: executing program 59 (id=1567): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r3, 0x0) ftruncate(r3, 0x200000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x80, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 10m11.955967957s ago: executing program 60 (id=1577): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 10m9.803943788s ago: executing program 61 (id=1579): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4e24, 0x78a2, @mcast2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105ee0ce94a00000000000000000002000008d9cac38b4c5b09a281d66479292d42387a1f6644615f1fefcdae4a604a2a6457be412a5c2c6c83781aae0fbdfd9fc3c5a4422038139d0f000163a5600268"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) 10m1.710641762s ago: executing program 62 (id=1583): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 9m58.264595852s ago: executing program 63 (id=1585): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000007c0)='{\xe0e%m\"\xbb{\xf4\x01Z\xb7\xf4\x92\xb5\xcb\'\xa3\x0e!\xf1\x88]C\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x02\x00\x00\x00\xc3Dhx\x04\xd8\x17\xbcP\x8bl\xb2\x03\x18!V\x1b\xcbk\xf8\xd6JE4,\xdf\x96\x80j#\xf9\xd8\x13,\x89\x10\x90:\xec/\xb9T\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4014) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r4, 0xb) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 9m49.884137467s ago: executing program 64 (id=1590): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x12) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$video(0x0, 0x7f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r0, 0x0) 8m23.891177078s ago: executing program 65 (id=1601): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x81, @none, "9806623d01b199dc872b30d78aa32afe88f6b403a4c8d00506452b23039e2a794b16d7b3fe85c3b673e43c7dbe598e4a87d9930d55962db175648990c0c26babedd02df0a9b2eaddcd0cb3b0f268a4bf0896ba4c38912a3270b81e7cd00ea37f16b50de0dca2f17035b4f9123c09642391e54c306e89cd56ec3b8ff7217abf960f437e24dfd3a55d5dcd0dec43ca0b34747e5854318e45e083942bb808a68577ac1cc36282a3b3aa02d84f6eccb9fe53711e68cfdd7121878f03ec6bd8dd301b6945369c76a5fff50751ce4a95061ef986befd5e921f5acac59a82c1631cd16c742733d7beaf7784e56e2540bf3cea861efabbe7c323578d"}}}, 0x102) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020303000001000000000000000000000800003e0fcff4c6a4a56e7f572f1c27e86d35b6fb2597fb82fe2c8529a834c7"], 0x1c}}, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwritev(r7, &(0x7f0000000300)=[{&(0x7f0000000580)="9f12d3c341b9f50acb40c43fc235e42d2bc896d6ad1edce1134f941367938b712d3e83b0ddd4b7283f1d23bed01a59f63c55905ca7cce6812f4c5fa00a3a752abffad08d74c33153e78729570898eedf2fc03f53b9f678e8d82875fb36532428f455f3881a8ecfa4009f27a91fbb5be176124a9383ce9b6b74af06713e68e84072e7", 0x82}], 0x1, 0x3, 0x8) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m30.653565874s ago: executing program 5 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x17, 0x0, &(0x7f00000008c0)='syzkaller\x00', 0xb}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x404cb}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) 7m14.842615218s ago: executing program 66 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x17, 0x0, &(0x7f00000008c0)='syzkaller\x00', 0xb}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x404cb}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) 6m53.699192955s ago: executing program 67 (id=1635): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 6m48.510694747s ago: executing program 68 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x400c0a4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0x80049370, 0x0) 6m37.456550965s ago: executing program 1 (id=1662): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r0, 0x6a, 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000)=0x3, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 6m23.227942159s ago: executing program 69 (id=1661): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) 6m22.197590883s ago: executing program 70 (id=1662): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r0, 0x6a, 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000)=0x3, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 5m0.868455028s ago: executing program 71 (id=1677): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 4m49.663108523s ago: executing program 4 (id=1701): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="05000000040000000400000007"], 0x48) syz_emit_vhci(0x0, 0xf8) 4m48.726324844s ago: executing program 4 (id=1703): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f0000000340)="18", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r0) 4m47.027466699s ago: executing program 4 (id=1705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) shutdown(r0, 0x1) 4m44.723138544s ago: executing program 4 (id=1707): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x144}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4m43.126491912s ago: executing program 4 (id=1710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x4}) 4m41.532743948s ago: executing program 4 (id=1713): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f00000009c0)=0x6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000240)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect$hid(0x2, 0x3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0xc00) io_setup(0x2007, &(0x7f0000000980)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, 0x0, 0x25, 0x4, @void}, 0x10) vmsplice(r4, 0x0, 0x0, 0xc) 4m40.599425984s ago: executing program 0 (id=1714): syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0)=0x400000d7, 0x4) open$dir(0x0, 0x2001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xb2a80, 0x40, 0x8}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x261) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x5}, @const={0x0, {0x0, 0x3400, 0x0, 0x5715}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="ce4d93003d9145488152efd2630fc0ee4de0e44036828055a99cd3464ed2a3a93392ff8cfeb8d060b2b9611a596956fa7f4021b557b8089158bc4c7540dbd9b32cd7dc875b48144c0fd3e1ed9c2bba98d62c9045e5786cb0cfdc587504150af5ab35cb460625698f15e169fc9297d819239617fb99db113ffd6c74c02ad19f40ffc95f4aa53813193f0fe6884a05423819", 0x91}], 0x1, &(0x7f0000000580)}}, {{&(0x7f0000000600)=@ll={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000800)}], 0x2, &(0x7f0000001c00)}}], 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) 4m38.907775671s ago: executing program 0 (id=1716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) sendto$inet6(r0, &(0x7f0000000540)="90b8", 0x2, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1, 0x81}, 0x1c) shutdown(r0, 0x1) 4m37.864071829s ago: executing program 0 (id=1717): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0xfffffffffffffffc, 0xfff}) write$binfmt_misc(r0, &(0x7f0000000240)='@', 0x1) 4m36.966056148s ago: executing program 0 (id=1719): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x144}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4m35.030798353s ago: executing program 0 (id=1722): statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) execve(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4m33.445379874s ago: executing program 0 (id=1724): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400daea765db0bc10260000000002000000"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 4m31.28832295s ago: executing program 72 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000937000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0xb4e02000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 4m25.275217176s ago: executing program 73 (id=1713): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f00000009c0)=0x6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000240)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect$hid(0x2, 0x3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0xc00) io_setup(0x2007, &(0x7f0000000980)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, 0x0, 0x25, 0x4, @void}, 0x10) vmsplice(r4, 0x0, 0x0, 0xc) 4m17.676596683s ago: executing program 74 (id=1724): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400daea765db0bc10260000000002000000"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 3m22.247341862s ago: executing program 6 (id=1768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m20.43841319s ago: executing program 6 (id=1772): syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0)=0x400000d7, 0x4) open$dir(0x0, 0x2001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xb2a80, 0x40, 0x8}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x261) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x5}, @const={0x0, {0x0, 0x3400, 0x0, 0x5715}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="ce4d93003d9145488152efd2630fc0ee4de0e44036828055a99cd3464ed2a3a93392ff8cfeb8d060b2b9611a596956fa7f4021b557b8089158bc4c7540dbd9b32cd7dc875b48144c0fd3e1ed9c2bba98d62c9045e5786cb0cfdc587504150af5ab35cb460625698f15e169fc9297d819239617fb99db113ffd6c74c02ad19f40ffc95f4aa53813193f0fe6884a05423819", 0x91}], 0x1, &(0x7f0000000580)}}, {{&(0x7f0000000600)=@ll={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000800)}], 0x2, &(0x7f0000001c00)}}], 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x1, 0xe8, &(0x7f0000000380)="e2868f4aefac7a67561422c516dc175845e997f8169837a09b4366393e640b0e755f45f91f4b30c8c49475cfb6045b3a4886bddc89b17f03b46ca395d2fab9052906ea669df28484652822fb0bb0b395d161aec424718d1e1dcc5adc4cef9363a93024159b6d7e4e0e2d5cc8ab637193f3efe80d0a2fdcd22b8e4e96dffb6bb350d25a82f272ad0ee1237a9a7b0b3f7dc9ca26d2d54cbf2181d2194cc62965a20bba7b1729b8eccd05d4fe3221476a3f84e565bc054a47fb49d34831e0d9515dce4c3b24b6c432e9916d1cdb9cad4672ab05adc0a8b773cba8d6a26d8bbe8f0edf5b43aa258c76fd"}) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) 3m19.087621935s ago: executing program 6 (id=1773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000540)="90b8", 0x2, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1, 0x81}, 0x1c) shutdown(r0, 0x1) 3m18.183290795s ago: executing program 6 (id=1776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x144}}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m16.636837538s ago: executing program 6 (id=1777): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 3m15.175926119s ago: executing program 6 (id=1778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000006c0)="3b000000010006", 0x7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x8000, @mcast2, 0x8}, 0x1c) 3m12.669883406s ago: executing program 5 (id=1690): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 3m9.068722329s ago: executing program 5 (id=1781): syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0)=0x400000d7, 0x4) open$dir(0x0, 0x2001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xb2a80, 0x40, 0x8}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x261) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x5}, @const={0x0, {0x0, 0x3400, 0x0, 0x5715}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="ce4d93003d9145488152efd2630fc0ee4de0e44036828055a99cd3464ed2a3a93392ff8cfeb8d060b2b9611a596956fa7f4021b557b8089158bc4c7540dbd9b32cd7dc875b48144c0fd3e1ed9c2bba98d62c9045e5786cb0cfdc587504150af5ab35cb460625698f15e169fc9297d819239617fb99db113ffd6c74c02ad19f40ffc95f4aa53813193f0fe6884a05423819", 0x91}], 0x1, &(0x7f0000000580)}}, {{&(0x7f0000000600)=@ll={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000800)}], 0x2, &(0x7f0000001c00)}}], 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x1, 0xe8, &(0x7f0000000380)="e2868f4aefac7a67561422c516dc175845e997f8169837a09b4366393e640b0e755f45f91f4b30c8c49475cfb6045b3a4886bddc89b17f03b46ca395d2fab9052906ea669df28484652822fb0bb0b395d161aec424718d1e1dcc5adc4cef9363a93024159b6d7e4e0e2d5cc8ab637193f3efe80d0a2fdcd22b8e4e96dffb6bb350d25a82f272ad0ee1237a9a7b0b3f7dc9ca26d2d54cbf2181d2194cc62965a20bba7b1729b8eccd05d4fe3221476a3f84e565bc054a47fb49d34831e0d9515dce4c3b24b6c432e9916d1cdb9cad4672ab05adc0a8b773cba8d6a26d8bbe8f0edf5b43aa258c76fd"}) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) 3m6.878431668s ago: executing program 5 (id=1784): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000540)="90b8", 0x2, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1, 0x81}, 0x1c) shutdown(r0, 0x1) 3m5.540681647s ago: executing program 5 (id=1787): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0xa8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_clone(0x2400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) ptrace(0x4208, r7) ptrace(0x4207, r7) bind$alg(r6, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x800) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) memfd_secret(0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x1b) 2m59.038846584s ago: executing program 75 (id=1778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000006c0)="3b000000010006", 0x7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x8000, @mcast2, 0x8}, 0x1c) 2m49.298184072s ago: executing program 76 (id=1787): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0xa8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_clone(0x2400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) ptrace(0x4208, r7) ptrace(0x4207, r7) bind$alg(r6, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x800) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) memfd_secret(0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x1b) 2m7.981519495s ago: executing program 3 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c00028008000140000000040800024000000011080004400000000008007a3a0000000008000540000000030900010073797a30000000000900020073797a320000000014000000"], 0x98}}, 0x0) 2m7.401585771s ago: executing program 3 (id=1833): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x700) 2m6.388151949s ago: executing program 3 (id=1834): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000540)="90b8", 0x2, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1, 0x81}, 0x1c) shutdown(r0, 0x1) 2m5.248416517s ago: executing program 3 (id=1835): r0 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000000c0), 0x1004) process_vm_writev(r0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/149, 0x95}], 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000002100)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff9a030000000000004000000000000000560000000000000000000000000038000100000002000000030000000500000004000000000000000d20000000400000c8010000000000000200000000000000045178750a3e373f0b7a892d1f7908d87a0000000000000002000000000000009c4e437a73b9b5d70842be785017c89735c18db6a140a0d2866b489539b26f071dca36d44d32c82ed102a0ff9bcf418e7fcf98ebdeb127693c361101fec7647856ed5c8fdb50097a07410db000d8730b0365d90cd09408347d67"], 0x78) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) iopl(0x3) r2 = socket$inet(0x2, 0x2, 0x1) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m4.326084343s ago: executing program 3 (id=1836): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee4, 0x400, 0x1, 0x313}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0xa, 0xfff, 0x0, 0x800, 0x4}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2m3.081105751s ago: executing program 3 (id=1837): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1m47.535316324s ago: executing program 77 (id=1837): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1m3.129631853s ago: executing program 8 (id=1872): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4) 1m2.57541477s ago: executing program 8 (id=1873): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m0.763152992s ago: executing program 8 (id=1874): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x42) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000040), 0x200000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m0.76015633s ago: executing program 1 (id=1792): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000004a80)="eb", 0x1}], 0x1) 59.661852632s ago: executing program 1 (id=1875): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 59.654498747s ago: executing program 8 (id=1876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 58.709380154s ago: executing program 8 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05a1240064abe5a80000ccfb320e08000300", @ANYRES32, @ANYRES16=r2], 0x44}}, 0x4800) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x401, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000840}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x98, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x73, 0xa9, @random="8f60e6f16d0f8c6ed5ab66e6c995ea1a2484953bc5e89f0dbe5b0f040abc73b0e343c84f488a8fdd1d3cdf1a13a5fb29a2931a826dea9094df2e42fa3831bea2d1a04e8eac39413497d89be0e42b4575dc9ee2fb4565a137485803f38179ae245a155e074aa49b04170a47afdb91c4"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x98}, 0x1, 0x0, 0x0, 0x11}, 0xc000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r3, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x2) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x1c, 0x0, 0x1, 0xde, 0x6, @random="2188bb207e17"}, 0x14) shutdown(r3, 0x1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000b80)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @from_mac, {0x0, 0x16}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @val={0x0, 0x1f, @random="a888216f6af6fe53e5fefe0074c9cb32aa366964792e6ef0a86dc047a5ca20"}, @void, @void, @void, @void, [{0xdd, 0x11, "5664fd0d08c76700303ce9f7a014b837ce"}, {0xdd, 0xb4, "2398bf46e197bc82aafb8ed6880318fdff5a8a1503e078b44c8c5c39a724df1083212f1ae907aed8960ea2e986e02986c2c4202139eda5709dcf8e363f0b06a6332ce4b50321e56d85e49220400a95950c1175a8cb5764170257de6187a5699f821bde2e71d826899d86b41bc3bb111da91122c2dde589da0f0677ca413e5e4a47cb6031bbae9578e18c8a926917a54362e663f7070f24518037c8e8259f43f38350ea9329f537e87dab966c5a8bab8aed568230"}, {0xdd, 0x1d, "4e75c20e46d478c7b913a7c820682a53a0693a4b75049e373ecec3e320"}, {0xdd, 0x7a, "99de1c3980112361a6a7164ccae255f984bdfbcbe4793fee00b4ff238a345377134c4ae80917aea84b80419f5182a6a736230a8c9a74f123092db0b20c79203d652f54599bd6579c9dc3973ca180c9678ab35e7a277fac39b7dde984ba63e3c68f95d3ea0742c1c322f598d8f9d867a46025b5a55dea96031f9e"}, {0xdd, 0xb9, "391fb6d8ff373ca4f9ec600cc7ad1b541f5b75b1bfa0cc87fda1d11aebe7dfb969fec655baa9ec0d9af34a3e149d7e0a67f9f54f7a354b942bba183d238efc4362fb298aa9b66c03f21c3cccc458eaaa215ca64406ebd94c37e5d3b03278d4146a2a69c8090691bb190f5fc8ebe64451588889e17b73f5c058f9f9a15cba268886bc24a065d2c327b494d9d8711a5436d3d6c1a0415ab5bd54114abead2936459a45ed54598d19c981c26e660c9ed9373f0d35d344a2b0e517"}]}, 0x25c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 58.677779264s ago: executing program 1 (id=1878): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x141000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.214601524s ago: executing program 1 (id=1879): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000000740)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 55.537675817s ago: executing program 8 (id=1880): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 51.384223392s ago: executing program 1 (id=1882): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendto$inet_nvme_of_msg(r5, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf4, 0xfffffffe}}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x880) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000140), 0x4) 42.175292406s ago: executing program 9 (id=1889): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0xfff, 0x0, 0x9, 0x34040, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x7, @void, @value, @value=r0}, 0x50) 36.829114638s ago: executing program 78 (id=1880): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 36.727912408s ago: executing program 9 (id=1892): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x24, 0xcf, 0x8b, 0x40, 0x7c4, 0xa103, 0x4f0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xd9, 0x50, 0x94, [{{0x9, 0x4, 0xff, 0x5, 0x0, 0xf7, 0x3f, 0x63, 0x7}}]}}]}}, 0x0) shutdown(r0, 0x1) 34.999317217s ago: executing program 79 (id=1882): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendto$inet_nvme_of_msg(r5, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf4, 0xfffffffe}}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x880) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000140), 0x4) 34.10768791s ago: executing program 9 (id=1896): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0) lseek(r2, 0x10000, 0x3) 32.479634199s ago: executing program 9 (id=1898): socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x8001) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x4, 0x1, 0x0, 0x3, 0x10, 0x1, 0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x23}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2002c1, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8080000, 0x1000, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000004000000b49, 0x9, 0x8, 0x0, 0x3}, 0x0) fanotify_init(0x40, 0x40000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0xe, 0x0, &(0x7f0000000140)=0x1c) capset(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='aufs\x00', 0x418, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) 20.423867117s ago: executing program 9 (id=1902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/31, 0x1f, 0x10000, 0x0, 0x0) 15.624859342s ago: executing program 9 (id=1908): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @loopback, 0x1}}, 0x0, 0x0, 0x2d, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 15.470304916s ago: executing program 7 (id=1909): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 14.382379657s ago: executing program 7 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13.798707042s ago: executing program 2 (id=1912): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 12.848755414s ago: executing program 2 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.875655135s ago: executing program 7 (id=1914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) 11.825874967s ago: executing program 2 (id=1915): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) sendto$inet_nvme_of_msg(r5, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf4, 0xfffffffe}}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x880) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000140), 0x4) 10.860232877s ago: executing program 7 (id=1916): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000030000000400000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0xe, 0x8, 0x0, 0x9, 0x2000000000000000, 0xfffffe0000000001, 0xfa15, 0xfffdffff}, 0x0) r2 = syz_io_uring_setup(0x750, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x5, 0x0, 0x2008, 0x2000007, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mremap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683d", 0x1f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22ffe6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r5], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @fwd={0x7}]}, {0x0, [0x61, 0x71, 0x61, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/174, 0x55, 0xae, 0x1, 0x88a}, 0x28) 9.352517048s ago: executing program 7 (id=1917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 3.826035251s ago: executing program 7 (id=1918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setreuid(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() sched_setscheduler(r3, 0x1, &(0x7f0000000000)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/rt_cache\x00') pread64(r4, &(0x7f0000000400)=""/179, 0xb3, 0x8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 1.797052691s ago: executing program 2 (id=1919): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x80000000, 0x5}, 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 782.545411ms ago: executing program 2 (id=1920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000c74b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x24}, 0x94) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 45.755376ms ago: executing program 80 (id=1908): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @loopback, 0x1}}, 0x0, 0x0, 0x2d, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1922): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000), 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x34f4abb0713c3e09}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.421358][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.428881][ T7383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.557308][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.563975][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.848546][T13863] Bluetooth: hci0: command tx timeout [ 1802.005288][T15377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.023073][T15479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.045458][T15479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.055322][T15479] bridge_slave_0: entered allmulticast mode [ 1802.069166][T15479] bridge_slave_0: entered promiscuous mode [ 1802.198631][T15479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.210020][T15479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.221877][T15479] bridge_slave_1: entered allmulticast mode [ 1802.233754][T15479] bridge_slave_1: entered promiscuous mode [ 1802.524578][T15479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1802.650081][T15479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1802.754613][T15450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1802.901084][T15479] team0: Port device team_slave_0 added [ 1802.922174][T15479] team0: Port device team_slave_1 added [ 1802.936893][T15450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1803.138268][T15450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1803.179695][T15450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1803.233740][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.418059][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.442445][T15479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1803.456684][T15479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1803.485073][T15479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1803.518002][T15479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1803.525122][T15479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1803.559503][T15479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.602299][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.781780][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.925983][T15479] hsr_slave_0: entered promiscuous mode [ 1803.933235][T13863] Bluetooth: hci0: command tx timeout [ 1803.945727][T15479] hsr_slave_1: entered promiscuous mode [ 1803.955358][T15479] debugfs: 'hsr0' already exists in 'hsr' [ 1803.971834][T15479] Cannot create hsr debugfs directory [ 1804.733538][T15457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1804.773383][T15457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1804.888501][T15457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1804.909902][T15457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1805.035867][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.183517][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.202602][T15377] veth0_vlan: entered promiscuous mode [ 1805.310689][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.425502][T15382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.509975][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.528160][T15377] veth1_vlan: entered promiscuous mode [ 1806.175241][T15450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1806.234179][ T35] bridge_slave_1: left allmulticast mode [ 1806.242722][ T35] bridge_slave_1: left promiscuous mode [ 1806.250149][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.264867][ T35] bridge_slave_0: left allmulticast mode [ 1806.271543][ T35] bridge_slave_0: left promiscuous mode [ 1806.278542][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.298075][ T35] bridge_slave_1: left allmulticast mode [ 1806.303957][ T35] bridge_slave_1: left promiscuous mode [ 1806.311087][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.336748][ T35] bridge_slave_0: left allmulticast mode [ 1806.342576][ T35] bridge_slave_0: left promiscuous mode [ 1806.355556][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.370947][ T35] bridge_slave_1: left allmulticast mode [ 1806.377049][ T35] bridge_slave_1: left promiscuous mode [ 1806.383237][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.397629][ T35] bridge_slave_0: left allmulticast mode [ 1806.403499][ T35] bridge_slave_0: left promiscuous mode [ 1806.410899][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.438798][ T35] batman_adv: batadv0: Interface deactivated: geneve2 [ 1807.029550][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.049136][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.062353][ T35] bond0 (unregistering): Released all slaves [ 1807.193841][ T35] batman_adv: batadv0: Removing interface: geneve2 [ 1807.312601][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.332969][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.354085][ T35] bond0 (unregistering): Released all slaves [ 1807.578581][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.599388][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.619270][ T35] bond0 (unregistering): Released all slaves [ 1807.834235][T15377] veth0_macvtap: entered promiscuous mode [ 1807.921734][T15377] veth1_macvtap: entered promiscuous mode [ 1807.948037][T15382] veth0_vlan: entered promiscuous mode [ 1807.986801][T15450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1808.074901][T15479] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1808.105759][T15479] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1808.127989][T15479] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1808.153232][T15479] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1808.197214][T15382] veth1_vlan: entered promiscuous mode [ 1808.355058][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.362672][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1808.471779][T15377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.504264][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.511877][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1808.544519][T15457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.644068][T15377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.827685][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.839239][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.930536][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.025796][ T35] hsr_slave_0: left promiscuous mode [ 1809.040358][ T35] hsr_slave_1: left promiscuous mode [ 1809.052573][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.070020][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.108600][ T35] hsr_slave_0: left promiscuous mode [ 1809.120477][ T35] hsr_slave_1: left promiscuous mode [ 1809.134016][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.144645][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.172597][ T35] hsr_slave_0: left promiscuous mode [ 1809.185610][ T35] hsr_slave_1: left promiscuous mode [ 1809.198223][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.205965][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.222531][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.230457][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.268602][ T35] veth1_vlan: left promiscuous mode [ 1809.274109][ T35] veth0_vlan: left promiscuous mode [ 1809.281382][ T35] veth1_macvtap: left promiscuous mode [ 1809.289586][ T35] veth0_macvtap: left promiscuous mode [ 1809.295538][ T35] veth1_vlan: left promiscuous mode [ 1809.301331][ T35] veth0_vlan: left promiscuous mode [ 1809.312069][ T35] veth1_macvtap: left promiscuous mode [ 1809.318051][ T35] veth0_macvtap: left promiscuous mode [ 1809.323948][ T35] veth1_vlan: left promiscuous mode [ 1809.329882][ T35] veth0_vlan: left promiscuous mode [ 1810.352046][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1810.387528][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1810.802623][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1810.851671][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1811.293448][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1811.357640][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1811.581769][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.638503][T15457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.779294][T15382] veth0_macvtap: entered promiscuous mode [ 1811.913795][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.921549][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.111701][T15382] veth1_macvtap: entered promiscuous mode [ 1812.222682][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.230128][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.653738][T15382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.743349][T15382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1812.942796][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.968861][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.066495][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.075650][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.481292][T15479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.844808][T15479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.003664][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.011282][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.193755][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.201394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.284840][T15450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1815.403738][T15457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1815.569716][T13462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1815.579256][T13462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1815.589179][T13462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1815.603025][T13462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1815.614570][T13462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1816.724354][T15457] veth0_vlan: entered promiscuous mode [ 1816.877282][T15457] veth1_vlan: entered promiscuous mode [ 1817.603384][T15479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.687865][T13462] Bluetooth: hci2: command tx timeout [ 1817.908056][T15457] veth0_macvtap: entered promiscuous mode [ 1818.081222][T15544] chnl_net:caif_netlink_parms(): no params data found [ 1818.180271][T15457] veth1_macvtap: entered promiscuous mode [ 1818.227172][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.365700][T15450] veth0_vlan: entered promiscuous mode [ 1818.488061][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.876922][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.074990][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.151653][T15450] veth1_vlan: entered promiscuous mode [ 1819.291276][T15457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.444359][T15457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.679754][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.721690][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.766441][T13462] Bluetooth: hci2: command tx timeout [ 1819.906022][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.019359][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.416986][T15544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.424679][T15544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.446842][T15544] bridge_slave_0: entered allmulticast mode [ 1820.459332][T15544] bridge_slave_0: entered promiscuous mode [ 1820.501186][ T57] bridge_slave_1: left allmulticast mode [ 1820.521987][ T57] bridge_slave_1: left promiscuous mode [ 1820.537307][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.552882][T13863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1820.566019][T13863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1820.583494][T13863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1820.598922][T13863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1820.611048][T13863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1820.612971][ T57] bridge_slave_0: left allmulticast mode [ 1820.637711][ T57] bridge_slave_0: left promiscuous mode [ 1820.644307][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.156553][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.174918][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.204071][ T57] bond0 (unregistering): Released all slaves [ 1821.221368][T15544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.229563][T15544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.238453][T15544] bridge_slave_1: entered allmulticast mode [ 1821.254676][T15544] bridge_slave_1: entered promiscuous mode [ 1821.542599][ T57] hsr_slave_0: left promiscuous mode [ 1821.568152][ T57] hsr_slave_1: left promiscuous mode [ 1821.578998][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.606399][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.628065][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1821.635694][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.670863][ T57] veth1_macvtap: left promiscuous mode [ 1821.676762][ T57] veth0_macvtap: left promiscuous mode [ 1821.682858][ T57] veth1_vlan: left promiscuous mode [ 1821.696725][ T57] veth0_vlan: left promiscuous mode [ 1821.849926][T13863] Bluetooth: hci2: command tx timeout [ 1822.218882][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1822.261137][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1822.609365][T15450] veth0_macvtap: entered promiscuous mode [ 1822.721060][T15544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.738882][T13863] Bluetooth: hci3: command tx timeout [ 1822.785367][T15544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.843912][T15450] veth1_macvtap: entered promiscuous mode [ 1823.174165][T15479] veth0_vlan: entered promiscuous mode [ 1823.198956][T15544] team0: Port device team_slave_0 added [ 1823.232354][T15544] team0: Port device team_slave_1 added [ 1823.520367][T15450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1823.549407][T15544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.562165][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.599795][T15544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.711627][ T8688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.751089][T15544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.758566][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.800286][T15544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.834370][ T8688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.927908][T13863] Bluetooth: hci2: command tx timeout [ 1823.963940][T15479] veth1_vlan: entered promiscuous mode [ 1824.004024][T15450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.106804][ T8688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.479231][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.490424][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.532668][T15544] hsr_slave_0: entered promiscuous mode [ 1824.543543][T15544] hsr_slave_1: entered promiscuous mode [ 1824.605179][ T8688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.667519][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.698656][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.806932][T13863] Bluetooth: hci3: command tx timeout [ 1825.484616][T15479] veth0_macvtap: entered promiscuous mode [ 1825.669951][T15479] veth1_macvtap: entered promiscuous mode [ 1825.871533][T15599] chnl_net:caif_netlink_parms(): no params data found [ 1826.201596][ T8688] bridge_slave_1: left allmulticast mode [ 1826.214232][ T8688] bridge_slave_1: left promiscuous mode [ 1826.227954][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.243328][ T8688] bridge_slave_0: left allmulticast mode [ 1826.251896][ T8688] bridge_slave_0: left promiscuous mode [ 1826.259841][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.591793][ T8688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1826.611213][ T8688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1826.632533][ T8688] bond0 (unregistering): Released all slaves [ 1826.886617][T13863] Bluetooth: hci3: command tx timeout [ 1826.992910][T15479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1827.098731][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.113221][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.293434][T15479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1827.349173][ T8688] hsr_slave_0: left promiscuous mode [ 1827.373707][ T8688] hsr_slave_1: left promiscuous mode [ 1827.388923][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1827.411690][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1827.427001][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1827.434563][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1827.467381][ T8688] veth1_macvtap: left promiscuous mode [ 1827.473138][ T8688] veth0_macvtap: left promiscuous mode [ 1827.483826][ T8688] veth1_vlan: left promiscuous mode [ 1827.493821][ T8688] veth0_vlan: left promiscuous mode [ 1828.041228][ T8688] team0 (unregistering): Port device team_slave_1 removed [ 1828.079303][ T8688] team0 (unregistering): Port device team_slave_0 removed [ 1828.592571][T15599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.601834][T15599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.611275][T15599] bridge_slave_0: entered allmulticast mode [ 1828.622812][T15599] bridge_slave_0: entered promiscuous mode [ 1828.772492][T15599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.781506][T15599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.790663][T15599] bridge_slave_1: entered allmulticast mode [ 1828.804575][T15599] bridge_slave_1: entered promiscuous mode [ 1828.815863][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.830698][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.914366][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.924186][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.941481][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.957154][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.972432][T13863] Bluetooth: hci3: command tx timeout [ 1829.115059][T15599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.188933][T15599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.545469][T15599] team0: Port device team_slave_0 added [ 1829.584795][T15599] team0: Port device team_slave_1 added [ 1830.924157][T15599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.956825][T15599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.049833][T15599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.214799][T15599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.278133][T15599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.377520][T15599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.418696][T15544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1831.502096][T15544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1832.584346][T15544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1832.948709][T15544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1833.050532][T15599] hsr_slave_0: entered promiscuous mode [ 1833.107990][T15599] hsr_slave_1: entered promiscuous mode [ 1833.137632][T15599] debugfs: 'hsr0' already exists in 'hsr' [ 1833.144802][T15599] Cannot create hsr debugfs directory [ 1833.222443][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.247502][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.489376][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.541663][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.635759][T15544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1838.310657][T15544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1838.508939][T15599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1838.621836][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.629323][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.734585][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.784022][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.923206][T15599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1839.110235][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.117829][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.160757][T15599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1839.268414][T15599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1839.430969][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.474722][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1841.811197][T15599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.922174][T15599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1843.115038][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.122781][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1843.324039][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.331461][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1843.930800][T15544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.728807][T15599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1847.897496][T15544] veth0_vlan: entered promiscuous mode [ 1847.954920][T15599] veth0_vlan: entered promiscuous mode [ 1848.105828][T15544] veth1_vlan: entered promiscuous mode [ 1848.246257][T15599] veth1_vlan: entered promiscuous mode [ 1848.690188][T15544] veth0_macvtap: entered promiscuous mode [ 1848.803493][T15786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1848.843085][T15544] veth1_macvtap: entered promiscuous mode [ 1849.186702][T15544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1849.311202][T15544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1849.454778][T15599] veth0_macvtap: entered promiscuous mode [ 1849.593818][T13380] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.632960][T13380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.992738][T13380] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.026633][T13380] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.087229][T15599] veth1_macvtap: entered promiscuous mode [ 1850.790350][T15599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1851.014906][T15599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.203438][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.236782][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.332664][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.387572][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.865691][T15812] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1677'. [ 1856.239261][T15843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1856.680815][T15846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1857.190084][T15846] bond0: entered promiscuous mode [ 1857.190191][T15846] bond_slave_0: entered promiscuous mode [ 1857.191236][T15846] bond_slave_1: entered promiscuous mode [ 1857.697233][T15846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1859.103970][ T7383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.104066][ T7383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.478750][ T7383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.536514][ T7383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1861.967710][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.001272][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.456464][T13500] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1862.726536][T13500] usb 8-1: Using ep0 maxpacket: 16 [ 1862.891124][T13500] usb 8-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1862.911363][T13500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.924119][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.956799][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.988981][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.996011][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.056746][T13500] usb 8-1: Product: syz [ 1863.061232][T13500] usb 8-1: Manufacturer: syz [ 1863.103631][T13500] usb 8-1: SerialNumber: syz [ 1863.189115][T13500] usb 8-1: config 0 descriptor?? [ 1863.274918][T13500] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1863.458269][T13500] usb-storage 8-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1863.512194][T13500] usb-storage 8-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1863.512194][T13500] Please send a copy of this message to and [ 1868.307990][T13462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1868.332060][T13462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1868.362439][T13462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1868.401022][T13462] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1868.415274][T13462] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1870.487910][T13462] Bluetooth: hci4: command tx timeout [ 1871.524807][T15926] chnl_net:caif_netlink_parms(): no params data found [ 1872.634552][T13462] Bluetooth: hci4: command tx timeout [ 1874.076303][T13500] usb 8-1: USB disconnect, device number 3 [ 1874.646738][T13462] Bluetooth: hci4: command tx timeout [ 1874.841297][T15926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.876978][T15926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.937275][T15926] bridge_slave_0: entered allmulticast mode [ 1874.999125][T15926] bridge_slave_0: entered promiscuous mode [ 1875.097103][T15926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.142620][T15926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.191299][T15926] bridge_slave_1: entered allmulticast mode [ 1875.257767][T15926] bridge_slave_1: entered promiscuous mode [ 1875.927343][T15926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.478289][T15926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1876.733006][T13462] Bluetooth: hci4: command tx timeout [ 1876.785730][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.004374][T15969] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1877.090937][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.259617][T15926] team0: Port device team_slave_0 added [ 1877.355041][T15926] team0: Port device team_slave_1 added [ 1877.737154][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.130407][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.236928][T15926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.264291][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.376841][T15926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.473220][T15926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.513035][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.547626][T15926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1879.936542][T15926] hsr_slave_0: entered promiscuous mode [ 1879.992331][T15926] hsr_slave_1: entered promiscuous mode [ 1880.059935][T15926] debugfs: 'hsr0' already exists in 'hsr' [ 1880.083102][T15926] Cannot create hsr debugfs directory [ 1880.599977][ T12] bridge_slave_1: left allmulticast mode [ 1880.626468][ T12] bridge_slave_1: left promiscuous mode [ 1880.632828][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.747669][ T12] bridge_slave_0: left allmulticast mode [ 1880.753603][ T12] bridge_slave_0: left promiscuous mode [ 1880.837418][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.290385][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1883.465832][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1883.502733][ T12] bond0 (unregistering): Released all slaves [ 1884.516898][T16011] 9p: Bad value for 'rfdno' [ 1885.637094][ T12] hsr_slave_0: left promiscuous mode [ 1885.650929][ T12] hsr_slave_1: left promiscuous mode [ 1885.668877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1885.694593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1885.735168][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1885.758171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1885.879969][ T12] veth1_macvtap: left promiscuous mode [ 1885.885777][ T12] veth0_macvtap: left promiscuous mode [ 1885.915507][ T12] veth1_vlan: left promiscuous mode [ 1885.951007][ T12] veth0_vlan: left promiscuous mode [ 1888.895315][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1889.040491][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1892.204470][T15926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1892.431117][T15926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1892.669509][T15926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1892.800354][T15926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1895.155893][T15926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.314676][T15926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.685656][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.693057][ T7383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.844201][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.851787][ T7383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1899.546817][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 1901.687899][T13863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1901.747492][T13863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1901.796920][T13863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1901.822370][T13863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1901.833913][T13863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1903.930986][T13462] Bluetooth: hci0: command tx timeout [ 1903.980657][T15926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.964413][T13863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1904.987182][T13863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1905.003627][T13863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1905.077413][T13863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1905.100803][T13863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1905.711443][T16093] chnl_net:caif_netlink_parms(): no params data found [ 1906.006602][T13863] Bluetooth: hci0: command tx timeout [ 1907.206529][T13863] Bluetooth: hci5: command tx timeout [ 1907.881037][T15926] veth0_vlan: entered promiscuous mode [ 1908.088351][T13863] Bluetooth: hci0: command tx timeout [ 1908.269551][T15926] veth1_vlan: entered promiscuous mode [ 1909.262082][T16093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.272169][T16093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.284628][T16093] bridge_slave_0: entered allmulticast mode [ 1909.291453][T16148] Bluetooth: hci5: command tx timeout [ 1909.320784][T16093] bridge_slave_0: entered promiscuous mode [ 1909.621504][ T1081] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.767812][T16093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.803177][T16093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.850817][T16093] bridge_slave_1: entered allmulticast mode [ 1909.912116][T16093] bridge_slave_1: entered promiscuous mode [ 1910.176398][T16148] Bluetooth: hci0: command tx timeout [ 1910.384646][ T1081] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.051674][T16159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1911.072014][ T1081] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.078872][T16159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1911.117467][T16159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1911.127926][T16159] Bluetooth: hci1: command 0x0406 tx timeout [ 1911.134518][T16159] Bluetooth: hci7: command 0x0406 tx timeout [ 1911.177884][T13863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1911.195262][T16163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1911.366615][T13462] Bluetooth: hci5: command tx timeout [ 1911.464547][T16093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1911.527629][T16093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1911.623493][T16124] chnl_net:caif_netlink_parms(): no params data found [ 1911.921947][ T1081] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.750999][T16093] team0: Port device team_slave_0 added [ 1912.888312][T16093] team0: Port device team_slave_1 added [ 1913.878673][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 1913.888911][T13462] Bluetooth: hci2: command tx timeout [ 1913.894940][T13462] Bluetooth: hci5: command tx timeout [ 1914.063038][T15926] veth0_macvtap: entered promiscuous mode [ 1915.404521][T16093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.436797][T16093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1915.484469][T16093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.544160][T15926] veth1_macvtap: entered promiscuous mode [ 1915.573696][T16093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1915.598754][T16093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1915.634934][T16093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1915.926844][T16148] Bluetooth: hci2: command tx timeout [ 1916.399159][ T1081] bridge_slave_1: left allmulticast mode [ 1916.405106][ T1081] bridge_slave_1: left promiscuous mode [ 1916.452185][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.564005][ T1081] bridge_slave_0: left allmulticast mode [ 1916.601308][ T1081] bridge_slave_0: left promiscuous mode [ 1916.621519][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.838685][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1917.896924][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1917.925831][ T1081] bond0 (unregistering): Released all slaves [ 1918.009037][T16148] Bluetooth: hci2: command tx timeout [ 1918.453581][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 1918.463796][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 1918.738901][T15926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.948544][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.957188][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.968799][T16124] bridge_slave_0: entered allmulticast mode [ 1918.985544][T16124] bridge_slave_0: entered promiscuous mode [ 1919.068933][T16093] hsr_slave_0: entered promiscuous mode [ 1919.090649][T16093] hsr_slave_1: entered promiscuous mode [ 1919.109508][T16093] debugfs: 'hsr0' already exists in 'hsr' [ 1919.115413][T16093] Cannot create hsr debugfs directory [ 1919.279883][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.306881][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.326504][T16124] bridge_slave_1: entered allmulticast mode [ 1919.346568][T16124] bridge_slave_1: entered promiscuous mode [ 1919.547654][T15926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.821856][ T1081] hsr_slave_0: left promiscuous mode [ 1919.843616][ T1081] hsr_slave_1: left promiscuous mode [ 1919.882709][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1919.894059][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1919.915718][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1919.927381][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1919.970525][ T1081] veth1_macvtap: left promiscuous mode [ 1919.983479][ T1081] veth0_macvtap: left promiscuous mode [ 1919.992506][ T1081] veth1_vlan: left promiscuous mode [ 1919.998346][ T1081] veth0_vlan: left promiscuous mode [ 1920.086827][T16148] Bluetooth: hci2: command tx timeout [ 1921.145967][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 1921.219534][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 1921.915192][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.985256][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1922.127568][T16124] team0: Port device team_slave_0 added [ 1922.234133][T16124] team0: Port device team_slave_1 added [ 1922.283266][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.299589][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.354336][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.552471][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.597986][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.616576][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.681045][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.722682][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.736279][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.809231][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1923.265770][ T142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.641857][ T142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.795449][T16124] hsr_slave_0: entered promiscuous mode [ 1923.811708][T16124] hsr_slave_1: entered promiscuous mode [ 1923.857192][ T142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.004355][ T142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.048228][T16157] chnl_net:caif_netlink_parms(): no params data found [ 1924.448500][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.455165][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.723993][ T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.878646][T16157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.889855][T16157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.900733][T16157] bridge_slave_0: entered allmulticast mode [ 1925.912305][T16157] bridge_slave_0: entered promiscuous mode [ 1925.977104][ T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.998025][T16157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.010955][T16157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.028179][T16157] bridge_slave_1: entered allmulticast mode [ 1926.043073][T16157] bridge_slave_1: entered promiscuous mode [ 1926.102255][ T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.169927][T16093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1926.282642][T16157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1926.292522][T16093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1926.322267][T16093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1926.445076][ T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.495849][T16157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1926.591472][T16093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1926.760465][T16157] team0: Port device team_slave_0 added [ 1926.893412][T16157] team0: Port device team_slave_1 added [ 1927.634828][T16157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1927.696592][T16157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1927.837019][T16157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1927.905411][T16157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1928.011866][T13462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1928.031938][T13462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1928.042478][T13462] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1928.056948][T13462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1928.064981][T16157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1928.115361][T13462] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1928.173777][T16157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1928.874655][T16157] hsr_slave_0: entered promiscuous mode [ 1928.917624][T16157] hsr_slave_1: entered promiscuous mode [ 1928.934346][T16157] debugfs: 'hsr0' already exists in 'hsr' [ 1928.946365][T16157] Cannot create hsr debugfs directory [ 1928.965423][ T142] bridge_slave_1: left allmulticast mode [ 1928.974640][ T142] bridge_slave_1: left promiscuous mode [ 1928.993732][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.024639][ T142] bridge_slave_0: left allmulticast mode [ 1929.043707][ T142] bridge_slave_0: left promiscuous mode [ 1929.058504][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.110683][ T142] bridge_slave_1: left allmulticast mode [ 1929.130029][ T142] bridge_slave_1: left promiscuous mode [ 1929.141243][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.176825][ T142] bridge_slave_0: left allmulticast mode [ 1929.225961][ T142] bridge_slave_0: left promiscuous mode [ 1929.237492][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.145861][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1930.169142][T13462] Bluetooth: hci1: command tx timeout [ 1930.178689][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1930.199202][ T142] bond0 (unregistering): Released all slaves [ 1930.507989][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1930.534461][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1930.561405][ T142] bond0 (unregistering): Released all slaves [ 1931.412854][T16124] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1931.726556][T16124] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1932.042239][T16124] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1932.240156][T16124] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1932.249310][T13462] Bluetooth: hci1: command tx timeout [ 1933.379618][ T142] hsr_slave_0: left promiscuous mode [ 1933.427082][ T142] hsr_slave_1: left promiscuous mode [ 1933.434355][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1933.466292][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1933.489137][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1933.506476][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1933.597516][ T142] hsr_slave_0: left promiscuous mode [ 1933.605086][ T142] hsr_slave_1: left promiscuous mode [ 1933.638851][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1933.657102][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1933.668328][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1933.676664][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1933.778360][ T142] veth1_macvtap: left promiscuous mode [ 1933.797043][ T142] veth0_macvtap: left promiscuous mode [ 1933.802884][ T142] veth1_vlan: left promiscuous mode [ 1933.817934][ T142] veth0_vlan: left promiscuous mode [ 1933.827511][ T142] veth1_macvtap: left promiscuous mode [ 1933.837722][ T142] veth0_macvtap: left promiscuous mode [ 1933.848516][ T142] veth1_vlan: left promiscuous mode [ 1933.866704][ T142] veth0_vlan: left promiscuous mode [ 1934.203716][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 1934.214752][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 1934.342363][T13462] Bluetooth: hci1: command tx timeout [ 1934.909491][ T142] team0 (unregistering): Port device team_slave_1 removed [ 1934.944848][ T142] team0 (unregistering): Port device team_slave_0 removed [ 1935.442577][ T142] team0 (unregistering): Port device team_slave_1 removed [ 1935.469713][ T142] team0 (unregistering): Port device team_slave_0 removed [ 1935.979283][T16093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1936.322673][T16263] chnl_net:caif_netlink_parms(): no params data found [ 1936.391190][T16093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1936.408553][T13462] Bluetooth: hci1: command tx timeout [ 1936.594530][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.602237][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1936.795119][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.803020][ T7872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1936.846758][T16157] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1936.912557][T16157] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1937.001048][T16157] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1937.059865][ T142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.090715][T16157] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1937.234679][ T142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.285844][T16263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.294394][T16263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.302514][T16263] bridge_slave_0: entered allmulticast mode [ 1937.314735][T16263] bridge_slave_0: entered promiscuous mode [ 1937.378045][ T142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.402815][T16263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.412041][T16263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.420074][T16263] bridge_slave_1: entered allmulticast mode [ 1937.434081][T16263] bridge_slave_1: entered promiscuous mode [ 1937.493958][ T142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.658669][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1937.773270][T16263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1937.809892][T16263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1937.948829][T16263] team0: Port device team_slave_0 added [ 1937.967278][T16263] team0: Port device team_slave_1 added [ 1938.198924][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.210309][T16263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.218506][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.245402][T16263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.310007][T16263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.322086][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.351350][T16263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.473162][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1938.480802][ T8688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1938.665224][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.672822][ T7872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1938.741200][ T142] bridge_slave_1: left allmulticast mode [ 1938.753550][ T142] bridge_slave_1: left promiscuous mode [ 1938.766849][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.827409][ T142] bridge_slave_0: left allmulticast mode [ 1938.833287][ T142] bridge_slave_0: left promiscuous mode [ 1938.858243][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.503458][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1939.539063][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1939.567142][ T142] bond0 (unregistering): Released all slaves [ 1939.778875][T16263] hsr_slave_0: entered promiscuous mode [ 1939.808031][T16263] hsr_slave_1: entered promiscuous mode [ 1939.830424][T16263] debugfs: 'hsr0' already exists in 'hsr' [ 1939.841994][T16263] Cannot create hsr debugfs directory [ 1940.061096][ T142] hsr_slave_0: left promiscuous mode [ 1940.070303][ T142] hsr_slave_1: left promiscuous mode [ 1940.080426][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1940.091568][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1940.113636][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1940.121715][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.147295][ T142] veth1_macvtap: left promiscuous mode [ 1940.153327][ T142] veth0_macvtap: left promiscuous mode [ 1940.163280][ T142] veth1_vlan: left promiscuous mode [ 1940.171360][ T142] veth0_vlan: left promiscuous mode [ 1941.173344][ T142] team0 (unregistering): Port device team_slave_1 removed [ 1941.212726][ T142] team0 (unregistering): Port device team_slave_0 removed [ 1943.042760][T16157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1943.088646][T16093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1943.454866][T16157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1943.560445][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.567919][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1943.701732][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.709333][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1944.175859][T16263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1944.261122][T16263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1944.344419][T16263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1944.479598][T16263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1944.705512][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1945.024117][T16093] veth0_vlan: entered promiscuous mode [ 1945.224983][T16093] veth1_vlan: entered promiscuous mode [ 1946.114633][T16093] veth0_macvtap: entered promiscuous mode [ 1946.309254][T16093] veth1_macvtap: entered promiscuous mode [ 1946.447423][T16263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1946.773431][T16093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1946.893016][T16263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1946.955660][T16093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1947.083752][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.091349][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1947.115637][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1947.123310][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1947.229427][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.276808][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.285842][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.359791][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.614666][T16157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1947.974902][T16124] veth0_vlan: entered promiscuous mode [ 1948.085932][T16124] veth1_vlan: entered promiscuous mode [ 1948.532439][T16124] veth0_macvtap: entered promiscuous mode [ 1948.649649][T16124] veth1_macvtap: entered promiscuous mode [ 1948.975997][T16124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1949.170938][T16124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1949.344806][ T1081] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.382906][ T1081] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.423173][ T1081] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.579909][ T1081] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.094506][T16263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1950.570242][T16157] veth0_vlan: entered promiscuous mode [ 1950.894893][T16157] veth1_vlan: entered promiscuous mode [ 1951.634728][T16157] veth0_macvtap: entered promiscuous mode [ 1951.766197][T16157] veth1_macvtap: entered promiscuous mode [ 1952.203372][T16157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1952.362714][T16157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1952.494885][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.609031][ T142] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.657512][ T142] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.735923][ T142] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.105883][T16263] veth0_vlan: entered promiscuous mode [ 1953.361289][T16263] veth1_vlan: entered promiscuous mode [ 1954.049775][T16263] veth0_macvtap: entered promiscuous mode [ 1954.174054][T16263] veth1_macvtap: entered promiscuous mode [ 1954.537043][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.545115][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.628781][T16263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1954.952952][T16263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1955.560498][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.578848][ T1081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.618545][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.641349][ T1081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.755526][ T1081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.791320][ T1081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.957245][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.965400][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.004652][T16148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1958.023469][T16148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1958.052759][T16148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1958.094402][T16148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1958.107573][T16148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1958.370169][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.406580][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1960.175771][T13462] Bluetooth: hci3: command tx timeout [ 1960.812532][T16442] chnl_net:caif_netlink_parms(): no params data found [ 1961.969085][T13453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.061204][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.122033][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.247430][T13462] Bluetooth: hci3: command tx timeout [ 1962.297380][T13453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.538869][T13453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.832080][T13453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.285504][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.316775][T16442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.324338][T16442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.331956][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.368359][T16442] bridge_slave_0: entered allmulticast mode [ 1963.416973][T16442] bridge_slave_0: entered promiscuous mode [ 1963.518397][T16442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.566663][T16442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.574448][T16442] bridge_slave_1: entered allmulticast mode [ 1963.610620][T16442] bridge_slave_1: entered promiscuous mode [ 1964.312853][T16442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.336752][T13462] Bluetooth: hci3: command tx timeout [ 1964.540915][T16442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1965.569999][T13453] bridge_slave_1: left allmulticast mode [ 1965.575821][T13453] bridge_slave_1: left promiscuous mode [ 1965.637157][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.718586][T13453] bridge_slave_0: left allmulticast mode [ 1965.724465][T13453] bridge_slave_0: left promiscuous mode [ 1965.759563][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.415208][T13462] Bluetooth: hci3: command tx timeout [ 1967.105541][T13453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1967.191375][T13453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1967.229089][T13453] bond0 (unregistering): Released all slaves [ 1968.060007][T16442] team0: Port device team_slave_0 added [ 1968.484290][T16442] team0: Port device team_slave_1 added [ 1968.852420][T16442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1968.885979][T16442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1968.970874][T16442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1969.055750][T16442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1969.101765][T16442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1969.205023][T16442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1969.483842][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1969.520471][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1969.855638][T13453] hsr_slave_0: left promiscuous mode [ 1969.962984][T13453] hsr_slave_1: left promiscuous mode [ 1969.985056][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.014873][T13453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.050197][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.086995][T13453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.230487][T13453] veth1_macvtap: left promiscuous mode [ 1970.249975][T13453] veth0_macvtap: left promiscuous mode [ 1970.296917][T13453] veth1_vlan: left promiscuous mode [ 1970.317859][T13453] veth0_vlan: left promiscuous mode [ 1972.664613][T13453] team0 (unregistering): Port device team_slave_1 removed [ 1972.764769][T13453] team0 (unregistering): Port device team_slave_0 removed [ 1973.831333][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.876693][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1974.142093][T16442] hsr_slave_0: entered promiscuous mode [ 1974.160925][T16442] hsr_slave_1: entered promiscuous mode [ 1974.170664][T16442] debugfs: 'hsr0' already exists in 'hsr' [ 1974.177089][T16442] Cannot create hsr debugfs directory [ 1981.780989][T16442] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1981.903369][T16442] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1982.102879][T16442] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1982.249081][T16442] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1984.020169][T16442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.454549][T16442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1985.651239][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.658996][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1985.894571][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.903240][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1988.190628][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.198370][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1988.767099][T16442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1988.826312][T16442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1992.501343][T16148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1992.552584][T16148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1992.568795][T16148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1992.610504][T16148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1992.627366][T16148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1993.647666][T16442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1994.726329][T16148] Bluetooth: hci0: command tx timeout [ 1995.132595][T16664] chnl_net:caif_netlink_parms(): no params data found [ 1995.405017][T16442] veth0_vlan: entered promiscuous mode [ 1996.087042][T16442] veth1_vlan: entered promiscuous mode [ 1996.453136][T16442] veth0_macvtap: entered promiscuous mode [ 1996.637076][T16442] veth1_macvtap: entered promiscuous mode [ 1996.806738][T16148] Bluetooth: hci0: command tx timeout [ 1997.153336][T16442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1997.403955][T16442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1997.745944][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.807006][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.586538][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.624260][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.898566][T16148] Bluetooth: hci0: command tx timeout [ 1999.071873][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.241806][T16664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.326860][T16664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.334686][T16664] bridge_slave_0: entered allmulticast mode [ 1999.454490][T16664] bridge_slave_0: entered promiscuous mode [ 2000.434987][T16664] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.506802][T16664] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.629114][T13462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2000.689487][T13462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2000.704055][T16664] bridge_slave_1: entered allmulticast mode [ 2000.803621][T13462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2000.984148][T16163] Bluetooth: hci0: command tx timeout [ 2002.135643][T16163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2002.550569][T16163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2002.646615][T16664] bridge_slave_1: entered promiscuous mode [ 2002.863543][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2003.498084][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.093495][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.307783][T16664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2004.523147][T16664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2004.726664][T16163] Bluetooth: hci4: command tx timeout [ 2006.389713][T16664] team0: Port device team_slave_0 added [ 2006.906656][T16163] Bluetooth: hci4: command tx timeout [ 2007.308369][T16664] team0: Port device team_slave_1 added [ 2007.890786][T16664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2007.934722][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.076536][T16664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.198733][T16664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.205907][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.347774][T16664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.434139][ T56] bridge_slave_1: left allmulticast mode [ 2008.465726][ T56] bridge_slave_1: left promiscuous mode [ 2008.489026][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.536998][ T56] bridge_slave_0: left allmulticast mode [ 2008.563899][ T56] bridge_slave_0: left promiscuous mode [ 2008.587264][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.876410][ T9137] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 2008.967785][T16163] Bluetooth: hci4: command tx timeout [ 2009.117457][ T9137] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2009.137358][ T9137] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.145665][ T9137] usb 9-1: Product: syz [ 2009.172416][ T9137] usb 9-1: Manufacturer: syz [ 2009.187656][ T9137] usb 9-1: SerialNumber: syz [ 2009.212447][ T9137] usb 9-1: config 0 descriptor?? [ 2009.508104][ T9137] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2009.757769][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2009.795769][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2009.817947][ T56] bond0 (unregistering): Released all slaves [ 2010.639151][T16664] hsr_slave_0: entered promiscuous mode [ 2010.675986][T16664] hsr_slave_1: entered promiscuous mode [ 2010.699596][T16664] debugfs: 'hsr0' already exists in 'hsr' [ 2010.729234][T16664] Cannot create hsr debugfs directory [ 2011.058347][T16163] Bluetooth: hci4: command tx timeout [ 2011.274535][ T9137] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2011.377370][ T9137] usb 9-1: USB disconnect, device number 5 [ 2011.557845][ T56] hsr_slave_0: left promiscuous mode [ 2011.604692][ T56] hsr_slave_1: left promiscuous mode [ 2011.613187][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2011.660732][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2011.709090][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2011.741522][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2011.842542][ T56] veth1_macvtap: left promiscuous mode [ 2011.867774][ T56] veth0_macvtap: left promiscuous mode [ 2011.875501][ T56] veth1_vlan: left promiscuous mode [ 2011.918806][ T56] veth0_vlan: left promiscuous mode [ 2013.728234][ T56] team0 (unregistering): Port device team_slave_1 removed [ 2013.820775][ T56] team0 (unregistering): Port device team_slave_0 removed [ 2018.690526][T16711] chnl_net:caif_netlink_parms(): no params data found [ 2019.186415][T15757] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2020.196352][T15757] usb 9-1: Using ep0 maxpacket: 32 [ 2020.241380][T15757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.291676][T15757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.343209][T15757] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2020.390367][T15757] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.437661][T15757] usb 9-1: config 0 descriptor?? [ 2020.489913][T15757] hub 9-1:0.0: USB hub found [ 2020.551853][T16100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.656665][T15757] hub 9-1:0.0: 1 port detected [ 2020.698881][T16148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2020.750258][T16148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2020.772671][T16148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2020.860048][T16148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2020.886766][T16148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2021.074266][T16100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.461557][T16100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.528607][T15757] hub 9-1:0.0: activate --> -90 [ 2021.738290][T16100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.883710][T15757] usb 9-1-port1: config error [ 2021.897656][ T9137] usb 9-1: USB disconnect, device number 6 [ 2022.262150][T16711] bridge0: port 1(bridge_slave_0) entered blocking state [ 2022.341367][T16711] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.375604][T16711] bridge_slave_0: entered allmulticast mode [ 2022.415515][T16711] bridge_slave_0: entered promiscuous mode [ 2022.602944][T16711] bridge0: port 2(bridge_slave_1) entered blocking state [ 2022.660563][T16711] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.697175][T16711] bridge_slave_1: entered allmulticast mode [ 2022.729372][T16711] bridge_slave_1: entered promiscuous mode [ 2022.981496][T16148] Bluetooth: hci1: command tx timeout [ 2023.819789][T16711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2023.884209][T16711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2024.459486][T16100] bridge_slave_1: left allmulticast mode [ 2024.494153][T16100] bridge_slave_1: left promiscuous mode [ 2024.516177][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2024.670653][T16100] bridge_slave_0: left allmulticast mode [ 2024.681634][T16100] bridge_slave_0: left promiscuous mode [ 2024.746173][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.046799][T16148] Bluetooth: hci1: command tx timeout [ 2027.136842][T16148] Bluetooth: hci1: command tx timeout [ 2028.054218][T16100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2028.072056][T16100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2028.085910][T16100] bond0 (unregistering): Released all slaves [ 2028.123619][T16711] team0: Port device team_slave_0 added [ 2028.310582][T16711] team0: Port device team_slave_1 added [ 2028.554751][T16711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.569586][T16711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2028.603355][T16711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.800406][T16711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.824846][T16711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2029.218814][T16148] Bluetooth: hci1: command tx timeout [ 2029.228119][T16711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.336563][T16664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2029.427348][T16664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2029.611312][T16664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2029.733790][T16664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2029.974711][T16100] hsr_slave_0: left promiscuous mode [ 2030.007060][T16100] hsr_slave_1: left promiscuous mode [ 2030.015301][T16100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2030.056376][T16100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.103765][T16100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2030.156345][T16100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.287057][T16100] veth1_macvtap: left promiscuous mode [ 2030.309232][T16100] veth0_macvtap: left promiscuous mode [ 2030.315101][T16100] veth1_vlan: left promiscuous mode [ 2030.346470][T16100] veth0_vlan: left promiscuous mode [ 2032.104596][T16100] team0 (unregistering): Port device team_slave_1 removed [ 2032.211367][T16100] team0 (unregistering): Port device team_slave_0 removed [ 2033.280835][T16711] hsr_slave_0: entered promiscuous mode [ 2033.323155][T16711] hsr_slave_1: entered promiscuous mode [ 2033.943878][T16812] chnl_net:caif_netlink_parms(): no params data found [ 2034.006602][T16163] Bluetooth: hci2: command 0x0406 tx timeout [ 2034.116432][ T9137] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2034.286768][ T9137] usb 9-1: Using ep0 maxpacket: 8 [ 2034.329692][ T9137] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2034.367545][ T9137] usb 9-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 2034.404435][ T9137] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.458729][ T9137] usb 9-1: config 0 descriptor?? [ 2034.963975][ T9137] hid-udraw 0003:20D6:CB17.0002: unknown main item tag 0x0 [ 2035.002244][ T9137] hid-udraw 0003:20D6:CB17.0002: item fetching failed at offset 3/5 [ 2035.073483][ T9137] hid-udraw 0003:20D6:CB17.0002: parse failed [ 2035.096894][ T9137] hid-udraw 0003:20D6:CB17.0002: probe with driver hid-udraw failed with error -22 [ 2035.181681][T16100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.210660][ T9137] usb 9-1: USB disconnect, device number 7 [ 2035.549075][T16100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.822732][T16100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.653676][T16100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.458229][T16812] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.465820][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.536921][T16812] bridge_slave_0: entered allmulticast mode [ 2039.568793][T16812] bridge_slave_0: entered promiscuous mode [ 2039.638721][T16812] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.692552][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.731786][T16812] bridge_slave_1: entered allmulticast mode [ 2039.748066][T16812] bridge_slave_1: entered promiscuous mode [ 2040.175863][T16812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2040.713279][T16812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.245133][T16664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2041.389851][T16812] team0: Port device team_slave_0 added [ 2041.405613][T16812] team0: Port device team_slave_1 added [ 2041.621222][T16711] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2041.674390][T16711] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2041.730052][T16100] bridge_slave_1: left allmulticast mode [ 2041.735927][T16100] bridge_slave_1: left promiscuous mode [ 2041.757155][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.784712][T16100] bridge_slave_0: left allmulticast mode [ 2041.809843][T16100] bridge_slave_0: left promiscuous mode [ 2041.819703][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.858729][T16100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2042.936704][T16100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2042.993370][T16100] bond0 (unregistering): Released all slaves [ 2043.174351][T16812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2043.186393][T16812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2043.292426][T16812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2043.342994][T16711] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2043.591017][T16100] hsr_slave_0: left promiscuous mode [ 2043.636501][T16100] hsr_slave_1: left promiscuous mode [ 2043.669250][T16100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2043.710870][T16100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2043.777451][T16100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2043.816983][T16100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2043.947053][T16100] veth1_macvtap: left promiscuous mode [ 2043.955613][T16100] veth0_macvtap: left promiscuous mode [ 2044.007312][T16100] veth1_vlan: left promiscuous mode [ 2044.012914][T16100] veth0_vlan: left promiscuous mode [ 2046.265980][T16100] team0 (unregistering): Port device team_slave_1 removed [ 2046.391906][T16100] team0 (unregistering): Port device team_slave_0 removed [ 2047.421233][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.471935][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2050.236930][T16812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2050.276565][T16812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2050.435283][T16812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2050.488071][T16711] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2051.314022][T16163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2051.330526][T16163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2051.347424][T16163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2051.361558][T16812] hsr_slave_0: entered promiscuous mode [ 2051.377930][T16163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2051.433964][T16812] hsr_slave_1: entered promiscuous mode [ 2051.441030][T16163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2051.515385][T16812] debugfs: 'hsr0' already exists in 'hsr' [ 2051.553788][T16812] Cannot create hsr debugfs directory [ 2053.527007][T16163] Bluetooth: hci3: command tx timeout [ 2054.683966][T16711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2055.094123][T16711] 8021q: adding VLAN 0 to HW filter on device team0 [ 2055.289688][T16812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2055.374901][T16812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2055.488768][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.496420][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.567469][T16812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2055.606678][T16163] Bluetooth: hci3: command tx timeout [ 2055.651414][T16812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2055.788379][T16959] chnl_net:caif_netlink_parms(): no params data found [ 2055.874164][T16100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.881917][T16100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2057.189909][T13453] bridge_slave_1: left allmulticast mode [ 2057.251090][T13453] bridge_slave_1: left promiscuous mode [ 2057.280378][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.302319][T13453] bridge_slave_0: left allmulticast mode [ 2057.314665][T13453] bridge_slave_0: left promiscuous mode [ 2057.333439][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.687387][T16163] Bluetooth: hci3: command tx timeout [ 2058.568629][T13453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2058.682808][T13453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2058.746731][T13453] bond0 (unregistering): Released all slaves [ 2059.246925][T16959] bridge0: port 1(bridge_slave_0) entered blocking state [ 2059.254500][T16959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.312600][T16959] bridge_slave_0: entered allmulticast mode [ 2059.346458][T16148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2059.365500][T16959] bridge_slave_0: entered promiscuous mode [ 2059.384273][T16148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2059.394257][T16148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2059.417568][T16148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2059.429803][T16148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2059.653557][T13453] hsr_slave_0: left promiscuous mode [ 2059.681084][T13453] hsr_slave_1: left promiscuous mode [ 2059.709239][T13453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2059.767553][T16148] Bluetooth: hci3: command tx timeout [ 2059.878910][T13453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2061.141668][T13453] team0 (unregistering): Port device team_slave_1 removed [ 2061.283616][T13453] team0 (unregistering): Port device team_slave_0 removed [ 2061.527177][T16148] Bluetooth: hci0: command tx timeout [ 2061.684280][T16163] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2061.742655][T16163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2061.752105][T16163] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2061.765121][T16163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2061.775629][T16163] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2062.400652][T16959] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.429336][T16959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.451787][T16959] bridge_slave_1: entered allmulticast mode [ 2062.491229][T16959] bridge_slave_1: entered promiscuous mode [ 2063.074239][T16959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2063.369958][T16959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2063.606287][T16148] Bluetooth: hci0: command tx timeout [ 2063.846731][T16148] Bluetooth: hci5: command tx timeout [ 2065.722653][T16148] Bluetooth: hci0: command tx timeout [ 2065.926626][T16148] Bluetooth: hci5: command tx timeout [ 2066.903519][T16959] team0: Port device team_slave_0 added [ 2066.973452][T16959] team0: Port device team_slave_1 added [ 2067.771619][T16148] Bluetooth: hci0: command tx timeout [ 2067.806336][T16959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2067.823177][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2067.933796][T16959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2068.006862][T16148] Bluetooth: hci5: command tx timeout [ 2068.166909][T16959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2068.180730][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2068.230070][T16959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2068.983026][T16812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2069.014270][T16959] hsr_slave_0: entered promiscuous mode [ 2069.024506][T16959] hsr_slave_1: entered promiscuous mode [ 2069.037942][T16959] debugfs: 'hsr0' already exists in 'hsr' [ 2069.043887][T16959] Cannot create hsr debugfs directory [ 2069.855463][T13453] bridge_slave_1: left allmulticast mode [ 2069.863698][T13453] bridge_slave_1: left promiscuous mode [ 2069.888359][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.908680][T13453] bridge_slave_0: left allmulticast mode [ 2069.916926][T13453] bridge_slave_0: left promiscuous mode [ 2069.923633][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2070.086338][T16148] Bluetooth: hci5: command tx timeout [ 2070.612444][T13453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2070.657245][T13453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2070.681844][T13453] bond0 (unregistering): Released all slaves [ 2070.724191][T16984] chnl_net:caif_netlink_parms(): no params data found [ 2070.932167][T16812] 8021q: adding VLAN 0 to HW filter on device team0 [ 2071.019665][T13453] hsr_slave_0: left promiscuous mode [ 2071.032371][T13453] hsr_slave_1: left promiscuous mode [ 2071.050286][T13453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2071.061090][T13453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2071.945739][T13453] team0 (unregistering): Port device team_slave_1 removed [ 2072.011923][T13453] team0 (unregistering): Port device team_slave_0 removed [ 2072.529320][T16978] chnl_net:caif_netlink_parms(): no params data found [ 2072.668921][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.676572][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.362570][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.370252][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.952318][T13453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.261940][T13453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.505363][T13453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.803338][T13453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.860748][T16984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2074.873039][T16984] bridge0: port 1(bridge_slave_0) entered disabled state [ 2074.892904][T16984] bridge_slave_0: entered allmulticast mode [ 2074.908517][T16984] bridge_slave_0: entered promiscuous mode [ 2075.065473][T16984] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.076723][T16984] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.084894][T16984] bridge_slave_1: entered allmulticast mode [ 2075.095918][T16984] bridge_slave_1: entered promiscuous mode [ 2075.152794][T16978] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.164158][T16978] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.172769][T16978] bridge_slave_0: entered allmulticast mode [ 2075.182579][T16978] bridge_slave_0: entered promiscuous mode [ 2075.199450][T16978] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.233926][T16978] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.247268][T16978] bridge_slave_1: entered allmulticast mode [ 2075.257550][T16978] bridge_slave_1: entered promiscuous mode [ 2075.541363][T16984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.621787][T16978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.669358][T16984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2075.760980][T16978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2076.223303][T16984] team0: Port device team_slave_0 added [ 2076.267961][T16978] team0: Port device team_slave_0 added [ 2076.478228][T16984] team0: Port device team_slave_1 added [ 2076.513798][T16978] team0: Port device team_slave_1 added [ 2076.527044][T13453] bridge_slave_1: left allmulticast mode [ 2076.536602][T13453] bridge_slave_1: left promiscuous mode [ 2076.543446][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.591429][T13453] bridge_slave_0: left allmulticast mode [ 2076.606331][T13453] bridge_slave_0: left promiscuous mode [ 2076.618651][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.384079][T13453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2077.407426][T13453] bond_slave_0: left promiscuous mode [ 2077.427018][T13453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2077.443374][T13453] bond_slave_1: left promiscuous mode [ 2077.472951][T13453] bond0 (unregistering): Released all slaves [ 2077.906475][T16978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2077.914397][T16978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2077.941673][T16978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2077.977281][T16978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2077.984442][T16978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2078.047062][T16978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2078.111451][T16984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.126299][T16984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2078.196217][T16984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2078.278459][T16959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2078.319042][T16984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2078.326784][T16984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2078.354173][T16984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2078.538866][T16959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2078.615785][T16959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2079.373590][T16959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2079.409576][T16163] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2079.429073][T16163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2079.442103][T16163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2079.471279][T16163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2079.483868][T16163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2079.755477][T16978] hsr_slave_0: entered promiscuous mode [ 2079.798435][T16978] hsr_slave_1: entered promiscuous mode [ 2079.856657][T13453] hsr_slave_0: left promiscuous mode [ 2079.893991][T13453] hsr_slave_1: left promiscuous mode [ 2079.925433][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2079.953894][T13453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2079.973889][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2079.991877][T13453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2080.054881][T13453] veth1_macvtap: left promiscuous mode [ 2080.067841][T13453] veth0_macvtap: left promiscuous mode [ 2080.073803][T13453] veth1_vlan: left promiscuous mode [ 2080.087625][T13453] veth0_vlan: left promiscuous mode [ 2081.528896][T16148] Bluetooth: hci4: command tx timeout [ 2081.603783][T13453] team0 (unregistering): Port device team_slave_1 removed [ 2081.684904][T13453] team0 (unregistering): Port device team_slave_0 removed [ 2082.353180][T16984] hsr_slave_0: entered promiscuous mode [ 2082.387809][T16984] hsr_slave_1: entered promiscuous mode [ 2082.413977][T16984] debugfs: 'hsr0' already exists in 'hsr' [ 2082.436578][T16984] Cannot create hsr debugfs directory [ 2083.606578][T16148] Bluetooth: hci4: command tx timeout [ 2083.687739][ T9137] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 2083.882273][ T9137] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2083.901940][ T9137] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.913509][ T9137] usb 9-1: Product: syz [ 2083.924412][ T9137] usb 9-1: Manufacturer: syz [ 2083.931628][ T9137] usb 9-1: SerialNumber: syz [ 2083.951556][ T9137] usb 9-1: config 0 descriptor?? [ 2084.170847][ T9137] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2084.982754][T17045] chnl_net:caif_netlink_parms(): no params data found [ 2085.040260][T13453] bridge_slave_1: left allmulticast mode [ 2085.056702][T13453] bridge_slave_1: left promiscuous mode [ 2085.064536][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 2085.093841][T13453] bridge_slave_0: left allmulticast mode [ 2085.104612][T13453] bridge_slave_0: left promiscuous mode [ 2085.112834][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2085.561954][T13453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2085.584684][T13453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2085.615137][T13453] bond0 (unregistering): Released all slaves [ 2085.668190][ T9137] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2085.690731][T16148] Bluetooth: hci4: command tx timeout [ 2085.717604][ T9137] usb 9-1: USB disconnect, device number 8 [ 2085.918573][T13453] hsr_slave_0: left promiscuous mode [ 2085.930410][T13453] hsr_slave_1: left promiscuous mode [ 2085.939378][T13453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2085.953723][T13453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2086.525148][T13453] team0 (unregistering): Port device team_slave_1 removed [ 2086.598143][T13453] team0 (unregistering): Port device team_slave_0 removed [ 2087.183286][T16959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2087.294327][T16978] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2087.333033][T16978] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2087.441734][T16978] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2087.519313][T16978] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2087.767214][T16148] Bluetooth: hci4: command tx timeout [ 2087.958153][T16959] 8021q: adding VLAN 0 to HW filter on device team0 [ 2088.012959][T17045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.025106][T17045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.045516][T17045] bridge_slave_0: entered allmulticast mode [ 2088.058719][T17045] bridge_slave_0: entered promiscuous mode [ 2088.301038][T17045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.318787][T17045] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.332475][T17045] bridge_slave_1: entered allmulticast mode [ 2088.372574][T17045] bridge_slave_1: entered promiscuous mode [ 2088.447194][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.454870][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2088.653150][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.660809][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2088.784824][T17045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2088.828896][T17045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.157312][T17045] team0: Port device team_slave_0 added [ 2089.247888][T17045] team0: Port device team_slave_1 added [ 2089.481906][T17045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.496614][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.536572][T17045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2089.569206][T17045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2089.579241][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.611093][T17045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2089.818081][T16984] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2089.860140][T16984] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2090.058122][T16984] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2090.255575][T16984] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2090.411835][T17045] hsr_slave_0: entered promiscuous mode [ 2090.433237][T17045] hsr_slave_1: entered promiscuous mode [ 2090.460797][T17045] debugfs: 'hsr0' already exists in 'hsr' [ 2090.472569][T17045] Cannot create hsr debugfs directory [ 2092.050101][T16978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2092.461119][T16978] 8021q: adding VLAN 0 to HW filter on device team0 [ 2092.582090][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.589804][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2092.807823][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.815385][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2093.033610][T13499] kernel read not supported for file /video7 (pid: 13499 comm: kworker/0:0) [ 2093.088308][T16959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2093.161401][T16984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2093.424683][T17045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2093.478588][T17045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2093.564457][T17045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2093.612265][T17045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2093.815949][T16984] 8021q: adding VLAN 0 to HW filter on device team0 [ 2094.144679][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2094.152327][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2094.223296][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.230871][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2094.529582][T16959] veth0_vlan: entered promiscuous mode [ 2094.736608][T17098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.914958][T16959] veth1_vlan: entered promiscuous mode [ 2094.929643][T17101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2095.198109][T17104] trusted_key: encrypted_key: keylen parameter is missing [ 2095.314366][T17101] bond0: entered promiscuous mode [ 2095.314484][T17101] bond_slave_0: entered promiscuous mode [ 2095.329770][T17101] bond_slave_1: entered promiscuous mode [ 2095.344706][T17104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2095.599550][T16978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2095.777160][T16959] veth0_macvtap: entered promiscuous mode [ 2095.943870][T16959] veth1_macvtap: entered promiscuous mode [ 2096.175098][T17045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2096.410348][T17045] 8021q: adding VLAN 0 to HW filter on device team0 [ 2096.443294][T16959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2096.551563][T16959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2096.622909][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.630654][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2096.801660][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.915389][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.923372][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2096.958330][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.001748][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.079218][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.572721][T16984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2099.121006][T16978] veth0_vlan: entered promiscuous mode [ 2099.338131][T16978] veth1_vlan: entered promiscuous mode [ 2100.129495][T16978] veth0_macvtap: entered promiscuous mode [ 2100.347939][T16978] veth1_macvtap: entered promiscuous mode [ 2100.552425][T17045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2100.861608][T16978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2101.127137][T16978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2101.266656][ T142] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.312647][ T142] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.426790][ T142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.437637][ T142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.061193][T16984] veth0_vlan: entered promiscuous mode [ 2102.160461][T17045] veth0_vlan: entered promiscuous mode [ 2102.396750][T16984] veth1_vlan: entered promiscuous mode [ 2102.456175][T17045] veth1_vlan: entered promiscuous mode [ 2103.282435][T16984] veth0_macvtap: entered promiscuous mode [ 2103.390018][T17045] veth0_macvtap: entered promiscuous mode [ 2103.470970][T16984] veth1_macvtap: entered promiscuous mode [ 2103.597068][T17045] veth1_macvtap: entered promiscuous mode [ 2103.953644][T16984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2104.112967][T16984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2104.315338][T17045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2104.356580][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.405764][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.415866][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.574185][T17045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2104.652621][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.953724][T16099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.006337][T16099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.063638][T16099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.109755][T13453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.146718][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.247201][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2105.708238][ T8688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.754100][ T8688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2106.940350][T17211] random: crng reseeded on system resumption [ 2107.083873][T15758] kernel write not supported for file /sg0 (pid: 15758 comm: kworker/1:5) [ 2108.752705][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.763263][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2109.186335][T17241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2109.408966][T17246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2109.876325][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.876442][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2110.158396][T16099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2110.158498][T16099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2110.599662][T15758] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 2110.836603][T15758] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2110.836772][T15758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.836907][T15758] usb 2-1: Product: syz [ 2110.837018][T15758] usb 2-1: Manufacturer: syz [ 2110.837156][T15758] usb 2-1: SerialNumber: syz [ 2110.859498][T15758] usb 2-1: config 0 descriptor?? [ 2111.095495][T15758] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2114.774122][T15758] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2114.835436][T15758] usb 2-1: USB disconnect, device number 9 [ 2116.683985][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.715214][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.188865][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.378031][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.569002][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.606372][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.886393][T15757] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2117.940452][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.971305][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.159235][T15757] usb 10-1: Using ep0 maxpacket: 8 [ 2118.266551][T15757] usb 10-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 2118.299168][T15757] usb 10-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 2118.337708][T15757] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2118.348401][T15757] usb 10-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 2118.380266][T15757] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.522086][T15757] usb 10-1: config 0 descriptor?? [ 2119.131103][T15757] topre 0003:0853:0313.0003: unknown main item tag 0x0 [ 2119.170197][T15757] topre 0003:0853:0313.0003: unknown main item tag 0x0 [ 2119.219707][T15757] topre 0003:0853:0313.0003: unknown main item tag 0x0 [ 2119.253467][T15757] topre 0003:0853:0313.0003: unknown main item tag 0x0 [ 2119.309682][T15757] topre 0003:0853:0313.0003: unknown main item tag 0x0 [ 2119.376608][T15757] topre 0003:0853:0313.0003: unknown main item tag 0x0 [ 2119.383812][T15757] topre 0003:0853:0313.0003: unknown main item tag 0x0 [ 2119.584635][T15757] topre 0003:0853:0313.0003: hidraw0: USB HID v11.d8 Device [HID 0853:0313] on usb-dummy_hcd.9-1/input0 [ 2119.787232][T15757] usb 10-1: USB disconnect, device number 5 [ 2121.336333][T17320] fido_id[17320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2122.125006][T17323] syzkaller0: entered promiscuous mode [ 2122.180295][T17323] syzkaller0: entered allmulticast mode [ 2122.236320][ T9137] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2122.496810][ T9137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2122.556501][ T9137] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2122.603554][ T9137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.638358][ T9137] usb 3-1: config 0 descriptor?? [ 2123.202633][ T9137] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 2123.300895][ T9137] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input12 [ 2123.768568][ T9137] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2123.997677][ T9137] usb 3-1: USB disconnect, device number 7 [ 2125.011064][T17344] fido_id[17344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2131.351350][T15757] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2131.591207][T15757] usb 10-1: config 2 has an invalid interface number: 255 but max is 0 [ 2131.591362][T15757] usb 10-1: config 2 has no interface number 0 [ 2131.591493][T15757] usb 10-1: config 2 interface 255 has no altsetting 0 [ 2131.635836][T15757] usb 10-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=4f.0b [ 2131.636191][T15757] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.636329][T15757] usb 10-1: Product: syz [ 2131.636440][T15757] usb 10-1: Manufacturer: syz [ 2131.636558][T15757] usb 10-1: SerialNumber: syz [ 2131.924302][T15757] ums-sddr55 10-1:2.255: USB Mass Storage device detected [ 2132.122117][T15757] ums-sddr55 10-1:2.255: Quirks match for vid 07c4 pid a103: 8 [ 2132.494605][T15757] usb 10-1: USB disconnect, device number 6 [ 2132.943132][T16163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2132.958229][T16163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2132.990439][T16163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2133.057700][T16163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2133.137152][T16163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2134.809828][T16148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2134.838125][T16148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2134.865246][T16148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2134.878766][T16148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2134.908399][T16148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2135.396300][T16148] Bluetooth: hci1: command tx timeout [ 2135.534908][T17393] tmpfs: Bad value for 'mpol' [ 2137.056420][T16148] Bluetooth: hci6: command tx timeout [ 2137.447436][T16148] Bluetooth: hci1: command tx timeout [ 2138.932037][T16099] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.961498][T17424] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1901'. [ 2139.126325][T16148] Bluetooth: hci6: command tx timeout [ 2139.133841][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 2139.362238][T16099] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.480122][T17376] chnl_net:caif_netlink_parms(): no params data found [ 2139.528903][T16148] Bluetooth: hci1: command tx timeout [ 2139.764894][T16099] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.072352][T16099] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.216551][T16148] Bluetooth: hci6: command tx timeout [ 2141.606939][T16148] Bluetooth: hci1: command tx timeout [ 2142.454816][T16099] bridge_slave_1: left allmulticast mode [ 2142.466481][T16099] bridge_slave_1: left promiscuous mode [ 2142.533673][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.627516][T16099] bridge_slave_0: left allmulticast mode [ 2142.633376][T16099] bridge_slave_0: left promiscuous mode [ 2142.697367][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2143.294000][T16148] Bluetooth: hci6: command tx timeout [ 2144.274724][T16099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2144.387319][T16099] bond_slave_0: left promiscuous mode [ 2144.517805][T16099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2144.638625][T16099] bond_slave_1: left promiscuous mode [ 2144.712176][T16099] bond0 (unregistering): Released all slaves [ 2144.811917][T17376] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.897147][T17376] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.905020][T17376] bridge_slave_0: entered allmulticast mode [ 2144.970435][T17376] bridge_slave_0: entered promiscuous mode [ 2145.088842][T17387] chnl_net:caif_netlink_parms(): no params data found [ 2145.178148][T17376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.185749][T17376] bridge0: port 2(bridge_slave_1) entered disabled state [ 2145.256779][T17376] bridge_slave_1: entered allmulticast mode [ 2145.272568][T17376] bridge_slave_1: entered promiscuous mode [ 2146.581137][T17376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2146.655260][T17376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2147.906863][T16099] hsr_slave_0: left promiscuous mode [ 2147.935675][T16099] hsr_slave_1: left promiscuous mode [ 2147.959180][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2147.976561][T16099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2148.005539][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2148.036687][T16099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2148.286284][T16099] veth1_macvtap: left promiscuous mode [ 2148.292266][T16099] veth0_macvtap: left promiscuous mode [ 2148.348880][T16099] veth1_vlan: left promiscuous mode [ 2148.389773][T16099] veth0_vlan: left promiscuous mode [ 2150.703117][T16099] team0 (unregistering): Port device team_slave_1 removed [ 2150.848523][T16099] team0 (unregistering): Port device team_slave_0 removed [ 2151.839392][T17376] team0: Port device team_slave_0 added [ 2151.939859][T17376] team0: Port device team_slave_1 added [ 2152.435216][T17376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2152.461471][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2152.610790][T17376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2152.865817][T17376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2152.877450][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2152.934414][T17376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2153.030369][T16148] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 2153.030559][T16148] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2153.333393][T17387] bridge0: port 1(bridge_slave_0) entered blocking state [ 2153.353509][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.398387][T17387] bridge_slave_0: entered allmulticast mode [ 2153.520854][T17387] bridge_slave_0: entered promiscuous mode [ 2153.627453][T17387] bridge0: port 2(bridge_slave_1) entered blocking state [ 2153.664497][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2153.737587][T17387] bridge_slave_1: entered allmulticast mode [ 2153.789843][T17387] bridge_slave_1: entered promiscuous mode [ 2154.304493][T17498] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1911'. [ 2154.624509][T17376] hsr_slave_0: entered promiscuous mode [ 2154.674619][T17376] hsr_slave_1: entered promiscuous mode [ 2154.741726][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 2154.768264][T17376] debugfs: 'hsr0' already exists in 'hsr' [ 2154.774210][T17376] Cannot create hsr debugfs directory [ 2155.159760][T17387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2155.472442][T17387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.792651][T16099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.410170][T16099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.021451][T16099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.084256][T17387] team0: Port device team_slave_0 added [ 2157.183959][T16099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.640422][T17387] team0: Port device team_slave_1 added [ 2158.661325][T17387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2158.707228][T17387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2158.796620][T17387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2159.023886][T17387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2159.065801][T17387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2159.223552][T17387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2160.690844][T16099] bridge_slave_1: left allmulticast mode [ 2160.706308][T16099] bridge_slave_1: left promiscuous mode [ 2160.717325][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2160.790298][T16099] bridge_slave_0: left allmulticast mode [ 2160.817706][T16099] bridge_slave_0: left promiscuous mode [ 2160.868179][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.437805][T16099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2162.608126][T16099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2162.653296][T16099] bond0 (unregistering): Released all slaves [ 2162.863939][T17387] hsr_slave_0: entered promiscuous mode [ 2162.905115][T17387] hsr_slave_1: entered promiscuous mode [ 2162.971328][T17387] debugfs: 'hsr0' already exists in 'hsr' [ 2162.996299][T17387] Cannot create hsr debugfs directory [ 2164.742481][T16099] hsr_slave_0: left promiscuous mode [ 2164.774479][T16099] hsr_slave_1: left promiscuous mode [ 2164.838057][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2164.869795][T16099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2164.898495][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2164.911487][T16099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2165.257078][T16099] veth1_macvtap: left promiscuous mode [ 2165.262852][T16099] veth0_macvtap: left promiscuous mode [ 2165.294373][T16099] veth1_vlan: left promiscuous mode [ 2165.318430][T16099] veth0_vlan: left promiscuous mode [ 2167.560094][T16100] ===================================================== [ 2167.568436][T16100] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 2167.575597][T16100] __inet6_bind+0x4ac/0x1830 [ 2167.583394][T16100] inet6_bind+0x11e/0x1a0 [ 2167.588996][T16100] kernel_bind+0xd6/0x130 [ 2167.593909][T16100] rds_tcp_conn_path_connect+0x952/0xff0 [ 2167.600250][T16100] rds_connect_worker+0x353/0x4d0 SYZFAIL: failed to recv rpc [ 2167.605657][T16100] process_scheduled_works+0xb21/0x1e30 [ 2167.613754][T16100] worker_thread+0xede/0x1580 [ 2167.620159][T16100] kthread+0x53f/0x600 [ 2167.624517][T16100] ret_from_fork+0x20f/0x910 [ 2167.629633][T16100] ret_from_fork_asm+0x1a/0x30 [ 2167.634761][T16100] [ 2167.637433][T16100] Uninit was stored to memory at: [ 2167.642764][T16100] kernel_bind+0x92/0x130 [ 2167.647474][T16100] rds_tcp_conn_path_connect+0x952/0xff0 [ 2167.653320][T16100] rds_connect_worker+0x353/0x4d0 [ 2167.659628][T16100] process_scheduled_works+0xb21/0x1e30 [ 2167.665464][T16100] worker_thread+0xede/0x1580 [ 2167.670545][T16100] kthread+0x53f/0x600 [ 2167.674843][T16100] ret_from_fork+0x20f/0x910 [ 2167.679765][T16100] ret_from_fork_asm+0x1a/0x30 [ 2167.687713][T16100] [ 2167.690163][T16100] Uninit was stored to memory at: [ 2167.695459][T16100] rds_tcp_conn_path_connect+0xae5/0xff0 [ 2167.702523][T16100] rds_connect_worker+0x353/0x4d0 [ 2167.707937][T16100] process_scheduled_works+0xb21/0x1e30 [ 2167.713714][T16100] worker_thread+0xede/0x1580 [ 2167.718633][T16100] kthread+0x53f/0x600 [ 2167.722829][T16100] ret_from_fork+0x20f/0x910 [ 2167.727621][T16100] ret_from_fork_asm+0x1a/0x30 [ 2167.732545][T16100] [ 2167.734920][T16100] Uninit was created at: [ 2167.739592][T16100] kmem_cache_alloc_noprof+0x37b/0x1270 [ 2167.745292][T16100] rds_tcp_conn_alloc+0x7b/0xbb0 [ 2167.750474][T16100] __rds_conn_create+0x267f/0x34e0 [ 2167.755710][T16100] rds_conn_create_outgoing+0x5d/0x80 [ 2167.761629][T16100] rds_sendmsg+0x2684/0x4d70 [ 2167.766514][T16100] __sys_sendto+0xa77/0xb90 [ 2167.771260][T16100] __ia32_sys_sendto+0x12f/0x200 [ 2167.776478][T16100] ia32_sys_call+0x372f/0x4360 [ 2167.781372][T16100] __do_fast_syscall_32+0x17f/0x3f0 [ 2167.789924][T16100] do_fast_syscall_32+0x37/0x80 [ 2167.794905][T16100] do_SYSENTER_32+0x1f/0x30 [ 2167.800303][T16100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2167.806948][T16100] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2167.809404][T16100] CPU: 1 UID: 0 PID: 16100 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 2167.821061][T16100] Tainted: [L]=SOFTLOCKUP [ 2167.825474][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2167.835718][T16100] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 2167.842332][T16100] ===================================================== [ 2167.849752][T16100] Disabling lock debugging due to kernel taint [ 2168.481730][T16100] Kernel panic - not syncing: kmsan.panic set ... [ 2168.488373][T16100] CPU: 1 UID: 0 PID: 16100 Comm: kworker/u8:14 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2168.499826][T16100] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2168.505515][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2168.515748][T16100] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 2168.522221][T16100] Call Trace: [ 2168.525730][T16100] [ 2168.528803][T16100] __dump_stack+0x26/0x30 [ 2168.533369][T16100] dump_stack_lvl+0x50/0x1c0 [ 2168.538184][T16100] ? dump_stack+0x12/0x25 [ 2168.542752][T16100] dump_stack+0x1e/0x25 [ 2168.547117][T16100] vpanic+0x7b4/0x1430 [ 2168.551456][T16100] panic+0x15d/0x160 [ 2168.555621][T16100] kmsan_report+0x31a/0x320 [ 2168.560373][T16100] ? __msan_warning+0x1b/0x30 [ 2168.565280][T16100] ? __inet6_bind+0x4ac/0x1830 [ 2168.570262][T16100] ? inet6_bind+0x11e/0x1a0 [ 2168.575000][T16100] ? kernel_bind+0xd6/0x130 [ 2168.579724][T16100] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 2168.585754][T16100] ? rds_connect_worker+0x353/0x4d0 [ 2168.591203][T16100] ? process_scheduled_works+0xb21/0x1e30 [ 2168.597132][T16100] ? worker_thread+0xede/0x1580 [ 2168.602192][T16100] ? kthread+0x53f/0x600 [ 2168.606666][T16100] ? ret_from_fork+0x20f/0x910 [ 2168.611664][T16100] ? ret_from_fork_asm+0x1a/0x30 [ 2168.616850][T16100] ? stack_depot_save+0x12/0x20 [ 2168.622229][T16100] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 2168.628258][T16100] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 2168.634299][T16100] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 2168.640854][T16100] ? __msan_memcpy+0x105/0x1c0 [ 2168.645829][T16100] ? kernel_bind+0x92/0x130 [ 2168.650547][T16100] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 2168.656576][T16100] ? rds_connect_worker+0x353/0x4d0 [ 2168.662025][T16100] ? process_scheduled_works+0xb21/0x1e30 [ 2168.667962][T16100] ? worker_thread+0xede/0x1580 [ 2168.673017][T16100] ? kthread+0x53f/0x600 [ 2168.677482][T16100] ? ret_from_fork+0x20f/0x910 [ 2168.682463][T16100] ? ret_from_fork_asm+0x1a/0x30 [ 2168.687669][T16100] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 2168.693902][T16100] ? stack_depot_save_flags+0x610/0x790 [ 2168.699695][T16100] ? kmsan_get_metadata+0xf1/0x160 [ 2168.705014][T16100] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2168.711133][T16100] ? kmsan_get_metadata+0xf1/0x160 [ 2168.716495][T16100] __msan_warning+0x1b/0x30 [ 2168.721209][T16100] __inet6_bind+0x4ac/0x1830 [ 2168.725989][T16100] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 2168.732073][T16100] inet6_bind+0x11e/0x1a0 [ 2168.736585][T16100] ? __pfx_inet6_bind+0x10/0x10 [ 2168.741614][T16100] kernel_bind+0xd6/0x130 [ 2168.746138][T16100] ? kmsan_get_metadata+0xf1/0x160 [ 2168.751459][T16100] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2168.757501][T16100] rds_tcp_conn_path_connect+0x952/0xff0 [ 2168.763386][T16100] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2168.769971][T16100] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 2168.776314][T16100] rds_connect_worker+0x353/0x4d0 [ 2168.781675][T16100] ? __pfx_rds_connect_worker+0x10/0x10 [ 2168.787621][T16100] process_scheduled_works+0xb21/0x1e30 [ 2168.793453][T16100] worker_thread+0xede/0x1580 [ 2168.798353][T16100] kthread+0x53f/0x600 [ 2168.802638][T16100] ? __pfx_worker_thread+0x10/0x10 [ 2168.807955][T16100] ? __pfx_kthread+0x10/0x10 [ 2168.812743][T16100] ret_from_fork+0x20f/0x910 [ 2168.817559][T16100] ? __switch_to+0x51c/0x750 [ 2168.822521][T16100] ? __pfx_kthread+0x10/0x10 [ 2168.827423][T16100] ret_from_fork_asm+0x1a/0x30 [ 2168.832431][T16100] [ 2168.836257][T16100] Kernel Offset: disabled [ 2168.840659][T16100] Rebooting in 86400 seconds..