last executing test programs: 35.210798916s ago: executing program 1 (id=111): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3}) close_range(r0, r1, 0x0) poll(&(0x7f0000000140), 0x0, 0xcfc9) 34.712166761s ago: executing program 3 (id=114): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000000480)="2ba3dcfac3c03975d67ea49da2aa", 0x0, 0x20d000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a00), 0x0, 0x4004041) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="3dccd3416460fdf46e3cf3d60947dd8679351cec26f79285a9243ed674a2e7fc2aa006a16ab2844bc266708561141c8ad6", 0x31}, {&(0x7f00000003c0)="dc3d6672ba3e577f72de7f17cdb6256f22d4dfd9d8e1", 0x16}, {&(0x7f0000000400)="3d9a749b45258f9d4ec4e1970240622f3c1ab533f4fc06bf411d42dd35c1deadf50b2e7a21e25dd922349c8d5a7039a9d1541c73c61ade093f51db41c00576c0c5173c7ced54df5f7ba2384f6c985f3592", 0x51}, {&(0x7f00000004c0)="42860a4b7a968b936b0cfd353488c1c28b27a30770da8c4a61033ce82526b188b218a78a6e301a5866a3699ee294", 0x2e}], 0x4, &(0x7f0000000480)}], 0x1, 0x0) 31.809456035s ago: executing program 1 (id=115): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'macvlan0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x8000, 0x8767, 0x80000000, 0x80, {{0x30, 0x4, 0x0, 0x14, 0xc0, 0x66, 0x0, 0x49, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x4c, 0x1, [{0x6, 0x3, 'I'}, {0x0, 0x5, "d036e8"}, {0x1, 0x5, "0a3597"}, {0x0, 0xe, "a37ed01aec08de3be3fbbf1c"}, {0x4, 0x6, "e0ff01c2"}, {0x2, 0xc, "fba86c51bc8ec16fce79"}, {0x6, 0xb, "eb0f9b7862d56f31f9"}, {0x7, 0xe, "d40a3edc8af9abb5dd95d1e5"}]}, @timestamp_prespec={0x44, 0x4c, 0xe3, 0x3, 0x7, [{@multicast1, 0x3}, {@loopback, 0x7}, {@local, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x2}, {@remote, 0x100}, {@broadcast, 0x5}, {@broadcast, 0x100}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x59, 0xa, "0ffa97e8db51e0e9"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001300)={0x214, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x63f6b01477bd18aa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40088c0}, 0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 31.725687456s ago: executing program 3 (id=116): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1f, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x4) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r6 = accept4(r1, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="ea", 0x1) write$6lowpan_control(r6, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) close(r6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r8 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) r9 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x80000, @loopback, 0x4}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001", @ANYRES8=r6], 0x0) finit_module(r8, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 31.723117327s ago: executing program 2 (id=117): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce", 0x79}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 29.216578397s ago: executing program 4 (id=119): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080006001200000014000400ff02000000000000000000000000000108000600070000000500050000000000"], 0x70}, 0x1, 0x0, 0x0, 0x2080005}, 0x40000) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2, 0x0, 0x5}) 28.534724272s ago: executing program 1 (id=121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 28.386275468s ago: executing program 1 (id=123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x14e, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x118, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [@routing={0x3c, 0x10, 0x0, 0x0, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1d}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@mcast1, @local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}, @dstopts]}}}}}}}, 0x0) 27.672214209s ago: executing program 2 (id=125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000508000240f9ffff0214000000110001"], 0xdc}}, 0x0) 27.01186894s ago: executing program 3 (id=126): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000000480)="2ba3dcfac3c03975d67ea49da2aa", 0x0, 0x20d000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a00), 0x0, 0x4004041) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="3dccd3416460fdf46e3cf3d60947dd8679351cec26f79285a9243ed674a2e7fc2aa006a16ab2844bc266708561141c8ad6", 0x31}, {&(0x7f00000003c0)="dc3d6672ba3e577f72de7f17cdb6256f22d4dfd9d8e1", 0x16}, {&(0x7f0000000400)="3d9a749b45258f9d4ec4e1970240622f3c1ab533f4fc06bf411d42dd35c1deadf50b2e7a21e25dd922349c8d5a7039a9d1541c73c61ade093f51db41c00576c0c5173c7ced54df5f7ba2384f6c985f3592", 0x51}, {&(0x7f00000004c0)="42860a4b7a968b936b0cfd353488c1c28b27a30770da8c4a61033ce82526b188b218a78a6e301a5866a3699ee294", 0x2e}], 0x4, &(0x7f0000000480)}], 0x1, 0x0) 26.931079155s ago: executing program 0 (id=127): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 26.88059819s ago: executing program 2 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='fd', 0x0, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e21, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="08937184e73fad655ac2beb6dfe1f8f331db8962ec749d123ced68d9590994f15cea83271d1a0bac7739a03ef10d18f3af54d8459385ed3a5f53cac19c70e523385600ad865a5eec984fa49b284583ff1a65681bb9b2b5963a84749b6acf6b99b9ec70241428eccd57fa401ebe1ef8b24ab1abc389aa7fd3e323413079"]) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000340)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r7, &(0x7f00000004c0), 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) 25.624642573s ago: executing program 3 (id=129): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 25.494440535s ago: executing program 4 (id=130): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fspick(r6, &(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) 25.042875794s ago: executing program 0 (id=131): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x10) statx(0xffffffffffffffff, &(0x7f0000003500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x40, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0xbb6, 0x3231564b, 0x0, [0x2], [0x2000, 0x0, 0x0, 0x2a9c7ce3], [0x7fffffff, 0xfffffffe, 0xfffffffd, 0x2], [0x3fffffff7ffffff, 0xfffffffffffffffd]}) r1 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80, 0xfffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x20, 0xffff, 0x0, 0x3]}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 25.03642239s ago: executing program 1 (id=132): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'macvlan0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x8000, 0x8767, 0x80000000, 0x80, {{0x30, 0x4, 0x0, 0x14, 0xc0, 0x66, 0x0, 0x49, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x4c, 0x1, [{0x6, 0x3, 'I'}, {0x0, 0x5, "d036e8"}, {0x1, 0x5, "0a3597"}, {0x0, 0xe, "a37ed01aec08de3be3fbbf1c"}, {0x4, 0x6, "e0ff01c2"}, {0x2, 0xc, "fba86c51bc8ec16fce79"}, {0x6, 0xb, "eb0f9b7862d56f31f9"}, {0x7, 0xe, "d40a3edc8af9abb5dd95d1e5"}]}, @timestamp_prespec={0x44, 0x4c, 0xe3, 0x3, 0x7, [{@multicast1, 0x3}, {@loopback, 0x7}, {@local, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x2}, {@remote, 0x100}, {@broadcast, 0x5}, {@broadcast, 0x100}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x59, 0xa, "0ffa97e8db51e0e9"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001300)={0x214, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x63f6b01477bd18aa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40088c0}, 0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 23.972761872s ago: executing program 2 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) 23.828351484s ago: executing program 4 (id=134): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a", 0x76}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a6970"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.979520699s ago: executing program 0 (id=135): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce", 0x79}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.822754581s ago: executing program 4 (id=136): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="91", 0x1, 0x4008052, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x5}, 0x8) syz_open_dev$vbi(0x0, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="752a0000000061119c000000000018000000b329382ea2ef6e0000000000000000000000009500000000000000f1bb3de28dfbbb4d26b9117d0fbc1cd7194c61195b59b792653cdfb480101acf8846bdfb3626298b05a83d192a47dece1c00db8308000000ed4321d0c8"], &(0x7f0000000000)='GPL\x00'}, 0x80) 22.775942467s ago: executing program 2 (id=137): socket$kcm(0x10, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x5, 0x208180) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)=' ', 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r1 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x40400c0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000240)=""/171) semop(r1, &(0x7f0000000040)=[{0x4, 0x0, 0x800}, {0x2, 0x0, 0x1000}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)) semctl$IPC_RMID(0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) 22.501748816s ago: executing program 0 (id=138): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1f, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x4) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r6 = accept4(r1, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r8 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) r9 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x80000, @loopback, 0x4}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001", @ANYRES8=r6], 0x0) finit_module(r8, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 22.501172001s ago: executing program 4 (id=139): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000000480)="2ba3dcfac3c03975d67ea49da2aa", 0x0, 0x20d000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a00), 0x0, 0x4004041) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="3dccd3416460fdf46e3cf3d60947dd8679351cec26f79285a9243ed674a2e7fc2aa006a16ab2844bc266708561141c8ad647", 0x32}, {&(0x7f00000003c0)="dc3d6672ba3e577f72de7f17cdb6256f22d4dfd9d8e1", 0x16}, {&(0x7f0000000400)="3d9a749b45258f9d4ec4e1970240622f3c1ab533f4fc06bf411d42dd35c1deadf50b2e7a21e25dd922349c8d5a7039a9d1541c73c61ade093f51db41c00576c0c5173c7ced54df5f7ba2384f6c985f3592", 0x51}, {&(0x7f00000004c0)="42860a4b7a968b936b0cfd353488c1c28b27a30770da8c4a61033ce82526b188b218a78a6e301a5866a3699ee294", 0x2e}], 0x4}], 0x1, 0x0) 21.526426059s ago: executing program 2 (id=140): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080006001200000014000400ff02000000000000000000000000000108000600070000000500050000000000"], 0x70}, 0x1, 0x0, 0x0, 0x2080005}, 0x40000) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2, 0x0, 0x5}) 20.130353781s ago: executing program 4 (id=141): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a", 0x76}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20.128874396s ago: executing program 0 (id=142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000008c0)={&(0x7f0000000900)=[{0x8021, 0x400, 0xa4, &(0x7f0000000440)="bb90191e89268a492c7e9d2c7c4345d99c96db76832e8600d5ac67d5feb479f44ad1e9dcec4d95681a25124a6d8b43016abbb09eaca5577e5fb280d893bc75e0f6b2c0fa9722d6a0c6cb442de783a4b9caec31d566ea16b9c13cdf19d17bac54c21219b04e5bf743e8b712467608c62df46c24b80a911b44cca45e9d02d72c99716d7a5bf28d27d3219ab12f450f23cd97378a73dd5fa1442b3d1fd742297bf07557be72"}, {0x3, 0x2810, 0x2f, &(0x7f0000000600)="d05718eeec800014b59015814d10e037e0a4daf3d21a633f8523109b4687d84e49b9b04e3c8fc2213c72135661163a"}, {0xde, 0x2000, 0xf, &(0x7f0000000300)="24d245fd3abecf6ae09a33930030a3"}, {0x9, 0x8612, 0x0, 0x0}, {0x800, 0x1200, 0x11, &(0x7f00000006c0)="99eb190df487f8b5b2eba6d0622dbc08b5"}, {0xb4, 0x7401, 0x0, 0x0}], 0x6}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) preadv(r4, &(0x7f0000002340)=[{&(0x7f0000002140)=""/13, 0xd}, {0x0}], 0x2, 0x4, 0xa5) 20.013340672s ago: executing program 1 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x6f}, @TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) 18.712592469s ago: executing program 0 (id=144): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fspick(r6, &(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) 15.993871047s ago: executing program 3 (id=145): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000600"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x14000818) 15.609147729s ago: executing program 3 (id=146): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a", 0x76}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a6970"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.162891202s ago: executing program 32 (id=140): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080006001200000014000400ff02000000000000000000000000000108000600070000000500050000000000"], 0x70}, 0x1, 0x0, 0x0, 0x2080005}, 0x40000) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2, 0x0, 0x5}) 4.577207885s ago: executing program 33 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x6f}, @TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) 4.460280499s ago: executing program 34 (id=141): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a", 0x76}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.410214362s ago: executing program 35 (id=144): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fspick(r6, &(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) 0s ago: executing program 36 (id=146): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a", 0x76}], 0x1}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a6970"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 75.542826][ T5788] cgroup: Unknown subsys name 'net' [ 75.802912][ T5788] cgroup: Unknown subsys name 'cpuset' [ 75.858891][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.478806][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.674158][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.675859][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.676919][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.683176][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.683760][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.684284][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.688453][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.692751][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.693158][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.697857][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.698412][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.699186][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.701560][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.705755][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.706566][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.778442][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.781316][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.790264][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.822585][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.823380][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.871595][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.886395][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.887228][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.904279][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.906831][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.752269][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 80.761737][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 80.770187][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 80.828698][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 81.115041][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 81.711149][ T9] cfg80211: failed to load regulatory.db [ 81.759694][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.759840][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.760283][ T5798] bridge_slave_0: entered allmulticast mode [ 81.761844][ T5798] bridge_slave_0: entered promiscuous mode [ 81.769870][ T5808] Bluetooth: hci0: command tx timeout [ 81.769998][ T5808] Bluetooth: hci2: command tx timeout [ 81.848428][ T5802] Bluetooth: hci1: command tx timeout [ 81.850072][ T5802] Bluetooth: hci3: command tx timeout [ 81.870950][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.871049][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.871183][ T5799] bridge_slave_0: entered allmulticast mode [ 81.873567][ T5799] bridge_slave_0: entered promiscuous mode [ 81.906505][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.906634][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.907063][ T5800] bridge_slave_0: entered allmulticast mode [ 81.911216][ T5800] bridge_slave_0: entered promiscuous mode [ 81.914481][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.914595][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.914757][ T5798] bridge_slave_1: entered allmulticast mode [ 81.917161][ T5798] bridge_slave_1: entered promiscuous mode [ 81.928368][ T5802] Bluetooth: hci4: command tx timeout [ 82.020641][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.020755][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.021074][ T5799] bridge_slave_1: entered allmulticast mode [ 82.022802][ T5799] bridge_slave_1: entered promiscuous mode [ 82.031129][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.031244][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.031403][ T5800] bridge_slave_1: entered allmulticast mode [ 82.033781][ T5800] bridge_slave_1: entered promiscuous mode [ 82.132154][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.132290][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.132488][ T5801] bridge_slave_0: entered allmulticast mode [ 82.136656][ T5801] bridge_slave_0: entered promiscuous mode [ 82.429202][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.429384][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.429550][ T5801] bridge_slave_1: entered allmulticast mode [ 82.431279][ T5801] bridge_slave_1: entered promiscuous mode [ 82.623693][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.702005][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.702255][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.702392][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.702548][ T5815] bridge_slave_0: entered allmulticast mode [ 82.704209][ T5815] bridge_slave_0: entered promiscuous mode [ 82.710121][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.714699][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.781917][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.782159][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.782233][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.782333][ T5815] bridge_slave_1: entered allmulticast mode [ 82.783735][ T5815] bridge_slave_1: entered promiscuous mode [ 82.786620][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.892083][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.331681][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.541680][ T5798] team0: Port device team_slave_0 added [ 83.620594][ T5799] team0: Port device team_slave_0 added [ 83.624247][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.626106][ T5800] team0: Port device team_slave_0 added [ 83.628091][ T5798] team0: Port device team_slave_1 added [ 83.711225][ T5799] team0: Port device team_slave_1 added [ 83.713240][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.714955][ T5800] team0: Port device team_slave_1 added [ 83.820742][ T5801] team0: Port device team_slave_0 added [ 83.848455][ T5808] Bluetooth: hci0: command tx timeout [ 83.848546][ T5802] Bluetooth: hci2: command tx timeout [ 83.930719][ T5802] Bluetooth: hci1: command tx timeout [ 83.930752][ T5802] Bluetooth: hci3: command tx timeout [ 84.008329][ T5808] Bluetooth: hci4: command tx timeout [ 84.130966][ T5801] team0: Port device team_slave_1 added [ 84.530281][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.530293][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.530308][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.640013][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.640025][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.640040][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.642053][ T5815] team0: Port device team_slave_0 added [ 84.642925][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.642937][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.642960][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.643804][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.643815][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.643839][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.849741][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.849757][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.849782][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.851660][ T5815] team0: Port device team_slave_1 added [ 84.852264][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.852272][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.852286][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.954165][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.954179][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.954193][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.077046][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.077059][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.077073][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.259865][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.259877][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.259892][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.490792][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.490804][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.490818][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.634374][ T5798] hsr_slave_0: entered promiscuous mode [ 85.635302][ T5798] hsr_slave_1: entered promiscuous mode [ 85.730092][ T5799] hsr_slave_0: entered promiscuous mode [ 85.730883][ T5799] hsr_slave_1: entered promiscuous mode [ 85.731519][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 85.731611][ T5799] Cannot create hsr debugfs directory [ 85.736266][ T5800] hsr_slave_0: entered promiscuous mode [ 85.737021][ T5800] hsr_slave_1: entered promiscuous mode [ 85.737525][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 85.737542][ T5800] Cannot create hsr debugfs directory [ 85.873734][ T5801] hsr_slave_0: entered promiscuous mode [ 85.874792][ T5801] hsr_slave_1: entered promiscuous mode [ 85.875334][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 85.875352][ T5801] Cannot create hsr debugfs directory [ 85.929482][ T5802] Bluetooth: hci0: command tx timeout [ 85.929611][ T5808] Bluetooth: hci2: command tx timeout [ 86.008600][ T5802] Bluetooth: hci3: command tx timeout [ 86.008702][ T5808] Bluetooth: hci1: command tx timeout [ 86.088449][ T5808] Bluetooth: hci4: command tx timeout [ 86.423956][ T5815] hsr_slave_0: entered promiscuous mode [ 86.424754][ T5815] hsr_slave_1: entered promiscuous mode [ 86.425258][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 86.425280][ T5815] Cannot create hsr debugfs directory [ 87.646627][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.677214][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.711624][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.764625][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.863667][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.903867][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.942393][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.997844][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.008442][ T5802] Bluetooth: hci0: command tx timeout [ 88.008479][ T5808] Bluetooth: hci2: command tx timeout [ 88.088561][ T5802] Bluetooth: hci3: command tx timeout [ 88.088604][ T5808] Bluetooth: hci1: command tx timeout [ 88.152388][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.170841][ T5808] Bluetooth: hci4: command tx timeout [ 88.197019][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.215148][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.267494][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.380487][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.435681][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.469546][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.529059][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.622863][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.656875][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.689674][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.727396][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.765121][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.811215][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.856607][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.857365][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.896847][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.914937][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.915036][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.992672][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.024067][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.040398][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.040921][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.083949][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.084110][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.133991][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.164627][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.177112][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.177783][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.228658][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.228855][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.310704][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.342570][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.367062][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.367275][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.430473][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.430679][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.527307][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.577616][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.578165][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.644498][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.644663][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.694451][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.810430][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.955699][ T5798] veth0_vlan: entered promiscuous mode [ 89.997667][ T5798] veth1_vlan: entered promiscuous mode [ 90.123761][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.211391][ T5798] veth0_macvtap: entered promiscuous mode [ 90.257386][ T5798] veth1_macvtap: entered promiscuous mode [ 90.356178][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.373744][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.376264][ T5800] veth0_vlan: entered promiscuous mode [ 90.406217][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.429284][ T5800] veth1_vlan: entered promiscuous mode [ 90.444553][ T3017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.463091][ T3017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.475674][ T3017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.492747][ T3017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.503275][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.707661][ T5799] veth0_vlan: entered promiscuous mode [ 90.752361][ T5801] veth0_vlan: entered promiscuous mode [ 90.753171][ T5800] veth0_macvtap: entered promiscuous mode [ 90.797709][ T5800] veth1_macvtap: entered promiscuous mode [ 90.806803][ T5799] veth1_vlan: entered promiscuous mode [ 90.831533][ T5801] veth1_vlan: entered promiscuous mode [ 90.849893][ T1417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.849922][ T1417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.938099][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.952259][ T5815] veth0_vlan: entered promiscuous mode [ 90.963920][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.963939][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.968171][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.010683][ T2141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.030842][ T5815] veth1_vlan: entered promiscuous mode [ 91.034458][ T2141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.061489][ T2141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066592][ T2141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.102730][ T5799] veth0_macvtap: entered promiscuous mode [ 91.140430][ T5801] veth0_macvtap: entered promiscuous mode [ 91.144517][ T5799] veth1_macvtap: entered promiscuous mode [ 91.219950][ T5801] veth1_macvtap: entered promiscuous mode [ 91.448053][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.469536][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.476917][ T5815] veth0_macvtap: entered promiscuous mode [ 91.504881][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.516322][ T1500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.516342][ T1500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.550229][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.554116][ T5815] veth1_macvtap: entered promiscuous mode [ 91.586082][ T2141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.605579][ T2141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647157][ T2141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.662282][ T2141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.666633][ T2141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.693392][ T2141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.696124][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.696139][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.697435][ T2141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.774351][ T2141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.783776][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.955362][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.040684][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.090855][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.122446][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.125629][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.257163][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.257182][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.484396][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.484416][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.606419][ T1500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.606440][ T1500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.781390][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.781409][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.215006][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.215028][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.120182][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.120203][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.140060][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.937639][ T5942] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 97.088267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.098270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.108248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.118259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.128316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.138257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.148249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.158285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.168245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.178252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.814027][ T5988] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.141200][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.145409][ T5988] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 99.145426][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 99.145437][ T5988] usb 3-1: SerialNumber: syz [ 99.216513][ T5988] usb 3-1: config 0 descriptor?? [ 99.539905][ T5988] uvcvideo 3-1:0.0: Found UVC 0.00 device (05ac:8501) [ 99.540358][ T5988] uvcvideo 3-1:0.0: Failed to create links for entity 255 [ 99.540377][ T5988] uvcvideo 3-1:0.0: Failed to register entities (-22). [ 99.829411][ T5988] usb 3-1: USB disconnect, device number 2 [ 100.189093][ T6009] fuse: Invalid rootmode [ 104.208412][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.360243][ T6001] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.366153][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.368541][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 104.368569][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 104.368665][ T9] usb 5-1: SerialNumber: syz [ 104.404389][ T9] usb 5-1: config 0 descriptor?? [ 104.518312][ T6001] usb 3-1: Using ep0 maxpacket: 32 [ 104.521397][ T6001] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 104.521424][ T6001] usb 3-1: config 0 has no interface number 0 [ 104.521508][ T6001] usb 3-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.526099][ T6001] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 104.526129][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.526149][ T6001] usb 3-1: Product: syz [ 104.526164][ T6001] usb 3-1: Manufacturer: syz [ 104.526179][ T6001] usb 3-1: SerialNumber: syz [ 104.705382][ T9] uvcvideo 5-1:0.0: Found UVC 0.00 device (05ac:8501) [ 104.705505][ T9] uvcvideo 5-1:0.0: Failed to create links for entity 255 [ 104.705523][ T9] uvcvideo 5-1:0.0: Failed to register entities (-22). [ 104.839891][ T6001] usb 3-1: config 0 descriptor?? [ 105.058690][ T9] usb 5-1: USB disconnect, device number 2 [ 105.373192][ T6047] fuse: Invalid rootmode [ 106.516149][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.739020][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 106.755910][ T6064] vlan2: entered promiscuous mode [ 106.755935][ T6064] dummy0: entered promiscuous mode [ 107.747617][ T5816] usb 3-1: USB disconnect, device number 3 [ 110.070341][ T5998] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.200241][ T6085] fuse: Invalid rootmode [ 110.210984][ T5816] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.250223][ T5998] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.250254][ T5998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.250274][ T5998] usb 2-1: Product: syz [ 110.250288][ T5998] usb 2-1: Manufacturer: syz [ 110.250302][ T5998] usb 2-1: SerialNumber: syz [ 110.298616][ T5993] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 110.348366][ T5816] usb 3-1: device descriptor read/64, error -71 [ 110.353256][ T5998] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.437613][ T805] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.470847][ T5993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.475612][ T5993] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 110.475693][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 110.475715][ T5993] usb 5-1: SerialNumber: syz [ 110.565521][ T5993] usb 5-1: config 0 descriptor?? [ 110.615474][ T5993] uvcvideo 5-1:0.0: Found UVC 0.00 device (05ac:8501) [ 110.622325][ T5993] uvcvideo 5-1:0.0: Failed to create links for entity 255 [ 110.622424][ T5993] uvcvideo 5-1:0.0: Failed to register entities (-22). [ 110.658478][ T5816] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.663142][ T6072] random: crng reseeded on system resumption [ 110.784308][ T5993] usb 5-1: USB disconnect, device number 3 [ 110.792258][ T5816] usb 3-1: device descriptor read/64, error -71 [ 110.893416][ T5847] usb 2-1: USB disconnect, device number 2 [ 110.902028][ T5816] usb usb3-port1: attempt power cycle [ 110.917866][ T6091] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 111.608410][ T805] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 111.614616][ T805] ath9k_htc: Failed to initialize the device [ 112.044963][ T5816] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.046005][ T5847] usb 2-1: ath9k_htc: USB layer deinitialized [ 112.079005][ T5816] usb 3-1: device descriptor read/8, error -71 [ 112.338409][ T5816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.363559][ T5816] usb 3-1: device descriptor read/8, error -71 [ 112.468974][ T5816] usb usb3-port1: unable to enumerate USB device [ 113.372537][ T6120] fuse: Bad value for 'rootmode' [ 113.798337][ T805] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.268468][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 115.271952][ T805] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 115.271980][ T805] usb 5-1: config 0 has no interface number 0 [ 115.272025][ T805] usb 5-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.274712][ T805] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 115.274743][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.274763][ T805] usb 5-1: Product: syz [ 115.274776][ T805] usb 5-1: Manufacturer: syz [ 115.274790][ T805] usb 5-1: SerialNumber: syz [ 115.295136][ T805] usb 5-1: config 0 descriptor?? [ 115.478403][ T5891] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.478916][ T805] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 115.633637][ T805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.637463][ T805] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 115.637593][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 115.637613][ T805] usb 2-1: SerialNumber: syz [ 115.680813][ T5891] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.680838][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.680849][ T5891] usb 3-1: Product: syz [ 115.680857][ T5891] usb 3-1: Manufacturer: syz [ 115.680865][ T5891] usb 3-1: SerialNumber: syz [ 115.710257][ T5891] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.755540][ T805] usb 2-1: config 0 descriptor?? [ 115.775553][ T5993] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.819822][ T805] uvcvideo 2-1:0.0: Found UVC 0.00 device (05ac:8501) [ 115.823172][ T805] uvcvideo 2-1:0.0: Failed to create links for entity 255 [ 115.823186][ T805] uvcvideo 2-1:0.0: Failed to register entities (-22). [ 115.963146][ T10] usb 2-1: USB disconnect, device number 3 [ 115.990117][ T6134] random: crng reseeded on system resumption [ 116.145075][ T5816] usb 3-1: USB disconnect, device number 8 [ 116.888728][ T5993] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 116.888914][ T5993] ath9k_htc: Failed to initialize the device [ 117.048302][ T5816] usb 3-1: ath9k_htc: USB layer deinitialized [ 117.235373][ T805] usb 5-1: USB disconnect, device number 4 [ 120.835233][ T6196] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 121.437433][ T5993] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.603276][ T5993] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.603309][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.603330][ T5993] usb 2-1: Product: syz [ 121.603345][ T5993] usb 2-1: Manufacturer: syz [ 121.603360][ T5993] usb 2-1: SerialNumber: syz [ 121.624954][ T5993] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.701347][ T6213] binder: 6212:6213 ioctl c0306201 0 returned -14 [ 121.720415][ T5809] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.024114][ T6205] random: crng reseeded on system resumption [ 122.058666][ T6218] fuse: Bad value for 'rootmode' [ 122.113771][ T5988] usb 2-1: USB disconnect, device number 4 [ 122.818307][ T5809] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 122.818494][ T5809] ath9k_htc: Failed to initialize the device [ 122.945811][ T5988] usb 2-1: ath9k_htc: USB layer deinitialized [ 124.439442][ T5993] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.529019][ T5993] usb 4-1: Using ep0 maxpacket: 32 [ 125.781614][ T5993] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.781645][ T5993] usb 4-1: config 0 has no interface number 0 [ 125.781984][ T5993] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.791066][ T5993] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.791095][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.791115][ T5993] usb 4-1: Product: syz [ 125.791130][ T5993] usb 4-1: Manufacturer: syz [ 125.791144][ T5993] usb 4-1: SerialNumber: syz [ 125.811312][ T5993] usb 4-1: config 0 descriptor?? [ 126.039260][ T804] usb 4-1: USB disconnect, device number 2 [ 126.188137][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 126.273984][ T6243] vlan2: entered promiscuous mode [ 126.274008][ T6243] dummy0: entered promiscuous mode [ 127.272367][ T6250] binder: 6249:6250 ioctl c0306201 0 returned -14 [ 129.848389][ T5809] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 131.148398][ T5816] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.566590][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.566684][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.620112][ T5816] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 133.620142][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.620161][ T5816] usb 2-1: Product: syz [ 133.620175][ T5816] usb 2-1: Manufacturer: syz [ 133.620188][ T5816] usb 2-1: SerialNumber: syz [ 133.950258][ T5816] usb 2-1: can't set config #1, error -71 [ 133.979598][ T5816] usb 2-1: USB disconnect, device number 5 [ 134.033566][ T6280] binder: 6279:6280 ioctl c0306201 0 returned -14 [ 134.138392][ T5809] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.298309][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 134.301266][ T5809] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 134.301295][ T5809] usb 5-1: config 0 has no interface number 0 [ 134.301339][ T5809] usb 5-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.309443][ T5809] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 134.309473][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.309492][ T5809] usb 5-1: Product: syz [ 134.309506][ T5809] usb 5-1: Manufacturer: syz [ 134.309520][ T5809] usb 5-1: SerialNumber: syz [ 134.315387][ T5809] usb 5-1: config 0 descriptor?? [ 134.962471][ T6296] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6296 comm: syz.3.116) [ 136.962698][ T5887] usb 5-1: USB disconnect, device number 5 [ 138.778488][ T5848] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.498381][ T5848] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.498413][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.498433][ T5848] usb 2-1: Product: syz [ 139.498448][ T5848] usb 2-1: Manufacturer: syz [ 139.498462][ T5848] usb 2-1: SerialNumber: syz [ 139.543803][ T5848] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.591952][ T5887] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.806097][ T6312] random: crng reseeded on system resumption [ 140.656161][ T6335] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6335 comm: syz.0.138) [ 156.640780][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.672860][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.687782][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.696372][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.697193][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.354586][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.381128][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.395598][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.397399][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.400367][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.514810][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.529512][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.533922][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.535226][ T5808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.536364][ T5808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.729944][ T5808] Bluetooth: hci5: command tx timeout [ 159.308601][ T5802] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 159.312523][ T5802] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 159.319661][ T5802] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 159.342697][ T5802] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 159.346330][ T5802] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 160.488505][ T5808] Bluetooth: hci6: command tx timeout [ 160.648404][ T5808] Bluetooth: hci7: command tx timeout [ 160.808600][ T5808] Bluetooth: hci5: command tx timeout [ 161.448436][ T5808] Bluetooth: hci8: command tx timeout [ 162.573270][ T5808] Bluetooth: hci6: command tx timeout [ 162.717908][ T5802] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 162.728453][ T61] Bluetooth: hci7: command tx timeout [ 162.740017][ T5802] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 162.743951][ T5802] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 162.745792][ T5802] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 162.746804][ T5802] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 162.888433][ T5802] Bluetooth: hci5: command tx timeout [ 163.528347][ T5802] Bluetooth: hci8: command tx timeout [ 164.648363][ T5802] Bluetooth: hci6: command tx timeout [ 164.808374][ T5808] Bluetooth: hci7: command tx timeout [ 164.815976][ T5802] Bluetooth: hci9: command tx timeout [ 164.968360][ T5808] Bluetooth: hci5: command tx timeout [ 165.608373][ T5808] Bluetooth: hci8: command tx timeout [ 166.729861][ T5808] Bluetooth: hci6: command tx timeout [ 166.896751][ T5802] Bluetooth: hci9: command tx timeout [ 166.905483][ T5808] Bluetooth: hci7: command tx timeout [ 167.688372][ T5802] Bluetooth: hci8: command tx timeout [ 168.969836][ T5802] Bluetooth: hci9: command tx timeout [ 171.049812][ T5802] Bluetooth: hci9: command tx timeout [ 194.335481][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335551][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.669860][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 206.736618][ T6385] Bluetooth: hci1: command 0x0406 tx timeout [ 206.736671][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 206.808528][ T6385] Bluetooth: hci2: command 0x0406 tx timeout [ 206.808578][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 218.697549][ T6385] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 218.715464][ T6385] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 218.716554][ T6385] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 218.717751][ T6385] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 218.740032][ T6385] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 219.195849][ T5802] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 219.218486][ T5802] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 219.228486][ T5802] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 219.234177][ T5802] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 219.235092][ T5802] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 219.347094][ T6397] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 219.363026][ T6397] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 219.365833][ T6397] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 219.367098][ T6397] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 219.369608][ T6397] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 219.626930][ T6401] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 219.645571][ T6401] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 219.646735][ T6401] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 219.663628][ T6401] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 219.664479][ T6401] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 223.210847][ T6406] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 223.228230][ T6406] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 223.229624][ T6406] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 223.232119][ T6406] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 223.234904][ T6406] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 247.398205][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 247.398224][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5847/2:b..l P5800/5:b..l [ 247.398256][ C0] rcu: (detected by 0, t=10502 jiffies, g=11433, q=5327 ncpus=2) [ 247.398268][ C0] task:syz-executor state:R running task stack:21592 pid:5800 tgid:5800 ppid:1 task_flags:0x400140 flags:0x00080002 [ 247.398304][ C0] Call Trace: [ 247.398311][ C0] [ 247.398318][ C0] __schedule+0x145f/0x5070 [ 247.398352][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 247.398372][ C0] ? __pfx___schedule+0x10/0x10 [ 247.398388][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.398406][ C0] preempt_schedule_irq+0x4d/0xa0 [ 247.398415][ C0] irqentry_exit+0x5e3/0x670 [ 247.398428][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.398439][ C0] RIP: 0010:lock_acquire+0x222/0x340 [ 247.398451][ C0] Code: ff ff ff e8 d0 40 35 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 aa 9f 16 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 4f ff 38 09 cc 48 8d 3d a7 c9 41 [ 247.398460][ C0] RSP: 0018:ffffc90004c3f388 EFLAGS: 00000286 [ 247.398468][ C0] RAX: 355844eb3b2b8300 RBX: 0000000000000000 RCX: 0000000000000046 [ 247.398474][ C0] RDX: 000000009d9c53a4 RSI: ffffffff8cfdf9e2 RDI: ffffffff8b3f5a60 [ 247.398481][ C0] RBP: ffffffff8228c738 R08: ffffffff8228c738 R09: ffffffff8d5ae940 [ 247.398488][ C0] R10: dffffc0000000000 R11: fffff940002a9351 R12: 0000000000000002 [ 247.398494][ C0] R13: ffffffff8d5ae940 R14: 0000000000000000 R15: 0000000000000246 [ 247.398502][ C0] ? page_table_check_set+0x148/0x610 [ 247.398517][ C0] ? page_table_check_set+0x148/0x610 [ 247.398534][ C0] ? page_table_check_set+0x148/0x610 [ 247.398547][ C0] page_table_check_set+0x165/0x610 [ 247.398559][ C0] ? page_table_check_set+0x148/0x610 [ 247.398575][ C0] copy_pmd_range+0x49e2/0x7980 [ 247.398597][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.398616][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 247.398631][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.398646][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.398662][ C0] copy_page_range+0xae6/0x1130 [ 247.398681][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 247.398693][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.398703][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 247.398712][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 247.398728][ C0] dup_mmap+0xf56/0x1b40 [ 247.398750][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 247.398764][ C0] ? copy_mm+0x131/0x4b0 [ 247.398784][ C0] copy_mm+0x13c/0x4b0 [ 247.398796][ C0] copy_process+0x1665/0x3960 [ 247.398812][ C0] ? copy_process+0x915/0x3960 [ 247.398827][ C0] ? __pfx_copy_process+0x10/0x10 [ 247.398838][ C0] ? count_memcg_event_mm+0x21/0x260 [ 247.398855][ C0] kernel_clone+0x21d/0x7a0 [ 247.398867][ C0] ? __pfx_kernel_clone+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.398888][ C0] __x64_sys_clone+0x18b/0x1e0 [ 247.398902][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 247.398922][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 247.398938][ C0] do_syscall_64+0xec/0xf80 [ 247.398948][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.398957][ C0] ? trace_irq_disable+0x37/0x100 [ 247.398967][ C0] ? clear_bhb_loop+0x60/0xb0 [ 247.398978][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.398987][ C0] RIP: 0033:0x7f3caacc5e93 [ 247.398999][ C0] RSP: 002b:00007fff69de85c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 247.399008][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3caacc5e93 [ 247.399014][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 247.399020][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 247.399025][ C0] R10: 000055556681e7d0 R11: 0000000000000246 R12: 0000000000000000 [ 247.399031][ C0] R13: 00000000000927c0 R14: 0000000000022554 R15: 00007fff69de8760 [ 247.399045][ C0] [ 247.399049][ C0] task:kworker/0:4 state:R running task stack:20880 pid:5847 tgid:5847 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 247.399076][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 247.399088][ C0] Call Trace: [ 247.399091][ C0] [ 247.399096][ C0] __schedule+0x145f/0x5070 [ 247.399123][ C0] ? __pfx___schedule+0x10/0x10 [ 247.399141][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.399150][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 247.399158][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 247.399170][ C0] preempt_schedule_common+0x83/0xd0 [ 247.399179][ C0] preempt_schedule_thunk+0x16/0x30 [ 247.399192][ C0] rt_mutex_slowunlock+0x668/0x8a0 [ 247.399205][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 247.399218][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 247.399235][ C0] ? rt_spin_unlock+0x161/0x200 [ 247.399248][ C0] kcov_remote_start+0x186/0x710 [ 247.399260][ C0] __usb_hcd_giveback_urb+0x38a/0x5e0 [ 247.399278][ C0] usb_giveback_urb_bh+0x296/0x420 [ 247.399293][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 247.399304][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 247.399314][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 247.399325][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 247.399336][ C0] process_scheduled_works+0xad1/0x1770 [ 247.399360][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 247.399369][ C0] ? do_raw_spin_lock+0x121/0x290 [ 247.399384][ C0] ? assign_work+0x3a1/0x410 [ 247.399396][ C0] bh_worker+0x2ca/0x630 [ 247.399413][ C0] tasklet_hi_action+0xf/0x70 [ 247.399425][ C0] handle_softirqs+0x1df/0x650 [ 247.399440][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 247.399452][ C0] wg_packet_decrypt_worker+0x2d7/0xce0 [ 247.399467][ C0] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 247.399480][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 247.399505][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.399518][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.399531][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.399541][ C0] ? look_up_lock_class+0x57/0x110 [ 247.399551][ C0] ? register_lock_class+0x31/0x2e0 [ 247.399565][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 247.399580][ C0] ? finish_task_switch+0x162/0x940 [ 247.399595][ C0] ? do_raw_spin_lock+0x121/0x290 [ 247.399604][ C0] ? lock_acquire+0x107/0x340 [ 247.399616][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.399627][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 247.399638][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 247.399651][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 247.399660][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 247.399671][ C0] process_scheduled_works+0xad1/0x1770 [ 247.399693][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 247.399703][ C0] ? do_raw_spin_lock+0x121/0x290 [ 247.399731][ C0] worker_thread+0x8a0/0xda0 [ 247.399753][ C0] kthread+0x711/0x8a0 [ 247.399768][ C0] ? __pfx_worker_thread+0x10/0x10 [ 247.399778][ C0] ? __pfx_kthread+0x10/0x10 [ 247.399789][ C0] ? rt_spin_unlock+0x150/0x200 [ 247.399803][ C0] ? rt_spin_unlock+0x161/0x200 [ 247.399814][ C0] ? __pfx_kthread+0x10/0x10 [ 247.399827][ C0] ret_from_fork+0x510/0xa50 [ 247.399839][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 247.399848][ C0] ? __switch_to+0xc9e/0x1480 [ 247.399863][ C0] ? __pfx_kthread+0x10/0x10 [ 247.399876][ C0] ret_from_fork_asm+0x1a/0x30 [ 247.399897][ C0] [ 247.399901][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 2973 jiffies! g11433 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 247.399912][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=10973 [ 247.399917][ C0] rcu: rcu_preempt kthread starved for 2974 jiffies! g11433 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 247.399927][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 247.399932][ C0] rcu: RCU grace-period kthread stack dump: [ 247.399935][ C0] task:rcu_preempt state:I stack:27808 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 247.399962][ C0] Call Trace: [ 247.399965][ C0] [ 247.399970][ C0] __schedule+0x145f/0x5070 [ 247.399997][ C0] ? __pfx___schedule+0x10/0x10 [ 247.400015][ C0] ? schedule+0x91/0x360 [ 247.400029][ C0] schedule+0x165/0x360 [ 247.400044][ C0] schedule_timeout+0x12b/0x270 [ 247.400058][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 247.400072][ C0] ? __pfx_process_timeout+0x10/0x10 [ 247.400085][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 247.400094][ C0] ? prepare_to_swait_event+0x341/0x380 [ 247.400108][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 247.400127][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 247.400141][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 247.400152][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 247.400164][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.400175][ C0] rcu_gp_kthread+0x99/0x390 [ 247.400189][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 247.400202][ C0] ? __kthread_parkme+0x7b/0x200 [ 247.400213][ C0] ? __kthread_parkme+0x1a1/0x200 [ 247.400227][ C0] kthread+0x711/0x8a0 [ 247.400240][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 247.400253][ C0] ? __pfx_kthread+0x10/0x10 [ 247.400264][ C0] ? rt_spin_unlock+0x150/0x200 [ 247.400278][ C0] ? rt_spin_unlock+0x161/0x200 [ 247.400289][ C0] ? __pfx_kthread+0x10/0x10 [ 247.400301][ C0] ret_from_fork+0x510/0xa50 [ 247.400312][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 247.400321][ C0] ? __switch_to+0xc9e/0x1480 [ 247.400336][ C0] ? __pfx_kthread+0x10/0x10 [ 247.400349][ C0] ret_from_fork_asm+0x1a/0x30 [ 247.400369][ C0] [ 247.400372][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 247.400378][ C0] Sending NMI from CPU 0 to CPUs 1: [ 247.400416][ C1] NMI backtrace for cpu 1 [ 247.400450][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 247.400499][ C1] Tainted: [L]=SOFTLOCKUP [ 247.400512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.400531][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 247.400553][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 97 16 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 247.400566][ C1] RSP: 0018:ffffc900001d7e20 EFLAGS: 000002c2 [ 247.400579][ C1] RAX: 00000000001472b9 RBX: ffffffff8195d83e RCX: 0000000080000001 [ 247.400590][ C1] RDX: 0000000000000001 RSI: ffffffff8ce0c91b RDI: ffffffff8b3f5a60 [ 247.400601][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8933c5b R09: 1ffff1101712678b [ 247.400613][ C1] R10: dffffc0000000000 R11: ffffed101712678c R12: ffffffff8edb3670 [ 247.400624][ C1] R13: 1ffff11003758b58 R14: 0000000000000001 R15: 0000000000000001 [ 247.400635][ C1] FS: 0000000000000000(0000) GS:ffff888126dee000(0000) knlGS:0000000000000000 [ 247.400648][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.400659][ C1] CR2: 00007f29386eff05 CR3: 0000000039eaa000 CR4: 00000000003526f0 [ 247.400673][ C1] Call Trace: [ 247.400679][ C1] [ 247.400685][ C1] default_idle+0x13/0x20 [ 247.400701][ C1] default_idle_call+0x73/0xb0 [ 247.400719][ C1] do_idle+0x1be/0x4d0 [ 247.400733][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 247.400750][ C1] ? __pfx_do_idle+0x10/0x10 [ 247.400769][ C1] cpu_startup_entry+0x44/0x60 [ 247.400783][ C1] start_secondary+0x101/0x110 [ 247.400799][ C1] common_startup_64+0x13e/0x147 [ 247.400825][ C1] [ 255.775503][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.775570][ T1317] ieee802154 phy1 wpan1: encryption failed: -22