last executing test programs: 13.302008135s ago: executing program 3 (id=4): r0 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x7ef, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x56}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400296, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x955, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x4000, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93c], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 12.420904811s ago: executing program 2 (id=3): r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141103) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 11.440833033s ago: executing program 2 (id=7): open$dir(0x0, 0x0, 0x0) mlock2(&(0x7f0000883000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'ipvlan1\x00', {0x2, 0x4e24, @broadcast}}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7c2) syz_emit_ethernet(0x4b, &(0x7f0000000400)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000"]) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) 10.486979125s ago: executing program 4 (id=9): openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000004b40)={0x7, 0x8, 0xfa00, {r10, 0xffff}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r10, 0x0, 0x1, 0x4}}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) 9.742152277s ago: executing program 3 (id=11): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102400, 0x19000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$9p_tcp(0x0, &(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002040), 0x1220040, &(0x7f0000002140)=ANY=[@ANYBLOB="74f9c5679859c05342ffb75acf72616e733d7463702c706f72743d3078303030303030303030303030346532322c63616368653d667363616368062c6163636573733d757365722c76657273696f6e3d3970323030302c6e6f6465766d61702c6d73697a653d3078303030303030303030303030303030362c61756469742c646f6e745f306561737572652c66756e633d4b455845435f4b45524e454c5f434845434b2c6d6561737572652c6d6561737572652c6f626a5f747970653d5d2c686173682c00"]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000002080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x5, @empty, 0x2}]}}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf2516000000050002000000000005000200000000000500000000bd3800050003"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20000084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.320638178s ago: executing program 2 (id=12): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 9.301597205s ago: executing program 4 (id=13): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x112, 0x4, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$khugepaged_scan(r3, &(0x7f0000000080), 0x8) write$khugepaged_scan(r3, &(0x7f00000000c0), 0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x6, 0x4, 0x0, 0x40910, 0x1, 0xfffffff8, '\x00', 0x0, r7, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) 9.099592697s ago: executing program 1 (id=14): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004002000040000000300000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shmctl$IPC_RMID(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1403, 0x400, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x40, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x40, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.976672569s ago: executing program 0 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r3, 0x1, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 8.413962217s ago: executing program 0 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x86f04a359639778f}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x20040054) 8.369561992s ago: executing program 2 (id=17): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 8.333775365s ago: executing program 4 (id=18): open$dir(0x0, 0x0, 0x0) mlock2(&(0x7f0000883000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'ipvlan1\x00', {0x2, 0x4e24, @broadcast}}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7c2) syz_emit_ethernet(0x4b, &(0x7f0000000400)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000003"]) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) 8.249225457s ago: executing program 3 (id=19): r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141103) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 8.116595486s ago: executing program 1 (id=20): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='attr/sockcreate\x00') read$FUSE(r2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) syz_io_uring_setup(0x239, &(0x7f0000001800)={0x0, 0x43e2, 0x40, 0x3, 0xf2, 0x0, r2}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x74}, 0x1, 0x0, 0x0, 0x440400c4}, 0x8000) umount2(&(0x7f0000000340)='./file1\x00', 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) 7.291082379s ago: executing program 0 (id=21): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x20, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3c6, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x25, 0xb, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x200000, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x300000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x80000001) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103502) 7.21090514s ago: executing program 2 (id=22): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x0, 0x77f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x40001) read$dsp(r4, &(0x7f0000000000)=""/40, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x0, @private0}]}, &(0x7f0000000000)=0xc) timer_create(0x9, 0x0, &(0x7f0000000700)=0x0) timer_gettime(r7, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000a40)={r6, 0x400, 0x30, 0x100000000, 0xffffffffffffffff}, &(0x7f0000000a80)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 7.13013307s ago: executing program 3 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x28af, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_readahead}, {@cache_fscache}], [{@euid_eq}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 5.848632549s ago: executing program 0 (id=24): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004002000040000000300000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shmctl$IPC_RMID(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1403, 0x400, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x40, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x40, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.582768376s ago: executing program 3 (id=25): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x28af, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_readahead}, {@cache_fscache}], [{@euid_eq}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 5.566318182s ago: executing program 1 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x3ff, 0x400}, 0xa5, 0x2, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xc, 0xa}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 5.496121654s ago: executing program 4 (id=27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) shutdown(r0, 0x1) 4.690191036s ago: executing program 1 (id=28): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000140)={0x1e, "ff7ff8ff290000b6adc50000000000000000000000000000000000000000000010"}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80, 0x0, 0x1}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, 0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="961d69c2a341e825827456e55564997c98a7ba9ff75f4844f569861b9e4c36924b1e37c91aa8866666091095045c20fc2cf3d492be6c82d168faf93faa77caef432758c20ba29686aa71ce14903ec1ceb39b7a46e11e7c747af4938cf1412c6054c984981abbe3049b7387", 0x6b) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 4.519498413s ago: executing program 4 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x28af, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_readahead}, {@cache_fscache}], [{@euid_eq}]}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 4.422320102s ago: executing program 0 (id=30): socket(0x9, 0x80000, 0x1ffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x19) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4c010000100001000000000000000000ac1414aa0000000000000000000000007f0000010000000000000000000000004e22000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010101000000000000000000000000000000206c000000fe800000000000000000000000703dbb645fd8749a000000000000000000000003000000000000000100000000000008cb02000000000000060000000000000000000000000004000000000000000000b2000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000080000000000020000002b69582cf55c7dbe480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000003627aeb6786e384c9948020000000000000000000000000000000000000000000014000e00fc0100"/267], 0x14c}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f000008c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00009ed000/0x3000)=nil, &(0x7f000010d000/0x3000)=nil, &(0x7f0000776000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000198000/0x4000)=nil, &(0x7f00000002c0)="b2402716dffb6f60ef1a0fcbe347c00e6c324b5280da19b84bed5f67f7e2edab59524b7284a178060db608fc3e4af859fb71b91c1b2100025e9051c070f3d09e29f9db87a8a1b56c59c66f6e16202ee4f5d584bb384a3640a2097d9e2728a336df76a44fff82038f24cfa3b1f79f9f65eb12dbddf1a527f90dc0707bbde50b59c9d178b47b9bb85019f3f3e7f954", 0x8e, r0}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.832757202s ago: executing program 0 (id=31): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x9, 0x4, 0x10, 0xff, {}, {0x4, 0xc, 0x3, 0x1, 0x9, 0xeb, "fa7e9a70"}, 0x1, 0x1, {&(0x7f0000000080)=[{0x1, 0xf0, {0x7ff}, 0x1}, {0x6, 0x0, {0x100}, 0x7}]}, 0x1}) 2.720441923s ago: executing program 3 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000008072003303000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001000000080001000100000005000100000000000800010001000000080001000000000008000100010000000800010000000000"], 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) creat(0x0, 0x80) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x80, 0x20, 0x14, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xfffffffe}]}, 0x24}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_delroute={0x28, 0x19, 0x800, 0x70bd28, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x6, 0xff, 0x4, 0x0, 0x7, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0xe81f, 0x4, 0x81}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8810) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002c00010026bd9300fcdbdf250400000008000c80"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_emit_ethernet(0x141, &(0x7f00000008c0)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x1d, 0x4, 0x3, 0x3f, 0x133, 0x65, 0x0, 0xde, 0x6, 0x0, @remote, @multicast1, {[@generic={0x86, 0x4, "7603"}, @timestamp={0x44, 0x28, 0x19, 0x0, 0x2, [0x1ff, 0x3, 0x6, 0x40, 0x7, 0x6, 0x4, 0x7, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x22, 0x3, 0x3, [{@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0xdfef}, {@local, 0x4}, {@loopback, 0xa}, {@private=0xa010101, 0x101}]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8778f3dbed39d4ff, 0x3, 0x0, 0x1, {[@md5sig={0x13, 0x12, "25cd5e87bf66956204d4ce3b45cd21e9"}]}}, {"eb2ede530163998bbfd192dd439219b1d0b37a49815ec1905ff068014395bf0dcf7d91206804bb87c99d5a5b84a4eca86bceded6815b21478c18377cb632dab53969078603509a0a5222b33a9e441e04707d1d674b6f7c11490e84d8f2273dc0d3f7b9ac749a27b00aba706a383efa37073e955a2a8eab50c78f7f83ed3fe1c1215750e0eef965dbe55fc81cbb5ada8be4185451fe7714"}}}}}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2808c0) 2.677991228s ago: executing program 1 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1.885056171s ago: executing program 4 (id=34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 0s ago: executing program 1 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000008072003303000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001000000080001000100000005000100000000000800010001000000080001000000000008000100010000000800010000000000"], 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x80) modify_ldt$write(0x1, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x80, 0x20, 0x14, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xfffffffe}]}, 0x24}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_delroute={0x28, 0x19, 0x800, 0x70bd28, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x6, 0xff, 0x4, 0x0, 0x7, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0xe81f, 0x4, 0x81}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8810) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000000000000000008004500002c000000000011907800000018e000000100004e2000189078040000000000000000000000000000003f9eff9a23707319514787ff10787db9c2f32eeaacf15657b4bfa82a6e2f8a1e3faf8b9a47aef702faf86061f5a356d6536cb187fda2f009902e5d70b0f92cf0f228a17fad674f69104813b492c9ca844a8574b4e254e8c555f6f5ea80536862f5b07b3524ab84811c109bd08948201928e68c33a9a6cde96be4374787ce8e5507373b25ae7c0bb5004784bd892f140b430fed590fb5c65a8894204f391a0258bc9f321461324f453b5cee04b0a30245c8b2f814169bdc804900614c98342b040f1210b439bfa03ad8c7b8f554d0d8aa0733354c927752acb66b8dc95857e92e593edca6ea660efa4f048d2919ec105e5c0389d5314cb00d02294d113dd4bc43b27cfe36ccefb1de9933f8ca57ddb2254b53b2e5b9cfc73a97190a6b923ac81ee760b218fafb1eefc0913a4b76ca5f14dc77804a2885e4299266e6c7b0d1e56f8e4ee2b0e16c5716bf627cfc0f16eb746327d0e18da17f10880861927f8687ea65f099a21cebcbb2e975fc75a53616c3a736e021bffab79ae7e9336a29257da3a8e2df79c93748ab4785ae713d87d1a6f6dde80647da"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002c00010026bd9300fcdbdf250400000008000c80"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_emit_ethernet(0x141, &(0x7f00000008c0)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x1d, 0x4, 0x3, 0x3f, 0x133, 0x65, 0x0, 0xde, 0x6, 0x0, @remote, @multicast1, {[@generic={0x86, 0x4, "7603"}, @timestamp={0x44, 0x28, 0x19, 0x0, 0x2, [0x1ff, 0x3, 0x6, 0x40, 0x7, 0x6, 0x4, 0x7, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x22, 0x3, 0x3, [{@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0xdfef}, {@local, 0x4}, {@loopback, 0xa}, {@private=0xa010101, 0x101}]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8778f3dbed39d4ff, 0x3, 0x0, 0x1, {[@md5sig={0x13, 0x12, "25cd5e87bf66956204d4ce3b45cd21e9"}]}}, {"eb2ede530163998bbfd192dd439219b1d0b37a49815ec1905ff068014395bf0dcf7d91206804bb87c99d5a5b84a4eca86bceded6815b21478c18377cb632dab53969078603509a0a5222b33a9e441e04707d1d674b6f7c11490e84d8f2273dc0d3f7b9ac749a27b00aba706a383efa37073e955a2a8eab50c78f7f83ed3fe1c1215750e0eef965dbe55fc81cbb5ada8be4185451fe7714"}}}}}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2808c0) kernel console output (not intermixed with test programs): [ 41.323861][ T30] audit: type=1400 audit(1741784720.128:85): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.346281][ T30] audit: type=1400 audit(1741784720.128:86): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.368919][ T30] audit: type=1400 audit(1741784720.128:87): avc: denied { getattr } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 47.842206][ T30] audit: type=1400 audit(1741784726.638:88): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.845758][ T5808] cgroup: Unknown subsys name 'net' [ 47.864977][ T30] audit: type=1400 audit(1741784726.648:89): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.892350][ T30] audit: type=1400 audit(1741784726.668:90): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.056080][ T5808] cgroup: Unknown subsys name 'cpuset' [ 48.063546][ T5808] cgroup: Unknown subsys name 'rlimit' [ 48.165386][ T30] audit: type=1400 audit(1741784726.968:91): avc: denied { setattr } for pid=5808 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.197901][ T30] audit: type=1400 audit(1741784726.968:92): avc: denied { create } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.218747][ T30] audit: type=1400 audit(1741784726.968:93): avc: denied { write } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.239213][ T30] audit: type=1400 audit(1741784726.968:94): avc: denied { read } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.258893][ T5811] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 48.259506][ T30] audit: type=1400 audit(1741784726.988:95): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.292914][ T30] audit: type=1400 audit(1741784726.988:96): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 48.316740][ T30] audit: type=1400 audit(1741784726.998:97): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.128002][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.996701][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.014312][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.023425][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.033450][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.044185][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.053302][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.128345][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.136876][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.146540][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.174613][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.182242][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.206219][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.214187][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.214451][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.228765][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.236271][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.243860][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.249874][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.258850][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.266607][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.274091][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.274753][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.281842][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.300993][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.309838][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.320871][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.328787][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.336231][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.344933][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.352173][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.411029][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 51.523844][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.531149][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.538573][ T5818] bridge_slave_0: entered allmulticast mode [ 51.544997][ T5818] bridge_slave_0: entered promiscuous mode [ 51.554784][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.562043][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.569367][ T5818] bridge_slave_1: entered allmulticast mode [ 51.575929][ T5818] bridge_slave_1: entered promiscuous mode [ 51.618042][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.639298][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.689146][ T5818] team0: Port device team_slave_0 added [ 51.696191][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 51.710431][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 51.720389][ T5818] team0: Port device team_slave_1 added [ 51.755288][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 51.776761][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.784615][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.810835][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.837248][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.845454][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.871643][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.925840][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.933894][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.940979][ T5823] bridge_slave_0: entered allmulticast mode [ 51.949406][ T5823] bridge_slave_0: entered promiscuous mode [ 51.967048][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.974926][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.981991][ T5823] bridge_slave_1: entered allmulticast mode [ 51.988550][ T5823] bridge_slave_1: entered promiscuous mode [ 52.026826][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 52.038263][ T5818] hsr_slave_0: entered promiscuous mode [ 52.044283][ T5818] hsr_slave_1: entered promiscuous mode [ 52.057603][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.064737][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.071819][ T5828] bridge_slave_0: entered allmulticast mode [ 52.079931][ T5828] bridge_slave_0: entered promiscuous mode [ 52.086721][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.093863][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.100936][ T5821] bridge_slave_0: entered allmulticast mode [ 52.107455][ T5821] bridge_slave_0: entered promiscuous mode [ 52.114990][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.125803][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.138474][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.145696][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.152777][ T5828] bridge_slave_1: entered allmulticast mode [ 52.159249][ T5828] bridge_slave_1: entered promiscuous mode [ 52.165573][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.172618][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.180058][ T5821] bridge_slave_1: entered allmulticast mode [ 52.186513][ T5821] bridge_slave_1: entered promiscuous mode [ 52.208663][ T5823] team0: Port device team_slave_0 added [ 52.234705][ T5823] team0: Port device team_slave_1 added [ 52.262276][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.273952][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.285519][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.296604][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.330906][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.338861][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.364850][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.399590][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.406754][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.432874][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.449686][ T5828] team0: Port device team_slave_0 added [ 52.457149][ T5821] team0: Port device team_slave_0 added [ 52.485043][ T5828] team0: Port device team_slave_1 added [ 52.491796][ T5821] team0: Port device team_slave_1 added [ 52.498919][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.506181][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.513364][ T5826] bridge_slave_0: entered allmulticast mode [ 52.519703][ T5826] bridge_slave_0: entered promiscuous mode [ 52.538059][ T5823] hsr_slave_0: entered promiscuous mode [ 52.544156][ T5823] hsr_slave_1: entered promiscuous mode [ 52.550068][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.557916][ T5823] Cannot create hsr debugfs directory [ 52.574056][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.581150][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.588779][ T5826] bridge_slave_1: entered allmulticast mode [ 52.595283][ T5826] bridge_slave_1: entered promiscuous mode [ 52.626709][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.633867][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.659852][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.690743][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.699283][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.726093][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.737562][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.744742][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.770866][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.782623][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.790087][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.816401][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.829330][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.855567][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.914706][ T5826] team0: Port device team_slave_0 added [ 52.930760][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.941787][ T5821] hsr_slave_0: entered promiscuous mode [ 52.948326][ T5821] hsr_slave_1: entered promiscuous mode [ 52.954455][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.962133][ T5821] Cannot create hsr debugfs directory [ 52.971442][ T5826] team0: Port device team_slave_1 added [ 52.979187][ T5828] hsr_slave_0: entered promiscuous mode [ 52.985520][ T5828] hsr_slave_1: entered promiscuous mode [ 52.991236][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.998972][ T5828] Cannot create hsr debugfs directory [ 53.005189][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.013933][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.039276][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.056913][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.064039][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.090290][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.116448][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.123598][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.150184][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.151537][ T5825] Bluetooth: hci0: command tx timeout [ 53.199234][ T5826] hsr_slave_0: entered promiscuous mode [ 53.205772][ T5826] hsr_slave_1: entered promiscuous mode [ 53.211528][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.219360][ T5826] Cannot create hsr debugfs directory [ 53.294196][ T5825] Bluetooth: hci2: command tx timeout [ 53.342128][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.350933][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.361284][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.370284][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.383707][ T5820] Bluetooth: hci1: command tx timeout [ 53.389344][ T5825] Bluetooth: hci4: command tx timeout [ 53.427246][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.442206][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.453489][ T5825] Bluetooth: hci3: command tx timeout [ 53.461126][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.478069][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.509509][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.554819][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.566563][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.579595][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.589157][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.602412][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.626331][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.633470][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.661117][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.668215][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.689651][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.700341][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.709087][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.726513][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.751673][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.797314][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.810936][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.839336][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.847729][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.854853][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.867339][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 53.867350][ T30] audit: type=1400 audit(1741784732.648:111): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.909529][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.921354][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.939452][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.948066][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.955163][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.976500][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.010338][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.017472][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.059503][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.072559][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.079679][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.119690][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.126790][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.135795][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.142833][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.169017][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.181502][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.200270][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.238194][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.269372][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.276480][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.294452][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.304525][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.311572][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.408922][ T5818] veth0_vlan: entered promiscuous mode [ 54.430522][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.461401][ T5823] veth0_vlan: entered promiscuous mode [ 54.480054][ T5818] veth1_vlan: entered promiscuous mode [ 54.510903][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.526185][ T5823] veth1_vlan: entered promiscuous mode [ 54.546590][ T5821] veth0_vlan: entered promiscuous mode [ 54.558081][ T5818] veth0_macvtap: entered promiscuous mode [ 54.597329][ T5818] veth1_macvtap: entered promiscuous mode [ 54.624432][ T5821] veth1_vlan: entered promiscuous mode [ 54.656246][ T5823] veth0_macvtap: entered promiscuous mode [ 54.680098][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.694075][ T5821] veth0_macvtap: entered promiscuous mode [ 54.702830][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.719630][ T5823] veth1_macvtap: entered promiscuous mode [ 54.730617][ T5821] veth1_macvtap: entered promiscuous mode [ 54.743785][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.752649][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.772023][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.781419][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.802655][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.817868][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.828976][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.841229][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.850288][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.860926][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.871454][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.879226][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.889820][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.900062][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.910844][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.921426][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.930405][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.941056][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.951132][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.963265][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.974878][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.994797][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.003843][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.012546][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.022320][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.047405][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.057822][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.066787][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.075818][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.106787][ T5826] veth0_vlan: entered promiscuous mode [ 55.149486][ T5826] veth1_vlan: entered promiscuous mode [ 55.168519][ T5828] veth0_vlan: entered promiscuous mode [ 55.189122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.202836][ T5828] veth1_vlan: entered promiscuous mode [ 55.207219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.218740][ T5826] veth0_macvtap: entered promiscuous mode [ 55.223572][ T5825] Bluetooth: hci0: command tx timeout [ 55.237654][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.249904][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.267460][ T5826] veth1_macvtap: entered promiscuous mode [ 55.292599][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.307820][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.317682][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.328225][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.338037][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.349027][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.360149][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.370061][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.380834][ T5825] Bluetooth: hci2: command tx timeout [ 55.385118][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.396936][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.407393][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.417501][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.428038][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.438763][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.447348][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.453444][ T5825] Bluetooth: hci4: command tx timeout [ 55.460539][ T5825] Bluetooth: hci1: command tx timeout [ 55.463564][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.486055][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.494949][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.504560][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.513588][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.524196][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.532142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.537748][ T5828] veth0_macvtap: entered promiscuous mode [ 55.543206][ T5825] Bluetooth: hci3: command tx timeout [ 55.564818][ T5828] veth1_macvtap: entered promiscuous mode [ 55.576689][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.584015][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.596222][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.603342][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.607019][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.624514][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.635606][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.646289][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.656191][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.666636][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.677300][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.698737][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.713104][ T30] audit: type=1400 audit(1741784734.518:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.wQCvW5/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 55.728753][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.738188][ T30] audit: type=1400 audit(1741784734.518:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.748621][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.776651][ T30] audit: type=1400 audit(1741784734.518:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.wQCvW5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.780487][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.806130][ T30] audit: type=1400 audit(1741784734.518:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.836727][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.836746][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.836757][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.836768][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.841241][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.890327][ T30] audit: type=1400 audit(1741784734.518:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.wQCvW5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.895725][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.930652][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.932325][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.943005][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.955227][ T30] audit: type=1400 audit(1741784734.518:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.wQCvW5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.967070][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.999640][ T30] audit: type=1400 audit(1741784734.518:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.025503][ T30] audit: type=1400 audit(1741784734.638:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.048789][ T30] audit: type=1400 audit(1741784734.638:120): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=7280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.149529][ T374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.167627][ T374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.354978][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.438421][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.635115][ T386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.642976][ T5905] tc_dump_action: action bad kind [ 56.666189][ T386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.736400][ T374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.755781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.755966][ T5906] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 56.776132][ T374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.869142][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.923441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.931953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 57.060114][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.118547][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 57.385941][ T5825] Bluetooth: hci0: command tx timeout [ 57.503915][ T5825] Bluetooth: hci2: command tx timeout [ 57.533526][ T5825] Bluetooth: hci1: command tx timeout [ 57.534361][ T5820] Bluetooth: hci4: command tx timeout [ 57.613534][ T5820] Bluetooth: hci3: command tx timeout [ 57.660384][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 57.669284][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 58.013604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.025887][ T5912] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.068389][ T5912] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 58.825601][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 58.871756][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 58.879261][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 58.879273][ T30] audit: type=1400 audit(1741784737.688:162): avc: denied { ioctl } for pid=5925 comm="syz.2.7" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.909593][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.040217][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 59.402889][ T30] audit: type=1400 audit(1741784737.858:163): avc: denied { map_create } for pid=5933 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.421718][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.441582][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 59.443605][ T5935] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 59.457230][ T30] audit: type=1400 audit(1741784737.958:164): avc: denied { ioctl } for pid=5925 comm="syz.2.7" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.482015][ T5820] Bluetooth: hci0: command tx timeout [ 59.488408][ T30] audit: type=1400 audit(1741784738.228:165): avc: denied { write } for pid=5933 comm="syz.4.9" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.522347][ T30] audit: type=1400 audit(1741784738.318:166): avc: denied { create } for pid=5932 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.560706][ T5935] syz.1.8 (5935) used greatest stack depth: 19952 bytes left [ 59.614734][ T5820] Bluetooth: hci4: command tx timeout [ 59.620274][ T5825] Bluetooth: hci2: command tx timeout [ 59.620333][ T54] Bluetooth: hci1: command tx timeout [ 59.633614][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 59.693586][ T5820] Bluetooth: hci3: command tx timeout [ 59.696585][ T5939] wlan0 speed is unknown, defaulting to 1000 [ 59.808126][ T5940] netlink: 'syz.1.10': attribute type 8 has an invalid length. [ 59.836052][ T30] audit: type=1400 audit(1741784738.638:167): avc: denied { create } for pid=5941 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.880468][ T30] audit: type=1400 audit(1741784738.658:168): avc: denied { create } for pid=5941 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.900975][ T30] audit: type=1400 audit(1741784738.658:169): avc: denied { setopt } for pid=5941 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.920190][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.942374][ T30] audit: type=1400 audit(1741784738.718:170): avc: denied { read } for pid=5941 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.973604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.315388][ T30] audit: type=1400 audit(1741784739.118:171): avc: denied { create } for pid=5946 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.402225][ T5950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 60.523867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.573832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.583552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.591811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.600154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.007063][ T5909] IPVS: starting estimator thread 0... [ 61.099610][ T5942] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 61.104164][ T5961] IPVS: using max 34 ests per chain, 81600 per kthread [ 63.414748][ T5998] veth0_vlan: entered allmulticast mode [ 63.483816][ T5998] veth0_vlan: left promiscuous mode [ 63.493119][ T5998] veth0_vlan: entered promiscuous mode [ 64.333832][ T6006] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 64.346283][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 64.346298][ T30] audit: type=1400 audit(1741784743.148:189): avc: denied { ioctl } for pid=6005 comm="syz.1.26" path="socket:[7791]" dev="sockfs" ino=7791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.012050][ T30] audit: type=1400 audit(1741784743.218:190): avc: denied { name_bind } for pid=6010 comm="syz.4.27" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.158781][ T30] audit: type=1400 audit(1741784743.958:191): avc: denied { create } for pid=6016 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.425221][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 66.630667][ T30] audit: type=1400 audit(1741784744.228:192): avc: denied { write } for pid=6016 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.738953][ T30] audit: type=1400 audit(1741784744.228:193): avc: denied { nlmsg_write } for pid=6016 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.914673][ T6030] veth0_vlan: entered allmulticast mode [ 66.976723][ T6030] veth0_vlan: left promiscuous mode [ 66.985587][ T6030] veth0_vlan: entered promiscuous mode [ 67.499951][ T30] audit: type=1400 audit(1741784744.248:194): avc: denied { create } for pid=6016 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.576018][ T30] audit: type=1400 audit(1741784744.248:195): avc: denied { connect } for pid=6016 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.597323][ T30] audit: type=1400 audit(1741784744.638:196): avc: denied { setopt } for pid=6016 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.132828][ T2] sched: DL replenish lagged too much [ 73.645179][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.657240][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 174.334038][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.467616][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.057802][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 176.067887][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 176.124777][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 176.135236][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 176.197307][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 176.803102][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 176.810086][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6034/1:b..l [ 176.818316][ C0] rcu: (detected by 0, t=10503 jiffies, g=6513, q=950881 ncpus=2) [ 176.826211][ C0] task:syz.3.32 state:R running task stack:28048 pid:6034 tgid:6033 ppid:5821 task_flags:0x400040 flags:0x00004002 [ 176.840441][ C0] Call Trace: [ 176.843729][ C0] [ 176.846663][ C0] __schedule+0xf43/0x5890 [ 176.851092][ C0] ? __pfx_mark_lock+0x10/0x10 [ 176.855876][ C0] ? __pfx___schedule+0x10/0x10 [ 176.860730][ C0] ? __pfx_mark_lock+0x10/0x10 [ 176.865505][ C0] ? mark_held_locks+0x9f/0xe0 [ 176.870277][ C0] preempt_schedule_irq+0x51/0x90 [ 176.875307][ C0] irqentry_exit+0x36/0x90 [ 176.879724][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.885709][ C0] RIP: 0010:in_gate_area_no_mm+0xe/0x70 [ 176.891259][ C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 54 45 31 e4 55 53 48 89 fb 3d fc 8d 00 8b 2d 0f cc 7e 0c bf 02 00 00 00 89 ee e8 2b f7 8d [ 176.910874][ C0] RSP: 0018:ffffc90004a9f800 EFLAGS: 00000246 [ 176.916946][ C0] RAX: dffffc0000000000 RBX: 00007f475a58d169 RCX: 0000000000000000 [ 176.924918][ C0] RDX: 1ffff92000953f15 RSI: 0000000000000006 RDI: 00007f475a58d169 [ 176.932888][ C0] RBP: ffffc90004a9f8a8 R08: ffffffff90ef627c R09: ffffffff90ef61ba [ 176.940857][ C0] R10: ffffc90004a9f860 R11: 0000000000000001 R12: 0000000000000000 [ 176.948828][ C0] R13: ffffc90004a9f920 R14: 0000000000000000 R15: ffff888036e20000 [ 176.956816][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 176.962976][ C0] kernel_text_address+0x35/0x100 [ 176.968009][ C0] __kernel_text_address+0xd/0x40 [ 176.973034][ C0] unwind_get_return_address+0x59/0xa0 [ 176.978499][ C0] arch_stack_walk+0xa7/0x100 [ 176.983183][ C0] stack_trace_save+0x95/0xd0 [ 176.987862][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 176.993241][ C0] save_stack+0x162/0x1f0 [ 176.997567][ C0] ? __pfx_save_stack+0x10/0x10 [ 177.002412][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 177.008049][ C0] ? free_frozen_pages+0x6db/0xfb0 [ 177.013156][ C0] ? qlist_free_all+0x4e/0x120 [ 177.017915][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 177.023545][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 177.028305][ C0] ? __kmalloc_node_noprof+0x21f/0x510 [ 177.033761][ C0] ? alloc_slab_obj_exts+0x41/0xa0 [ 177.038876][ C0] ? __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 177.044942][ C0] ? kmem_cache_alloc_noprof+0x366/0x3d0 [ 177.050573][ C0] ? alloc_empty_file+0x73/0x1e0 [ 177.055513][ C0] ? alloc_file_pseudo+0x13b/0x230 [ 177.060626][ C0] ? sock_alloc_file+0x50/0x210 [ 177.065482][ C0] ? __sys_socket+0x1c2/0x260 [ 177.070160][ C0] ? __x64_sys_socket+0x72/0xb0 [ 177.075012][ C0] ? do_syscall_64+0xcd/0x250 [ 177.079690][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.085767][ C0] __reset_page_owner+0x8d/0x400 [ 177.090710][ C0] free_frozen_pages+0x6db/0xfb0 [ 177.095652][ C0] qlist_free_all+0x4e/0x120 [ 177.100243][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 177.105701][ C0] __kasan_kmalloc+0x8a/0xb0 [ 177.110291][ C0] __kmalloc_node_noprof+0x21f/0x510 [ 177.115579][ C0] ? alloc_slab_obj_exts+0x41/0xa0 [ 177.120698][ C0] alloc_slab_obj_exts+0x41/0xa0 [ 177.125641][ C0] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 177.131549][ C0] ? kasan_save_track+0x14/0x30 [ 177.136400][ C0] kmem_cache_alloc_noprof+0x366/0x3d0 [ 177.141858][ C0] ? alloc_empty_file+0x73/0x1e0 [ 177.146800][ C0] alloc_empty_file+0x73/0x1e0 [ 177.151566][ C0] alloc_file_pseudo+0x13b/0x230 [ 177.156507][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 177.161969][ C0] ? alloc_fd+0x41f/0x760 [ 177.166306][ C0] sock_alloc_file+0x50/0x210 [ 177.170991][ C0] __sys_socket+0x1c2/0x260 [ 177.175494][ C0] ? __pfx___sys_socket+0x10/0x10 [ 177.180517][ C0] ? rcu_is_watching+0x12/0xc0 [ 177.185285][ C0] __x64_sys_socket+0x72/0xb0 [ 177.189961][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.195161][ C0] do_syscall_64+0xcd/0x250 [ 177.199669][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.205566][ C0] RIP: 0033:0x7f475a58d169 [ 177.209977][ C0] RSP: 002b:00007f475b358038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 177.218387][ C0] RAX: ffffffffffffffda RBX: 00007f475a7a5fa0 RCX: 00007f475a58d169 [ 177.226354][ C0] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 177.234321][ C0] RBP: 00007f475a60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.242289][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.250258][ C0] R13: 0000000000000000 R14: 00007f475a7a5fa0 R15: 00007ffc0b439b48 [ 177.258246][ C0] [ 183.835541][ T973] cfg80211: failed to load regulatory.db