last executing test programs: 14m43.661823942s ago: executing program 32 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m26.198537578s ago: executing program 33 (id=3278): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72000080000000004c312c4a0000000a0001006f776e65000000000900020073797a3200000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x4048010) (async) write$binfmt_elf64(r0, 0x0, 0x0) 5m37.847391205s ago: executing program 1 (id=3433): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m37.64660297s ago: executing program 1 (id=3436): syz_usb_connect(0x2, 0x74b, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x6d, 0x47, 0x88, 0x8, 0x13d3, 0xf84d, 0x4fad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x739, 0x3, 0x6, 0xa, 0x40, 0x0, [{{0x9, 0x4, 0x92, 0x9, 0xb, 0xff, 0x1, 0x1, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "bdb691bd3d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0xffff, 0x2}, {0x6, 0x24, 0x1a, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8}, @obex={0x5, 0x24, 0x15, 0x5}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x1, 0x3, 0x8}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x6, 0xc8, "d3867328"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x3, 0x7d, "6a2a8da22758"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x40, 0x9a}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xe, 0x7, 0x4, [@generic={0x93, 0x24, "aabf56adc9fe9bc0c2eada89516439a6c05c8d1c7aa3d94d63e358c6de4eb7f4e9bd96b06805a2b0fab5cf441f122446cc6846792d1d293d566a4d5f321a9f6aefb800ce78d12d96b39b54da1ed603a0bce08f5e9c7bee17019e0f253970f21dc9a7881574954279a117263afe40bd193af913e66e1854fff2c1969356bc3aaa4a53c1e154048cefca834e59a21128368e"}, @generic={0xc8, 0x10, "b5141a2844076bf49147393a90bb41f71b1620cab3592bf45bd95362363556854aca4549261353d741c7819feb50bda34e77d4199bd67e68b029c6513d35bb18064e0c02f21c6da3347eff6b68341a1abd1460719d7a68028c444748adc5f4a78cb4de0e37fe3d3f86560ec907653d60385b3480ae9d4565b468e25de2397e0f702b246812c50728af3780422c12b31749a6a5f657676ef1b58cdf3d380ed3dab3a2694b86ac6afe00374478d06fc40e1a91ae9735807ebca7b0cd177e0fdfd8d768cd5cee59"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6, 0xf, 0x3}}, {{0x9, 0x5, 0x80, 0x14, 0x10, 0x0, 0xdb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x8}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xbc, 0xeb, 0x4}}, {{0x9, 0x5, 0xe, 0x12, 0x10, 0xe, 0x0, 0xe}}, {{0x9, 0x5, 0x8, 0xc, 0x420, 0x61, 0x5, 0x9, [@generic={0xa, 0xb, "3cbc0590db6a3c24"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x30, 0x10}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xcf, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x50}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0x46, 0x0, [@generic={0x4f, 0x4, "edccc575831a9e075d773b78f8d7ce12b84e4d63a8b83e593cc87e03322e79c201efc77021cf5676e898b0bae73916d1f0b92945b73c3cbc2198a13ea6b4afcd6df77972d67a53e4ca9594eb15"}, @generic={0x2b, 0x22, "0180768e46b8144fed0a90e982f937681e1b3325c243a110f688d833ff66f9acead2430d4a2be1dfa6"}]}}]}}, {{0x9, 0x4, 0x90, 0xff, 0x9, 0x54, 0x9e, 0xad, 0x3, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'f'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x7ff, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x4, 0x649}, @obex={0x5, 0x24, 0x15, 0xa24}, @mbim_extended={0x8, 0x24, 0x1c, 0x961, 0x6, 0x3}]}], [{{0x9, 0x5, 0x0, 0x9, 0x10, 0x8, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x77}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7, 0x7, 0xc6}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0xab, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x4709e871dc384869, 0x40, 0x1, 0x2, 0xba}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xff, 0x13, 0x9, [@generic={0xa3, 0x2, "2c580b4fe6951ec06fd84e9f3d0035ae9f8a33b3232712cdc3b223a3c426e03aa102bf4ab986d997b393b1b2f151e826d644e80e363a335e11c471eb72b90a0631ab37954b233887f03c4433398970d1051774831d01702a53bf168ed23f507afe057bded968ce27158078c6512bd4e425ef36c50366bc8f5191cd94c460eb7fdaaf67f952af0d2e130b364dcb35ea450579e3acff4f4098499b95bcf03bf0c7f5"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5, 0x9, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x9, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xe, 0xa8, 0xa2, [@generic={0xbd, 0x11, "18f9d24ebeacebc66c0366b0176c349ff4777a5aede2fc5d7808fd83fff2b293eb773955fb519327626e53e1f4a94a22b7a9426999672f2af918917c11a761a74fbd07c5197539c85e74d647aed4cd84ac8cb7741a46f931f768fffc3f5685d6e13b7af433084d1e7ee255c662def5cc3894aa9d4540c38976f9b6951617bd6d49ec0e1cc6e4c3230c6595080b433e10c7bdc6486669090ffbcb35598b59f722cdb6a68a483322b4ce1c6d37acbeb8b3f5cb16c97a3288f4aa9aab"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xf, 0x6, 0x9, [@generic={0xf8, 0x11, "a91f0baff8815602f1b0b0ba9e1790ea3a18b20c81bebd3b43303565c1b09e266c4b68d8cc24d0f069e355a9073063c0240228330009810de3607469f505f0e381ff4928202b5463a8b9fd0c643de848332869e2f23d032d95fe3bd92873599ba85e9370e198df7bd3a8c856acae93f93836c27584af0a7c2336bf6b984158c6f5a98ca2c06636bf78e4fbc5aeb9e2e4d2129408b8b3c71ca27d7db8d48073229b3a6ba207cf21c49ff423a468ea1c4a1449a9c94195b40f16df314a6668da3363bae1c42ccbaa7221d3328463b0024ac94f943389d7929dd8e502dbcde0ee18453b67407fbed358a23fcc0f861a1945e4ed60a02e77"}]}}]}}, {{0x9, 0x4, 0x3f, 0x2, 0x5, 0xa8, 0x63, 0xf5, 0x9, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0xe, 0xa, "", "ff"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x3, 0x9, 0x2, "", "cbe5"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x7, 0x8, "63ab"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x40, "4af874a6f78603"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x883, 0x3, "cff32d8c9573f9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf6, 0x1, 0x5, 0xc, 'w', "ba3c"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x220, 0x10, 0x6, 0x6, [@generic={0x78, 0x4, "a3cb318283481c906a6411fcd07e573c2b1c45b15c93f3493e26aa7af66ce46c87770063455d88865cdfcbf4604277540b7c647e31160dd99e11baccb4217d2d64bfc26af6e055fb478a6f11c317a5af818fe6a066e856693e01e29a362c3a6891af054a525a22552e88aecd6899f0b1c63a01d7fed5"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x8, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x0, 0x8}]}}, {{0x9, 0x5, 0x89, 0xc, 0x8, 0xf8, 0x1, 0xc, [@generic={0x6b, 0x23, "711b6fa961761e7095a193c028ceabda9b4648af3b57c88fb2059f7d9fd84e7900cb106855c47d1094527053433801987c9e5632adabc663b9bf9aadb98c0e22c72d4f960295c70f2368604e003df810ca3ca4c546c3c144148cc6d75243d5790723ceb3afec0270af"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xb, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8999}]}}, {{0x9, 0x5, 0x5, 0x0, 0x50, 0x7, 0x6, 0x10}}]}}]}}]}}, &(0x7f000001b0c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x50, 0x80, 0x7, 0x10, 0x40, 0xfa}, 0x25, &(0x7f0000000400)={0x5, 0xf, 0x25, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x0, 0xf00, 0x0, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x2, 0x27}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0xa, [{0xcd, &(0x7f0000000440)=@string={0xcd, 0x3, "b0ae75c917fb904595905088754613bc9cdbfcbf280d62542ba925899655a97f01954dd52a46a3364096599ce6af1ed12b62ac92f05af15403e721e2efa763198f1cc31c13e6bf8f5dae7ee670afddf7160af1c523c18ed4ca949f5780a07df0c6e5bc2ca794f6223c79deef2aa5ccbbef5326a4dc946b92e45aa291ff89484f92ace69a7cafd201d3874dac1bd89c3359c62e4eb39d71e272618709de02aaf2af9de1a8d1dd00a6035f4c704ec59728ac15fc234010866755f9b1be5c7e40a6978704e6e4afbcc4f84d8b"}}, {0xc4, &(0x7f0000001d00)=@string={0xc4, 0x3, "6e0f8f02eed562ea3f52d5fac5c8bbcff01012261004cb6e318f1d021c3bd69e17b189d4599176a4960c2730f0b07f29c95525afcc1d1e2a8d1900db372310b044f1ed58e224abfb80d6f1063148a2286fa32280cca6b52befc4b3cb9306ade01eb0b74dc9b8de3f9b20550ec381ce9b7cb585e1bc6c591fa8adceb3c50ecde6ada8edc252afb60be682d2e9575a76a9c375f6f8e9b36fdc939766d15f68212a8f49b7671dff230daa3b72e8d2e9077cc40ce8ae308eb64c326e6fc5ec42da0be68a"}}, {0x54, &(0x7f0000001e00)=@string={0x54, 0x3, "868c207b12b81e10e01f4700c83bde8d4889dc77a25853c602a1233b49069e366c7dc7595c1890a115f94ab38b5b04de5ebfc704f9051363299b483439fb70bb2514da832d348799f86e1b9f42545a220b4e"}}, {0xb2, &(0x7f0000001e80)=@string={0xb2, 0x3, "2bdbc91a70338001169b6e2ef0cc9ba6d233e0e7062f5335b9802a1739e127725835c4b5d6985799c7bfa14618b5c3feaa5a8a167345b90e547258db48eff3649f9d11b0680d023e715a9b56f53e1fd10858c166ccb16635635d7ea6808a65e6d29d6fba663356858354afee435e034d8413f96a44c9be12d7c46d3aae7c0ee0f1cb5343778c45bedeb680cad8fd2bfb4fd04960751913aff07effff3e5909b4d9aee0de9b04714da19d0bc1cb1e43d3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x3461}}, {0x42, &(0x7f000001b000)=@string={0x42, 0x3, "7d6ccf5d128f70ab7bcad710acb4fea98f2b5e48dd6072f6808d31c19a8b47b12f3cc5cea1fa684a235996f74ce4b53d659ca360ca3d23fc2b000bf438f0dfbe"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f000001b080)=@lang_id={0x4, 0x3, 0x4001}}]}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) connect$phonet_pipe(r3, &(0x7f0000000340)={0x23, 0x1, 0x2, 0x7}, 0x10) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0}}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0xffffffff, 0xd, 0x2c9f340f, 0x7}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) r7 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) dup(r7) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4, 0x8000000000000000, 0x0, 0xfffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) keyctl$read(0xb, r1, &(0x7f0000000580)=""/4096, 0x1000) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 5m37.565587442s ago: executing program 2 (id=3439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff50, 0x8090, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0xffffffff}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) creat(0x0, 0xd4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000140)='inode_switch_wbs\x00'}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40070c0}, 0xc0098) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 5m36.265230625s ago: executing program 6 (id=3442): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x6e23, @private=0xa010102}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = io_uring_setup(0x82d, &(0x7f0000000140)={0x0, 0x9fd9, 0x800, 0x3, 0x30a}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000b40)={0x1, 0x1, 0x0, &(0x7f0000000000)=[{0x0}], 0x0}, 0x20) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prlimit64(r3, 0x5, &(0x7f0000000080)={0x8, 0x70}, &(0x7f00000000c0)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r6, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r1, &(0x7f0000000ac0), 0x0, 0x120, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) keyctl$dh_compute(0x17, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={'cbcmac-aes-neon\x00'}}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572040000000002000000000000000000000000040500000043e02498de"], &(0x7f0000000040)=0x29) 5m29.435400862s ago: executing program 6 (id=3444): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x7ff, 0x1000}}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_dev$cec(&(0x7f0000000500), 0x0, 0x400) ioctl$CEC_ADAP_G_LOG_ADDRS(r3, 0x805c6103, &(0x7f0000000540)) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e25, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='syscall\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x5, 0x4, 0x0, 0x6, 0x2}, 0x14) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000020601040000000003c0692e000000040500010006000000050005000000000014000780080012400000000008001340fffffffb"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20040810) r8 = socket$kcm(0x10, 0x7, 0x0) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000002bc0)=ANY=[@ANYBLOB="ababa4ddd2f1e88fca19aa9f6245e16357aca097234a2f4d0ec49d1e49da283e6a7fda1705911679840b2259606f87e29257d9f8737c216fbde49c634abc19dd9483aed5f764eae40830918a1829d0bc1247aa9ff07982984046345a5dfc5c3ccad4bda0bcad0e0fe85e6e06d6a40824e515622e25e9f603c61df4c4259e99986e32598d723952ab24b7a76fe818a1fdb2c037df69fdac208f7cf59c61481b740433f2e331a79e7dfe0dbdef9a0e67279a45c53362cb716e7ed4f07ea68f617d0ab404bf60107118bbe924e6009ad7cf24caf9ffa5d7b102d19959b48ca65b3b3246ad626aa30e49d9ce4bf756a900757f5e9ed1", @ANYRES32, @ANYRESDEC=r6, @ANYRES16, @ANYRESOCT, @ANYRESHEX=r8, @ANYBLOB="2273b3b324b7ee5c58ef9ff2e11339fc86e2efddfcee7d85f8d67f0cb1dd48384e17a4639bbdccd0053ba2544939b5f4bc904c9b829326218368eebdea13578368b4538aa0025a211e927f38fba92af5030179e11e08dd0df202caf63b196e4242dbd120e3a969289daa7526", @ANYRESDEC=r4, @ANYBLOB="ad7c3c38402e1167dc1a5faaa9e04010f377e3b203c98fceaa3d2c23dc97f00a291b3a81491849c09501472925b9cc305a010ad9a2722d5d1c53017ee4aa9bffecb15c3e42ea5d37af8a89579e480b90f33f27742a5117fa0c4cae509b4664be0144051e6fe58390c57dd32a5ef7713917cf161ae89b44660c8b9dd1d9984841", @ANYBLOB="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", @ANYRES16=r8, @ANYRESOCT=r3], 0xfe33) r9 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000300)={0x440, 0x3}, 0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 5m28.626232079s ago: executing program 1 (id=3446): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x426, 0x40000, 0x800000, 0x80, "a05c7b5d3cd1b0f200002000fdf700071400"}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x426, 0x40000, 0x800000, 0x80, "a05c7b5d3cd1b0f200002000fdf700071400"}) syz_open_pts(r1, 0x0) (async) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="74dcca1b6e733d66616e6f3db5e8f31f", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) io_uring_setup(0x21fe, &(0x7f0000000080)={0x0, 0x5478, 0xc42, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) openat$cgroup_devices(r8, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 5m27.037638572s ago: executing program 6 (id=3447): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m26.375578962s ago: executing program 1 (id=3448): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m25.991653341s ago: executing program 6 (id=3450): mq_unlink(&(0x7f0000000000)='eth0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480100001000130100000000000100000a01eb0100000000000000000000000000000000e9ff0500ffffffff00000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016000010"], 0x17d}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x8, 0x8031, 0xffffffffffffffff, 0x4dd4a000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b60901000000000065000c000000000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x581980, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4f524aa4aea53316) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x480010b8e) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r6, &(0x7f0000000800)='-1\x00', 0x3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c820}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m25.970088074s ago: executing program 1 (id=3451): mq_unlink(&(0x7f0000000000)='eth0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480100001000130100000000000100000a01eb0100000000000000000000000000000000e9ff0500ffffffff00000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016000010"], 0x17d}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x8, 0x8031, 0xffffffffffffffff, 0x4dd4a000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b60901000000000065000c000000000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x581980, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4f524aa4aea53316) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x480010b8e) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000800)='-1\x00', 0x3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c820}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m25.571628365s ago: executing program 4 (id=3452): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e1d, 0x4, 'sh\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010105, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0xcd, 0x3d71, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1, @local}, 0x18, {0x2, 0x1000, @dev}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000540)={0x100000, 0x4000, 0x1}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x0, 0x2) 5m23.470045743s ago: executing program 1 (id=3453): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m9.533839346s ago: executing program 34 (id=3439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff50, 0x8090, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0xffffffff}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) creat(0x0, 0xd4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000140)='inode_switch_wbs\x00'}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40070c0}, 0xc0098) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 5m1.050030431s ago: executing program 35 (id=3453): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m0.429639223s ago: executing program 36 (id=3450): mq_unlink(&(0x7f0000000000)='eth0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480100001000130100000000000100000a01eb0100000000000000000000000000000000e9ff0500ffffffff00000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016000010"], 0x17d}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x8, 0x8031, 0xffffffffffffffff, 0x4dd4a000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b60901000000000065000c000000000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x581980, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4f524aa4aea53316) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x480010b8e) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r6, &(0x7f0000000800)='-1\x00', 0x3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c820}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m0.297465987s ago: executing program 37 (id=3452): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e1d, 0x4, 'sh\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010105, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0xcd, 0x3d71, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1, @local}, 0x18, {0x2, 0x1000, @dev}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000540)={0x100000, 0x4000, 0x1}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x0, 0x2) 4m4.143291825s ago: executing program 5 (id=3460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m3.595036605s ago: executing program 5 (id=3461): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e20, @local}}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x200000000000004b, 0x1}}, 0x3c) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r8, 0x0, 0x20000023896) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r9, 0x103, 0x4, 0x0, &(0x7f0000019400)) 3m55.461271s ago: executing program 38 (id=3454): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000440)=@newtaction={0xe4, 0x30, 0x9, 0x2, 0x0, {}, [{0xd0, 0x1, [@m_bpf={0xcc, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}}, @TCA_ACT_BPF_FD={0x8}]}, {0x7f, 0x6, "ad55a502d6298e2e1bce8bd92ede24b292dedcb491326c64bb81f645ae767a45e54f17cbe26b50f4d5d3aa142b03af34342bddade28e8c143f3d78bcb410bd4062d560d5fc1ad03afb9c74fe396e5a433c8734bbadf0bfab635dfa99b760b9f7a4b8fa963019225ea180a67dd8208f584baeda3bbee5146cb7ef1d"}, {0xc}, {0xc}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x425d, 0x100, 0x1, 0x2e5}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 3m55.008701025s ago: executing program 5 (id=3464): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 3m47.542442294s ago: executing program 5 (id=3466): socket(0x2a, 0x2, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m46.999615538s ago: executing program 5 (id=3469): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)}, 0x1}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000340), &(0x7f0000000380)=ANY=[@ANYBLOB="00fb3e00063dead751211f24a84a42160087f7222e691b722db087a1be672c0e433bb6d6c5bcfdcc9c4963bde9110538053378f7d3e33700"], 0x3e, 0x2) r3 = memfd_create(&(0x7f00000009c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x80\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x04\xc6\x9a\xa0R\xa0F\xcc\xd0\x8b2Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4g1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0*=,\xf8<\xea\xb5b\xa3\xcfm\x8a\xef\x13\xb0\x85\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8fY\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7', 0x1) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x2000, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200000000ff00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000af9c1d95b59ceb13"], 0x48}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000008c0)=""/234, 0xea) accept$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f0000002080)=0x64, 0x23b) 3m43.649538782s ago: executing program 5 (id=3476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r8 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0xc3d35000) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 3m27.270122521s ago: executing program 39 (id=3476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r8 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0xc3d35000) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 3m3.155514059s ago: executing program 8 (id=3493): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x40000005, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x800, 0x7) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a962, 0x2, 0x201, 0x7fff, 0x48cd, 0xfffffffffffffffc, 0x80000001}) 2m56.536167887s ago: executing program 8 (id=3495): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 2m51.039061592s ago: executing program 8 (id=3496): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m48.866566901s ago: executing program 8 (id=3498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x1001f) 2m46.037793302s ago: executing program 8 (id=3500): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m44.963713598s ago: executing program 8 (id=3501): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000000000001f"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000910) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x3, 0x2) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x8, 0x800) kexec_load(0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mq_open(0x0, 0x840, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8, @empty, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002905000034"], 0x18}}], 0x1, 0x24044051) 2m29.859383664s ago: executing program 40 (id=3501): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000000000001f"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000910) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x3, 0x2) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x8, 0x800) kexec_load(0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mq_open(0x0, 0x840, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8, @empty, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002905000034"], 0x18}}], 0x1, 0x24044051) 2m29.854165735s ago: executing program 0 (id=3512): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m27.917401386s ago: executing program 0 (id=3513): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x1000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x7a00, 0x0, 0x4000081}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x8, 0x6, {{0x21, 0x4, 0x1, 0x17, 0x84, 0x64, 0x0, 0x2, 0x2f, 0x0, @local, @loopback, {[@end, @ssrr={0x89, 0x2b, 0x18, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x2, 0xf, "908cb5a08ceba0fb48d01dd640"}, {0x5, 0x8, "b47e6240701f"}, {0x7, 0x8, "bd1d1d353b67"}, {0x7, 0xc, "937cc7869237685fa7f0"}]}, @timestamp={0x44, 0x8, 0x37, 0x0, 0x3, [0xb44b]}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@ptr={0x1, 0x0, 0x0, 0x2, 0xffffffff}, @enum64={0xd, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x9, 0x1, 0x89}, {0x5, 0x100, 0xff}]}, @enum64={0x5, 0x6, 0x0, 0x13, 0x0, 0x0, [{0xf, 0x5, 0x5}, {0xe, 0x7, 0x8}, {0xa, 0x1, 0xffff}, {0xc, 0x9, 0x2ce}, {0xe, 0x5aed3928, 0x2}, {0xf, 0x1, 0xfffffff7}]}, @var={0x7, 0x0, 0x0, 0xe, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x4}}, @const={0xa, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x0]}}, &(0x7f00000002c0)=""/87, 0xe7, 0x57, 0x1, 0x400, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xc, 0x1, 0x3, 0x1000, 0xffffffffffffffff, 0x43de9615, '\x00', r1, r4, 0x0, 0x0, 0x4, 0x4, @void, @value, @void, @value}, 0x50) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r5 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x7) openat(r6, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200180, 0x34d) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2m21.132111427s ago: executing program 0 (id=3514): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x150, 0x150, 0x0, 0x90a, 0x1e8, 0x238, 0x238, 0x1e8, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8001}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffffff, 0x0, 0x82) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f00000003c0)='nfsd\x00', 0x1) 2m18.429194466s ago: executing program 0 (id=3515): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m18.151987006s ago: executing program 0 (id=3516): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m17.729136682s ago: executing program 0 (id=3517): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 2m1.258309858s ago: executing program 41 (id=3517): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4008, 0x959e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1m32.849503424s ago: executing program 2 (id=3479): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m32.605849043s ago: executing program 2 (id=3519): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m31.376365732s ago: executing program 2 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001000010001000000fdfffffffc010000000000000000000000000001e00000010000000000000000000000004e2200001ffd0007000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00ff00000000000000000000000000203c000000fe8000000000000000000000000000bb0000000000000000020000000000000000000000000080000100000000000008cb0200000000000006000000000000000000000000000400000000000000000004000000000000000800000000000000000000000000000000000000000000000600000000000000000000000110000000000000020000001b00000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2246d184e89f36c6c2ea2c3a9e6272c9d9152a09fd9eb2f7c7ad2f996a6322924e3cf0fc4b83d45a6568f2db610783e793dd209f7dba221091e13333ddae4ee1e1478c9c37fb4e96e8dd8e272f8aced7f74c5d66a3f29b7589b549f094bb33691359df812686a0a3ad2fcbee6ce48aa737c8e7868acceae02b6466a9505cb5772bc9c094ea95854a5"], 0x138}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettaction={0x18, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) 1m28.671247368s ago: executing program 2 (id=3521): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0xc9d68689ab008576, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x7f, 0x18}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x1bc}], 0x1}, 0x20000044) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x59, "c729e27800d699611bee952b401b87a77108f07df122579402845aad0a48640121fdcea2d8c12caa5929d212f05063619c11f106632479dd7abcbfeddd527e543f92af031cdcc0470b91e065b88b2c7b605bc7551661c30913"}, 0x0}) 1m24.245077649s ago: executing program 2 (id=3522): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e7, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4094}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x48b0674333f3f444, 0x1, 0x21f4, 0x7, {{0x45, 0x4, 0x3, 0x6, 0x114, 0x68, 0x0, 0xd, 0x29, 0x0, @empty, @loopback, {[@end, @cipso={0x86, 0x51, 0xffffffffffffffff, [{0x6, 0xa, "98a50f91c0c1b462"}, {0x5, 0x11, "54bf530183fc21aeeec8e9f7169626"}, {0x1, 0x11, "8e6062f1bdc33664d1f5ab9b85b7e6"}, {0x5, 0xf, "8ae8b52ea35e3099399fa7b2bc"}, {0x6, 0x10, "e48969fb46a88eae28a7ffded0cf"}]}, @end, @ssrr={0x89, 0x27, 0xea, [@multicast2, @broadcast, @empty, @rand_addr=0x64010100, @broadcast, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3e}, @empty]}, @timestamp_addr={0x44, 0x1c, 0x35, 0x1, 0x4, [{@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x8000}, {@multicast2}]}, @cipso={0x86, 0x5f, 0x1, [{0x5, 0xf, "dffe598a8acb7e303b4f06e17f"}, {0x1, 0xe, "683ffc8b906f7537772e8188"}, {0x5, 0x12, "92495a98f73340c7f912e6f2bb85051c"}, {0x2, 0x5, "a1ccbe"}, {0x6, 0x9, "4f65c7708da79b"}, {0x2, 0xa, "67e31d14b32d6942"}, {0x6, 0xb, "7927dad5b77f669e7d"}, {0x5, 0x7, "82a31c8ffe"}]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x9, [0x3]}]}}}}}) 1m21.942843244s ago: executing program 6 (id=3518): connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x1010, 0xffffffffffffffff, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) close_range(r4, r5, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x1, @val=@uprobe_multi={0x0, &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0x1}}, 0x40) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @nfc={0x27, r1, 0xffffffffffffffff, 0x3}, @xdp={0x2c, 0x7, r7, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x9bb, &(0x7f0000000000)='ip6_vti0\x00', 0x3, 0x1, 0x3}) 1m20.850305754s ago: executing program 6 (id=3523): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xb, 0x3, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) iopl(0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x4000}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000008c0)=0x400000000002, 0x12) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="4d3d62cc8e1e243101f1a69c7a13fccf8953bbac62961049db23248f52a134bb5fe58cf1fb6d31310cdaa7bc31cf6d11e50ebaf7f0d40df1cc0448c1398f634ac82a4cef201c91e68b521903cd337f92ff5ebfc195fdea95daf6c1d282a34f0e9d035d45ca24aa8939621bf2e564e51b2f3f9a3406211b938c2fb24bc34b938e1eeeef7523eb8c5d6e33de96a1803d17c9a7fd1b7505679427831b45f831537e9ef70695b8702840bf44413d44c71a4245a358c4f06b4785083cf8a71563a0fa3af90a9f820f39c4d85f5d0c33", @ANYRESOCT=r1], 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5865}, 0x20008811) read$FUSE(0xffffffffffffffff, &(0x7f00000065c0)={0x2020}, 0x2020) 1m7.67977438s ago: executing program 42 (id=3522): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e7, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4094}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x48b0674333f3f444, 0x1, 0x21f4, 0x7, {{0x45, 0x4, 0x3, 0x6, 0x114, 0x68, 0x0, 0xd, 0x29, 0x0, @empty, @loopback, {[@end, @cipso={0x86, 0x51, 0xffffffffffffffff, [{0x6, 0xa, "98a50f91c0c1b462"}, {0x5, 0x11, "54bf530183fc21aeeec8e9f7169626"}, {0x1, 0x11, "8e6062f1bdc33664d1f5ab9b85b7e6"}, {0x5, 0xf, "8ae8b52ea35e3099399fa7b2bc"}, {0x6, 0x10, "e48969fb46a88eae28a7ffded0cf"}]}, @end, @ssrr={0x89, 0x27, 0xea, [@multicast2, @broadcast, @empty, @rand_addr=0x64010100, @broadcast, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3e}, @empty]}, @timestamp_addr={0x44, 0x1c, 0x35, 0x1, 0x4, [{@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x8000}, {@multicast2}]}, @cipso={0x86, 0x5f, 0x1, [{0x5, 0xf, "dffe598a8acb7e303b4f06e17f"}, {0x1, 0xe, "683ffc8b906f7537772e8188"}, {0x5, 0x12, "92495a98f73340c7f912e6f2bb85051c"}, {0x2, 0x5, "a1ccbe"}, {0x6, 0x9, "4f65c7708da79b"}, {0x2, 0xa, "67e31d14b32d6942"}, {0x6, 0xb, "7927dad5b77f669e7d"}, {0x5, 0x7, "82a31c8ffe"}]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x9, [0x3]}]}}}}}) 1m5.227450767s ago: executing program 43 (id=3523): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xb, 0x3, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) iopl(0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x4000}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000008c0)=0x400000000002, 0x12) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="4d3d62cc8e1e243101f1a69c7a13fccf8953bbac62961049db23248f52a134bb5fe58cf1fb6d31310cdaa7bc31cf6d11e50ebaf7f0d40df1cc0448c1398f634ac82a4cef201c91e68b521903cd337f92ff5ebfc195fdea95daf6c1d282a34f0e9d035d45ca24aa8939621bf2e564e51b2f3f9a3406211b938c2fb24bc34b938e1eeeef7523eb8c5d6e33de96a1803d17c9a7fd1b7505679427831b45f831537e9ef70695b8702840bf44413d44c71a4245a358c4f06b4785083cf8a71563a0fa3af90a9f820f39c4d85f5d0c33", @ANYRESOCT=r1], 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5865}, 0x20008811) read$FUSE(0xffffffffffffffff, &(0x7f00000065c0)={0x2020}, 0x2020) 1m3.090078022s ago: executing program 3 (id=3532): r0 = socket$inet(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setreuid(0x0, r1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0xffffff45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 1m2.85753429s ago: executing program 3 (id=3533): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 51.891795249s ago: executing program 3 (id=3534): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000000004000000000000639bbdcb5a5600190040000000"], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617b586b1232882b4bd1d68", 0xf000}, {0x0, 0xffffffc0}], 0x2) r2 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x2bad, 0x40, 0x2, 0x13b}) io_uring_enter(r6, 0x5ccf, 0x35c8, 0x38, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 44.722791824s ago: executing program 3 (id=3535): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x8000ac0f, 0x4) (fail_nth: 1) 44.416675624s ago: executing program 3 (id=3536): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44.107463369s ago: executing program 3 (id=3537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4820) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x2}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x10, 0xc9, 0x81}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f00000001c0)='mm_page_free_batched\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 28.920189847s ago: executing program 44 (id=3537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4820) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x2}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x10, 0xc9, 0x81}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f00000001c0)='mm_page_free_batched\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.491068814s ago: executing program 7 (id=3549): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r0, 0x3305) 9.224992503s ago: executing program 9 (id=3456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r8 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0xc3d35000) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 8.172037082s ago: executing program 7 (id=3550): r0 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) 8.1718174s ago: executing program 4 (id=3528): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r1 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x5, 0x1, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) (fail_nth: 1) 7.767442486s ago: executing program 4 (id=3551): io_uring_setup(0x1cb6, &(0x7f00000017c0)={0x0, 0x0, 0x10000, 0xffffffff}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ff0300002c442db5fd75308f7307007c8a26f607c3ca76486aea80"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000106010100000000000000000500000005000104070000000500010007000000050001000700000005000100070000000500010007000000050001000700000005000100070000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) close_range(r10, r10, 0x2) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080049"]) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", '\x00', "5460b4c38a406346"}, 0x28) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 7.612661018s ago: executing program 7 (id=3552): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.582921637s ago: executing program 9 (id=3553): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x32ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000800000200012804a12408b4267e20f239508000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.955366571s ago: executing program 4 (id=3554): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.942059254s ago: executing program 7 (id=3555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) 6.607416079s ago: executing program 7 (id=3556): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x5760, 0x0) 6.423859087s ago: executing program 4 (id=3557): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r0, 0x3305) 5.595983425s ago: executing program 7 (id=3558): syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f00000000c0), &(0x7f00000007c0)=""/148}, 0x20) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, &(0x7f00000018c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000080)="4764c3149f13fe89ede3c72faa413c60", 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3559): bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) iopl(0x3) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) getresgid(&(0x7f0000001200), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@ipv6_newnexthop={0x1c, 0x68, 0x5, 0x70bd2a, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000017c0)={0xf0, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {0xe}, [@generic, @nested={0x20, 0x73, 0x0, 0x1, [@nested={0x18, 0x141, 0x0, 0x1, [@nested={0x14, 0xe7, 0x0, 0x1, [@nested={0x4, 0xa}, @typed={0x4, 0x4a}, @nested={0x4, 0x13e}, @nested={0x4, 0xfb}]}]}, @nested={0x4, 0x114}]}, @generic, @generic, @generic="c3c05f47ebdba7f4f01fe3b42ad30ccb8f15233a7977180f927bcb68a79591c3ba10e32578319095685dc193f697bb3aa089fb778828d503b740f603c1acd7cfcd2d66f2b7a78b55fbb00cba174bd5762630f270c6ddeda154f8132a3543e83a77a9c909c9aa45f5901cbd3bf76ab1100a9dd47924af36f5239c12223fc26029b1c0ea0957e36bc5ac41c12aee8bcb617447606e6112ce990e486ea80b8e46631f4ef14ac924c3a65833ddf33452dcdaa97ac23d75ed0d0c47059265"]}, 0xf0}, 0x1, 0x0, 0x0, 0x200000a0}, 0x48000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): new IBSS network, BSSID 50:50:50:50:50:50 [ 712.494937][ T30] audit: type=1400 audit(2000000489.430:1311): avc: denied { accept } for pid=16966 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 712.539047][T16868] veth0_macvtap: entered promiscuous mode [ 712.596350][T16868] veth1_macvtap: entered promiscuous mode [ 712.625161][ T30] audit: type=1400 audit(2000000489.430:1312): avc: denied { write } for pid=16966 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 712.758775][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.784254][ T30] audit: type=1400 audit(2000000489.440:1313): avc: denied { read } for pid=16966 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 712.851292][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.904131][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.920248][ T30] audit: type=1400 audit(2000000489.860:1314): avc: denied { create } for pid=16968 comm="syz.0.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 712.969594][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.980983][ T30] audit: type=1400 audit(2000000489.870:1315): avc: denied { setopt } for pid=16968 comm="syz.0.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 713.001998][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.019930][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.035369][ T30] audit: type=1400 audit(2000000489.870:1316): avc: denied { write } for pid=16968 comm="syz.0.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 713.056966][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.076378][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.087129][ T30] audit: type=1400 audit(2000000489.870:1317): avc: denied { create } for pid=16968 comm="syz.0.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 713.115569][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.130070][ T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 713.141583][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.158643][T16868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.199202][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.241299][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.299114][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.321041][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 713.337190][ T10] usb 9-1: config 6 has an invalid interface number: 146 but max is 2 [ 713.355395][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.373382][ T10] usb 9-1: config 6 has an invalid descriptor of length 67, skipping remainder of the config [ 713.384291][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.399704][ T10] usb 9-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 713.415743][ T10] usb 9-1: config 6 has no interface number 0 [ 713.425624][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.438258][ T10] usb 9-1: config 6 interface 146 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 713.458705][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.480801][ T10] usb 9-1: config 6 interface 146 has no altsetting 0 [ 713.487689][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.509852][ T10] usb 9-1: New USB device found, idVendor=13d3, idProduct=f84d, bcdDevice=4f.ad [ 713.529283][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.550241][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.560467][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.585360][ T10] usb 9-1: Product: 貆笠렒သῠG㯈跞襈矜墢왓ꄂ㬣ى㚞絬姇ᡜꆐ洛덊宋뽞Ӈ׹挓鬩㑈יּ뭰ᐥ菚㐭馇滸鼛呂≚下 [ 713.624716][T16868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.650040][ T10] usb 9-1: Manufacturer: ཮ʏ헮刿𥉉죅쾻ჰ☒А滋輱ȝ㬜黖넗풉酙ꑶಖ〧냰⥿嗉꼥᷌⨞ᦍ⌷뀐壭ⓢﮫ횀۱䠱⢢ꍯ耢ꛌ⮵쓯쮳ړ뀞䶷룉㿞ₛ๕臃鯎땼沼Ὑ궨돎໅ꢭ십꽒ஶ苦婗ꥶ痃돩鞓텦桟⨡䦏枷=ണ㮪簇ೄ껨踰䲶渲앯䋬௚諦 [ 717.246798][ T10] usb 9-1: SerialNumber: ᫉㍰ƀ鬖⹮쳰ꚛ㏒⼆㕓肹ᜪ爧㕘뗄飖饗뿇䚡딘ﻃ媪ᚊ䕳ູ牔擳鶟뀑൨㸂婱嚛㻵턟堈曁뇌㕦嵣꙾誀鷒멯㍦蕖咃幃䴃ᎄ櫹쥄ኾ쓗㩭粮쯱䍓豷빅뛞쪀﷘שׂ큏恉᥵꼓绰￿夾됉껙қ䵱鶡섋ị퍃 [ 720.236767][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 720.236784][ T30] audit: type=1400 audit(2000000497.550:1327): avc: denied { unmount } for pid=16861 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 720.286483][T16868] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.399016][ T10] usb 9-1: can't set config #6, error -71 [ 721.410050][T16868] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.418752][T16868] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.470314][ T10] usb 9-1: USB disconnect, device number 2 [ 721.490087][ T30] audit: type=1400 audit(2000000498.800:1328): avc: denied { read } for pid=16986 comm="syz.0.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 721.527340][T16868] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.541635][ T30] audit: type=1400 audit(2000000506.870:1329): avc: denied { create } for pid=17000 comm="syz.5.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 729.763650][ T30] audit: type=1400 audit(2000000506.960:1330): avc: denied { write } for pid=17000 comm="syz.5.3466" path="socket:[50025]" dev="sockfs" ino=50025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 730.062631][ T30] audit: type=1400 audit(2000000507.390:1331): avc: denied { setattr } for pid=17005 comm="syz.5.3469" name="UDPLITEv6" dev="sockfs" ino=50061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 730.298734][ T30] audit: type=1400 audit(2000000507.480:1332): avc: denied { create } for pid=17005 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 730.450698][ T30] audit: type=1400 audit(2000000507.480:1333): avc: denied { ioctl } for pid=17005 comm="syz.5.3469" path="socket:[50064]" dev="sockfs" ino=50064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 731.050583][ T30] audit: type=1400 audit(2000000507.510:1334): avc: denied { connect } for pid=17005 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 731.158574][ T30] audit: type=1400 audit(2000000507.510:1335): avc: denied { write } for pid=17005 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 731.193503][T16866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 731.210784][T16866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 731.218568][T16866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 731.226444][T16866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 731.236176][T16866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.507743][T15719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 731.517357][T15719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 731.525382][T15719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 731.533186][T15719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 731.543093][T15719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 731.600036][ T30] audit: type=1400 audit(2000000508.410:1336): avc: denied { read } for pid=17012 comm="syz.0.3472" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 731.776770][ T30] audit: type=1400 audit(2000000508.410:1337): avc: denied { open } for pid=17012 comm="syz.0.3472" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 732.450410][ T30] audit: type=1400 audit(2000000509.110:1338): avc: denied { prog_run } for pid=17022 comm="syz.0.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 733.041957][T17011] syz.5.3469 (17011): drop_caches: 2 [ 735.212784][T16866] Bluetooth: hci4: command tx timeout [ 735.218917][T16866] Bluetooth: hci5: command tx timeout [ 735.979524][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 735.979538][ T30] audit: type=1400 audit(2000000513.310:1341): avc: denied { bind } for pid=17030 comm="syz.8.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.063261][ T72] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.166023][ T30] audit: type=1400 audit(2000000513.480:1342): avc: denied { load_policy } for pid=17030 comm="syz.8.3475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 736.642426][ T72] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.750849][ T30] audit: type=1326 audit(2000000514.090:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17030 comm="syz.8.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe101b8e969 code=0x7fc00000 [ 736.778011][T17033] SELinux: failed to load policy [ 737.240046][T15719] Bluetooth: hci4: command tx timeout [ 737.312598][T15719] Bluetooth: hci5: command tx timeout [ 739.310071][T15719] Bluetooth: hci4: command tx timeout [ 739.390244][T15719] Bluetooth: hci5: command tx timeout [ 739.603919][ T30] audit: type=1400 audit(2000000514.670:1344): avc: denied { name_bind } for pid=17036 comm="syz.0.3477" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 743.759978][ T30] audit: type=1400 audit(2000000514.680:1345): avc: denied { node_bind } for pid=17036 comm="syz.0.3477" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 743.830091][T15719] Bluetooth: hci4: command tx timeout [ 743.835508][T15719] Bluetooth: hci5: command tx timeout [ 749.302015][ T30] audit: type=1400 audit(2000000514.720:1346): avc: denied { ioctl } for pid=17036 comm="syz.0.3477" path="socket:[45799]" dev="sockfs" ino=45799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 749.415494][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.690180][ T30] audit: type=1400 audit(2000000514.740:1347): avc: denied { connect } for pid=17036 comm="syz.0.3477" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 749.849978][ T30] audit: type=1400 audit(2000000514.740:1348): avc: denied { name_connect } for pid=17036 comm="syz.0.3477" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 749.926890][ T72] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.007107][ T30] audit: type=1326 audit(2000000514.850:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.0.3477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592018e969 code=0x0 [ 751.902621][ T30] audit: type=1400 audit(2000000529.060:1350): avc: denied { read } for pid=17051 comm="syz.8.3481" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 754.568235][ T30] audit: type=1400 audit(2000000529.070:1351): avc: denied { open } for pid=17051 comm="syz.8.3481" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 754.822563][ T30] audit: type=1400 audit(2000000529.080:1352): avc: denied { ioctl } for pid=17051 comm="syz.8.3481" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 754.911277][ T72] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.283055][ T30] audit: type=1400 audit(2000000532.610:1353): avc: denied { write } for pid=17060 comm="syz.0.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 755.644923][T15719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 755.661492][T15719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 755.669725][T15719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 755.689201][T15719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 755.697540][T15719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.790409][T15719] Bluetooth: hci0: command tx timeout [ 759.870161][T15719] Bluetooth: hci0: command tx timeout [ 761.950211][T15719] Bluetooth: hci0: command tx timeout [ 764.031650][T15719] Bluetooth: hci0: command tx timeout [ 764.827592][T17020] chnl_net:caif_netlink_parms(): no params data found [ 764.908211][ T72] bridge_slave_1: left allmulticast mode [ 764.946389][ T72] bridge_slave_1: left promiscuous mode [ 764.970142][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.050018][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 765.071119][ T72] bridge_slave_0: left allmulticast mode [ 765.121619][ T72] bridge_slave_0: left promiscuous mode [ 765.127357][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.250337][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 765.269097][ T10] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 765.305685][ T10] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 765.346439][ T10] usb 9-1: Product: syz [ 765.367554][ T10] usb 9-1: Manufacturer: syz [ 765.377051][ T10] usb 9-1: SerialNumber: syz [ 765.411542][ T10] usb 9-1: config 0 descriptor?? [ 765.655467][ T10] usb 9-1: USB disconnect, device number 3 [ 766.324088][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.344806][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.365949][ T72] bond0 (unregistering): Released all slaves [ 766.587390][ T30] audit: type=1400 audit(2000000543.920:1354): avc: denied { create } for pid=17086 comm="syz.0.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 773.037553][T17018] chnl_net:caif_netlink_parms(): no params data found [ 773.332196][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.339600][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.351428][T17020] bridge_slave_0: entered allmulticast mode [ 773.359370][T17020] bridge_slave_0: entered promiscuous mode [ 773.486809][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.506827][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.526544][T17020] bridge_slave_1: entered allmulticast mode [ 773.542666][T17020] bridge_slave_1: entered promiscuous mode [ 773.861435][ T30] audit: type=1400 audit(2000000551.190:1355): avc: denied { write } for pid=17105 comm="syz.8.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 774.037920][T17020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.305185][T17020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.482023][ T72] hsr_slave_0: left promiscuous mode [ 784.871441][ T5817] Bluetooth: hci6: command 0x0406 tx timeout [ 784.911806][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 785.088535][ T72] hsr_slave_1: left promiscuous mode [ 785.130573][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.138101][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.210886][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.218377][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.374603][ T72] veth1_macvtap: left promiscuous mode [ 785.390276][ T72] veth0_macvtap: left promiscuous mode [ 785.395955][ T72] veth1_vlan: left promiscuous mode [ 785.456095][ T72] veth0_vlan: left promiscuous mode [ 785.567407][T17118] SELinux: failed to load policy [ 786.157730][T16866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 786.169591][T16866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 786.178876][T16866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 786.215667][T16866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 786.224762][T16866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 786.397764][T16866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 786.409107][T16866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 786.423892][T16866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 786.434850][T16866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 786.442709][T16866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.826759][ T72] team0 (unregistering): Port device team_slave_1 removed [ 786.899710][ T72] team0 (unregistering): Port device team_slave_0 removed [ 787.574016][T17018] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.619724][T17018] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.632054][T17018] bridge_slave_0: entered allmulticast mode [ 787.641613][T17018] bridge_slave_0: entered promiscuous mode [ 788.151549][ T30] audit: type=1400 audit(2000000565.480:1356): avc: denied { name_bind } for pid=17132 comm="syz.8.3498" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 788.276623][T16866] Bluetooth: hci1: command tx timeout [ 788.306447][ T30] audit: type=1400 audit(2000000565.480:1357): avc: denied { node_bind } for pid=17132 comm="syz.8.3498" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 788.510048][T16866] Bluetooth: hci2: command tx timeout [ 789.007703][ T30] audit: type=1326 audit(2000000566.320:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.0.3499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592018e969 code=0x0 [ 790.384239][T16866] Bluetooth: hci1: command tx timeout [ 790.604053][T16866] Bluetooth: hci2: command tx timeout [ 790.625985][T17064] chnl_net:caif_netlink_parms(): no params data found [ 790.791934][ T30] audit: type=1326 audit(2000000567.450:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.0.3499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f59201c1225 code=0x0 [ 790.929143][T17138] SELinux: failed to load policy [ 790.981817][ T30] audit: type=1326 audit(2000000568.030:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.0.3499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592018e969 code=0x0 [ 791.025791][ T30] audit: type=1326 audit(2000000568.280:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.0.3499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592018e969 code=0x0 [ 792.210246][ T30] audit: type=1400 audit(2000000569.540:1362): avc: denied { kexec_image_load } for pid=17145 comm="syz.8.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 792.337796][ T30] audit: type=1400 audit(2000000569.620:1363): avc: denied { create } for pid=17145 comm="syz.8.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 792.430219][T16866] Bluetooth: hci1: command tx timeout [ 792.488540][ T30] audit: type=1400 audit(2000000569.620:1364): avc: denied { write } for pid=17145 comm="syz.8.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 792.510157][T17064] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.519537][T17064] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.538139][T17064] bridge_slave_0: entered allmulticast mode [ 792.566144][T17064] bridge_slave_0: entered promiscuous mode [ 792.648353][T17064] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.662393][T17064] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.679590][T16866] Bluetooth: hci2: command tx timeout [ 792.696655][T17064] bridge_slave_1: entered allmulticast mode [ 792.724140][T17064] bridge_slave_1: entered promiscuous mode [ 793.021932][T17064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.117559][ T3537] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.161978][T17064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.415007][ T3537] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.539116][T17064] team0: Port device team_slave_0 added [ 793.587899][ T3537] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.683863][T17159] netlink: 'syz.0.3503': attribute type 8 has an invalid length. [ 793.703259][T17159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3503'. [ 793.726819][T17064] team0: Port device team_slave_1 added [ 793.760495][ T30] audit: type=1400 audit(2000000571.090:1365): avc: denied { read } for pid=17158 comm="syz.0.3503" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 793.837844][ T3537] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.851518][ T30] audit: type=1400 audit(2000000571.090:1366): avc: denied { open } for pid=17158 comm="syz.0.3503" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 793.919098][ T30] audit: type=1400 audit(2000000571.120:1367): avc: denied { ioctl } for pid=17158 comm="syz.0.3503" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 794.019818][ T30] audit: type=1400 audit(2000000571.150:1368): avc: denied { bind } for pid=17158 comm="syz.0.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 794.079833][T17127] chnl_net:caif_netlink_parms(): no params data found [ 794.128546][T17064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.148047][T17064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.187540][ T30] audit: type=1400 audit(2000000571.150:1369): avc: denied { node_bind } for pid=17158 comm="syz.0.3503" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 794.270018][ T30] audit: type=1400 audit(2000000571.150:1370): avc: denied { connect } for pid=17158 comm="syz.0.3503" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 794.273325][T17064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.347316][ T30] audit: type=1400 audit(2000000571.190:1371): avc: denied { setopt } for pid=17158 comm="syz.0.3503" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 794.408949][T17124] chnl_net:caif_netlink_parms(): no params data found [ 794.484804][T17064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.504475][T17064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.530403][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.537006][T15719] Bluetooth: hci1: command tx timeout [ 794.602339][T17064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.753117][T15719] Bluetooth: hci2: command tx timeout [ 799.649033][T17064] hsr_slave_0: entered promiscuous mode [ 799.993683][T17064] hsr_slave_1: entered promiscuous mode [ 800.421491][T17127] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.429712][T17127] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.453286][T17127] bridge_slave_0: entered allmulticast mode [ 800.488358][T17127] bridge_slave_0: entered promiscuous mode [ 800.664669][ T3537] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.733591][T17127] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.756712][T17127] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.780219][T17127] bridge_slave_1: entered allmulticast mode [ 800.787480][T17127] bridge_slave_1: entered promiscuous mode [ 801.007131][ T3537] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.099514][T17127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.146240][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.168486][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.201108][T17124] bridge_slave_0: entered allmulticast mode [ 801.217927][T17124] bridge_slave_0: entered promiscuous mode [ 801.250072][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.257195][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.282153][T17124] bridge_slave_1: entered allmulticast mode [ 801.289566][T17124] bridge_slave_1: entered promiscuous mode [ 801.350816][ T3537] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.378950][T17127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.476002][ T3537] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.562313][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.619465][T17127] team0: Port device team_slave_0 added [ 801.639222][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.671422][T17127] team0: Port device team_slave_1 added [ 801.806382][T17124] team0: Port device team_slave_0 added [ 801.849339][T17127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.861158][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.893151][T17127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.964500][T17124] team0: Port device team_slave_1 added [ 802.005689][T17127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.018346][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.056529][T17127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.314127][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.333988][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.368367][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.489460][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.527199][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.770653][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.038554][ T3537] bridge_slave_1: left allmulticast mode [ 806.049996][ T3537] bridge_slave_1: left promiscuous mode [ 806.057380][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.101938][ T3537] bridge_slave_0: left allmulticast mode [ 806.107650][ T3537] bridge_slave_0: left promiscuous mode [ 806.118398][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.137198][ T3537] bridge_slave_0: left allmulticast mode [ 806.145465][ T3537] bridge_slave_0: left promiscuous mode [ 806.155725][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.176204][ T3537] bridge_slave_1: left allmulticast mode [ 806.192589][ T3537] bridge_slave_1: left promiscuous mode [ 806.199491][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.225592][ T3537] bridge_slave_0: left allmulticast mode [ 806.235126][ T3537] bridge_slave_0: left promiscuous mode [ 806.246313][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.269563][ T3537] bridge_slave_1: left allmulticast mode [ 806.278687][ T3537] bridge_slave_1: left promiscuous mode [ 806.287612][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.319164][ T3537] bridge_slave_0: left allmulticast mode [ 806.328644][ T3537] bridge_slave_0: left promiscuous mode [ 806.337847][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.598463][T16866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 807.608937][T16866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 807.619937][T16866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 807.688915][T16866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 807.697513][T16866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 808.181608][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.200425][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.227588][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.247440][ T3537] bond0 (unregistering): Released all slaves [ 808.267012][ T3537] bond0 (unregistering): Released all slaves [ 808.437061][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.462896][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.481508][ T3537] bond0 (unregistering): Released all slaves [ 808.651488][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.676632][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.698057][ T3537] bond0 (unregistering): Released all slaves [ 808.733631][T17127] hsr_slave_0: entered promiscuous mode [ 808.761103][T17127] hsr_slave_1: entered promiscuous mode [ 808.777163][T17127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.788837][T17127] Cannot create hsr debugfs directory [ 809.793388][T16866] Bluetooth: hci4: command tx timeout [ 811.006919][T16931] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 811.275153][T16931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.308674][T16931] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 811.331501][T16931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.294699][T16866] Bluetooth: hci4: command tx timeout [ 812.381167][T16931] usb 1-1: config 0 descriptor?? [ 812.505505][T15719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.515953][T15719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.524314][T15719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 812.532490][T15719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 812.540406][T15719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 815.309953][T15719] Bluetooth: hci4: command tx timeout [ 815.315446][T15719] Bluetooth: hci3: command tx timeout [ 815.710156][T16931] usbhid 1-1:0.0: can't add hid device: -71 [ 816.710284][T16931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 816.770150][T16931] usb 1-1: USB disconnect, device number 5 [ 816.979565][T17212] xt_HMARK: spi-set and port-set can't be combined [ 817.422530][T15719] Bluetooth: hci3: command tx timeout [ 817.427956][T15719] Bluetooth: hci4: command tx timeout [ 817.949980][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 817.958854][T17212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3514'. [ 818.070925][T17212] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.079625][T17212] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.092352][T17212] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.112685][T17212] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.488271][T17124] hsr_slave_0: entered promiscuous mode [ 818.512217][T17124] hsr_slave_1: entered promiscuous mode [ 818.529221][T17124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.537085][T17124] Cannot create hsr debugfs directory [ 819.632248][T15719] Bluetooth: hci3: command tx timeout [ 820.267749][T17223] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 820.296662][T17223] SELinux: failed to load policy [ 821.710111][T15719] Bluetooth: hci3: command tx timeout [ 836.878418][T16866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 836.888101][T16866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 836.896241][T16866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 836.904183][T16866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 836.916212][T16866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 837.588852][ T3537] hsr_slave_0: left promiscuous mode [ 837.601304][ T3537] hsr_slave_1: left promiscuous mode [ 837.607356][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.615451][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.627545][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.635494][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.678912][ T3537] hsr_slave_0: left promiscuous mode [ 837.689685][ T3537] hsr_slave_1: left promiscuous mode [ 837.706108][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.713670][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.731046][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.738476][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.799718][ T3537] veth1_macvtap: left promiscuous mode [ 837.809214][ T3537] veth0_macvtap: left promiscuous mode [ 837.819077][ T3537] veth1_vlan: left promiscuous mode [ 837.827803][ T3537] veth0_vlan: left promiscuous mode [ 837.850934][ T3537] veth1_macvtap: left promiscuous mode [ 837.856469][ T3537] veth0_macvtap: left promiscuous mode [ 837.869470][ T3537] veth1_vlan: left promiscuous mode [ 837.878026][ T3537] veth0_vlan: left promiscuous mode [ 838.992440][T16866] Bluetooth: hci0: command tx timeout [ 839.239330][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 839.306414][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 840.639586][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 840.693896][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 841.075073][T16866] Bluetooth: hci0: command tx timeout [ 841.918808][T17202] chnl_net:caif_netlink_parms(): no params data found [ 842.048060][T17208] chnl_net:caif_netlink_parms(): no params data found [ 842.606238][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.622067][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.629341][T17208] bridge_slave_0: entered allmulticast mode [ 842.658480][T17208] bridge_slave_0: entered promiscuous mode [ 842.690066][T17202] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.699775][T17202] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.707406][T17202] bridge_slave_0: entered allmulticast mode [ 842.714742][T17202] bridge_slave_0: entered promiscuous mode [ 842.730702][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.737812][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.745126][T17208] bridge_slave_1: entered allmulticast mode [ 842.758659][T17208] bridge_slave_1: entered promiscuous mode [ 842.771323][T17202] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.778508][T17202] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.786356][T17202] bridge_slave_1: entered allmulticast mode [ 842.796722][T17202] bridge_slave_1: entered promiscuous mode [ 842.806478][T17127] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 842.848168][T17127] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 843.088402][T17127] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 843.121548][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.150334][T16866] Bluetooth: hci0: command tx timeout [ 843.169729][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.326632][T17202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.344908][T17127] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 843.469428][T17202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.646682][T17208] team0: Port device team_slave_0 added [ 843.847402][T17208] team0: Port device team_slave_1 added [ 843.927636][T17202] team0: Port device team_slave_0 added [ 844.081205][T17202] team0: Port device team_slave_1 added [ 844.094325][T17230] chnl_net:caif_netlink_parms(): no params data found [ 844.124828][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.136733][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.199175][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.301075][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.308038][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.341856][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.364344][T17202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.375502][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.409370][T17202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.428663][T17202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.437716][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.471454][T17202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.817424][T17208] hsr_slave_0: entered promiscuous mode [ 844.838624][T17208] hsr_slave_1: entered promiscuous mode [ 844.857813][T17208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.866937][T17208] Cannot create hsr debugfs directory [ 844.925267][T17202] hsr_slave_0: entered promiscuous mode [ 844.936185][T17202] hsr_slave_1: entered promiscuous mode [ 844.943786][T17202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.965107][T17202] Cannot create hsr debugfs directory [ 844.994829][T17230] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.007305][T17230] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.016425][T17230] bridge_slave_0: entered allmulticast mode [ 845.030939][T17230] bridge_slave_0: entered promiscuous mode [ 845.060482][T17230] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.067598][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.078109][T17230] bridge_slave_1: entered allmulticast mode [ 845.085659][T17230] bridge_slave_1: entered promiscuous mode [ 845.148707][T17124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 845.230432][T16866] Bluetooth: hci0: command tx timeout [ 845.283065][T17230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.314483][T17230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.344568][T17124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 845.789730][T15719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 845.804173][T15719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 845.814435][T15719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 845.823409][T15719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 845.831141][T15719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 846.054528][ T3537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.070187][ T3537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.265406][T17230] team0: Port device team_slave_0 added [ 846.611896][T16866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.625302][T16866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.634159][T16866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.647635][T16866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.655205][T16866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 846.733788][ T3537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.749055][ T3537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.809234][T17230] team0: Port device team_slave_1 added [ 847.181325][ T3537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.207795][ T3537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.306675][T17230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.318703][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.396147][T17230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.609544][ T3537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.625516][ T3537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.647685][T17230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.654891][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.688514][T17230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.874723][T16866] Bluetooth: hci5: command tx timeout [ 848.147286][T17230] hsr_slave_0: entered promiscuous mode [ 848.158861][T17230] hsr_slave_1: entered promiscuous mode [ 848.165906][T17230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 848.178074][T17230] Cannot create hsr debugfs directory [ 848.435137][T17202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.554428][T17208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 848.593505][T17202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.666891][T17208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 848.750371][T16866] Bluetooth: hci1: command tx timeout [ 848.778403][T17208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 848.891447][ T3537] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.979519][T17202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.025200][T17208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 849.108102][ T3537] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.233975][T17202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.314212][ T3537] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.584079][ T3537] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.727139][T17255] chnl_net:caif_netlink_parms(): no params data found [ 849.868263][T17258] chnl_net:caif_netlink_parms(): no params data found [ 849.959383][T16866] Bluetooth: hci5: command tx timeout [ 850.125056][T17255] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.136250][T17255] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.148208][T17255] bridge_slave_0: entered allmulticast mode [ 850.158761][T17255] bridge_slave_0: entered promiscuous mode [ 850.177279][T17255] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.188906][T17255] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.206473][T17255] bridge_slave_1: entered allmulticast mode [ 850.214316][T17255] bridge_slave_1: entered promiscuous mode [ 850.229779][T17202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.397959][T17202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.437234][T17202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.462366][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.547571][T17255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.569480][T17202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.657229][T17255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.830124][T16866] Bluetooth: hci1: command tx timeout [ 850.866764][T17258] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.878941][T17258] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.894851][T17258] bridge_slave_0: entered allmulticast mode [ 850.903759][T17258] bridge_slave_0: entered promiscuous mode [ 850.919839][T17258] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.929516][T17258] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.943665][T17258] bridge_slave_1: entered allmulticast mode [ 850.954455][T17258] bridge_slave_1: entered promiscuous mode [ 850.976663][T17255] team0: Port device team_slave_0 added [ 851.014806][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.076322][ T3537] bridge_slave_1: left allmulticast mode [ 851.090778][ T3537] bridge_slave_1: left promiscuous mode [ 851.096486][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.117930][ T3537] bridge_slave_0: left allmulticast mode [ 851.131439][ T3537] bridge_slave_0: left promiscuous mode [ 851.137126][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.166746][ T3537] bridge_slave_1: left allmulticast mode [ 851.175275][ T3537] bridge_slave_1: left promiscuous mode [ 851.185265][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.206789][ T3537] bridge_slave_0: left allmulticast mode [ 851.215121][ T3537] bridge_slave_0: left promiscuous mode [ 851.225618][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.254408][ T3537] bridge_slave_1: left allmulticast mode [ 851.267393][ T3537] bridge_slave_1: left promiscuous mode [ 851.274915][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.299318][ T3537] bridge_slave_0: left allmulticast mode [ 851.309809][ T3537] bridge_slave_0: left promiscuous mode [ 851.318196][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.038515][T16866] Bluetooth: hci5: command tx timeout [ 852.910325][T16866] Bluetooth: hci1: command tx timeout [ 853.117034][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.139523][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.163995][ T3537] bond0 (unregistering): Released all slaves [ 853.186684][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.213224][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.247202][ T3537] bond0 (unregistering): Released all slaves [ 853.448280][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.468906][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.493234][ T3537] bond0 (unregistering): Released all slaves [ 853.519575][T17255] team0: Port device team_slave_1 added [ 853.594390][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.601546][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.662009][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.669161][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.907163][T17258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.003839][T17255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.015714][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.052176][T17255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.087253][T17258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.113948][T16866] Bluetooth: hci5: command tx timeout [ 854.131291][T17255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.138235][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.192696][T17255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.428679][T17258] team0: Port device team_slave_0 added [ 854.445536][T17258] team0: Port device team_slave_1 added [ 854.648541][T17255] hsr_slave_0: entered promiscuous mode [ 854.660991][T17255] hsr_slave_1: entered promiscuous mode [ 854.667090][T17255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 854.683476][T17255] Cannot create hsr debugfs directory [ 854.811066][T17258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.818033][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.855326][T17258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.876383][T17258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.886364][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.921587][T17258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.990223][T16866] Bluetooth: hci1: command tx timeout [ 855.072923][T17202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.236100][T17230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 855.396178][T17202] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.429002][T17230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 855.456361][T17230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 855.517489][T17258] hsr_slave_0: entered promiscuous mode [ 855.526283][T17258] hsr_slave_1: entered promiscuous mode [ 855.537261][T17258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 855.547324][T17258] Cannot create hsr debugfs directory [ 855.629312][T17230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 855.864318][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.903174][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.910329][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.971032][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.978188][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.705365][T17208] veth0_vlan: entered promiscuous mode [ 856.778196][ T3537] hsr_slave_0: left promiscuous mode [ 856.809513][ T3537] hsr_slave_1: left promiscuous mode [ 856.822682][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.853065][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.873790][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.888600][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.931161][ T3537] hsr_slave_0: left promiscuous mode [ 856.944371][ T3537] hsr_slave_1: left promiscuous mode [ 856.952315][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.967322][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.008710][ T3537] hsr_slave_0: left promiscuous mode [ 857.024910][ T3537] hsr_slave_1: left promiscuous mode [ 857.033494][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.045661][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.058794][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.072969][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.143870][ T3537] veth1_macvtap: left promiscuous mode [ 857.149415][ T3537] veth0_macvtap: left promiscuous mode [ 857.165532][ T3537] veth1_vlan: left promiscuous mode [ 857.171423][ T3537] veth0_vlan: left promiscuous mode [ 857.194177][ T3537] veth1_macvtap: left promiscuous mode [ 857.199703][ T3537] veth0_macvtap: left promiscuous mode [ 857.213039][ T3537] veth1_vlan: left promiscuous mode [ 857.218340][ T3537] veth0_vlan: left promiscuous mode [ 858.162376][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 858.234980][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 859.345939][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 859.425405][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 860.365640][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 860.437936][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 861.145497][T17208] veth1_vlan: entered promiscuous mode [ 861.432836][T17230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.679818][T17208] veth0_macvtap: entered promiscuous mode [ 861.756315][T17230] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.787097][T17208] veth1_macvtap: entered promiscuous mode [ 861.809143][T17202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.918715][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.925872][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.984685][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.991842][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.004940][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.024739][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.042618][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.107092][T17202] veth0_vlan: entered promiscuous mode [ 862.137996][T17208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.148986][T17208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.162229][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.189816][T17230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 862.201516][T17230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.245450][T17202] veth1_vlan: entered promiscuous mode [ 862.256184][T17255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 862.292608][T17208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.302640][T17208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.325943][T17208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.338859][T17208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.492431][T17255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 862.517230][T17255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 862.599314][T17255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 863.076669][T17230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.142487][T17202] veth0_macvtap: entered promiscuous mode [ 863.274618][T17202] veth1_macvtap: entered promiscuous mode [ 863.324708][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.367762][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.578402][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.587903][T17202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.616911][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.639974][T17202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.649815][T17202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.713497][T17202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.757683][T17202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.895035][T17255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.925046][T17202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.955714][T17202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.990068][T17202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.010230][T17202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.054183][T17202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.163762][T17202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.196869][T17202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.220192][T17202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.239951][T17202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.276513][T17255] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.309173][ T3537] bridge_slave_1: left allmulticast mode [ 864.321664][ T3537] bridge_slave_1: left promiscuous mode [ 864.327372][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.364129][ T3537] bridge_slave_0: left allmulticast mode [ 864.369835][ T3537] bridge_slave_0: left promiscuous mode [ 864.380789][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.406380][ T3537] bridge_slave_1: left allmulticast mode [ 864.416510][ T3537] bridge_slave_1: left promiscuous mode [ 864.425944][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.451326][ T3537] bridge_slave_0: left allmulticast mode [ 864.457535][ T3537] bridge_slave_0: left promiscuous mode [ 864.468660][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.194596][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.217834][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.243051][ T3537] bond0 (unregistering): Released all slaves [ 865.263785][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.288824][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.318036][ T3537] bond0 (unregistering): Released all slaves [ 865.389650][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.396810][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.442305][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.449433][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.506276][ T30] audit: type=1400 audit(2000000642.840:1372): avc: denied { create } for pid=17296 comm="syz.2.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 865.764589][ T30] audit: type=1400 audit(2000000642.860:1373): avc: denied { write } for pid=17296 comm="syz.2.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 865.798444][T17297] tc_dump_action: action bad kind [ 866.803929][ T30] audit: type=1400 audit(2000000642.860:1374): avc: denied { nlmsg_write } for pid=17296 comm="syz.2.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 867.558728][T17230] veth0_vlan: entered promiscuous mode [ 867.689101][T17255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 867.842952][T17255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.904407][T17230] veth1_vlan: entered promiscuous mode [ 868.028030][T17258] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 868.102798][T17258] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 868.307227][T17258] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 868.450048][T17258] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 868.550132][ T5930] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 868.563627][T17230] veth0_macvtap: entered promiscuous mode [ 868.642467][T17230] veth1_macvtap: entered promiscuous mode [ 868.760344][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34166, setting to 64 [ 868.796072][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.865164][T17230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.924537][ T5930] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 868.956443][T17230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.977845][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.012012][T15719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 869.023744][T15719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 869.031595][T15719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 869.038959][T17230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.065970][T15719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 869.073736][T15719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 869.098598][T17230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.128060][ T5930] usb 3-1: config 0 descriptor?? [ 869.161610][T17230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.172585][T17305] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.210471][T17230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.265611][T17230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.430837][ T3537] hsr_slave_0: left promiscuous mode [ 869.451505][ T3537] hsr_slave_1: left promiscuous mode [ 869.471507][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.506461][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.562814][ T3537] hsr_slave_0: left promiscuous mode [ 869.578909][ T3537] hsr_slave_1: left promiscuous mode [ 869.586975][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.607409][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.644410][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.876280][ T5930] hid-steam 0003:28DE:1142.0007: item fetching failed at offset 0/3 [ 870.900395][ T5930] hid-steam 0003:28DE:1142.0007: steam_probe:parse of hid interface failed [ 870.909048][ T5930] hid-steam 0003:28DE:1142.0007: probe with driver hid-steam failed with error -22 [ 871.423783][T15719] Bluetooth: hci2: command tx timeout [ 871.647016][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 871.701313][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 872.142527][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 872.201667][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 872.569941][ T5861] usb 3-1: USB disconnect, device number 25 [ 872.681430][ T30] audit: type=1400 audit(2000000650.000:1375): avc: denied { create } for pid=17315 comm="syz.2.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 872.724233][ T30] audit: type=1400 audit(2000000650.050:1376): avc: denied { ioctl } for pid=17315 comm="syz.2.3522" path="socket:[54496]" dev="sockfs" ino=54496 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 872.756813][ T30] audit: type=1400 audit(2000000650.060:1377): avc: denied { read write } for pid=17315 comm="syz.2.3522" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 872.860538][T17230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.900947][T17230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.939965][ T30] audit: type=1400 audit(2000000650.060:1378): avc: denied { open } for pid=17315 comm="syz.2.3522" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 872.969934][T17230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.004806][T17230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.035762][T17230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.046314][ T30] audit: type=1400 audit(2000000650.060:1379): avc: denied { ioctl } for pid=17315 comm="syz.2.3522" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 873.094728][T17230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.143449][T17230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.222731][T17230] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.269954][T17230] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.278666][T17230] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.325767][T17230] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.440772][T17255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.471625][T15719] Bluetooth: hci2: command tx timeout [ 873.535017][ T30] audit: type=1400 audit(2000000650.870:1380): avc: denied { ioctl } for pid=17315 comm="syz.2.3522" path="socket:[54498]" dev="sockfs" ino=54498 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 873.798026][T17258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.074702][T17258] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.186425][T17255] veth0_vlan: entered promiscuous mode [ 874.214593][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.221734][T16181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.281792][T16181] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.288918][T16181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.352835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.379625][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.429472][T17255] veth1_vlan: entered promiscuous mode [ 874.568741][T16181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.626607][T16181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.745218][T17258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.914849][T17255] veth0_macvtap: entered promiscuous mode [ 875.104737][T17255] veth1_macvtap: entered promiscuous mode [ 875.256271][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.295831][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.337731][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.369168][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.397795][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.424151][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.449668][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.492673][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.524529][T17255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.551169][T15719] Bluetooth: hci2: command tx timeout [ 875.633751][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.677735][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.720168][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.744334][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.769716][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.795424][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.821596][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.835936][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.848186][T17255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.054286][ T3537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.081524][T17255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.095434][T17255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.108529][T17255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.121747][T17255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.173737][T17258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.210691][T17335] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 876.218624][ T30] audit: type=1400 audit(2000000653.540:1381): avc: denied { mounton } for pid=17333 comm="syz.6.3523" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 876.290132][T17335] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 876.298751][T17335] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 876.390836][T17335] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 876.401394][ T3537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.454264][ T30] audit: type=1400 audit(2000000653.790:1382): avc: denied { execute } for pid=17333 comm="syz.6.3523" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=54954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 876.577381][T17308] chnl_net:caif_netlink_parms(): no params data found [ 876.678852][ T3537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.770077][ T5861] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 876.869114][ T3537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.910313][ T5861] usb 7-1: device descriptor read/64, error -71 [ 876.976596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.007245][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.160875][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.170452][ T5861] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 877.185418][T17308] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.193883][T17308] bridge_slave_0: entered allmulticast mode [ 877.206958][T17308] bridge_slave_0: entered promiscuous mode [ 877.236813][T17308] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.248587][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.269625][T17308] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.281778][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.296572][T17308] bridge_slave_1: entered allmulticast mode [ 877.307441][T17308] bridge_slave_1: entered promiscuous mode [ 877.320008][ T5861] usb 7-1: device descriptor read/64, error -71 [ 877.431479][ T5861] usb usb7-port1: attempt power cycle [ 877.559482][T17308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.589745][T17308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.631393][T15719] Bluetooth: hci2: command tx timeout [ 877.780859][ T5861] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 877.796224][T17308] team0: Port device team_slave_0 added [ 877.823471][ T5861] usb 7-1: device descriptor read/8, error -71 [ 877.877419][T17308] team0: Port device team_slave_1 added [ 877.979742][T17258] veth0_vlan: entered promiscuous mode [ 878.069580][ T3537] bridge_slave_1: left allmulticast mode [ 878.079372][ T3537] bridge_slave_1: left promiscuous mode [ 878.088016][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.095618][ T5861] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 878.118145][ T3537] bridge_slave_0: left allmulticast mode [ 878.128500][ T5861] usb 7-1: device descriptor read/8, error -71 [ 878.137705][ T3537] bridge_slave_0: left promiscuous mode [ 878.145661][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.252668][ T5861] usb usb7-port1: unable to enumerate USB device [ 878.863309][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.884506][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.899436][ T3537] bond0 (unregistering): Released all slaves [ 878.959322][T17308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.976861][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.084349][T17308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.119534][T17258] veth1_vlan: entered promiscuous mode [ 879.134502][T17308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.143765][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.098732][T17308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.406274][ T30] audit: type=1400 audit(2000000661.730:1383): avc: denied { setattr } for pid=17364 comm="syz.3.3527" name="NETLINK" dev="sockfs" ino=55433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.454483][T17308] hsr_slave_0: entered promiscuous mode [ 884.465561][T17308] hsr_slave_1: entered promiscuous mode [ 890.016950][T17258] veth0_macvtap: entered promiscuous mode [ 890.047675][T17258] veth1_macvtap: entered promiscuous mode [ 891.755792][T17372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.968811][ T30] audit: type=1400 audit(2000000669.280:1384): avc: denied { read write } for pid=17370 comm="syz.3.3529" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 892.730353][ T30] audit: type=1400 audit(2000000669.280:1385): avc: denied { open } for pid=17370 comm="syz.3.3529" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 892.930011][ T30] audit: type=1400 audit(2000000669.540:1386): avc: denied { ioctl } for pid=17370 comm="syz.3.3529" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 893.446464][T16866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 893.460254][T16866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 893.478297][T16866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 893.493650][T16866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 893.530544][T16866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 893.635508][ T30] audit: type=1400 audit(2000000670.970:1387): avc: denied { getopt } for pid=17376 comm="syz.3.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 893.824667][T15719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 893.839559][T15719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 893.847723][T15719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 893.855798][T15719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 893.865364][T15719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 895.630102][T15719] Bluetooth: hci3: command tx timeout [ 895.950119][T15719] Bluetooth: hci0: command tx timeout [ 897.716755][T15719] Bluetooth: hci3: command tx timeout [ 898.030404][T15719] Bluetooth: hci0: command tx timeout [ 899.790198][T15719] Bluetooth: hci3: command tx timeout [ 900.110044][T15719] Bluetooth: hci0: command tx timeout [ 901.869925][T15719] Bluetooth: hci3: command tx timeout [ 902.190056][T15719] Bluetooth: hci0: command tx timeout [ 903.003362][ T3537] hsr_slave_0: left promiscuous mode [ 903.029884][ T3537] hsr_slave_1: left promiscuous mode [ 903.037092][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.048510][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.060915][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.068332][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.104915][ T3537] veth1_macvtap: left promiscuous mode [ 903.118510][ T3537] veth0_macvtap: left promiscuous mode [ 903.128546][ T3537] veth1_vlan: left promiscuous mode [ 903.136766][ T3537] veth0_vlan: left promiscuous mode [ 903.914423][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 903.989519][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 904.853416][T17258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.904193][T17258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.947586][T17258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.977615][T17258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.997307][T17258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.016355][T17258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.027386][T17258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.041982][T17258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.171264][T17258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.255699][ T30] audit: type=1400 audit(2000000689.590:1388): avc: denied { create } for pid=17394 comm="syz.3.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 912.393146][ T30] audit: type=1400 audit(2000000689.620:1389): avc: denied { setopt } for pid=17394 comm="syz.3.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 913.484744][T16866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 913.498171][T16866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 913.506451][T16866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 913.514940][T16866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 913.525239][T16866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 913.759586][ T30] audit: type=1400 audit(2000000691.090:1390): avc: denied { create } for pid=17398 comm="syz.3.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 913.833942][ T30] audit: type=1400 audit(2000000691.120:1391): avc: denied { create } for pid=17398 comm="syz.3.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 913.927408][ T30] audit: type=1400 audit(2000000691.260:1392): avc: denied { ioctl } for pid=17398 comm="syz.3.3537" path="socket:[55689]" dev="sockfs" ino=55689 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 916.841393][T16866] Bluetooth: hci1: command tx timeout [ 917.248644][T17405] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 917.266103][T17405] qnx6: wrong signature (magic) in superblock #1. [ 917.285454][T17405] qnx6: unable to read the first superblock [ 917.987204][T17380] chnl_net:caif_netlink_parms(): no params data found [ 918.388391][T17380] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.398085][T17380] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.407603][T17380] bridge_slave_0: entered allmulticast mode [ 918.417165][T17380] bridge_slave_0: entered promiscuous mode [ 918.495711][T17380] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.506790][T17380] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.530293][T17380] bridge_slave_1: entered allmulticast mode [ 918.537576][T17380] bridge_slave_1: entered promiscuous mode [ 918.548751][T17308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 918.603451][T17308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 918.745586][T17380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.760551][T17375] chnl_net:caif_netlink_parms(): no params data found [ 918.773453][T17308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 918.798941][T17401] chnl_net:caif_netlink_parms(): no params data found [ 918.826945][T17380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.865709][T17308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 918.910785][T15719] Bluetooth: hci1: command tx timeout [ 919.133653][T17380] team0: Port device team_slave_0 added [ 919.152020][T17380] team0: Port device team_slave_1 added [ 919.196487][ T3537] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.327805][ T3537] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.368119][T17380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.378320][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.411198][T15719] Bluetooth: hci5: command 0x0406 tx timeout [ 919.420870][T17380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.539734][ T3537] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.566097][T17380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.578571][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.614297][T17380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.715761][ T3537] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.749568][T17375] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.759063][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.767623][T17375] bridge_slave_0: entered allmulticast mode [ 919.785031][T17375] bridge_slave_0: entered promiscuous mode [ 919.796210][T17375] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.805668][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.815221][T17375] bridge_slave_1: entered allmulticast mode [ 919.823800][T17375] bridge_slave_1: entered promiscuous mode [ 919.845642][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.856937][T17401] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.866054][T17401] bridge_slave_0: entered allmulticast mode [ 919.875872][T17401] bridge_slave_0: entered promiscuous mode [ 919.969695][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.983072][T17401] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.994973][T17401] bridge_slave_1: entered allmulticast mode [ 920.008157][T17401] bridge_slave_1: entered promiscuous mode [ 920.147996][T17380] hsr_slave_0: entered promiscuous mode [ 920.160597][T17380] hsr_slave_1: entered promiscuous mode [ 920.167009][T17380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.182827][T17380] Cannot create hsr debugfs directory [ 920.192319][T17375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.216002][T17401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.260582][T17375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.319514][T17401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.504229][T17401] team0: Port device team_slave_0 added [ 920.527114][T17401] team0: Port device team_slave_1 added [ 920.552439][T17375] team0: Port device team_slave_0 added [ 920.609813][T17375] team0: Port device team_slave_1 added [ 920.659159][T17401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.671915][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.704686][T17401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.785685][ T3537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.817857][T17401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.834926][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.867301][T17401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.939098][T17308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.992975][T16866] Bluetooth: hci1: command tx timeout [ 921.010998][ T3537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.060519][T17375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.067483][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.103874][T17375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.153676][ T3537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.224943][T17375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.238652][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.265979][T17375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.318042][ T3537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.347082][T17401] hsr_slave_0: entered promiscuous mode [ 921.359015][T17401] hsr_slave_1: entered promiscuous mode [ 921.366335][T17401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.377863][T17401] Cannot create hsr debugfs directory [ 921.465354][T17308] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.535428][T17375] hsr_slave_0: entered promiscuous mode [ 921.545024][T17375] hsr_slave_1: entered promiscuous mode [ 921.560567][T17375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.573299][T17375] Cannot create hsr debugfs directory [ 921.799068][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.806233][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.985082][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.992241][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.319114][ T3537] bridge_slave_1: left allmulticast mode [ 922.330792][ T3537] bridge_slave_1: left promiscuous mode [ 922.336549][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.364263][ T3537] bridge_slave_0: left allmulticast mode [ 922.373917][ T3537] bridge_slave_0: left promiscuous mode [ 922.379675][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.403339][ T3537] bridge_slave_1: left allmulticast mode [ 922.409063][ T3537] bridge_slave_1: left promiscuous mode [ 922.424004][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.446591][ T3537] bridge_slave_0: left allmulticast mode [ 922.454297][ T3537] bridge_slave_0: left promiscuous mode [ 922.465383][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.489498][ T3537] bridge_slave_1: left allmulticast mode [ 922.498047][ T3537] bridge_slave_1: left promiscuous mode [ 922.509282][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.532948][ T3537] bridge_slave_0: left allmulticast mode [ 922.538639][ T3537] bridge_slave_0: left promiscuous mode [ 922.551049][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.070280][T16866] Bluetooth: hci1: command tx timeout [ 923.813390][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.834584][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.849257][ T3537] bond0 (unregistering): Released all slaves [ 924.026353][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.048390][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.063978][ T3537] bond0 (unregistering): Released all slaves [ 924.254132][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.271533][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.293887][ T3537] bond0 (unregistering): Released all slaves [ 924.906954][T17380] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 924.986655][T17380] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 925.087084][T17380] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 925.117046][T17380] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 925.452573][T17308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.616723][T17380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.638327][T17308] veth0_vlan: entered promiscuous mode [ 925.671991][T17380] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.682026][T17308] veth1_vlan: entered promiscuous mode [ 925.716388][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.723538][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.829059][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.836216][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.887025][T17308] veth0_macvtap: entered promiscuous mode [ 925.981104][T17308] veth1_macvtap: entered promiscuous mode [ 926.129557][T17308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.164336][T17308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.200032][T17308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.226504][T17308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.263916][T17308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.310006][T17308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.340111][T17308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.359955][T17308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.383669][T17308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.410114][T17308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.428850][T17308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.604123][ T3537] hsr_slave_0: left promiscuous mode [ 926.624680][ T3537] hsr_slave_1: left promiscuous mode [ 926.647909][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.678669][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.705196][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.746305][ T3537] hsr_slave_0: left promiscuous mode [ 926.764785][ T3537] hsr_slave_1: left promiscuous mode [ 926.782071][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.794062][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.806584][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.818036][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.844323][ T3537] hsr_slave_0: left promiscuous mode [ 926.856471][ T3537] hsr_slave_1: left promiscuous mode [ 926.867579][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.889775][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.903463][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.913891][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.984239][ T3537] veth1_macvtap: left promiscuous mode [ 926.989855][ T3537] veth0_macvtap: left promiscuous mode [ 927.007100][ T3537] veth1_vlan: left promiscuous mode [ 927.014511][ T3537] veth0_vlan: left promiscuous mode [ 927.025505][ T3537] veth1_macvtap: left promiscuous mode [ 927.033247][ T3537] veth0_macvtap: left promiscuous mode [ 927.038858][ T3537] veth1_vlan: left promiscuous mode [ 927.047549][ T3537] veth0_vlan: left promiscuous mode [ 927.066233][ T3537] veth1_macvtap: left promiscuous mode [ 927.075739][ T3537] veth0_macvtap: left promiscuous mode [ 927.085070][ T3537] veth1_vlan: left promiscuous mode [ 927.092436][ T3537] veth0_vlan: left promiscuous mode [ 928.335277][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 928.378666][T15719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 928.388994][T15719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 928.397788][T15719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 928.407650][T15719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 928.416721][T15719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 928.559377][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 928.569545][T16866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 928.584145][T16866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 928.599513][T16866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 928.624355][T16866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 928.640678][T16866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 929.798571][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 929.862702][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 930.513145][T15719] Bluetooth: hci4: command tx timeout [ 930.670953][T15719] Bluetooth: hci6: command tx timeout [ 931.075939][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.176954][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 931.256226][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 932.314392][T17375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.355479][T17375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.397306][T17380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.439233][T17401] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 932.588909][T17375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.608737][T15719] Bluetooth: hci4: command tx timeout [ 932.637612][T17375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.750637][T15719] Bluetooth: hci6: command tx timeout [ 932.758457][T17401] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 932.795519][T17401] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 933.016328][T17375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.054834][T17375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.094470][T17401] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 933.301579][T17375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.363337][T17375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.717854][T17380] veth0_vlan: entered promiscuous mode [ 933.777609][T17380] veth1_vlan: entered promiscuous mode [ 933.951834][T17401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.039674][T17401] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.127253][T17380] veth0_macvtap: entered promiscuous mode [ 934.203749][T17380] veth1_macvtap: entered promiscuous mode [ 934.236871][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.244013][T17391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.278784][T17375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 934.361318][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.368448][T17391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.383106][T17375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 934.408757][T17380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.425036][T17380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.436662][T17380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.455209][T17380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.468567][T17380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.483231][T17380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.505165][T17380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.549454][T17375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 934.597007][T17380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.614064][T17380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.627649][T17380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.643200][T17380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.656999][T17380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.670161][T15719] Bluetooth: hci4: command tx timeout [ 934.688950][T17375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 934.813762][T17380] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.831081][T15719] Bluetooth: hci6: command tx timeout [ 934.849383][T17380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.864820][T17380] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.873738][T17380] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.258472][T17437] chnl_net:caif_netlink_parms(): no params data found [ 935.647102][T17435] chnl_net:caif_netlink_parms(): no params data found [ 935.723654][T17391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.757987][T17391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.866365][T17401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.888240][T17437] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.909946][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.917128][T17437] bridge_slave_0: entered allmulticast mode [ 935.945785][T17437] bridge_slave_0: entered promiscuous mode [ 935.980825][T17437] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.987968][T17437] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.027406][T17437] bridge_slave_1: entered allmulticast mode [ 936.043352][T17437] bridge_slave_1: entered promiscuous mode [ 936.168497][T17375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.371527][T15377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.408265][T17375] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.433386][T15377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.527937][T17437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.646037][T17437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.767342][T15719] Bluetooth: hci4: command tx timeout [ 936.820135][T15377] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.827258][T15377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.907383][T15377] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.914538][T15377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.923251][T15719] Bluetooth: hci6: command tx timeout [ 937.151902][ T30] audit: type=1400 audit(2000000714.480:1393): avc: denied { ioctl } for pid=17471 comm="syz.7.3539" path="socket:[57829]" dev="sockfs" ino=57829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 937.186348][T17437] team0: Port device team_slave_0 added [ 937.377859][ T30] audit: type=1400 audit(2000000714.710:1394): avc: denied { write } for pid=17474 comm="syz.7.3540" name="tcp6" dev="proc" ino=4026534202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 937.478740][T17437] team0: Port device team_slave_1 added [ 937.566936][T17435] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.579030][T17435] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.603451][T17435] bridge_slave_0: entered allmulticast mode [ 937.615471][T17435] bridge_slave_0: entered promiscuous mode [ 937.688218][T17435] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.701886][T17435] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.709157][T17435] bridge_slave_1: entered allmulticast mode [ 937.733747][T17435] bridge_slave_1: entered promiscuous mode [ 937.751280][T17437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.758236][T17437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.797649][T17437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.850186][T17293] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 937.876824][T17437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.886927][T17437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.920545][T17437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.980462][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.995284][T17375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 938.007224][T17375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 938.030133][T17293] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34166, setting to 64 [ 938.049039][T17293] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 938.068353][T17293] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 938.098463][T17293] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.142272][T17293] usb 8-1: config 0 descriptor?? [ 938.155784][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.184906][T17479] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 938.533038][T17401] veth0_vlan: entered promiscuous mode [ 938.591793][T17435] team0: Port device team_slave_0 added [ 938.630782][T17435] team0: Port device team_slave_1 added [ 938.869225][T17437] hsr_slave_0: entered promiscuous mode [ 938.899803][T17437] hsr_slave_1: entered promiscuous mode [ 939.883993][T17293] hid-steam 0003:28DE:1142.0008: item fetching failed at offset 0/3 [ 939.892798][T17437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.905989][T17293] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 939.943996][T17437] Cannot create hsr debugfs directory [ 939.965270][T17401] veth1_vlan: entered promiscuous mode [ 939.980774][T17293] hid-steam 0003:28DE:1142.0008: probe with driver hid-steam failed with error -22 [ 940.276472][ T3537] bridge_slave_1: left allmulticast mode [ 940.287932][ T3537] bridge_slave_1: left promiscuous mode [ 940.299343][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.324591][ T3537] bridge_slave_0: left allmulticast mode [ 940.332566][ T3537] bridge_slave_0: left promiscuous mode [ 940.338327][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.859682][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.882673][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.903032][ T3537] bond0 (unregistering): Released all slaves [ 940.932500][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.942651][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.003774][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.085578][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.104146][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.138163][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.283921][ T5861] usb 8-1: USB disconnect, device number 2 [ 941.404813][T17489] random: crng reseeded on system resumption [ 941.413198][ T30] audit: type=1400 audit(2000000718.740:1395): avc: denied { append } for pid=17488 comm="syz.7.3542" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 941.552919][ T30] audit: type=1400 audit(2000000718.740:1396): avc: denied { open } for pid=17488 comm="syz.7.3542" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 941.692821][T17375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.926554][ T3537] hsr_slave_0: left promiscuous mode [ 941.958366][ T3537] hsr_slave_1: left promiscuous mode [ 941.980591][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.997100][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.016529][T17489] Restarting kernel threads ... done. [ 942.024357][ T30] audit: type=1400 audit(2000000719.350:1397): avc: denied { ioctl } for pid=17488 comm="syz.7.3542" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 942.067259][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.092864][ T3537] veth1_macvtap: left promiscuous mode [ 942.098757][ T3537] veth0_macvtap: left promiscuous mode [ 942.115134][ T3537] veth1_vlan: left promiscuous mode [ 942.125157][ T3537] veth0_vlan: left promiscuous mode [ 942.912809][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 942.986703][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 943.739531][T17435] hsr_slave_0: entered promiscuous mode [ 943.755627][T17435] hsr_slave_1: entered promiscuous mode [ 943.787365][T17401] veth0_macvtap: entered promiscuous mode [ 944.113981][T17401] veth1_macvtap: entered promiscuous mode [ 944.391697][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.427374][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.470031][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.509500][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.530222][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.770121][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.830764][T17401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.425103][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3546'. [ 945.440987][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.474212][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3546'. [ 945.492634][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.526533][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.538256][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.555063][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.566229][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.581474][T17401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.775552][T17508] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.784353][T17508] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.793999][T17508] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.802974][T17508] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.933546][T17401] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.953517][T17401] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.985408][T17401] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.154223][T17401] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.169460][T17511] x_tables: duplicate underflow at hook 3 [ 946.179137][ T30] audit: type=1400 audit(2000000723.500:1398): avc: denied { setopt } for pid=17510 comm="syz.7.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 946.269731][ T30] audit: type=1400 audit(2000000723.560:1399): avc: denied { ioctl } for pid=17510 comm="syz.7.3547" path="socket:[58223]" dev="sockfs" ino=58223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 946.427123][T17375] veth0_vlan: entered promiscuous mode [ 946.567249][T17375] veth1_vlan: entered promiscuous mode [ 946.653424][T15377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.677226][T15377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.749472][T17375] veth0_macvtap: entered promiscuous mode [ 946.864804][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.874971][T17375] veth1_macvtap: entered promiscuous mode [ 946.888037][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.914569][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.956642][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.999966][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.036034][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.067609][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.090453][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.104843][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.118018][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.138104][T17375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.166270][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3548'. [ 947.215506][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.253699][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.301095][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.339227][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.359396][T17518] random: crng reseeded on system resumption [ 947.373775][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.399428][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.433999][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.459321][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.495934][T17375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.555930][T17375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.642495][T17375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.684149][T17375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.719583][T17375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.967231][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.986732][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.999044][T17435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 948.025572][T17435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 948.076063][T17435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 948.124834][T17435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 948.166923][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.186929][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.531019][T17437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 948.587691][T17437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 948.714247][T17437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 948.723937][T17526] FAULT_INJECTION: forcing a failure. [ 948.723937][T17526] name failslab, interval 1, probability 0, space 0, times 0 [ 948.758630][T17437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 948.777562][T17526] CPU: 0 UID: 0 PID: 17526 Comm: syz.4.3528 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 948.777587][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.777597][T17526] Call Trace: [ 948.777603][T17526] [ 948.777610][T17526] dump_stack_lvl+0x16c/0x1f0 [ 948.777638][T17526] should_fail_ex+0x512/0x640 [ 948.777660][T17526] ? fs_reclaim_acquire+0xae/0x150 [ 948.777684][T17526] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 948.777708][T17526] should_failslab+0xc2/0x120 [ 948.777727][T17526] __kmalloc_noprof+0xd2/0x510 [ 948.777757][T17526] tomoyo_realpath_from_path+0xc2/0x6e0 [ 948.777782][T17526] ? tomoyo_profile+0x47/0x60 [ 948.777799][T17526] tomoyo_path_number_perm+0x245/0x580 [ 948.777819][T17526] ? tomoyo_path_number_perm+0x237/0x580 [ 948.777841][T17526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 948.777862][T17526] ? find_held_lock+0x2b/0x80 [ 948.777904][T17526] ? find_held_lock+0x2b/0x80 [ 948.777923][T17526] ? hook_file_ioctl_common+0x145/0x410 [ 948.777945][T17526] ? __fget_files+0x20e/0x3c0 [ 948.777974][T17526] security_file_ioctl+0x9b/0x240 [ 948.777998][T17526] __x64_sys_ioctl+0xb7/0x200 [ 948.778024][T17526] do_syscall_64+0xcd/0x260 [ 948.778049][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.778065][T17526] RIP: 0033:0x7f1b0938e969 [ 948.778079][T17526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.778095][T17526] RSP: 002b:00007f1b0a296038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.778111][T17526] RAX: ffffffffffffffda RBX: 00007f1b095b5fa0 RCX: 00007f1b0938e969 [ 948.778121][T17526] RDX: 0000200000000200 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 948.778131][T17526] RBP: 00007f1b0a296090 R08: 0000000000000000 R09: 0000000000000000 [ 948.778140][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.778149][T17526] R13: 0000000000000000 R14: 00007f1b095b5fa0 R15: 00007ffddf7e5438 [ 948.778172][T17526] [ 948.998942][T17526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 949.435303][ T30] audit: type=1400 audit(2000000726.720:1400): avc: denied { create } for pid=17534 comm="syz.9.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 949.458079][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3553'. [ 949.547367][ T30] audit: type=1400 audit(2000000726.730:1401): avc: denied { sys_admin } for pid=17534 comm="syz.9.3553" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 950.036188][ T30] audit: type=1400 audit(2000000727.370:1402): avc: denied { write } for pid=17542 comm="syz.7.3555" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 950.179213][T17435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.375850][T17435] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.456850][T15377] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.464021][T15377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.494470][T17550] random: crng reseeded on system resumption [ 950.562315][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.569485][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.666461][T17437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.752586][T17437] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.856527][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.863696][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.956990][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.964179][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.056348][T17550] Restarting kernel threads ... done. [ 951.379624][ T30] audit: type=1400 audit(2000000728.710:1403): avc: denied { write } for pid=17554 comm="syz.7.3558" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 971.969974][T16866] Bluetooth: hci5: command 0x0406 tx timeout [ 1081.939745][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1081.946714][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17399/1:b..l [ 1081.955164][ C0] rcu: (detected by 0, t=10502 jiffies, g=77761, q=1414 ncpus=2) [ 1081.962960][ C0] task:syz.3.3537 state:R running task stack:26232 pid:17399 tgid:17398 ppid:17255 task_flags:0x40054c flags:0x00004002 [ 1081.977372][ C0] Call Trace: [ 1081.980649][ C0] [ 1081.983577][ C0] __schedule+0x116f/0x5de0 [ 1081.988084][ C0] ? __lock_acquire+0x4f1/0x1ba0 [ 1081.993031][ C0] ? __pfx___schedule+0x10/0x10 [ 1081.997877][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1082.002826][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1082.007776][ C0] preempt_schedule_irq+0x51/0x90 [ 1082.012799][ C0] irqentry_exit+0x36/0x90 [ 1082.017210][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1082.023183][ C0] RIP: 0010:unwind_next_frame+0x1689/0x20a0 [ 1082.029075][ C0] Code: 01 05 00 00 49 8b 45 10 48 39 dd 0f 87 00 f8 ff ff 48 39 d8 0f 86 f7 f7 ff ff 48 8d 53 08 48 39 d0 0f 93 c1 48 39 d5 0f 92 c0 <84> c1 0f 84 df f7 ff ff 48 39 5c 24 10 0f 82 d4 f7 ff ff 48 b8 00 [ 1082.048678][ C0] RSP: 0018:ffffc90003adf6d8 EFLAGS: 00000293 [ 1082.054739][ C0] RAX: ffffc90003ae0001 RBX: ffffc90003adfe00 RCX: ffffc90003ae0001 [ 1082.062706][ C0] RDX: ffffc90003adfe08 RSI: ffffc90003adfdd0 RDI: ffffc90003adf758 [ 1082.070670][ C0] RBP: ffffc90003ad8000 R08: 0000000000000001 R09: 0000000000000000 [ 1082.078632][ C0] R10: 0000000000000000 R11: 0000000000007fdb R12: ffffc90003adf798 [ 1082.086596][ C0] R13: ffffc90003adf748 R14: ffffc90003adfe00 R15: ffffc90003adf77c [ 1082.094576][ C0] ? unwind_next_frame+0x15d5/0x20a0 [ 1082.099861][ C0] ? get_signal+0x2673/0x26d0 [ 1082.104537][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1082.110689][ C0] arch_stack_walk+0x94/0x100 [ 1082.115371][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 1082.121093][ C0] stack_trace_save+0x8e/0xc0 [ 1082.125767][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1082.131135][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1082.136075][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1082.141010][ C0] save_stack+0x160/0x1f0 [ 1082.145343][ C0] ? __pfx_save_stack+0x10/0x10 [ 1082.150192][ C0] ? __free_frozen_pages+0x69d/0xff0 [ 1082.155474][ C0] ? vfree+0x176/0x960 [ 1082.159544][ C0] ? kcov_close+0x34/0x60 [ 1082.163868][ C0] ? __fput+0x3ff/0xb70 [ 1082.168013][ C0] ? task_work_run+0x14d/0x240 [ 1082.172769][ C0] ? do_exit+0xafb/0x2c30 [ 1082.177095][ C0] ? do_group_exit+0xd3/0x2a0 [ 1082.181776][ C0] ? get_signal+0x2673/0x26d0 [ 1082.186458][ C0] ? page_ext_put+0x3e/0xd0 [ 1082.190977][ C0] __reset_page_owner+0x84/0x1a0 [ 1082.195918][ C0] __free_frozen_pages+0x69d/0xff0 [ 1082.201034][ C0] vfree+0x176/0x960 [ 1082.204928][ C0] ? rcu_is_watching+0x12/0xc0 [ 1082.209686][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1082.215497][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1082.220340][ C0] kcov_close+0x34/0x60 [ 1082.224494][ C0] __fput+0x3ff/0xb70 [ 1082.228475][ C0] ? cleanup_mnt+0x262/0x450 [ 1082.233072][ C0] task_work_run+0x14d/0x240 [ 1082.237657][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1082.242771][ C0] do_exit+0xafb/0x2c30 [ 1082.246926][ C0] ? __pfx___might_resched+0x10/0x10 [ 1082.252213][ C0] ? __pfx_do_exit+0x10/0x10 [ 1082.256801][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1082.261826][ C0] ? find_held_lock+0x2b/0x80 [ 1082.266504][ C0] do_group_exit+0xd3/0x2a0 [ 1082.271013][ C0] get_signal+0x2673/0x26d0 [ 1082.275528][ C0] ? __pfx_get_signal+0x10/0x10 [ 1082.280375][ C0] ? task_work_add+0x1d5/0x360 [ 1082.285135][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 1082.290685][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1082.296848][ C0] ? ksys_read+0x1b9/0x240 [ 1082.301266][ C0] ? __pfx_ksys_read+0x10/0x10 [ 1082.306026][ C0] ? rcu_is_watching+0x12/0xc0 [ 1082.310789][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 1082.316422][ C0] do_syscall_64+0xda/0x260 [ 1082.320927][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.326815][ C0] RIP: 0033:0x7f26f858e969 [ 1082.331223][ C0] RSP: 002b:00007f26f9437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1082.339630][ C0] RAX: 0000000000018ff8 RBX: 00007f26f87b5fa0 RCX: 00007f26f858e969 [ 1082.347597][ C0] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000006 [ 1082.355558][ C0] RBP: 00007f26f8610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1082.363523][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.371490][ C0] R13: 0000000000000000 R14: 00007f26f87b5fa0 R15: 00007ffda2266248 [ 1082.379468][ C0] [ 1082.382492][ C0] rcu: rcu_preempt kthread starved for 9783 jiffies! g77761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1082.393588][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1082.403547][ C0] rcu: RCU grace-period kthread stack dump: [ 1082.409422][ C0] task:rcu_preempt state:R running task stack:28392 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1082.422909][ C0] Call Trace: [ 1082.426179][ C0] [ 1082.429108][ C0] __schedule+0x116f/0x5de0 [ 1082.433624][ C0] ? __pfx___schedule+0x10/0x10 [ 1082.438489][ C0] ? find_held_lock+0x2b/0x80 [ 1082.443166][ C0] ? schedule+0x2d7/0x3a0 [ 1082.447499][ C0] schedule+0xe7/0x3a0 [ 1082.451567][ C0] schedule_timeout+0x123/0x290 [ 1082.456415][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1082.461781][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1082.467066][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1082.472869][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1082.478340][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1082.483117][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1082.488410][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1082.493268][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1082.499079][ C0] rcu_gp_kthread+0x270/0x380 [ 1082.503761][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1082.508975][ C0] ? rcu_is_watching+0x12/0xc0 [ 1082.513745][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1082.518949][ C0] ? __kthread_parkme+0x19e/0x250 [ 1082.523980][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1082.529180][ C0] kthread+0x3c2/0x780 [ 1082.533248][ C0] ? __pfx_kthread+0x10/0x10 [ 1082.537844][ C0] ? __pfx_kthread+0x10/0x10 [ 1082.542436][ C0] ? __pfx_kthread+0x10/0x10 [ 1082.547021][ C0] ? __pfx_kthread+0x10/0x10 [ 1082.551603][ C0] ? rcu_is_watching+0x12/0xc0 [ 1082.556369][ C0] ? __pfx_kthread+0x10/0x10 [ 1082.560956][ C0] ret_from_fork+0x45/0x80 [ 1082.565368][ C0] ? __pfx_kthread+0x10/0x10 [ 1082.569957][ C0] ret_from_fork_asm+0x1a/0x30 [ 1082.574737][ C0] [ 1082.577752][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1082.584068][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1082.595690][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1082.605742][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1082.611376][ C0] Code: 25 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1082.630977][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 1082.637038][ C0] RAX: 0000000001f88b0d RBX: 0000000000000000 RCX: ffffffff8b6cd419 [ 1082.645001][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe1547 RDI: ffffffff8bf483a0 [ 1082.652965][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 1082.660932][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 1082.668902][ C0] R13: ffffffff8e097740 R14: ffffffff9084f610 R15: 0000000000000000 [ 1082.676871][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 1082.685802][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1082.692383][ C0] CR2: 00007fd3de504a90 CR3: 000000001eeb8000 CR4: 00000000003526f0 [ 1082.700351][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1082.708321][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1082.716289][ C0] Call Trace: [ 1082.719559][ C0] [ 1082.722482][ C0] default_idle+0x13/0x20 [ 1082.726817][ C0] default_idle_call+0x6d/0xb0 [ 1082.731584][ C0] do_idle+0x391/0x510 [ 1082.735659][ C0] ? __pfx_do_idle+0x10/0x10 [ 1082.740251][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 1082.745450][ C0] cpu_startup_entry+0x4f/0x60 [ 1082.750214][ C0] rest_init+0x16b/0x2b0 [ 1082.754455][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1082.759732][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1082.765277][ C0] start_kernel+0x3e9/0x4d0 [ 1082.769783][ C0] x86_64_start_reservations+0x18/0x30 [ 1082.775243][ C0] x86_64_start_kernel+0xb0/0xc0 [ 1082.780182][ C0] common_startup_64+0x13e/0x148 [ 1082.785126][ C0] [ 1086.777886][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1086.865967][ T1296] ieee802154 phy1 wpan1: encryption failed: -22