last executing test programs: 27m14.708935811s ago: executing program 32 (id=1828): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x30, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 22m14.789440785s ago: executing program 33 (id=2876): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000080)=""/129, 0x81) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000180)={0x1, 0x6dd6, 0x7fff, 0x2, '\x00', '\x00', '\x00', 0x8, 0x1, 0x8, 0x1000, "6a579d9c9f4b6188a101784d50b7271e"}) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f00000002c0)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x40010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x8000000000000001, &(0x7f0000000340)=[r3, r3, r4, r2, r1, r1], 0x6, 0x0, 0x1}) (async) sendto$inet(r2, &(0x7f00000003c0)="5ac44854e66c261782f659301c9ebd393c91678cb646813386", 0x19, 0x4, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) (async) read$snapshot(r2, &(0x7f0000000440)=""/100, 0x64) (async) io_uring_enter(r2, 0x17f4, 0xddac, 0x20, &(0x7f00000004c0)={[0xe56]}, 0x8) recvmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000500)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000600)}], 0x2, &(0x7f0000000680)=""/179, 0xb3}, 0x2002) (async) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000780), &(0x7f00000007c0)={'U+', 0xffffffff}, 0x16, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000840)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000800)={0x8, 0x3}}) write$khugepaged_scan(r2, &(0x7f0000000880), 0x8) (async) socket$alg(0x26, 0x5, 0x0) (async) r7 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r7, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r8, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa000000, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000a40)) (async) getsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) (async) epoll_create1(0x80000) (async) unshare(0x40000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000b00)={0x7, r4, 'id0\x00'}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 8m41.405948663s ago: executing program 34 (id=5938): mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r2 = timerfd_create(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) timerfd_gettime(r2, &(0x7f0000000000)={{0x0, 0x0}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES32=r7], 0x0, 0x40000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2m25.165107205s ago: executing program 7 (id=7610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 2m24.851359234s ago: executing program 7 (id=7611): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0x2100}, 0x0) 2m23.916360253s ago: executing program 7 (id=7614): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000a000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x823, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=ANY=[@ANYBLOB="7f039811916e11b45c33212fbd5e5df639515473b0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb60000"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) 2m20.393785945s ago: executing program 7 (id=7621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0xb8, 0x109, 0xfffffeff, "c2252885b7203925610eae9e4889462273b17edeaf14a02e1fbbb525b667a73e05f96b87d2393898c9a842d5aa79c5b5cdbda3fd6697aef667443a8e74081e6ed75f7a9fd870a4fa2efba36d952516e6cc6248c41d2a51aa99ea327424fd47a347c6eb06032eefd4b882716366d434dc8f9eded1515ddc5e9ef05020383375b6178ad798fd8275868d03e1e4391eaef9edf933aae4a881cb9f46063fdc3a4279f3"}], 0xb8}}], 0x1, 0x8087) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="8ae91834b509f865917cb233e9d2f03eb6a5661ddf1b3e7e2db876ac4712c52f327ee646cb3e8cc0a4fc4b09bd6ab754e474", 0x32}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f00000002c0)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001080)="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", 0x155}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000cc0), 0x34, 0x0, 0x0, 0x18f}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000480)="7cb4ed8d75b2bf3112799fd6df65ec2e59789849019ba02cf53691cc6a3861c12a7561473f42faa934fbade4b821748f020274d96c341c767249d5c73a686846b2277104adaec1988872649bfc0b166d57f560d39595e97c35abc2e5ab6e198601eb33839b2423b4ddfda82faca046d05d68", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 2m20.18817289s ago: executing program 7 (id=7622): mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1ff, 0x5e490420, 0x2, 0xffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) lseek(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5], 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0xe, {0x10, 0x4, 0x80, 0xea5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x230b, 0x400000000000005}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 2m19.077822471s ago: executing program 7 (id=7624): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0xf000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') read$FUSE(r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000140)=']@+\x00', 0x0, r0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x98, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x54a}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xa0b8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r9, 0x0, 0x201f00) 2m16.069013098s ago: executing program 35 (id=7586): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x300, 0x0, 0x6418, r0, &(0x7f0000000000)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x8, r0, 0x0, 0x0, 0x100000000000000, 0x0, 0x2}]) 2m15.912369151s ago: executing program 36 (id=7585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xfffffffffffffed2, 0xffffffb0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a6", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0, 0x4}, 0x50) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r3, 0x11, 0x0, 0x8000074000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2m14.071632806s ago: executing program 5 (id=7635): r0 = syz_io_uring_complete(0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x7fff, 0x10000, {0xffffffffffffffff}, {}, 0x8, 0x1000}) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, &(0x7f0000000100)) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newroute={0x5c, 0x18, 0x300, 0x70bd29, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x3, 0xfc, 0x3, 0xfd, 0xd, 0x200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "23e3b1ea"}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x22, 0x6}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}, @RTA_PRIORITY={0x8, 0x6, 0x46}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_PREF={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0)={0xe}, 0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000300)={0x3, {0x253, 0x8, 0x3, 0x5bc, 0xd, 0x7}}) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) write$apparmor_exec(r0, &(0x7f0000002380)={'exec ', '\x89(@]})/\x00'}, 0xd) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000023c0)) syz_open_procfs$namespace(r2, &(0x7f00000024c0)='ns/pid_for_children\x00') r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800002, 0x110, r3, 0x80000000) io_uring_enter(r0, 0x10ce, 0x628a, 0x8, &(0x7f0000002500)={[0x6aa]}, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000002540)={0x0, 0x8, 0x1, [0x9, 0x1, 0xfffffffffffffff9, 0x2, 0x6], [0x4b, 0x2, 0x4ea6, 0x6, 0xfffffffffffffffb, 0xf, 0x6, 0x6, 0x3, 0xf, 0x0, 0xff, 0x0, 0x8, 0x526a53ac, 0x2, 0x474, 0xe6, 0x7f, 0x80000000, 0x4, 0x8, 0x4, 0x4, 0x5, 0x101, 0x8fc, 0xfffffffffffffff6, 0x2, 0x6, 0x3, 0xfffffffffffffffd, 0x80000001, 0x7fffffffffffffff, 0x6, 0x7, 0x4, 0x4, 0x0, 0x5, 0x8, 0x8, 0xe042e8, 0x92, 0x9, 0x1, 0x7fe000000000, 0xffffffffffff9a54, 0x1, 0x8bb, 0x944, 0x7fffffff, 0x1, 0x3, 0x8, 0x5, 0xe3, 0x2, 0xb8a9, 0x5, 0x8000000000000001, 0x9, 0x9, 0x147, 0x77c, 0xffffffffffffff6c, 0xc1, 0x1, 0x9, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x6, 0x4, 0xb, 0x7, 0x6, 0x4, 0x8, 0x2, 0x8, 0x2, 0x1, 0x1f67, 0x0, 0xe97, 0xe, 0x401, 0x81, 0x7, 0x1, 0x6, 0x8, 0x4, 0x785fe3b, 0x3, 0x2de6, 0x4, 0x3fb8, 0xff, 0xffffffff, 0x7, 0x2, 0x6, 0x2aa, 0x2, 0xfffffffffffffff7, 0x5, 0x5, 0x4, 0xc, 0xf, 0x8000000000000001, 0x2, 0xffffffffffffffff, 0xa39, 0x3, 0x5]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002980)={r4, 0x3b, 0x0, [0x3, 0x8f4, 0x101, 0x8000000000000001, 0x8], [0x8000, 0x5, 0x4, 0xfff, 0x3f70, 0xffffffff, 0x36f0, 0x10001, 0x8, 0x7f, 0xf15, 0x4, 0x1e, 0xe43c, 0x2, 0x7fff, 0x9, 0x9, 0x400, 0x80, 0x41, 0x8, 0x90c1, 0x0, 0x7c30, 0x7, 0x6fe9f02000000000, 0x1407, 0x9, 0x5, 0xffffffff, 0x1, 0x3, 0x8, 0x1, 0x400, 0x7fffffffffffffff, 0xfffffffffffffff4, 0x7, 0x2, 0x8, 0x3, 0x6, 0x1, 0xf, 0x8, 0x6, 0x7, 0x8000000000000000, 0x10001, 0x56a, 0x801, 0x5, 0x5, 0x7, 0x1, 0x5, 0x0, 0x2, 0x4, 0x1, 0x2, 0x80000001000, 0x9, 0x7fffffffffffffff, 0x7, 0x10000, 0xffffffffffffffff, 0x0, 0x9, 0x1, 0x1000, 0x2, 0x80, 0x8, 0x7fff, 0x2, 0xfffffffffffff0a2, 0x4, 0x7, 0x2030, 0x353, 0x6, 0x8001, 0x100000000, 0x5, 0x9, 0x9, 0x7, 0xfffffffffffffff7, 0x98ce, 0x200, 0xfffffffffffffffd, 0x6, 0x1, 0x40, 0x10001, 0xfffffffffffffffd, 0x5, 0x10000, 0x8, 0x80, 0x80000001, 0x8000, 0x401, 0x5, 0x4, 0x46b, 0x8, 0x1, 0x0, 0xff, 0x1d29, 0x8, 0x4, 0x7, 0x389, 0x7, 0x1, 0x9, 0x6]}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003000)={&(0x7f0000002dc0)="d1b011d53b705690bb5fac16f721c05f14e2c206c2c81be16454b7c0aeac4850fd375fbb8d3f089e0df1ecbbf845dbfa31630c911b18685daeb48b6bc0902fe8b04bbecae0dada51953cd42ba82cb446280f1418f8354fdcbfda0cbb4a2fd776fc5bdaccef7c34c4ac557363ccde6b0061798bfc519bf797d7f6c9a42036fb5367e0404d013dec1587272190424258f49df9faabbb4352ed839b14ca08de6a000b4848b9090ca2677536d6dfefcb2abf116b7c0f344da35ab44750b7d3a3d97e15953f1635d19ac8a32d1d1788970706dc6d0e43451bc18fccbcd98ad178", &(0x7f0000002ec0)=""/3, &(0x7f0000002f00)="06b0b6131451c635db6569b7d9323228af77ac81e1c289a1b2229ba17f22fcb476185cd171b6ebad9b5c331e84a26adb0320ede80c0269ccf8860fee74a5ffa22458d7d264f940a23dda780d3a58d351f753667c84b499fcc00d947ef6680982c4743c14e82f4ecdf0be988794edceeca967b2a85892874f5382afa8fdcab74f4dd2f49e8bce52bb", &(0x7f0000002fc0)="e0f7aebf7fe2e289204f67f27532828c65a05f684bc40922d76d6588063836d0", 0x9, r0, 0x4}, 0x38) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000005ec0)=[{0x9, 0x1, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)=""/237, 0xed}, {&(0x7f0000003140)=""/125, 0x7d}, {&(0x7f00000031c0)=""/45, 0x2d}, {&(0x7f0000003200)=""/59, 0x3b}, {&(0x7f0000003240)=""/123, 0x7b}, {&(0x7f00000032c0)=""/206, 0xce}, {&(0x7f00000033c0)=""/2, 0x2}, {&(0x7f0000003400)=""/116, 0x74}, {&(0x7f0000003480)=""/2, 0x2}], &(0x7f0000003580)=[0x6]}, {0x8, 0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000035c0)=""/21, 0x15}, {&(0x7f0000003600)=""/45, 0x2d}, {&(0x7f0000003640)=""/89, 0x59}, {&(0x7f00000036c0)=""/233, 0xe9}, {&(0x7f00000037c0)}, {&(0x7f0000003800)=""/175, 0xaf}, {&(0x7f00000038c0)=""/100, 0x64}, {&(0x7f0000003940)=""/43, 0x2b}], &(0x7f0000003a00)=[0x6]}, {0x7, 0x1, 0x0, &(0x7f0000005e00)=[{&(0x7f0000003a40)=""/224, 0xe0}, {&(0x7f0000003b40)=""/166, 0xa6}, {&(0x7f0000003c00)=""/171, 0xab}, {&(0x7f0000003cc0)=""/39, 0x27}, {&(0x7f0000003d00)=""/253, 0xfd}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/4096, 0x1000}], &(0x7f0000005e80)=[0x1]}], 0x3) r5 = syz_open_dev$dri(&(0x7f0000005f40), 0xfffffffffffffffa, 0x248100) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000005f80)={0x0, 0x5, 0x3, 0x9, 0x1, [0x0, 0x0], [0xff, 0x3, 0x4, 0x2], [0x10001, 0x9, 0x500, 0x9], [0x5, 0x1, 0x10001, 0x3]}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000006000)={r6}) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) openat$nullb(0xffffffffffffff9c, &(0x7f0000006040), 0x80102, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000006080), 0x40000, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f00000060c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000008780)={&(0x7f0000006100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, &(0x7f0000008600)=[{&(0x7f0000006180)="9e9f26b4236b45f94c74db6752b56290e013ea43", 0x14}, {&(0x7f00000061c0)="3966fe4809fb752da30ed360d43f15a60d344576d9af7a6e541e532404585459e8dcb9b1515f6d8b25fa0a5c1f802c7edde2e352899731f40b4e64a2efd9eb3d90a51950b0971ed16074e3210c", 0x4d}, {&(0x7f0000006240)="2a4be8047071d1a105800256698a61f5d1ee3c185134e5cddae0265875eba861a02567054bab38e3f94f8c7226d12fb5f9a0404f00dac5c1062fefb46e0231ba2270d6221b25086d7e11f6c822e6c09d7b0967e2ad1e3c06197c8e09af6985677e57423f52c5a87b7c3cecdbdaa35270928ce9163f3fab51edafe583051080b98b0742d21c8c11e1dc52827feff23483214d146e21a95e5104171e6fb321b34121e5e2c07beb1915572e601bd6ecf18656fb0d5050fdfab70ce836700353f60b26e078b901", 0xc5}, {&(0x7f0000006340)="5bbe562dbfbf29e6b3304163263be4dfb144496cbef1f117f209642bcb7da8e26c3b43b0b8302bd5980402e64f1885378adffd45a30741b7733581f7ae55a3259ee4db15f36e93f67bd368bef50d4ead03261bcb22bcc2879c6eefd55002f4761f5dcd745b4551ddc311ed75958d93eba51c1d69a9ed4a78fcd899edc036", 0x7e}, {&(0x7f00000063c0)="a499275a310b8ebb1adfde28c4a4798160d58187f360d8072f615a253d1fa41f3799a55f19b6445200ee547b75b1638af9fab588cb27b79df95d750e108742ba0c3119c815cb3ee75590df8a3687732fa8abb1f13f9b494b782ce1f057f4baff1618c87538bd816311d1b5f2c4e5c99d92aa9b2383755a98ffd6c4f568b4d9b409a76c0d69660a", 0x87}, {&(0x7f0000006480)="b1964976ffe07d769882c9655608", 0xe}, {&(0x7f00000064c0)="95a1a4f8aef63fbdcd12e8977cf29f2273c499bc810b61f8d4247525210ce06a39047a16189ec94066b9557b1e727e8bf3238247337244b0540914a12bc14a426e6f7ba2cb564a20237715ab6455204034be8e1a7129b9ecf487c32ec0a763770dc7829e3a0abe0c42942bdb1d15294984df073d7b6bc5a6c8ddf735daa31f504ff965a9f984b73f0be9e932c64447b38e0b0af985468f0f90087b566aba053900b458aab3176b2087b7802057de485d4fd4d28e71a9c19f1bf9cfeeafbd77ab0493a305842570cd98b1dd1753b25bdaff2c5d0d368d1fc832fa9f3cd9a650247b9b4061058a6e84", 0xe8}, {&(0x7f00000065c0)="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", 0x1000}, {&(0x7f00000075c0)="58a213dceb98", 0x6}, {&(0x7f0000007600)="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", 0x1000}], 0xa, &(0x7f00000086c0)=[{0xa8, 0xff, 0x0, "eb907969309d20b86e600f82e8c96a5d5ddc0b060e65e771de2becbac45586296b317d933de01f8666c28d6d24b4468c5c47497cef552453c5d51a17d4c2036fc4e72c5898ae81ce6e95086346c137d7c347f95ad7200c7ae20d55d7c7a00d02b4f7b9194da12710a1b50c2d67d7d0213eb7c2ba020bd590219a19fbc6de9d627a8b290e6fbec371212e8367625d080c105d56"}], 0xa8}, 0x1) ioctl$CEC_ADAP_S_PHYS_ADDR(r7, 0x40026102, &(0x7f00000087c0)=0x6) 2m13.853645588s ago: executing program 5 (id=7636): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0xac3, 0x2003ff, 0x8, 0x7, 0x10001, 0x1}, [@TCA_NETEM_LOSS={0x4}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x3, 0x82, 0x1, 0xff63, 0x218}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1e000000}, 0x20000000) 2m13.577860904s ago: executing program 5 (id=7637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0xf6, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500"], 0x1c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) 2m11.45195083s ago: executing program 5 (id=7642): r0 = socket$netlink(0x10, 0x3, 0x1d) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x202) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@multiplanar_overlay={0x502, 0x9, 0x4, 0x0, 0x3, {}, {0x4, 0x1, 0x2, 0x7, 0x3, 0x2e, "2aad1020"}, 0x7f, 0x3, {&(0x7f0000000140)=[{0x4, 0x3, {0x1000}, 0xfff}, {0xfffffffe, 0x2, {0x9e88}, 0xfffff2e2}]}, 0x6}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="70000000b377fe8300"/20, @ANYRES32=0x0, @ANYBLOB="0000000088520300480012800b000100697036746e6c00003800028014000300fc0000000000000000000000000000000400130008000100", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000bb08000a00", @ANYRES32=r3, @ANYBLOB], 0x70}}, 0x4000080) 2m11.237233137s ago: executing program 5 (id=7643): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xafc2, "abacd26337e6dc06320ee04200"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000022c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 2m11.081682205s ago: executing program 5 (id=7644): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x80026, 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x416f, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r5, 0x567, 0x1000a387, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000f00)="9e"}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0xffffffffffff7fff, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0) 2m3.33137621s ago: executing program 37 (id=7624): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0xf000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') read$FUSE(r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000140)=']@+\x00', 0x0, r0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x98, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x54a}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xa0b8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r9, 0x0, 0x201f00) 1m55.091337049s ago: executing program 38 (id=7644): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x80026, 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x416f, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r5, 0x567, 0x1000a387, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000f00)="9e"}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0xffffffffffff7fff, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0) 1m27.919228276s ago: executing program 8 (id=7764): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x400, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="bafe3a52d8944d83c9ca4dc628af54846da317e97fdb02d49cef9823f2e9566ee6ebe7158ac279f052ab124e7214ea4a1e9055584473b98e843461ae5284da37e1d9dbb2c591880aa70da49c267ef07b9c431b749e7aa69725a4b6ec220db7fd03e456d80ec37e3883233080bec0d7c707dcba451e971604", 0x78}, {&(0x7f00000005c0)="4b72383d4cd500240a319cdd6012a14d1b217cd8db7d9517602a", 0x1a}], 0x2}, 0x11}], 0x1, 0x4001c00) 1m27.409889065s ago: executing program 8 (id=7766): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x102}}, 0x1c) 1m26.861154736s ago: executing program 8 (id=7770): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xafc2, "abacd26337e6dc06320ee04200"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30002400002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 1m26.484357378s ago: executing program 8 (id=7772): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0xfdff) 1m26.105989606s ago: executing program 8 (id=7774): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7fec, 0x3, 0x5, 0x2}, 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12011001a0b4c41058044a70553a010203010902"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r7, 0x47f6, 0x80ffff, 0xfe00000000000000, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0x10, 0x3, 0x0) 1m21.345598129s ago: executing program 8 (id=7784): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone3(&(0x7f0000000340)={0x14010200, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x3f}, &(0x7f0000000140)=""/16, 0x10, &(0x7f0000000180)=""/176, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) sched_setparam(r3, &(0x7f0000000300)=0x6) r4 = syz_usb_connect(0x4, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="b968b156666d2c98cd7d61e94f34ad22c8d0367947d58ca8c1919ff51e5bbc2bd70bfcfc032d8c7c97e480c047187de66bbb1bfe242162f72d39ae016fdabab62908fdf3a554286149f80f6685dafe2a9a42b2c18913503c1390233235e4bc4ac679ea8052adf3683528fb6d7549fa0df65c0a7f69efec7f45ae0f8a9c6cae09b28115dee74dc1a81857d5fcfd157f991e78240e9118a39e7ddb1534dd49ebabb65174694b35ff738980b587cb60983a9b81e7e815e0ceecb2c13e166559acfe9e19934c4104dabd091020dd4eca58a2be9311f8e8978668ee948203617a56821044892ac89ca9387578a27156c88ec6d1d663647d982b6b667d1bc596712f596464e949869503e506f2f32fb29e0ea99aa4d7f719f90b36ccd8f85de645403976afd4dce80f6918066d6b29024c6383b2a8667755501c75d68f2596e45cfcf6c3dc2c812c1fd74b28f9180063d6d2ccf6682d9d1112e4a7dddc3b829487b0f99107e5a1d4b4cb78cbf9fe5f55a94ddf89d9a35e8746d999c45c4c642f50580f70749cbee3cff1e08fe93bf32b12c709eac6a32c16747fd3eb4b08b29bc89b6adfebf5ee56d605e62a9e1819fa9cb736b694b31d34b8370e3c4f9ceebc09281bbf43f602d01028582e8e780cdeef78f242b90f8f05f98ae2baec02cfc7f03c932b747dc8d5ca8ea18b0cb92930544584717ce5ddbaf92bda710f87cc1938dc6d70c120b8d009bc51a3093ff925d20252ec4e3d37cd09e86733feda88aced5a966c5817dae2db7fde46b2895b1641a7f1b7ff83c3b03860345f84a4660f0f42d38cf58ad42659b73e8dbf42440ce5f033b79a44ea18fd9a532192971d1e72cb8b34a8bf930a3eabb1243ec58bb641aa78c9c7802d77605c8c096aef1cba11d525ea86d5a68c14c2707e451d937cad37c4cb8b72c1df46c71e1a3eebabcee6c9f012e7b948813ed6c9cbfab28e8c9af335ad91ac7f01a61319764dd04dfeb7e67eb0a11505ca27206d3638bd1137b6161e77c9c360f1bc8f6e073d1915798cf92a745897f7ddc7a2a23990e8ffe447895b0c50820fe178690b7da04097731bfffbd5e5e53112b96cb55b2697522cb17277ef58a936999ff56f12e21fa453d2d0a06b809b7f3ca7c6f27854db2953059019297e51007269436e73c9b5ebd56cc3b735402a4c5f5970d6ac01f6fa2f9dd513a9f059076c52c51ebba885d8b53c3f5497a0e3cb7f1be3a04615c14abc2c1c65300c9fd88d1674788a1d9cabd0f77a21289ea4693ce07963fa7594f2691e9487cd51fd2bf7a88a98ffa4db02f079a4faa0f80c9fe0b791ef17323e4f81a0b2bf593f85cb5b65e6b3a5077d47163c93853d93328133cd1fde1374ad25f64b966f5753ff9d4ca3c1e5c9829cec6290c686921488a630e39d1f58433144284196e3f11784ae6c5c9a8dee424384c880b16846013fd8e6e75f93aa95ba3b332b52b69089031ae949c8a804f815535c54cc31bbe65a7946c2f824fe8beefe94cbc4125a7b0fa079c68980de7b23a3199098bc8da64626cb010ace7a2df3e5401af135331b1de5458b34e1e633cd0f330b0b46d4caa82a1029a36828faa2ababb78f2ca3d5d7b0d46883169e219d6e3817c288bd47e782b30cf5bb2a1478b2ed77e93221ab6154a19d14d8e89edba301abf1217d57252484afe6185842e8e8e8e0ad5b94e5e3249c7a0ab281af505cc14c2ce66718d3900a07170bf26b923488c1b55d4cbdc0a9e2905a294902916837cb7081f62dfa8cb20e14402be716199a9954921105d568ecf701b75e43ee002af132a8cbab6006ed42266688a0d1cf1ebcb65efaf380417ff900d6e17ae2b8f219a90357a58fcd420ab6fee1c10a4d0a727344fb7e464b35d630ff6217a0688b8df6386af273ed671b68c311c67a08eaa3eba50c0fb6279f340d886fbac466014015c71a194c309fb1408f087d86f9c1a582fa9e7d0042ca0699b64a489ff57d7b58faac3e5414589a5afc6b7a4af173c830ec060e4859ecf77a6884df004e1fb02f1e734bf7c0ae1273c1dadf990b41d6be9b11d65e927649cea1c1dd1a9e25273545fc78b062407f1b50c743fa0d89ddb25cf207f160a67e7fa2288f16632b03e2ddfbf127fc8a5cf4559edef4fa86cb533dd2f359f2343ca713e406e906933e94f58a1ea4b61f7de619ea9c9370a0ddb08ce85076bc6bd3f6cb6e05e8e80cb141f3f22d75b40e9ed7144a8ea0d903898901575743db7104f080807eae6cddd0f805588324762ed2f58942945cc8a92170e750efa0df4a02a95606544a43889c0b32a64ce89c0ffec8b71d29f5f79154f6a5501d33367a675a45881dd0e24e8dd63ee0f8f74705c22a9741394633c1418eb276bbdecddae11b38778e1e63820b85be934d35135bf7c6f49577c4406810e5633a91303c4be2f459f5a7efcc164d1d9365ba016fbc1ab2f69c6388c656b453d81ad42984cbc396ba7265b132254c6670a4da8aa46d9c39a9b7a14104db143503895d45c9999e34dcf47a82f6a578ecd095f718dea11b54ff55cdefd1e7409a29da6d4341312a2f68c93af954bdcdc418a4bbe181c383dfe937003a70a9c20e8eb1b2d7584469c72116dbf7d7a5740a7f2f52e3f5ea86441b679797490632630a0b2eec116e308a53cc319487badcca3c92b0f58e22706832f7d72468ff3efa0626278d67960fd4a93100e2e7103b574d4be0eb754130653c07926adb55c1d1d2bc27442c1d35c28daee2a1d2c1b77af9a4e9a946e943a52cfff29708066eb092cd4975d448687f35af59ddc6807ed7007d87c1cfee8c72fcd67ba1b0719947bb1166fccb7555d0fd3f3c590641aeaf00166fe8821f25bf0135bc5624fb55386c7fec33769ce804be89b7f060b40b33a84e801df4db0d600fbc8d85c3cd6413fda7f38a8e286fbd15dd706c14f91c8697a18bd083c14d7bf7acc34882326f29b720951c88ff422508784e6465738ba00a7fd8af61b439bf65ff0bd67da3f9b1dc738844183291992922519d2b889a27ed29afe50c8e554a74f05fa135646b68b28d096c6162183cd638dfbf31194132ed339cdb9c056d231f38d2dae570993cafa58fbb5d7931b1e6bab6fe48ac4ec72a56e19d72ff13bf05210aaa4bf3329fcae945c9f3489399ab81493520a412a057deb6e684d2101f9d5fa4516e1a7624281eb0bd3b3648d1fa1aa75ef03d48d728b408ad018ea0ec113786701b47d06125bcf53cc2643a5e36905320d9308113cbbab4ff8f6d62dd9a354ef859719a6e6d397fbd69d6cf6655b6ab5a9b11eaf779b7a86346a8da6659796536c2c84df5a06bcb109b475707ed5c5df66dcf98e0ce91aa3a892439ecdda9ba523f7aa98e2967c5a14900e916b3e081017bf690c946d48b66e5338691eff71223856b22c3015b6cf11636bebd13afe9b45e0228830c6d6e8a2fe5410273d7725068f328cfe39f0af42005cd8e3afb2fa9805a7a196c018884a6e3be4d197d51ff057a0f58d25942f20ba389678c36b5916427be6e317bdfd3eb63b1c59183a6b2355e9f18c77f6b1d7c94a7ba519e418c61aa72c470080a26fe6c9c84d98c8583b3b10f1b944ff835cb37502d9af3d95831d3c2ca050f653b260509675d28275c2747e113e1142f8848f7ec978cf3131478d7489bebf4fa4fabf648cc3dd0585bcc3459a508dfb474d99c79d8a596d36c7871774d0b0f534d2fc106593daab282f2c307055fbbc520d67128f775949a1b074aae51dda985b97d5660f8d2406545cfdf0a8e713a5e1a8e55f09c6e5f63261ca2f1ba658d2cefb263b2b56ad7f76ce6ce2cdfa3a28af68a720b497ac13bd8c4f493324ebc4e6ba85ac4338e46d1ad4c790c578df545a0b7377de86f6b1b7c87a0a1fd81823e4e8161edfe57ebd8eaf6cf9070fb3be74136049f88fe7142d7cb76918c4b635a0723eab8c6f2237827fdfbe62169ffc468a0301e823f8f8bcd2f01783a7175ed6b34def6554fa59e244c64728cb34bd85884b99fb4e8a75e48003ae839f297fab45b58178af73144822feffc70ba9cb23686f4c843e6e52f4899140c815a108db60279888a0f2b06eeb449d29d09014c16b16a203dea90ca8cb373d6d2c014ba548d384fc22dc38cf38ca1b91b8b5d67ef8f4dbdb5af7d9a0156b9d68346199ea5c269bc4a16d49626ef6a979225319dc8370a6b9f11c8ce643b7faffa704ddd131bc45ee8f334137b526d83bc9a135e976c917078130f484ca3dc43532b185b2bd43ec86cdf818ea1e8aa63a358ee735485401e01ad41a037ec1e539dde6ac517267706135f70c2abcaf445742c56577b0df078f2c122ccf98278155322f2846a4c5f7d3700908e91483e5a4b93b368f90ebe46828b0437034c0ad2a408921fc4bc357f31378f5994a6a052afb85db477480212682839bda62ca1b46c78c5c2b1a22279a1d06b68e3faa92fa0d1524558ed52a7237ee88438c17613d8ac6f3c721bbbd17e6612edf2d39586b8e7ef9d034b7ad0dbb640d805cbd43da51086ac12e5d81afa8607d96636af5fdf63fa8d77413c4162e0e9400f9767b8a3a2797ecd893e63a849c44ac02743850eb5356eb48544bcd47d8d501ac600bf60661fcddbeecc8a42b87954172cad6ab48e8a32ea81c4da37cc43a8aa43da64c93184de26b737f688d8a4ae870619fef7406861508a31c081d49b4986a05e2694317bc200d5d223063992cf19728ecfa24868933ba2c947eda21b0d1531ea3bdcced102e95afcbd9d6e64ef2dd3dd7acedff0d355c85cbd7da27a66250b382c9e131365d76100c8058ba161baa213c21e6c3d2d63e1c0a5b8305b3998e573e3a116bfbd7a37e4a7f6c91d0dd09c3403c72385c8c02cbb70ba25c55aed2cbbcf794fe2a4f85b6204c80cfbc207f5c745f842c3bc3207ad1c00e0b650727b4231b9eff0b090f1cac6518ee6d7f4586a04c1a4ee8f3037aa7c4d391451fe33fe154523708afcedd406e9980980dcbc7f1c4abecd0e5d29ab8139bf537aaad00331b0ce2c2ff5533d0ff10b626a9815db6c89facf4d153023d70851a709ea06b5136f441d7c7c14e91ab3b6e8169cf3231ac0a88f132e92464a371681df72f6b6e1fbbba49467796b36276f31bcf6c0958e94ca4226872a79fd6adf0f9bdc4c267a5938a508faccce6f1dee6526311951ad59f56b8f73c8daf38a27589ae333b866e510f0a77ac25ff8a549bfec81d640bf76547eb9cc397d6733fb00205ada6fd80b59434984f5aceca7497e59018e7e6b87d60459ecfb6ecb2d01caa2eea8aa34bebd05745e55804eec6c49994b1babe2030c35499ee298ed453a121e996a6c43b131e161abec0928e25f26062494bab7fd35c073d576beb0bd29700f4bb0fa252dd06ae0f33543a6074198bab05930e294ab5ba3713195a0efda4b7202ffcd7f0f02799dd65394cb21cd9b67312d8bc4c9a5b3d201c0d0be97410603dc9cb38481e0756b01fa1c8803b06a980b20616a6f85ee8e152c54a2026b17db00d0245ebf19a868ddbf2002d60f8e96a1f54b1dbac299f5922c8d4f43b838ebc68f40e5ded4b76b6545ece12c1df7720d71035aae4ea32c4a430a4c9bc056d51e6b121c8d48576814c8f61bd597ea2ef437553db7fb2d9812e0b32a8f22b0a36539ba1d7e9b3cdcbaedc37357ce628445016bc8a0fbeb68561ffa397f48a5e17fbefe4cf8c2cab080838a8fb66248e2bbcd6e336637f9a18e665cc34da8b91332df633307dfd9b8cf387b86bcb9ec780513f5f267f08d9de7a1524486bd920b36f28bead285"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x60, 0x18}, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 1m14.809451195s ago: executing program 3 (id=7803): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_open_dev$midi(&(0x7f0000000340), 0x0, 0x40c01) r1 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe0800"], 0xd8}}, 0x8090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x48, 0x8, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000040}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a0100000000ffff008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1m14.122561128s ago: executing program 3 (id=7806): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x24, 0x0, @fd_index=0x9, 0x9, 0x0, 0x1000, 0x4}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m13.560460281s ago: executing program 3 (id=7807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x7}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000003000000d4000000200000009502000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1d, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x10, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c000004070000008006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x100) syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x40afc, 0x0, 0x40010}, 0x11) syz_open_dev$usbfs(0x0, 0x4, 0x4000) 1m12.449779208s ago: executing program 3 (id=7812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd700700000000e000000200000000c8606a4b7c7a9fc60000000000000000000000000000000001fe0000000000000a"], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000003000003000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0) 1m11.959044626s ago: executing program 3 (id=7815): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffe0001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) 1m11.712834758s ago: executing program 3 (id=7818): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000040)={0x1, 0x6ee2867a}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x6000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="124c179ce63e53850900c75220e4106380d2d1017f00000002240001000010009c3741b812bfd4aa8cd7145c00"/54], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) dup(r0) (async) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000040)={0x1, 0x6ee2867a}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x6000) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="124c179ce63e53850900c75220e4106380d2d1017f00000002240001000010009c3741b812bfd4aa8cd7145c00"/54], 0x0) (async) 1m5.88584205s ago: executing program 39 (id=7784): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone3(&(0x7f0000000340)={0x14010200, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x3f}, &(0x7f0000000140)=""/16, 0x10, &(0x7f0000000180)=""/176, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) sched_setparam(r3, &(0x7f0000000300)=0x6) r4 = syz_usb_connect(0x4, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x60, 0x18}, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 56.523069152s ago: executing program 40 (id=7818): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000040)={0x1, 0x6ee2867a}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x6000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="124c179ce63e53850900c75220e4106380d2d1017f00000002240001000010009c3741b812bfd4aa8cd7145c00"/54], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) dup(r0) (async) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000040)={0x1, 0x6ee2867a}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x6000) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="124c179ce63e53850900c75220e4106380d2d1017f00000002240001000010009c3741b812bfd4aa8cd7145c00"/54], 0x0) (async) 53.055348167s ago: executing program 1 (id=7878): syz_emit_ethernet(0x6e, 0x0, 0x0) 52.705140904s ago: executing program 1 (id=7880): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(0x0, 0x2, 0x800) ioctl$MON_IOCX_GET(r8, 0x400c9206, &(0x7f00000001c0)={0x0, 0x0}) ptrace(0x10, r7) syz_pidfd_open(r7, 0x0) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000440)={0x0, 0x4000, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x700) 51.214095132s ago: executing program 1 (id=7885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400038008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) 50.900232433s ago: executing program 1 (id=7886): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffc000, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x24040800) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r9, @ANYBLOB="4cc4e2a78b1c22763a7fbf504e5988b0f6edb3011c665a7a265dc7d0fd94942fa2011c2220d6"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 49.910823089s ago: executing program 1 (id=7888): syz_emit_ethernet(0x6e, 0x0, 0x0) 49.529517735s ago: executing program 1 (id=7890): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0xe825, 0x3400, 0x1, 0x295}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/133, 0x85}], 0x1, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) 34.505489408s ago: executing program 41 (id=7890): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0xe825, 0x3400, 0x1, 0x295}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/133, 0x85}], 0x1, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) 29.656323977s ago: executing program 2 (id=7960): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200330000000000000000000000000000000000000000000000000000000000000003000200000200000089000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000fc000000000300000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff000000000000000000fdfffffffc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000000000000000000000000001000000003c"], 0x1fc}}, 0x0) 29.221436763s ago: executing program 2 (id=7962): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = fsopen(&(0x7f0000000280)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000001c0)='uid', &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000806000186dd06100004aaaaaaaaaa14fe8000000000000000000000000000bb000000000000fe8000000000000000000000000000aa7e411de6c2e2b17952a8b1bda7316a23e4058a3f8834f3e272db5bcca640e42f052da880d0596e6ae4c18158303e9aa667dc757c4d09282f3c2ad524f2ee7eac38201b2df8fdde85a50377d6e2604260554876785b0680a93c1bc93b2a0e978a71e15bad13b693a5408360b9e9e5130e756c45e5fc711d4cf044d4eb"], &(0x7f00000010c0)={0x1, 0x1, [0xfcb, 0xb38, 0x703, 0x34b]}) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='\\\\\x98\xae!\\A=3\x06\xc7F\xb2?=']}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r5, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r5, 0x407, 0xc000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xd8, &(0x7f0000000000), &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r0, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) 27.977425149s ago: executing program 2 (id=7970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="44010000100013070000000000000000ffffffff00000000000000000000001aff010000000000000000000000000001000000000000000f0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000000000000000059b5abdd996585cb4ef84abd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001"], 0x144}}, 0x0) 27.560031829s ago: executing program 2 (id=7973): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100ffe405000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x3, 0x7, 0x0, 0x1, 0x1000000}}) 27.018694547s ago: executing program 2 (id=7974): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000020000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x823, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=ANY=[@ANYBLOB="7f039811916e11b45c33212fbd5e5df639515473b0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb60000"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) 22.574885334s ago: executing program 2 (id=7987): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0xffe0, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x0) fadvise64(r2, 0x9154, 0x5, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x8, 0x56, 0x2, 0x9, 0x1, 0x8001, 0x401, 0x4, [{0x4, 0xfffffffb, 0x4, 0x1}, {0x2, 0x9, 0x2, 0xd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r4, @ANYBLOB="010028bd7000dbdbdf2505000000240001800d0001007564703a73797a32000000e40c0001007564703a73797a30"], 0x38}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 10.155965008s ago: executing program 0 (id=8028): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x15, 0x6, 0x5) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@remote, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x6, 0x7, 0x5, 0x9009, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xf}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r8}, 0x38) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') 9.857000341s ago: executing program 0 (id=8029): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x38, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb", 0x5dc}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970005e03c00fe8000000000000000120000000000aaff020000000000000000000000000001"], 0xffe) 9.230265459s ago: executing program 6 (id=8031): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000400100008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 8.878376342s ago: executing program 0 (id=8032): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x11, 0x84, {0x84, 0xb, "c0962048e46221a5cbea8029c86ed75a62ed44cac107da71604e8377421c0e7be05e85b677358d8b96515a27d36060ab9ae494da26306d0a6613e094f9d7cc916e1097c642ccf9906a586bdc134d6d499b550e7e1a4d06400528ce7a7d67c3f51530662a06e50b54e621f61793f0ab5533dd376b8f24fba4cf2fcdfc1409d2c6f5d2"}}, &(0x7f0000000100)={0x0, 0x3, 0x18, @string={0x18, 0x3, "6f81784670e04f61f688732d28073172684bff49bdb3"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000f050000000507050000"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x0, 0xf7, 0x2, "0bc9a97f", "389b8c02"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x6, 0x5, 0xa, 0x101, 0x4}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x6, 0xf, "fbb2bfd53e381c95427c08b8d6d055"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x20, 0x7b}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x43}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xf3}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "5c87"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "04ae"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x10}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x3, 0x5, "a727cd51d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 8.553732331s ago: executing program 6 (id=8034): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000580)={0x100000, {{0xa, 0x4e22, 0x200, @dev={0xfe, 0x80, '\x00', 0xf}, 0xc75}}, {{0xa, 0x4e22, 0x1, @private2, 0xec}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000003c0)={0x8, {{0x2, 0xce1f, @empty=0xe0000000}}, {{0x2, 0x4e21, @local}}}, 0x108) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x3a0af83a) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c0014"], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x11ff) 7.87778369s ago: executing program 9 (id=8036): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 7.182963629s ago: executing program 42 (id=7987): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0xffe0, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x0) fadvise64(r2, 0x9154, 0x5, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x8, 0x56, 0x2, 0x9, 0x1, 0x8001, 0x401, 0x4, [{0x4, 0xfffffffb, 0x4, 0x1}, {0x2, 0x9, 0x2, 0xd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r4, @ANYBLOB="010028bd7000dbdbdf2505000000240001800d0001007564703a73797a32000000e40c0001007564703a73797a30"], 0x38}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 7.141496777s ago: executing program 6 (id=8038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003880)=""/4111, 0x100f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000004c00)=""/4105, 0x1009}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}], 0x4, 0x0, 0x0) 6.852634573s ago: executing program 9 (id=8039): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x24020400) fcntl$setstatus(r4, 0x4, 0x40200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000020105000000000000000000020000084e2a5419597656b7e98908f691bfb2caa405bf100a0ac5bb1c6998ab779b7a97b012"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 6.736707236s ago: executing program 6 (id=8040): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x204}}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x59555956, 0x0, 0x0, [{}, {}, {}, {0x0, 0x2}, {}, {}, {0x3}]}}) setxattr$incfs_id(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) 6.170945473s ago: executing program 4 (id=8041): symlink(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002002000e0000001000000000000000008001200000000000000000000000008060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff00000000000000000700"], 0xb8}}, 0x0) 5.969354285s ago: executing program 6 (id=8042): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="280000001000340300"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 5.265578854s ago: executing program 4 (id=8043): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffc000, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b861a729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753844ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8fdffffff9e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b963893e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x24040800) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r9, @ANYBLOB="4cc4e2a78b1c22763a7fbf504e5988b0f6edb3011c665a7a265dc7d0fd94942fa2011c2220d6"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.03338201s ago: executing program 0 (id=8044): socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040000000000000000000000a1", @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000", @ANYRES8=r0], 0x7c}}, 0x80) 4.268327575s ago: executing program 9 (id=8045): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xafc2, "abacd26337e6dc06320ee04200"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c240000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 4.15239745s ago: executing program 4 (id=8046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000002000000000000000000000000000000000000000000000000000000000003000200000200000089000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000fc000000000300000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff000000000000000000fdfffffffc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000000000000000000000000001000000003c"], 0x1fc}}, 0x0) 3.953044643s ago: executing program 0 (id=8047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ee, 0xf83, 0x8}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x1, @local, @loopback}}}}, 0xfdef) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e0000002000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'batadv_slave_1\x00', 0x1}, 0x18) 3.83047801s ago: executing program 9 (id=8048): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe"], 0x610) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x111, 0x0) 3.754719805s ago: executing program 6 (id=8049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket(0x2a, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x300, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x0) 3.593492977s ago: executing program 4 (id=8050): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) sched_setattr(0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000180)={&(0x7f0000000080)=""/136, 0x88}) ptrace$setregs(0xf, r4, 0x9, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000b40)={@local, @local, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x62fe5fbe6441e434, @remote, @local, {[], {{0x4e22, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{0x0}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x80000001}, &(0x7f0000000400)=0x10) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x80000000000000) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) fsopen(&(0x7f0000000a80)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB, @ANYRES8=r5, @ANYRES16=r7, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10001) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB]) 3.549139996s ago: executing program 9 (id=8051): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80cb59acbc0413a1f8480f0000005e2900421803001825e60a001402001102800000121f", 0x2e}], 0x1}, 0x0) 1.225933209s ago: executing program 4 (id=8052): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="44b8", 0x2}], 0x2, 0x0, 0x0, 0x8202}}], 0x1, 0x0) 577.674081ms ago: executing program 4 (id=8053): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x30004081) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16], 0x18}, 0x40c0) 244.290375ms ago: executing program 9 (id=8054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c150000000000fffffffffffffdfd", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r5, @ANYRESHEX, @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) 0s ago: executing program 0 (id=8055): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) syz_clone3(&(0x7f0000000300)={0x100058000, &(0x7f0000000040), 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0x494, &(0x7f0000000480)={0x0, 0x7079, 0x10001, 0x14, 0x110}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x49, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x3, @pix_mp={0x8, 0x3fffffd, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x4, 0x3}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0]) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000200000470207200000000006004dee00000000000000"], 0x60) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000480), 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) unshare(0x20000400) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x41}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): yz.7.7499': attribute type 10 has an invalid length. [ 2025.501680][T30642] team0: Device ipvlan1 failed to register rx_handler [ 2025.543976][ T44] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2025.790611][ T44] usb 6-1: config index 0 descriptor too short (expected 65297, got 77) [ 2025.843097][T30651] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7504'. [ 2025.897305][T30651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2025.919854][ T44] usb 6-1: config 0 has too many interfaces: 252, using maximum allowed: 32 [ 2025.928647][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.016768][ T44] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 252 [ 2026.292855][T27414] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2026.308395][ T44] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2026.494149][T30664] netlink: 'syz.1.7503': attribute type 1 has an invalid length. [ 2026.596763][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.617837][T27414] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.630536][ T44] usb 6-1: Product: syz [ 2026.634866][ T44] usb 6-1: Manufacturer: syz [ 2026.649946][ T44] usb 6-1: SerialNumber: syz [ 2026.685983][T30662] gretap2: entered promiscuous mode [ 2026.704878][T30662] bond6: (slave gretap2): making interface the new active one [ 2026.715806][T30662] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 2026.741071][ T44] usb 6-1: config 0 descriptor?? [ 2026.746435][T30661] binder: 30656:30661 ioctl c0306201 200000000640 returned -22 [ 2026.833312][T27414] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2026.897324][T30663] macvlan2: entered promiscuous mode [ 2026.903038][T30663] macvlan2: entered allmulticast mode [ 2026.912879][T30663] bond6: entered promiscuous mode [ 2026.924007][T30663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2026.937692][T30663] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2026.985353][T27414] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2027.017603][T27414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.056889][T27414] usb 1-1: Product: syz [ 2027.071022][T27414] usb 1-1: Manufacturer: syz [ 2027.092498][T27414] usb 1-1: SerialNumber: syz [ 2027.144828][T27414] usb 1-1: config 0 descriptor?? [ 2027.195864][T30638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7496'. [ 2027.205193][ T30] audit: type=1400 audit(1755950626.384:3683): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=30634 comm="syz.5.7496" [ 2027.224765][T30638] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7496'. [ 2027.233994][ T44] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2027.274684][T27414] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2027.329084][T27414] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2027.401069][T27414] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2027.426041][T27414] usb 1-1: media controller created [ 2027.505667][T30663] bond6: left promiscuous mode [ 2027.559562][ T44] usb 7-1: config 0 has an invalid interface number: 17 but max is 2 [ 2027.590836][ T44] usb 7-1: config 0 has an invalid interface number: 36 but max is 2 [ 2027.619972][ T44] usb 7-1: config 0 has an invalid interface number: 223 but max is 2 [ 2027.633637][T27414] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2027.766315][ T44] usb 7-1: config 0 has no interface number 0 [ 2027.798109][T27414] DVB: Unable to find symbol tda10046_attach() [ 2027.811793][T27414] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2027.833450][T27414] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2027.853549][ T44] usb 7-1: config 0 has no interface number 1 [ 2027.858311][T27414] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2027.859835][T30658] netlink: 'syz.7.7507': attribute type 1 has an invalid length. [ 2027.859857][T30658] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7507'. [ 2027.920574][ T44] usb 7-1: config 0 has no interface number 2 [ 2027.926792][ T44] usb 7-1: config 0 interface 17 altsetting 18 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2028.018295][ T44] usb 7-1: config 0 interface 17 altsetting 18 has an invalid descriptor for endpoint zero, skipping [ 2028.073929][ T44] usb 7-1: config 0 interface 17 altsetting 18 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 2028.084662][T27414] usb 1-1: USB disconnect, device number 36 [ 2028.130449][ T44] usb 7-1: config 0 interface 17 altsetting 18 has an endpoint descriptor with address 0x1A, changing to 0xA [ 2028.187907][ T44] usb 7-1: config 0 interface 17 altsetting 18 endpoint 0x9 has an invalid bInterval 20, changing to 8 [ 2028.221124][ T44] usb 7-1: config 0 interface 17 altsetting 18 has a duplicate endpoint with address 0xC, skipping [ 2028.272972][ T44] usb 7-1: config 0 interface 36 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2028.330135][ T44] usb 7-1: config 0 interface 36 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2028.447044][ T44] usb 7-1: config 0 interface 36 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 2028.466746][T27414] usb 6-1: USB disconnect, device number 28 [ 2028.489927][ T44] usb 7-1: config 0 interface 36 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 8 [ 2028.505404][ T44] usb 7-1: config 0 interface 36 altsetting 3 endpoint 0x3 has invalid maxpacket 935, setting to 64 [ 2028.527450][ T44] usb 7-1: config 0 interface 36 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2028.576773][ T44] usb 7-1: config 0 interface 36 altsetting 3 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 2028.620343][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 2028.659150][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7510'. [ 2028.719966][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 2028.750375][ T44] usb 7-1: config 0 interface 223 altsetting 8 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2028.778359][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 2028.827381][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 2028.871533][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 2028.906344][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 2028.934809][ T44] usb 7-1: config 0 interface 223 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2028.958084][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 2028.979178][ T44] usb 7-1: config 0 interface 223 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 2028.992481][ T44] usb 7-1: config 0 interface 17 has no altsetting 0 [ 2028.999534][ T44] usb 7-1: config 0 interface 36 has no altsetting 0 [ 2029.008251][ T44] usb 7-1: config 0 interface 223 has no altsetting 0 [ 2029.018249][ T44] usb 7-1: New USB device found, idVendor=125f, idProduct=a94a, bcdDevice= 1.60 [ 2029.028221][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.090602][ T44] usb 7-1: config 0 descriptor?? [ 2029.120312][T27414] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2029.276231][ T44] usb 7-1: string descriptor 0 read error: -71 [ 2029.302045][ T44] usb-storage 7-1:0.17: USB Mass Storage device detected [ 2029.334715][ T44] usb-storage 7-1:0.17: Quirks match for vid 125f pid a94a: 2000000 [ 2029.628838][T30706] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7519'. [ 2029.645136][ T44] usb-storage 7-1:0.36: USB Mass Storage device detected [ 2029.658740][T27414] usb 2-1: Using ep0 maxpacket: 16 [ 2029.703719][T27414] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 2029.721350][T27414] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 2029.728660][T27414] usb 2-1: config 0 has no interface number 0 [ 2029.739356][ T44] usb-storage 7-1:0.36: Quirks match for vid 125f pid a94a: 2000000 [ 2029.808270][T27414] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2029.890040][T27414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.905161][ T44] usb 7-1: Found UVC 0.00 device (125f:a94a) [ 2029.917730][T27414] usb 2-1: Product: syz [ 2029.939967][T27414] usb 2-1: Manufacturer: syz [ 2029.944632][T27414] usb 2-1: SerialNumber: syz [ 2029.959903][ T44] usb 7-1: No valid video chain found. [ 2029.962549][T27414] usb 2-1: config 0 descriptor?? [ 2030.003673][ T44] usb-storage 7-1:0.223: USB Mass Storage device detected [ 2030.023573][T30714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7520'. [ 2030.058763][ T44] usb-storage 7-1:0.223: Quirks match for vid 125f pid a94a: 2000000 [ 2030.185371][ T44] usb 7-1: USB disconnect, device number 20 [ 2030.221393][T30696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7515'. [ 2030.290397][T27414] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 2030.296865][T27414] usb 2-1: No valid video chain found. [ 2030.345236][T30723] netlink: 'syz.5.7523': attribute type 6 has an invalid length. [ 2030.362626][T27414] usb 2-1: USB disconnect, device number 17 [ 2030.729609][T30736] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 2030.736209][T30736] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2030.761029][T30736] vhci_hcd vhci_hcd.0: Device attached [ 2030.780826][ T44] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2030.939952][T27414] vhci_hcd: vhci_device speed not set [ 2030.950164][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 2030.963462][ T44] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2030.991194][T30738] vhci_hcd: connection closed [ 2030.999270][ T3015] vhci_hcd: stop threads [ 2030.999470][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.005574][T30747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7532'. [ 2031.012233][ T44] usb 7-1: Product: syz [ 2031.016816][T27414] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 2031.049375][ T44] usb 7-1: Manufacturer: syz [ 2031.050090][ T3015] vhci_hcd: release socket [ 2031.063011][ T44] usb 7-1: SerialNumber: syz [ 2031.089014][ T3015] vhci_hcd: disconnect device [ 2031.095754][ T44] usb 7-1: config 0 descriptor?? [ 2031.154921][T30751] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7535'. [ 2031.287367][T30754] dvmrp0: entered allmulticast mode [ 2031.359891][ T44] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2031.696373][T30764] ip6gretap0: entered promiscuous mode [ 2031.721349][T30764] vlan2: entered promiscuous mode [ 2031.822253][T30766] tipc: Enabled bearer , priority 0 [ 2031.831266][T30766] syzkaller0: entered promiscuous mode [ 2031.836897][T30766] syzkaller0: entered allmulticast mode [ 2031.914916][T30767] tipc: Resetting bearer [ 2031.939661][T30765] tipc: Resetting bearer [ 2032.020502][T30765] tipc: Disabling bearer [ 2032.147202][T30727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7524'. [ 2032.201475][ T44] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2032.229416][ T44] usb 7-1: USB disconnect, device number 21 [ 2032.687696][T30780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 2032.982087][T30801] ipip0: entered promiscuous mode [ 2032.996822][T30801] ipip0: entered allmulticast mode [ 2033.354877][T30804] hsr0: entered promiscuous mode [ 2033.784872][T30797] hsr0: left promiscuous mode [ 2033.791247][ T44] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2033.869353][T30823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7561'. [ 2033.983161][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 2034.004446][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 2034.067516][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2034.109804][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.145109][ T44] usb 1-1: config 0 descriptor?? [ 2034.257893][T30833] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7565'. [ 2034.378268][ T44] ath6kl: Failed to submit usb control message: -71 [ 2034.427062][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 2034.493058][ T44] ath6kl: Unable to send get target info: -71 [ 2034.555164][ T44] ath6kl: Failed to init ath6kl core: -71 [ 2034.584320][ T44] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2034.641008][ T44] usb 1-1: USB disconnect, device number 37 [ 2035.387492][T30833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2035.421987][T30833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2035.450663][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7569'. [ 2035.529685][T30833] bond0 (unregistering): Released all slaves [ 2036.207361][T27414] vhci_hcd: vhci_device speed not set [ 2036.220133][T26510] Bluetooth: hci5: command 0x0405 tx timeout [ 2036.229996][T30826] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2036.920132][T30826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2036.926650][T30826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2036.936809][T30826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2036.943540][T30826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2036.950478][T30826] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2037.098854][T30874] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7579'. [ 2037.647386][ T30] audit: type=1326 audit(1755950636.834:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2037.669905][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.710079][T30886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7583'. [ 2037.726937][T30886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7583'. [ 2037.743130][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.743195][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.766490][ T30] audit: type=1326 audit(1755950636.834:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2037.789094][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.869926][ T30] audit: type=1326 audit(1755950636.884:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2037.969019][ T30] audit: type=1326 audit(1755950636.884:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2038.064434][ T30] audit: type=1326 audit(1755950636.884:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2038.087099][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.096518][T30895] netlink: 14028 bytes leftover after parsing attributes in process `syz.1.7587'. [ 2038.100724][ T30] audit: type=1326 audit(1755950636.884:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2038.130583][ T30] audit: type=1326 audit(1755950636.884:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2038.153214][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.168009][ T30] audit: type=1326 audit(1755950636.884:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2038.190560][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.198587][ T30] audit: type=1326 audit(1755950636.884:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2038.221146][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.228867][ T30] audit: type=1326 audit(1755950636.884:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30876 comm="syz.7.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d018ebe9 code=0x7ffc0000 [ 2038.371089][T26510] Bluetooth: hci2: command 0x0c1a tx timeout [ 2039.022157][T26510] Bluetooth: hci4: command 0x0c1a tx timeout [ 2039.028527][T26510] Bluetooth: hci0: command 0x0406 tx timeout [ 2039.029118][T26506] Bluetooth: hci3: command 0x0c1a tx timeout [ 2039.171543][ T44] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 2039.202787][T30914] netlink: 'syz.7.7594': attribute type 11 has an invalid length. [ 2039.504495][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2039.616538][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 2039.686242][ T44] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2039.709634][ T44] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2039.739692][ T44] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2039.814624][ T44] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 2039.886932][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2039.910675][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.922507][ T44] usb 2-1: Product: syz [ 2039.926733][ T44] usb 2-1: Manufacturer: syz [ 2039.936833][ T44] usb 2-1: SerialNumber: syz [ 2040.208063][ T44] usb 2-1: 0:2 : does not exist [ 2040.381142][ T44] usb 2-1: USB disconnect, device number 18 [ 2041.091366][T26506] Bluetooth: hci0: command 0x0406 tx timeout [ 2041.386609][T30925] geneve2: entered promiscuous mode [ 2041.415887][ T3015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.435399][ T3015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.464307][ T3015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.500144][ T3015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.810870][T29245] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2041.971832][T29245] usb 2-1: Using ep0 maxpacket: 16 [ 2041.998970][T29245] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2042.027348][T29245] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 2042.070516][T29245] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2042.119258][T29245] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2042.129609][T29245] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 2042.152722][T29245] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64 [ 2042.209591][T29245] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2042.249849][T29245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.261116][T29245] usb 2-1: Product: syz [ 2042.265322][T29245] usb 2-1: Manufacturer: syz [ 2042.270919][T29245] usb 2-1: SerialNumber: syz [ 2042.494385][T30928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.521180][T30928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.558657][T30929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.582378][T30929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.592795][T30928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.651240][T30928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.765551][T29245] usb 2-1: USB disconnect, device number 19 [ 2043.660729][T29245] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2043.728680][T30941] netlink: 292 bytes leftover after parsing attributes in process `syz.5.7605'. [ 2043.769454][T30943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7606'. [ 2043.821691][T29245] usb 2-1: Using ep0 maxpacket: 16 [ 2043.841655][T29245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.893464][T29245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.915736][T29245] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 2043.920319][T30943] netlink: 452 bytes leftover after parsing attributes in process `syz.7.7606'. [ 2043.934605][T29245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.937712][T29245] usb 2-1: config 0 descriptor?? [ 2044.269037][T30949] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2044.275764][T30949] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2044.373788][T29245] zeroplus 0003:0C12:0030.003A: item fetching failed at offset 1/5 [ 2044.385589][T30949] vhci_hcd vhci_hcd.0: Device attached [ 2044.402541][T29245] zeroplus 0003:0C12:0030.003A: parse failed [ 2044.408764][T29245] zeroplus 0003:0C12:0030.003A: probe with driver zeroplus failed with error -22 [ 2044.558953][T30961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.580037][ T44] vhci_hcd: vhci_device speed not set [ 2044.637681][T30961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.679961][ T44] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 2044.768428][T29245] usb 2-1: USB disconnect, device number 20 [ 2044.887276][T30970] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.7611'. [ 2044.896946][T30970] netlink: zone id is out of range [ 2044.927510][T30970] netlink: zone id is out of range [ 2044.939887][T30970] netlink: get zone limit has 8 unknown bytes [ 2045.880282][T27414] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2046.200546][T27414] usb 2-1: Using ep0 maxpacket: 16 [ 2046.208832][T27414] usb 2-1: config 0 has no interfaces? [ 2046.399004][T27414] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 2046.410057][T27414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.422496][T27414] usb 2-1: Product: syz [ 2046.441032][T27414] usb 2-1: Manufacturer: syz [ 2046.447395][T27414] usb 2-1: SerialNumber: syz [ 2046.505183][T27414] usb 2-1: config 0 descriptor?? [ 2047.146204][T30987] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7615'. [ 2047.335806][T30950] vhci_hcd: connection closed [ 2047.341439][T16847] vhci_hcd: stop threads [ 2047.354011][T16847] vhci_hcd: release socket [ 2047.364221][T16847] vhci_hcd: disconnect device [ 2049.369963][T29245] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2049.435069][T18592] usb 2-1: USB disconnect, device number 21 [ 2049.581898][T29245] usb 6-1: Using ep0 maxpacket: 32 [ 2049.612800][T29245] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2049.643757][T29245] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.677972][T29245] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2049.701725][T29245] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2049.752782][T29245] usb 6-1: Product: syz [ 2049.768665][T29245] usb 6-1: Manufacturer: syz [ 2049.795586][T29245] hub 6-1:4.0: USB hub found [ 2049.800520][ T44] vhci_hcd: vhci_device speed not set [ 2050.075598][T29245] hub 6-1:4.0: 2 ports detected [ 2050.287598][T29245] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 2050.310334][T29245] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 2050.353292][T29245] usb 6-1: USB disconnect, device number 29 [ 2051.130459][T31019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7626'. [ 2051.281987][T27414] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 2051.577513][T27414] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 2051.588581][T27414] usb 2-1: config 150 has no interface number 0 [ 2051.629087][T27414] usb 2-1: config 150 interface 204 has no altsetting 0 [ 2051.636889][T27414] usb 2-1: config 150 interface 1 has no altsetting 0 [ 2051.647568][T27414] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2051.657956][T27414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.673011][T27414] usb 2-1: Product: syz [ 2051.677662][T27414] usb 2-1: Manufacturer: syz [ 2051.683006][T27414] usb 2-1: SerialNumber: syz [ 2051.964505][T27414] xr_serial 2-1:150.204: xr_serial converter detected [ 2052.731114][T31026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7627'. [ 2052.899345][T27414] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 2054.122070][T27100] tipc: Resetting bearer [ 2054.404821][T30912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2054.411078][T27100] tipc: Disabling bearer [ 2054.452560][T30912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2054.465310][T30912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2054.481760][T30912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2054.496079][T30912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2054.783316][T29245] usb 2-1: USB disconnect, device number 22 [ 2054.835604][T29245] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 2054.891664][T29245] xr_serial 2-1:150.204: device disconnected [ 2055.002374][T26506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2055.017345][T26506] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2055.040470][T26506] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2055.055014][T26506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2055.064466][T26506] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2055.598437][T31034] chnl_net:caif_netlink_parms(): no params data found [ 2056.294341][T31034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.325921][T31034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.341570][T31034] bridge_slave_0: entered allmulticast mode [ 2056.393817][T31034] bridge_slave_0: entered promiscuous mode [ 2056.402588][T31034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.416849][T31034] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.558606][T31034] bridge_slave_1: entered allmulticast mode [ 2056.611127][T26506] Bluetooth: hci1: command tx timeout [ 2056.629651][T31034] bridge_slave_1: entered promiscuous mode [ 2057.174760][T26506] Bluetooth: hci6: command tx timeout [ 2057.247021][T31034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2057.372598][T31034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2057.617082][T31034] team0: Port device team_slave_0 added [ 2057.675256][T31034] team0: Port device team_slave_1 added [ 2057.716583][T31039] chnl_net:caif_netlink_parms(): no params data found [ 2057.928685][T31034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2058.009936][T31034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2058.030262][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7641'. [ 2058.035989][ C1] vkms_vblank_simulate: vblank timer overrun [ 2058.038462][T31034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2058.070655][T31034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2058.077737][T31034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2058.103714][ C1] vkms_vblank_simulate: vblank timer overrun [ 2058.110196][T31034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2058.690176][T26506] Bluetooth: hci1: command tx timeout [ 2058.814040][T31034] hsr_slave_0: entered promiscuous mode [ 2058.836524][T31034] hsr_slave_1: entered promiscuous mode [ 2058.857646][T31034] debugfs: 'hsr0' already exists in 'hsr' [ 2058.866588][T31093] loop7: detected capacity change from 0 to 6 [ 2058.868175][T31034] Cannot create hsr debugfs directory [ 2058.884471][T31039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.895383][T31039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.906160][T31039] bridge_slave_0: entered allmulticast mode [ 2058.952866][T31093] Dev loop7: unable to read RDB block 6 [ 2058.984222][T31093] loop7: unable to read partition table [ 2058.992483][T31088] Invalid logical block size (-1) [ 2058.992816][T31039] bridge_slave_0: entered promiscuous mode [ 2059.023894][T31093] loop7: partition table beyond EOD, truncated [ 2059.045591][T31039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2059.061816][T31093] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑàM– ) failed (rc=-5) [ 2059.085016][T31039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.120242][T31039] bridge_slave_1: entered allmulticast mode [ 2059.132443][T31039] bridge_slave_1: entered promiscuous mode [ 2059.253063][T26506] Bluetooth: hci6: command tx timeout [ 2059.717972][T15867] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.828518][T31039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2059.884406][T31039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.925205][T15867] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.972698][T15867] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.267483][T15867] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.400560][T31039] team0: Port device team_slave_0 added [ 2060.537188][T31039] team0: Port device team_slave_1 added [ 2060.770604][T26506] Bluetooth: hci1: command tx timeout [ 2060.906163][T31039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.943053][T31039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.982829][T31039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2061.165474][T31039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2061.181648][T31039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2061.207877][ C1] vkms_vblank_simulate: vblank timer overrun [ 2061.288322][T31039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2061.330214][T26506] Bluetooth: hci6: command tx timeout [ 2061.591546][T31039] hsr_slave_0: entered promiscuous mode [ 2061.598607][T31039] hsr_slave_1: entered promiscuous mode [ 2061.608459][T31039] debugfs: 'hsr0' already exists in 'hsr' [ 2061.614373][T31039] Cannot create hsr debugfs directory [ 2062.019006][T31104] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7648'. [ 2062.019957][T31034] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2062.094914][T31034] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2062.287235][T31034] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2062.353596][T31034] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2062.441747][T31108] netlink: 'syz.1.7650': attribute type 10 has an invalid length. [ 2062.850014][T26506] Bluetooth: hci1: command tx timeout [ 2063.012676][T31039] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2063.048244][T31034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2063.057686][T31039] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2063.108124][T31039] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2063.170188][T31039] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2063.341103][T31034] 8021q: adding VLAN 0 to HW filter on device team0 [ 2063.383267][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2063.390474][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2063.411764][T26506] Bluetooth: hci6: command tx timeout [ 2063.497811][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.505069][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2064.004489][T31039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2064.157930][T31039] 8021q: adding VLAN 0 to HW filter on device team0 [ 2064.235646][T20157] bridge0: port 1(bridge_slave_0) entered blocking state [ 2064.242929][T20157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2064.337493][T20163] bridge0: port 2(bridge_slave_1) entered blocking state [ 2064.344844][T20163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2064.418379][T31034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2064.782233][T31132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7653'. [ 2064.832391][T31132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7653'. [ 2064.903327][T31034] veth0_vlan: entered promiscuous mode [ 2065.004523][T31039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2065.076375][T31034] veth1_vlan: entered promiscuous mode [ 2065.129575][T31134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7654'. [ 2065.306261][T31039] veth0_vlan: entered promiscuous mode [ 2065.369325][T31039] veth1_vlan: entered promiscuous mode [ 2065.403988][T31034] veth0_macvtap: entered promiscuous mode [ 2065.502578][T31034] veth1_macvtap: entered promiscuous mode [ 2065.607304][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2065.655626][T31034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2065.697562][T31039] veth0_macvtap: entered promiscuous mode [ 2065.708380][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2065.745130][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2065.756988][T31034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2065.781520][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2065.824335][T31039] veth1_macvtap: entered promiscuous mode [ 2065.836129][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2065.878370][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2065.890577][ T3015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.903768][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2065.919616][ T3015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.978385][ T3015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.003201][ T3015] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.124226][T31039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2066.166848][T31039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2066.320511][T20163] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.466280][T20163] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.483850][T20163] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.551226][T31141] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2066.612244][T20157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.658391][T20157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2066.685436][T20157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2066.967470][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2067.042766][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2067.103567][T20163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2067.122518][T20163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2067.313960][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2067.363899][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2067.634803][T30912] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2067.647478][T30912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2067.679992][T30912] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2067.704117][T30912] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2067.715558][T30912] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2068.731717][ T44] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2068.899811][ T44] usb 10-1: Using ep0 maxpacket: 8 [ 2068.932415][ T44] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2068.961485][ T44] usb 10-1: config 8 has an invalid interface number: 24 but max is 0 [ 2068.980161][ T44] usb 10-1: config 8 has no interface number 0 [ 2068.991522][ T44] usb 10-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 2069.017269][ T44] usb 10-1: config 8 interface 24 has no altsetting 0 [ 2069.059347][ T44] usb 10-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 2069.086825][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.110880][ T44] usb 10-1: Product: syz [ 2069.115303][ T44] usb 10-1: Manufacturer: syz [ 2069.121450][ T44] usb 10-1: SerialNumber: syz [ 2069.236822][T31160] chnl_net:caif_netlink_parms(): no params data found [ 2069.607932][T31160] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.658059][T31160] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.681004][T31160] bridge_slave_0: entered allmulticast mode [ 2069.702346][T31160] bridge_slave_0: entered promiscuous mode [ 2069.713972][T31160] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.722848][T31160] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.738008][T31160] bridge_slave_1: entered allmulticast mode [ 2069.751790][T31160] bridge_slave_1: entered promiscuous mode [ 2069.813613][T26506] Bluetooth: hci7: command tx timeout [ 2069.994808][T31160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2070.043048][T31160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2070.208878][T31160] team0: Port device team_slave_0 added [ 2070.254836][T31160] team0: Port device team_slave_1 added [ 2070.397614][T31160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.426163][T31160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2070.452321][ C1] vkms_vblank_simulate: vblank timer overrun [ 2070.501006][T31160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2070.528112][T31160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2070.538058][T31160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2070.567362][T31160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2070.952498][T31160] hsr_slave_0: entered promiscuous mode [ 2070.975927][T31160] hsr_slave_1: entered promiscuous mode [ 2070.996685][T31160] debugfs: 'hsr0' already exists in 'hsr' [ 2071.029885][T31160] Cannot create hsr debugfs directory [ 2071.246092][ T44] vmk80xx 10-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 2071.278795][ T44] usb 10-1: USB disconnect, device number 2 [ 2071.489529][T31183] __nla_validate_parse: 59 callbacks suppressed [ 2071.489545][T31183] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7665'. [ 2071.609316][T31185] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7666'. [ 2071.639322][T31185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2071.647446][T31186] netlink: 'syz.8.7664': attribute type 1 has an invalid length. [ 2071.890379][T26506] Bluetooth: hci7: command tx timeout [ 2072.013346][T31186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2072.453158][T31197] FAULT_INJECTION: forcing a failure. [ 2072.453158][T31197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2072.496534][T31197] CPU: 0 UID: 0 PID: 31197 Comm: syz.8.7669 Not tainted syzkaller #0 PREEMPT(full) [ 2072.496566][T31197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2072.496579][T31197] Call Trace: [ 2072.496588][T31197] [ 2072.496598][T31197] dump_stack_lvl+0x189/0x250 [ 2072.496631][T31197] ? __pfx____ratelimit+0x10/0x10 [ 2072.496661][T31197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2072.496686][T31197] ? __pfx__printk+0x10/0x10 [ 2072.496715][T31197] ? __might_fault+0xb0/0x130 [ 2072.496757][T31197] should_fail_ex+0x414/0x560 [ 2072.496791][T31197] _copy_from_user+0x2d/0xb0 [ 2072.496816][T31197] io_submit_one+0xc2/0x1310 [ 2072.496857][T31197] ? __pfx_io_submit_one+0x10/0x10 [ 2072.496880][T31197] ? __might_fault+0xb0/0x130 [ 2072.496921][T31197] ? __might_fault+0xb0/0x130 [ 2072.496953][T31197] __se_sys_io_submit+0x185/0x2f0 [ 2072.496988][T31197] ? __pfx___se_sys_io_submit+0x10/0x10 [ 2072.497024][T31197] ? ksys_write+0x22a/0x250 [ 2072.497064][T31197] ? do_syscall_64+0xbe/0x3b0 [ 2072.497098][T31197] do_syscall_64+0xfa/0x3b0 [ 2072.497127][T31197] ? lockdep_hardirqs_on+0x9c/0x150 [ 2072.497154][T31197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2072.497175][T31197] ? clear_bhb_loop+0x60/0xb0 [ 2072.497201][T31197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2072.497220][T31197] RIP: 0033:0x7fbab338ebe9 [ 2072.497240][T31197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2072.497256][T31197] RSP: 002b:00007fbab41a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2072.497278][T31197] RAX: ffffffffffffffda RBX: 00007fbab35b5fa0 RCX: 00007fbab338ebe9 [ 2072.497294][T31197] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007fbab4186000 [ 2072.497308][T31197] RBP: 00007fbab41a7090 R08: 0000000000000000 R09: 0000000000000000 [ 2072.497322][T31197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2072.497334][T31197] R13: 00007fbab35b6038 R14: 00007fbab35b5fa0 R15: 00007fbab36dfa28 [ 2072.497368][T31197] [ 2073.189629][T18610] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2073.380642][T18610] usb 10-1: Using ep0 maxpacket: 32 [ 2073.397445][T18610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.426107][T18610] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.469428][T18610] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2073.542854][T18610] usb 10-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2073.577066][T18610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.589989][T18610] usb 10-1: config 0 descriptor?? [ 2073.610853][ T44] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2073.791849][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 2073.826429][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.852051][ T44] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2073.870112][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.920399][ T44] usb 9-1: config 0 descriptor?? [ 2073.969939][T26506] Bluetooth: hci7: command tx timeout [ 2074.103112][T18610] usbhid 10-1:0.0: can't add hid device: -71 [ 2074.130691][T18610] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2074.182228][T31160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2074.216382][T18610] usb 10-1: USB disconnect, device number 3 [ 2074.255903][T31160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2074.320671][T31160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2074.379160][ T44] mcp2221 0003:04D8:00DD.003B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 2074.417338][T31160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2074.953712][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7674'. [ 2075.200440][T31160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2075.246696][T31160] 8021q: adding VLAN 0 to HW filter on device team0 [ 2075.267096][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.274461][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2075.372281][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.379572][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2075.702984][T30912] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2075.722230][T30912] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2075.736502][T30912] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2075.748416][T30912] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2075.763306][T30912] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2075.823198][T31160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2076.050857][T26506] Bluetooth: hci7: command tx timeout [ 2076.459146][T23342] usb 9-1: USB disconnect, device number 2 [ 2076.972479][T31230] netlink: 'syz.1.7679': attribute type 1 has an invalid length. [ 2077.052162][T31160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2077.320564][T31230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2077.752890][T31241] FAULT_INJECTION: forcing a failure. [ 2077.752890][T31241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.815125][T26506] Bluetooth: hci8: command tx timeout [ 2077.888532][T31241] CPU: 0 UID: 0 PID: 31241 Comm: syz.1.7682 Not tainted syzkaller #0 PREEMPT(full) [ 2077.888554][T31241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2077.888562][T31241] Call Trace: [ 2077.888568][T31241] [ 2077.888574][T31241] dump_stack_lvl+0x189/0x250 [ 2077.888595][T31241] ? __pfx____ratelimit+0x10/0x10 [ 2077.888614][T31241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2077.888629][T31241] ? __pfx__printk+0x10/0x10 [ 2077.888646][T31241] ? __might_fault+0xb0/0x130 [ 2077.888670][T31241] should_fail_ex+0x414/0x560 [ 2077.888690][T31241] _copy_from_user+0x2d/0xb0 [ 2077.888706][T31241] kstrtouint_from_user+0xc4/0x170 [ 2077.888727][T31241] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2077.888756][T31241] proc_fail_nth_write+0x88/0x200 [ 2077.888771][T31241] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2077.888788][T31241] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2077.888803][T31241] vfs_write+0x27b/0xb30 [ 2077.888826][T31241] ? __pfx_vfs_write+0x10/0x10 [ 2077.888843][T31241] ? __fget_files+0x2a/0x420 [ 2077.888869][T31241] ? __fget_files+0x3a0/0x420 [ 2077.888886][T31241] ? __fget_files+0x2a/0x420 [ 2077.888911][T31241] ksys_write+0x145/0x250 [ 2077.888937][T31241] ? __pfx_ksys_write+0x10/0x10 [ 2077.888952][T31241] ? rcu_is_watching+0x15/0xb0 [ 2077.888968][T31241] ? do_syscall_64+0xbe/0x3b0 [ 2077.888989][T31241] do_syscall_64+0xfa/0x3b0 [ 2077.889006][T31241] ? lockdep_hardirqs_on+0x9c/0x150 [ 2077.889023][T31241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.889036][T31241] ? clear_bhb_loop+0x60/0xb0 [ 2077.889050][T31241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.889063][T31241] RIP: 0033:0x7feae038d69f [ 2077.889075][T31241] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2077.889086][T31241] RSP: 002b:00007feade5f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2077.889101][T31241] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feae038d69f [ 2077.889111][T31241] RDX: 0000000000000001 RSI: 00007feade5f60a0 RDI: 0000000000000005 [ 2077.889118][T31241] RBP: 00007feade5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2077.889126][T31241] R10: 0000000004001c00 R11: 0000000000000293 R12: 0000000000000001 [ 2077.889134][T31241] R13: 00007feae05b6038 R14: 00007feae05b5fa0 R15: 00007feae06dfa28 [ 2077.889154][T31241] [ 2078.865053][T31247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7683'. [ 2079.176900][T31222] chnl_net:caif_netlink_parms(): no params data found [ 2079.337514][T31160] veth0_vlan: entered promiscuous mode [ 2079.711031][T31160] veth1_vlan: entered promiscuous mode [ 2079.894364][T26506] Bluetooth: hci8: command tx timeout [ 2080.193311][T31222] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.226957][T31222] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.277279][T31222] bridge_slave_0: entered allmulticast mode [ 2080.305032][T31222] bridge_slave_0: entered promiscuous mode [ 2080.324856][T31222] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.378125][T31222] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.400332][T31222] bridge_slave_1: entered allmulticast mode [ 2080.408713][T31222] bridge_slave_1: entered promiscuous mode [ 2080.500161][T31270] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7689'. [ 2080.605842][T31222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2080.655409][T31222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.679965][T18592] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2080.839911][T18592] usb 10-1: Using ep0 maxpacket: 32 [ 2080.853464][T18592] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2080.870207][T18592] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.896393][T18592] usb 10-1: config 0 descriptor?? [ 2080.921914][T18592] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2080.978454][T31222] team0: Port device team_slave_0 added [ 2081.029352][T31274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7691'. [ 2081.050545][T31160] veth0_macvtap: entered promiscuous mode [ 2081.084914][T31160] veth1_macvtap: entered promiscuous mode [ 2081.112439][T31160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2081.155155][T31222] team0: Port device team_slave_1 added [ 2081.363184][T31160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2081.587361][T31268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.597042][T31222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2081.617289][T31222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2081.662089][T31268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.814214][T31222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2081.837757][T31222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2081.863011][T31222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2081.970605][T26506] Bluetooth: hci8: command tx timeout [ 2082.078588][T18592] gspca_sunplus: reg_w_riv err -71 [ 2082.086221][T31222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.094807][T18592] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 2082.108880][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.119165][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.150594][ T3015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.216139][T18592] usb 10-1: USB disconnect, device number 4 [ 2082.241507][ T3015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.906472][T31222] hsr_slave_0: entered promiscuous mode [ 2082.944667][T31222] hsr_slave_1: entered promiscuous mode [ 2082.955079][T31222] debugfs: 'hsr0' already exists in 'hsr' [ 2082.963490][T31222] Cannot create hsr debugfs directory [ 2083.003829][T11491] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2083.226089][T11491] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.277661][T11491] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.361015][T11491] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2083.395243][T11491] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.401823][T11491] usb 10-1: config 0 descriptor?? [ 2083.561032][T18586] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 2083.609214][T20157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.609243][T20157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.732176][T18586] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2083.732221][T18586] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.732245][T18586] usb 9-1: Product: syz [ 2083.732261][T18586] usb 9-1: Manufacturer: syz [ 2083.732314][T18586] usb 9-1: SerialNumber: syz [ 2083.753610][T18586] usb 9-1: config 0 descriptor?? [ 2083.894985][T31281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.895479][T31281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2083.900442][T11491] usbhid 10-1:0.0: can't add hid device: -71 [ 2083.900577][T11491] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2083.904210][T11491] usb 10-1: USB disconnect, device number 5 [ 2083.972882][T18586] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2084.008442][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.008467][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.050710][T26506] Bluetooth: hci8: command tx timeout [ 2085.720065][T11491] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2085.926739][T11491] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2085.950761][T27414] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2085.960068][T11491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.968102][T11491] usb 4-1: Product: syz [ 2086.001521][T11491] usb 4-1: Manufacturer: syz [ 2086.006182][T11491] usb 4-1: SerialNumber: syz [ 2086.025607][T11491] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2086.084163][T18610] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2086.094534][T31222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2086.109806][T27414] usb 10-1: device descriptor read/64, error -71 [ 2086.141336][T31222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2086.276370][T31222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2086.425486][T31222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2086.449950][T27414] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2086.513597][T31306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.539001][T31306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.640471][T27414] usb 10-1: device descriptor read/64, error -71 [ 2086.750786][T27414] usb usb10-port1: attempt power cycle [ 2087.096130][T31285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2087.129972][T27414] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2087.175946][T27414] usb 10-1: device descriptor read/8, error -71 [ 2087.181419][T31285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.212421][T31222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2087.266327][T18586] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2087.273647][T31222] 8021q: adding VLAN 0 to HW filter on device team0 [ 2087.298204][T18586] usb 9-1: USB disconnect, device number 3 [ 2087.341817][T18610] usb 4-1: Service connection timeout for: 256 [ 2087.348174][T18610] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2087.383395][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2087.390699][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2087.448399][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2087.455684][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2087.464857][T27414] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2087.494397][T18610] ath9k_htc: Failed to initialize the device [ 2087.508921][T18610] usb 4-1: ath9k_htc: USB layer deinitialized [ 2087.519876][T27414] usb 10-1: device descriptor read/8, error -71 [ 2087.630321][T27414] usb usb10-port1: unable to enumerate USB device [ 2087.755477][T18586] usb 4-1: USB disconnect, device number 51 [ 2087.977699][T31222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2088.135569][T31333] syzkaller1: entered promiscuous mode [ 2088.145883][T31334] netlink: 'syz.1.7703': attribute type 1 has an invalid length. [ 2088.165659][T31333] syzkaller1: entered allmulticast mode [ 2088.571644][T31334] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2088.747562][T31338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7706'. [ 2088.806134][T31338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7706'. [ 2088.846275][T31222] veth0_vlan: entered promiscuous mode [ 2088.907420][T31222] veth1_vlan: entered promiscuous mode [ 2089.176913][T31222] veth0_macvtap: entered promiscuous mode [ 2089.191480][T31222] veth1_macvtap: entered promiscuous mode [ 2089.222516][T31222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2089.244825][T31222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2089.259388][T20164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.334706][T20164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.381101][T20164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.460416][T20164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.559458][T31348] netlink: 'syz.8.7710': attribute type 10 has an invalid length. [ 2089.700147][T31353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7712'. [ 2089.787338][T31348] 8021q: adding VLAN 0 to HW filter on device team0 [ 2089.952849][T31348] bond0: (slave team0): Enslaving as an active interface with an up link [ 2090.426111][T16847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.450070][T16847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2090.608076][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.648768][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2091.356331][T31372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7718'. [ 2091.369354][T31386] netlink: 'syz.3.7717': attribute type 1 has an invalid length. [ 2091.436317][T18586] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2091.829815][T18586] usb 3-1: Using ep0 maxpacket: 32 [ 2091.839341][T18586] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 2091.878291][T31396] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7721'. [ 2091.912567][T18586] usb 3-1: config 0 has no interface number 1 [ 2091.934501][T18586] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2091.989918][T18586] usb 3-1: config 0 interface 206 has no altsetting 0 [ 2092.002344][T18586] usb 3-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 2092.021619][T18586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.056286][T18586] usb 3-1: Product: syz [ 2092.067195][T18586] usb 3-1: Manufacturer: syz [ 2092.099879][T18586] usb 3-1: SerialNumber: syz [ 2092.134839][T31386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2092.170863][T18586] usb 3-1: config 0 descriptor?? [ 2092.398196][T31376] binder: 31374:31376 ioctl c018620c 200000000380 returned -22 [ 2092.409042][T18586] usb 3-1: USB disconnect, device number 78 [ 2092.670858][T11491] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2092.683945][T31404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2092.844723][T11491] usb 9-1: Using ep0 maxpacket: 32 [ 2092.884033][T11491] usb 9-1: config 0 has an invalid interface number: 98 but max is 0 [ 2092.929318][T11491] usb 9-1: config 0 has no interface number 0 [ 2092.984626][T11491] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2093.020465][T11491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.040503][T11491] usb 9-1: config 0 descriptor?? [ 2093.294917][T18592] usb 9-1: USB disconnect, device number 4 [ 2093.545076][T31419] binder: 31418:31419 ioctl c0306201 200000000080 returned -14 [ 2093.958408][T31426] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7732'. [ 2093.986319][T31426] netlink: zone id is out of range [ 2094.071736][T31426] netlink: zone id is out of range [ 2094.074290][T31432] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7735'. [ 2094.089959][T31429] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7734'. [ 2094.099884][T31426] netlink: get zone limit has 8 unknown bytes [ 2094.285176][T27414] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2094.482736][T27414] usb 3-1: Using ep0 maxpacket: 16 [ 2094.512840][T27414] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2094.545915][T27414] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 2094.579073][T27414] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 16 [ 2094.606174][T27414] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2094.620079][T18586] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 2094.649777][T27414] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2094.661741][T27414] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2094.710420][T27414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.730230][T27414] usb 3-1: Product: syz [ 2094.738962][T27414] usb 3-1: Manufacturer: syz [ 2094.757645][T27414] usb 3-1: SerialNumber: syz [ 2094.785666][T31430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2094.794105][T18586] usb 4-1: device descriptor read/64, error -71 [ 2094.833089][T31442] FAULT_INJECTION: forcing a failure. [ 2094.833089][T31442] name failslab, interval 1, probability 0, space 0, times 0 [ 2094.877673][T31442] CPU: 0 UID: 0 PID: 31442 Comm: syz.9.7740 Not tainted syzkaller #0 PREEMPT(full) [ 2094.877710][T31442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2094.877724][T31442] Call Trace: [ 2094.877736][T31442] [ 2094.877747][T31442] dump_stack_lvl+0x189/0x250 [ 2094.877797][T31442] ? __pfx____ratelimit+0x10/0x10 [ 2094.877829][T31442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2094.877855][T31442] ? __pfx__printk+0x10/0x10 [ 2094.877887][T31442] ? __pfx___might_resched+0x10/0x10 [ 2094.877907][T31442] ? fs_reclaim_acquire+0x7d/0x100 [ 2094.878007][T31442] should_fail_ex+0x414/0x560 [ 2094.878040][T31442] should_failslab+0xa8/0x100 [ 2094.878071][T31442] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2094.878098][T31442] ? io_submit_one+0x11f/0x1310 [ 2094.878126][T31442] io_submit_one+0x11f/0x1310 [ 2094.878165][T31442] ? __pfx_io_submit_one+0x10/0x10 [ 2094.878257][T31442] ? __might_fault+0xb0/0x130 [ 2094.878304][T31442] ? __might_fault+0xb0/0x130 [ 2094.878336][T31442] __se_sys_io_submit+0x185/0x2f0 [ 2094.878373][T31442] ? __pfx___se_sys_io_submit+0x10/0x10 [ 2094.878400][T31442] ? ksys_write+0x22a/0x250 [ 2094.878442][T31442] ? do_syscall_64+0xbe/0x3b0 [ 2094.878477][T31442] do_syscall_64+0xfa/0x3b0 [ 2094.878506][T31442] ? lockdep_hardirqs_on+0x9c/0x150 [ 2094.878533][T31442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2094.878555][T31442] ? clear_bhb_loop+0x60/0xb0 [ 2094.878580][T31442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2094.878600][T31442] RIP: 0033:0x7f5b6058ebe9 [ 2094.878621][T31442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2094.878639][T31442] RSP: 002b:00007f5b61426038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2094.878669][T31442] RAX: ffffffffffffffda RBX: 00007f5b607b5fa0 RCX: 00007f5b6058ebe9 [ 2094.878685][T31442] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007f5b61405000 [ 2094.878700][T31442] RBP: 00007f5b61426090 R08: 0000000000000000 R09: 0000000000000000 [ 2094.878713][T31442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2094.878725][T31442] R13: 00007f5b607b6038 R14: 00007f5b607b5fa0 R15: 00007f5b608dfa28 [ 2094.878759][T31442] [ 2095.207704][T31430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.229262][T31445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7741'. [ 2095.242911][T18586] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 2095.252014][T31430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.302757][T31430] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.7733'. [ 2095.381407][T31446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.399850][T18586] usb 4-1: device descriptor read/64, error -71 [ 2095.456121][T31430] debugfs: '!' already exists in 'ieee80211' [ 2095.516523][T31446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.540711][T18586] usb usb4-port1: attempt power cycle [ 2095.955261][T18586] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 2095.990822][T18586] usb 4-1: device descriptor read/8, error -71 [ 2096.028785][T27414] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2096.122503][T27414] usb 3-1: USB disconnect, device number 79 [ 2096.237435][T18586] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 2096.356909][T18586] usb 4-1: device descriptor read/8, error -71 [ 2096.391044][T31462] netlink: 'syz.8.7745': attribute type 13 has an invalid length. [ 2096.540161][T18586] usb usb4-port1: unable to enumerate USB device [ 2096.638041][T31462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2096.784427][T31470] netlink: 'syz.2.7748': attribute type 22 has an invalid length. [ 2096.895225][T31471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7748'. [ 2097.896436][T31482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7752'. [ 2098.469957][T18586] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2098.600629][T29245] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2098.662077][T18586] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2098.673251][T18586] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2098.695540][T18586] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2098.706679][T18586] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2098.848070][T29245] usb 4-1: no configurations [ 2098.859853][T29245] usb 4-1: can't read configurations, error -22 [ 2098.886118][T18586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.000688][T18586] usb 3-1: Product: syz [ 2099.006402][T18586] usb 3-1: Manufacturer: syz [ 2099.014912][T18586] usb 3-1: SerialNumber: syz [ 2099.130082][T29245] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2099.173526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.180741][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.211609][ T9] kworker/0:0 (9) used greatest stack depth: 15224 bytes left [ 2099.234082][T31487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7756'. [ 2099.287004][T29245] usb 4-1: no configurations [ 2099.289255][T31487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7756'. [ 2099.300090][T29245] usb 4-1: can't read configurations, error -22 [ 2099.667668][T29245] usb usb4-port1: attempt power cycle [ 2099.794714][T31502] netlink: 'syz.9.7758': attribute type 1 has an invalid length. [ 2099.945753][T18586] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22 [ 2099.958882][T18586] usb 3-1: USB disconnect, device number 80 [ 2100.130239][T29245] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2100.172106][T29245] usb 4-1: no configurations [ 2100.176804][T29245] usb 4-1: can't read configurations, error -22 [ 2100.369991][T29245] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2100.391103][T29245] usb 4-1: no configurations [ 2100.396033][T29245] usb 4-1: can't read configurations, error -22 [ 2100.403390][T29245] usb usb4-port1: unable to enumerate USB device [ 2100.695039][T31510] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 2101.592162][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7761'. [ 2101.694634][T31517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7761'. [ 2102.270359][T31530] program syz.3.7765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2102.332447][T31530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7765'. [ 2102.450906][T31530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7765'. [ 2103.153520][T31550] netlink: 'syz.2.7769': attribute type 1 has an invalid length. [ 2103.614112][T31550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2103.910227][ T44] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2104.111983][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 2104.160383][ T44] usb 9-1: config 0 has no interfaces? [ 2104.209324][ T44] usb 9-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 2104.250157][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.256440][T31564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7777'. [ 2104.259671][ T44] usb 9-1: Product: syz [ 2104.301505][ T44] usb 9-1: Manufacturer: syz [ 2104.306185][ T44] usb 9-1: SerialNumber: syz [ 2104.396762][ T44] usb 9-1: config 0 descriptor?? [ 2105.693462][T31570] binder: 31568:31570 ioctl 1274 0 returned -22 [ 2105.706089][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2105.715561][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2105.835957][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2105.885466][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2105.946643][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.054113][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.094516][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.217372][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.271871][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.283603][T31577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7779'. [ 2106.352247][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.437754][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.462101][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.472171][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.482009][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.491701][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.660481][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.668872][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.711147][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.789406][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.808849][T31564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2106.842811][T31564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2106.884971][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.920192][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2106.980431][T31564] bond0 (unregistering): Released all slaves [ 2107.050207][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2107.075984][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2107.141535][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b61424be0 returned -22 [ 2107.172277][T31570] binder: 31568:31570 ioctl 4020ae46 7f5b614248e0 returned -22 [ 2107.283495][T31577] macvlan1: entered promiscuous mode [ 2107.462391][T31577] macvlan1: left promiscuous mode [ 2108.071240][T29245] usb 9-1: USB disconnect, device number 5 [ 2108.333427][T27414] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2108.501107][T27414] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2108.524564][T27414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.584857][T27414] usb 2-1: Product: syz [ 2108.609421][T27414] usb 2-1: Manufacturer: syz [ 2108.640012][T27414] usb 2-1: SerialNumber: syz [ 2108.645453][T31591] l2tp_ppp: sess 2/0: no socket in recv [ 2108.668539][T27414] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2108.686212][T18610] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2108.983179][T29245] usb 2-1: USB disconnect, device number 23 [ 2108.999583][T31601] netlink: 'syz.9.7786': attribute type 1 has an invalid length. [ 2109.008122][T18586] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2109.288471][T18586] usb 3-1: config 10 has an invalid interface number: 234 but max is 0 [ 2109.305115][T18586] usb 3-1: config 10 has no interface number 0 [ 2109.315364][T18586] usb 3-1: config 10 interface 234 has no altsetting 0 [ 2109.333996][T18586] usb 3-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=25.db [ 2109.345432][T18586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.355066][T18586] usb 3-1: Product: syz [ 2109.359387][T18586] usb 3-1: Manufacturer: syz [ 2109.364171][T18586] usb 3-1: SerialNumber: syz [ 2109.377067][T31601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2109.586615][T31591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2109.644639][T31591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2109.734828][T18610] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2109.748034][T18586] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251 [ 2109.768588][T18610] ath9k_htc: Failed to initialize the device [ 2109.782271][T18586] gspca_sn9c20x: Write register 1000 failed -71 [ 2109.814813][T18586] gspca_sn9c20x: Device initialization failed [ 2109.847523][T29245] usb 2-1: ath9k_htc: USB layer deinitialized [ 2109.857103][T18586] gspca_sn9c20x 3-1:10.234: probe with driver gspca_sn9c20x failed with error -71 [ 2109.929452][T18586] usb 3-1: USB disconnect, device number 81 [ 2110.154207][T31613] netlink: 'syz.3.7789': attribute type 1 has an invalid length. [ 2110.179070][T31613] gretap1: entered promiscuous mode [ 2110.428905][T31615] macvlan2: entered promiscuous mode [ 2110.434770][T31615] macvlan2: entered allmulticast mode [ 2111.194025][T31626] netlink: 'syz.2.7792': attribute type 1 has an invalid length. [ 2111.401365][T31626] gretap1: entered promiscuous mode [ 2112.899883][T18586] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2113.080656][T18586] usb 2-1: Using ep0 maxpacket: 16 [ 2113.097421][T18586] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.109899][T18586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2113.123626][T18586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2113.136927][T18586] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2113.146903][T18586] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2113.161680][T18586] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2113.171100][T18586] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2113.180514][T18586] usb 2-1: Manufacturer: syz [ 2113.188892][T31651] netlink: 'syz.3.7798': attribute type 1 has an invalid length. [ 2113.201196][T18586] usb 2-1: config 0 descriptor?? [ 2113.272447][T31651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.659900][T18586] rc_core: IR keymap rc-hauppauge not found [ 2113.685686][T18586] Registered IR keymap rc-empty [ 2113.712390][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2113.790697][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2113.873419][T18586] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2113.966594][T31655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.977032][T31655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.065808][T18586] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input76 [ 2114.120261][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.172327][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.209908][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.241912][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.276415][T31659] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7799'. [ 2114.360117][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.409121][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.523548][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.576833][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.609999][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.671103][T18586] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2114.714062][T18586] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2114.726788][T18586] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2114.800899][T31669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7802'. [ 2114.814454][T18586] usb 2-1: USB disconnect, device number 24 [ 2114.964153][T31671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7803'. [ 2115.800403][T31682] netlink: 'syz.1.7805': attribute type 10 has an invalid length. [ 2116.432518][T31693] netlink: 'syz.3.7807': attribute type 16 has an invalid length. [ 2116.577776][T31686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7807'. [ 2116.630562][T31686] openvswitch: netlink: Flow key attr not present in new flow. [ 2116.660087][T11491] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2116.745826][T31696] program syz.9.7810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2116.820950][T11491] usb 3-1: Using ep0 maxpacket: 16 [ 2116.847542][T11491] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2116.871972][T11491] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.80 [ 2116.891837][T11491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.908741][T11491] usb 3-1: config 0 descriptor?? [ 2117.381336][T31705] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7812'. [ 2117.446630][T11491] usbhid 3-1:0.0: can't add hid device: -71 [ 2117.477727][T11491] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2117.557507][T11491] usb 3-1: USB disconnect, device number 82 [ 2117.625140][T31713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7815'. [ 2117.806309][T31716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7816'. [ 2118.452814][T31727] FAULT_INJECTION: forcing a failure. [ 2118.452814][T31727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2118.512140][T31727] CPU: 0 UID: 0 PID: 31727 Comm: syz.2.7821 Not tainted syzkaller #0 PREEMPT(full) [ 2118.512171][T31727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2118.512184][T31727] Call Trace: [ 2118.512193][T31727] [ 2118.512204][T31727] dump_stack_lvl+0x189/0x250 [ 2118.512233][T31727] ? __pfx____ratelimit+0x10/0x10 [ 2118.512265][T31727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2118.512290][T31727] ? __pfx__printk+0x10/0x10 [ 2118.512333][T31727] should_fail_ex+0x414/0x560 [ 2118.512373][T31727] _copy_to_user+0x31/0xb0 [ 2118.512402][T31727] simple_read_from_buffer+0xe1/0x170 [ 2118.512437][T31727] proc_fail_nth_read+0x1b3/0x220 [ 2118.512465][T31727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2118.512492][T31727] ? rw_verify_area+0x2a6/0x4d0 [ 2118.512518][T31727] ? __lock_acquire+0xab9/0xd20 [ 2118.512545][T31727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2118.512570][T31727] vfs_read+0x200/0xa30 [ 2118.512609][T31727] ? fdget_pos+0x247/0x320 [ 2118.512634][T31727] ? __pfx___mutex_lock+0x10/0x10 [ 2118.512666][T31727] ? __pfx_vfs_read+0x10/0x10 [ 2118.512696][T31727] ? __fget_files+0x2a/0x420 [ 2118.512733][T31727] ? __fget_files+0x3a0/0x420 [ 2118.512762][T31727] ? __fget_files+0x2a/0x420 [ 2118.512801][T31727] ksys_read+0x145/0x250 [ 2118.512829][T31727] ? __pfx_ksys_read+0x10/0x10 [ 2118.512862][T31727] ? do_syscall_64+0xbe/0x3b0 [ 2118.512898][T31727] do_syscall_64+0xfa/0x3b0 [ 2118.512925][T31727] ? lockdep_hardirqs_on+0x9c/0x150 [ 2118.512954][T31727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2118.512975][T31727] ? clear_bhb_loop+0x60/0xb0 [ 2118.513001][T31727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2118.513021][T31727] RIP: 0033:0x7f14a5f8d5fc [ 2118.513040][T31727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2118.513059][T31727] RSP: 002b:00007f14a6d79030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2118.513083][T31727] RAX: ffffffffffffffda RBX: 00007f14a61b5fa0 RCX: 00007f14a5f8d5fc [ 2118.513099][T31727] RDX: 000000000000000f RSI: 00007f14a6d790a0 RDI: 0000000000000004 [ 2118.513112][T31727] RBP: 00007f14a6d79090 R08: 0000000000000000 R09: 0000000000000000 [ 2118.513126][T31727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2118.513139][T31727] R13: 00007f14a61b6038 R14: 00007f14a61b5fa0 R15: 00007f14a62dfa28 [ 2118.513174][T31727] [ 2120.226615][T31749] netlink: 'syz.1.7827': attribute type 1 has an invalid length. [ 2120.609132][T31749] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2123.364847][T31775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7836'. [ 2124.733844][T31791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2124.915924][T30912] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2124.917268][T31789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7840'. [ 2124.937958][T30912] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2124.949096][T30912] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2124.993154][T30912] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2125.023106][T30912] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2126.361378][T31814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7845'. [ 2126.371997][T31798] chnl_net:caif_netlink_parms(): no params data found [ 2127.066756][T31798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.122072][T31798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.144593][T31798] bridge_slave_0: entered allmulticast mode [ 2127.173237][T26506] Bluetooth: hci9: command tx timeout [ 2127.173242][T31798] bridge_slave_0: entered promiscuous mode [ 2127.193516][T31798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.220053][T31798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.238191][T31798] bridge_slave_1: entered allmulticast mode [ 2127.322033][T31798] bridge_slave_1: entered promiscuous mode [ 2127.647344][T31798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2127.676952][T31798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2127.928717][T31798] team0: Port device team_slave_0 added [ 2127.949821][T18610] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 2128.024759][T31798] team0: Port device team_slave_1 added [ 2128.119978][T18610] usb 10-1: device descriptor read/64, error -71 [ 2128.295188][T31798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2128.318464][T31798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2128.331452][T31836] netlink: 'syz.1.7853': attribute type 8 has an invalid length. [ 2128.408190][T31798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2128.420072][T18610] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 2128.503203][T31798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2128.519543][T31798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2128.571918][T18610] usb 10-1: device descriptor read/64, error -71 [ 2128.600068][T31798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2128.690629][T18610] usb usb10-port1: attempt power cycle [ 2129.055535][T31798] hsr_slave_0: entered promiscuous mode [ 2129.069970][T18610] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 2129.100624][T18610] usb 10-1: device descriptor read/8, error -71 [ 2129.112983][T31798] hsr_slave_1: entered promiscuous mode [ 2129.143733][T31798] debugfs: 'hsr0' already exists in 'hsr' [ 2129.149565][T31798] Cannot create hsr debugfs directory [ 2129.247134][T31845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7858'. [ 2129.260802][T26506] Bluetooth: hci9: command tx timeout [ 2129.350349][T18610] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 2129.447801][T18610] usb 10-1: device descriptor read/8, error -71 [ 2129.580378][T18610] usb usb10-port1: unable to enumerate USB device [ 2130.733033][T31867] netlink: 'syz.1.7863': attribute type 1 has an invalid length. [ 2131.064407][T31867] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2131.330440][T26506] Bluetooth: hci9: command tx timeout [ 2131.728676][T31798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2131.754692][T31798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2131.774688][T31798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2131.899985][T18592] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2132.033138][T31798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2132.130235][T18592] usb 2-1: Using ep0 maxpacket: 16 [ 2133.460710][T26506] Bluetooth: hci9: command tx timeout [ 2133.783494][T31798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2133.925203][T31798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2134.028858][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.036044][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2134.119612][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.127084][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2134.577375][T31798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2134.629387][T31798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2134.914088][T31798] veth0_vlan: entered promiscuous mode [ 2135.048425][T31904] loop7: detected capacity change from 0 to 6 [ 2135.078755][T31798] veth1_vlan: entered promiscuous mode [ 2135.100945][T30912] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2135.113938][T30912] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2135.130356][T30912] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2135.145799][T30912] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2135.167696][T30912] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2135.183638][T31904] loop7: [POWERTEC] p1 [ 2135.188304][T31904] loop7: p1 start 1680801792 is beyond EOD, truncated [ 2135.509544][T18592] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2135.540874][T18592] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2135.555597][T18592] usb 2-1: can't read configurations, error -71 [ 2135.593886][T31798] veth0_macvtap: entered promiscuous mode [ 2135.636533][T31798] veth1_macvtap: entered promiscuous mode [ 2135.730430][T31798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2135.828676][T31917] netlink: 'syz.1.7875': attribute type 1 has an invalid length. [ 2135.903986][T31798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2136.030126][T31917] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2136.119845][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.187457][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.246446][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.260537][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.912354][T31929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7879'. [ 2136.970205][T31907] chnl_net:caif_netlink_parms(): no params data found [ 2137.253447][T30912] Bluetooth: hci10: command tx timeout [ 2137.997792][T16847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2138.038282][T16847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2138.335294][T31949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2138.526864][T31953] netlink: 'syz.1.7885': attribute type 3 has an invalid length. [ 2138.902828][T31907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.970003][T31907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.977599][T31907] bridge_slave_0: entered allmulticast mode [ 2139.052911][T31907] bridge_slave_0: entered promiscuous mode [ 2139.119586][T31907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.215525][T31958] netlink: 'syz.1.7886': attribute type 1 has an invalid length. [ 2139.225480][T31907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.283909][T31907] bridge_slave_1: entered allmulticast mode [ 2139.295931][T31907] bridge_slave_1: entered promiscuous mode [ 2139.331683][T30912] Bluetooth: hci10: command tx timeout [ 2139.347574][T15867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2139.426183][T31958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2139.444201][T15867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2140.005869][T31907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2140.049404][T31907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2140.298413][T31968] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7889'. [ 2140.402723][T18610] IPVS: starting estimator thread 0... [ 2140.473005][T31907] team0: Port device team_slave_0 added [ 2140.490119][T31976] IPVS: using max 25 ests per chain, 60000 per kthread [ 2140.506903][T31907] team0: Port device team_slave_1 added [ 2140.652486][T31907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2140.659955][T18610] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2140.728663][T31907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2140.775739][T31907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2140.792666][T31907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2140.805069][T31907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2140.844560][T31982] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.7893'. [ 2140.865351][T18610] usb 5-1: device descriptor read/64, error -71 [ 2140.878539][T31907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.900036][T31982] netlink: zone id is out of range [ 2140.914233][T31982] netlink: zone id is out of range [ 2140.920965][T31982] netlink: get zone limit has 8 unknown bytes [ 2141.115850][T31907] hsr_slave_0: entered promiscuous mode [ 2141.147210][T31907] hsr_slave_1: entered promiscuous mode [ 2141.157008][T31907] debugfs: 'hsr0' already exists in 'hsr' [ 2141.164024][T31907] Cannot create hsr debugfs directory [ 2141.170731][T18610] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2141.361256][T18610] usb 5-1: device descriptor read/64, error -71 [ 2141.424689][T30912] Bluetooth: hci10: command tx timeout [ 2141.490519][T18610] usb usb5-port1: attempt power cycle [ 2141.619923][T18586] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 2141.805622][T31991] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7897'. [ 2141.835031][T18586] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 2141.849967][T18610] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2141.868905][T18586] usb 3-1: config 8 has no interface number 0 [ 2141.891563][T18586] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2141.898795][T18610] usb 5-1: device descriptor read/8, error -71 [ 2141.917000][T18586] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2141.940395][T18586] usb 3-1: config 8 interface 177 has no altsetting 0 [ 2141.947291][T18586] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2141.971397][T18586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.002366][T31989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2142.200426][T18610] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2142.242555][T18610] usb 5-1: device descriptor read/8, error -71 [ 2142.374060][T18610] usb usb5-port1: unable to enumerate USB device [ 2142.721555][T31907] bond0: (slave netdevsim0): Releasing backup interface [ 2142.756135][T18586] usb 3-1: string descriptor 0 read error: -71 [ 2142.775480][T18586] ir_toy 3-1:8.177: required endpoints not found [ 2142.797545][T18586] usb 3-1: USB disconnect, device number 83 [ 2143.448544][T31907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2143.490626][T30912] Bluetooth: hci10: command tx timeout [ 2143.553082][T32005] netlink: 'syz.4.7901': attribute type 3 has an invalid length. [ 2143.555207][T31907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2143.614711][T31907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2143.716347][T31907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2143.908566][T32019] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7904'. [ 2144.024293][T32019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7904'. [ 2144.617576][T32032] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7907'. [ 2144.975681][T32039] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7909'. [ 2145.026283][T32032] : entered promiscuous mode [ 2145.417981][T31907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2145.565727][T31907] 8021q: adding VLAN 0 to HW filter on device team0 [ 2145.732896][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 2145.740144][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2145.786004][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.793265][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2146.096022][T31907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2146.168258][T31907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2146.484022][T31907] veth0_vlan: entered promiscuous mode [ 2146.521853][T31907] veth1_vlan: entered promiscuous mode [ 2146.892186][T31907] veth0_macvtap: entered promiscuous mode [ 2146.986577][T31907] veth1_macvtap: entered promiscuous mode [ 2147.205275][T31907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2147.317554][T31907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2147.371532][T11491] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2147.514952][T20161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.555671][T20161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.575226][T20161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.592097][T11491] usb 10-1: config 0 interface 0 altsetting 198 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.632847][ T1107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.653187][T11491] usb 10-1: config 0 interface 0 altsetting 198 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.702957][T11491] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2147.745644][T11491] usb 10-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2147.776857][T11491] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.790138][T18610] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2147.813461][T11491] usb 10-1: config 0 descriptor?? [ 2147.986722][T18610] usb 5-1: Using ep0 maxpacket: 8 [ 2148.002706][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2148.010832][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2148.030241][T18610] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2148.055394][T18610] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2148.089537][T18610] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2148.105969][T18610] usb 5-1: Product: syz [ 2148.111018][T18610] usb 5-1: Manufacturer: syz [ 2148.117691][T18610] usb 5-1: SerialNumber: syz [ 2148.271704][T11491] nzxt-kraken2 0003:1E71:170E.003C: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.9-1/input0 [ 2148.307501][T20164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2148.339135][T18610] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 2148.346859][T20164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2148.359120][T18610] usb 5-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 2148.406128][T18610] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2148.461027][T32052] usb 10-1: USB disconnect, device number 14 [ 2148.474984][T18610] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2148.542401][T18610] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 2148.570664][T18610] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 2148.588282][T18610] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2148.608813][T18610] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2148.692588][T18610] usb 5-1: USB disconnect, device number 66 [ 2148.738486][T18610] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2148.762134][T18610] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2148.774525][T18610] visor 5-1:1.0: device disconnected [ 2149.040525][T32052] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2149.239794][T32052] usb 1-1: Using ep0 maxpacket: 16 [ 2149.262875][T32052] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2149.288083][T32052] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 2149.312488][T32052] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 16 [ 2149.325491][T32052] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2149.341235][T32052] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2149.352982][T32052] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2149.363206][T32052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.374972][T32052] usb 1-1: Product: syz [ 2149.379196][T32052] usb 1-1: Manufacturer: syz [ 2149.384146][T32052] usb 1-1: SerialNumber: syz [ 2149.394987][T32055] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2149.693617][T32055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2149.756999][T32055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2149.975865][T32055] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.7870'. [ 2150.110850][T32070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2150.222531][T32055] debugfs: '!' already exists in 'ieee80211' [ 2150.258042][T32070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.780320][T23342] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 2150.915116][T32052] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 2150.932221][T32052] usb 1-1: USB disconnect, device number 38 [ 2150.959648][T23342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.990089][T23342] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2151.050403][T23342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.076589][T23342] usb 5-1: config 0 descriptor?? [ 2153.048597][T32101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7930'. [ 2153.865042][T23342] usbhid 5-1:0.0: can't add hid device: -71 [ 2153.913820][T23342] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2153.996687][T23342] usb 5-1: USB disconnect, device number 67 [ 2154.206949][T32108] syzkaller1: entered promiscuous mode [ 2154.246844][T32108] syzkaller1: entered allmulticast mode [ 2154.606963][T32114] tipc: Invalid UDP bearer configuration [ 2154.607008][T32114] tipc: Enabling of bearer rejected, failed to enable media [ 2154.989125][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2154.989149][ T30] audit: type=1326 audit(1755950754.154:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32118 comm="syz.9.7938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b6058ebe9 code=0x0 [ 2156.781112][T32151] netlink: 'syz.2.7948': attribute type 1 has an invalid length. [ 2157.045030][T32151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2157.345387][T26506] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2157.360200][T26506] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2157.370593][T26506] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2157.378718][T26506] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2157.388643][T26506] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2159.217739][T32157] chnl_net:caif_netlink_parms(): no params data found [ 2159.416744][T18610] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2159.489996][T30912] Bluetooth: hci11: command tx timeout [ 2159.599233][T18610] usb 10-1: config 0 has an invalid interface number: 249 but max is 0 [ 2159.624267][T18610] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.709850][T18610] usb 10-1: config 0 has no interface number 0 [ 2159.737342][T18610] usb 10-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2159.764325][T18610] usb 10-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2159.775422][T18610] usb 10-1: config 0 interface 249 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2159.791465][T18610] usb 10-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 2159.801736][T18610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.840921][T18610] usb 10-1: config 0 descriptor?? [ 2159.891602][T18610] port100 10-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 2160.011987][T32189] netlink: 'syz.4.7959': attribute type 1 has an invalid length. [ 2160.076158][T18610] usb 10-1: USB disconnect, device number 15 [ 2160.259188][T32189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2160.314286][T32157] bridge0: port 1(bridge_slave_0) entered blocking state [ 2160.333643][T32157] bridge0: port 1(bridge_slave_0) entered disabled state [ 2160.358429][T32157] bridge_slave_0: entered allmulticast mode [ 2160.382004][T32157] bridge_slave_0: entered promiscuous mode [ 2160.405648][T32157] bridge0: port 2(bridge_slave_1) entered blocking state [ 2160.423880][T32157] bridge0: port 2(bridge_slave_1) entered disabled state [ 2160.443578][T32157] bridge_slave_1: entered allmulticast mode [ 2160.464099][T32157] bridge_slave_1: entered promiscuous mode [ 2160.624145][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.641115][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.935531][T32157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2160.981783][T32157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2161.032041][T32211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7966'. [ 2161.527177][T32157] team0: Port device team_slave_0 added [ 2161.570127][T30912] Bluetooth: hci11: command tx timeout [ 2161.716953][T32215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7967'. [ 2161.718993][T32157] team0: Port device team_slave_1 added [ 2161.899229][T32215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.106858][T32215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.190591][T32233] netlink: 'syz.4.7972': attribute type 1 has an invalid length. [ 2162.326970][T32227] syzkaller0: entered promiscuous mode [ 2162.336037][T32227] syzkaller0: entered allmulticast mode [ 2162.372727][T32229] tipc: Started in network mode [ 2162.378850][T32229] tipc: Node identity c243213561ff, cluster identity 4711 [ 2162.393928][T32229] tipc: Enabled bearer , priority 0 [ 2162.505307][T32233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2162.524796][T32157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2162.556724][T32157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2162.582836][ C1] vkms_vblank_simulate: vblank timer overrun [ 2162.595278][T32157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2162.614920][T32220] tipc: Resetting bearer [ 2162.774173][T32220] tipc: Disabling bearer [ 2163.077396][T32157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2163.163498][T32157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.292759][T32157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2163.314749][T32242] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 2163.428935][T32242] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 2163.607243][T32247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7977'. [ 2163.650006][T30912] Bluetooth: hci11: command tx timeout [ 2163.709099][T32247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2164.378072][T32157] hsr_slave_0: entered promiscuous mode [ 2164.391344][T32157] hsr_slave_1: entered promiscuous mode [ 2164.412998][T32157] debugfs: 'hsr0' already exists in 'hsr' [ 2164.437691][T32157] Cannot create hsr debugfs directory [ 2164.590385][T18610] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2164.749830][T18610] usb 5-1: device descriptor read/64, error -71 [ 2165.051437][T18610] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2165.170790][ T44] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2165.240290][T18610] usb 5-1: device descriptor read/64, error -71 [ 2165.372957][T18610] usb usb5-port1: attempt power cycle [ 2165.407805][ T44] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 2165.429838][ T44] usb 10-1: config 0 has no interface number 0 [ 2165.486821][ T44] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2165.511789][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.521246][ T44] usb 10-1: Product: syz [ 2165.525867][ T44] usb 10-1: Manufacturer: syz [ 2165.531119][ T44] usb 10-1: SerialNumber: syz [ 2165.539568][ T44] usb 10-1: config 0 descriptor?? [ 2165.553960][T32269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7985'. [ 2165.598390][ T44] hub 10-1:0.217: bad descriptor, ignoring hub [ 2165.670312][ T44] hub 10-1:0.217: probe with driver hub failed with error -5 [ 2165.715585][T32157] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.736735][T30912] Bluetooth: hci11: command tx timeout [ 2165.752047][T18610] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2165.798736][ T44] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2165.842503][T18610] usb 5-1: device descriptor read/8, error -71 [ 2165.912995][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2165.948459][ T44] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2165.973932][ T44] usb 10-1: media controller created [ 2166.103161][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2166.121198][T32271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7986'. [ 2166.121607][T18610] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2166.144056][T32157] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.270477][T18610] usb 5-1: device descriptor read/8, error -71 [ 2166.346832][ T44] DVB: Unable to find symbol dib7000p_attach() [ 2166.358163][T32273] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7983'. [ 2166.380900][T18610] usb usb5-port1: unable to enumerate USB device [ 2166.393823][ T44] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2166.429795][T23342] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2166.431261][T32273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7983'. [ 2166.522587][T32157] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.609929][ T44] rc_core: IR keymap rc-dib0700-rc5 not found [ 2166.616142][ T44] Registered IR keymap rc-empty [ 2166.629301][ T44] dvb-usb: could not initialize remote control. [ 2166.650255][ T44] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2166.662909][T23342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2166.720818][T23342] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 2166.753439][T23342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.776605][T23342] usb 1-1: config 0 descriptor?? [ 2166.803380][T23342] option 1-1:0.0: GSM modem (1-port) converter detected [ 2166.879630][T32157] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.908191][ T44] usb 10-1: USB disconnect, device number 16 [ 2167.025151][T23342] usb 1-1: USB disconnect, device number 39 [ 2167.032488][ T44] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2167.041335][T23342] option 1-1:0.0: device disconnected [ 2167.476817][T32279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7988'. [ 2167.668199][T32157] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2167.692455][T32157] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2167.727907][T32157] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2167.816175][T32157] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2167.823238][ T44] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2167.982039][ T44] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2167.999860][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2168.030289][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2168.052443][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2168.125515][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2168.177397][T32157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2168.193701][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.244058][ T44] usb 5-1: config 0 descriptor?? [ 2168.270177][T32280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2168.293243][T32157] 8021q: adding VLAN 0 to HW filter on device team0 [ 2168.363138][T20157] bridge0: port 1(bridge_slave_0) entered blocking state [ 2168.370414][T20157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2168.477693][T20157] bridge0: port 2(bridge_slave_1) entered blocking state [ 2168.484963][T20157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2168.754511][ T44] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xd [ 2168.901817][ T44] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2168.965953][ T44] usb 5-1: USB disconnect, device number 72 [ 2169.131221][T32053] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2169.181720][T32306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7993'. [ 2169.341080][T32053] usb 10-1: Using ep0 maxpacket: 8 [ 2169.353265][T32053] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 2169.377349][T32053] usb 10-1: config 2 has no interface number 0 [ 2169.404987][T32053] usb 10-1: config 2 interface 31 has no altsetting 0 [ 2169.428328][T32157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2169.453121][T32053] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2169.498081][T32053] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.601743][T32053] usb 10-1: Product: syz [ 2169.606081][T32053] usb 10-1: Manufacturer: syz [ 2169.631684][T32053] usb 10-1: SerialNumber: syz [ 2169.680036][T32053] ch9200 10-1:2.31: probe with driver ch9200 failed with error -22 [ 2169.922907][T32157] veth0_vlan: entered promiscuous mode [ 2169.976218][T32310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2170.092251][T32157] veth1_vlan: entered promiscuous mode [ 2170.321233][T32157] veth0_macvtap: entered promiscuous mode [ 2170.357750][T32157] veth1_macvtap: entered promiscuous mode [ 2170.717747][T32157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2170.891601][T32157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2171.041740][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.085246][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.168508][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.530495][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.728300][T20164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.737496][T18586] usb 10-1: USB disconnect, device number 17 [ 2171.796061][T20164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.906317][T20161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.979114][T20161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.547781][T32335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8003'. [ 2172.762774][T32341] trusted_key: syz.9.8000 sent an empty control message without MSG_MORE. [ 2173.840092][ T44] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2174.020471][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 2174.041784][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2174.093631][ T44] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2174.105689][ T44] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2174.210777][ T44] usb 1-1: Product: syz [ 2174.215026][ T44] usb 1-1: Manufacturer: syz [ 2174.219651][ T44] usb 1-1: SerialNumber: syz [ 2174.320875][ T44] usb 1-1: config 0 descriptor?? [ 2174.326835][T32346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2174.341335][ T44] hub 1-1:0.0: bad descriptor, ignoring hub [ 2174.349897][ T44] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2174.751956][ T44] usb 1-1: USB disconnect, device number 40 [ 2176.899894][T18610] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2177.038804][T32375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8013'. [ 2177.137296][T18610] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2177.152383][T32377] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 2177.174674][T18610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.209129][T18610] usb 1-1: Product: syz [ 2177.211086][T32377] bond3: (slave vti0): Error -95 calling set_mac_address [ 2177.226167][T18610] usb 1-1: Manufacturer: syz [ 2177.244785][T18610] usb 1-1: SerialNumber: syz [ 2177.306950][T18610] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2177.357608][T23342] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2177.655313][T32381] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2177.672544][ T44] usb 1-1: USB disconnect, device number 41 [ 2177.744740][T32381] team0: Port device batadv1 added [ 2178.057050][T32366] Bluetooth: hci1: command 0x0406 tx timeout [ 2178.063531][T32366] Bluetooth: hci6: command 0x0406 tx timeout [ 2178.132409][T32390] netlink: 136 bytes leftover after parsing attributes in process `syz.6.8016'. [ 2178.469857][T23342] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2178.476992][T23342] ath9k_htc: Failed to initialize the device [ 2178.507670][ T44] usb 1-1: ath9k_htc: USB layer deinitialized [ 2178.554763][T32395] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8018'. [ 2180.048260][T32426] netlink: 'syz.9.8030': attribute type 1 has an invalid length. [ 2180.340018][T32426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2181.212723][T18610] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2181.391475][T18610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.458168][T32445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2181.487628][T18610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.760828][T18610] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2181.794318][T18610] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2181.819720][T18610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.854037][T18610] usb 1-1: config 0 descriptor?? [ 2182.293044][T32449] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.8036'. [ 2182.368092][T32449] netlink: zone id is out of range [ 2182.419137][T32449] netlink: zone id is out of range [ 2182.434343][T18610] plantronics 0003:047F:FFFF.003E: report_id 0 is invalid [ 2182.461324][T32449] netlink: get zone limit has 8 unknown bytes [ 2182.474149][T18610] plantronics 0003:047F:FFFF.003E: item 0 0 1 8 parsing failed [ 2182.490925][T18610] plantronics 0003:047F:FFFF.003E: parse failed [ 2182.515555][T18610] plantronics 0003:047F:FFFF.003E: probe with driver plantronics failed with error -22 [ 2184.093248][T18592] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2184.359876][T18592] usb 7-1: config 0 has no interfaces? [ 2184.380554][T18592] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2184.496664][T18592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.550498][T30912] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2184.572480][T18610] usb 1-1: USB disconnect, device number 42 [ 2184.572920][T18592] usb 7-1: Product: syz [ 2184.583310][T30912] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2184.601835][T30912] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2184.616635][T30912] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2184.626762][T30912] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2184.680118][T18592] usb 7-1: Manufacturer: syz [ 2184.684872][T18592] usb 7-1: SerialNumber: syz [ 2184.706501][T18592] usb 7-1: config 0 descriptor?? [ 2184.725758][T32474] netlink: 'syz.4.8043': attribute type 1 has an invalid length. [ 2185.052737][T32053] usb 7-1: USB disconnect, device number 22 [ 2185.283037][T32474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2185.366623][T32476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8044'. [ 2185.948903][T32489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8047'. [ 2186.324825][T32500] netlink: 14 bytes leftover after parsing attributes in process `syz.9.8051'. [ 2186.660571][T32501] syzkaller1: entered promiscuous mode [ 2186.668562][T32501] syzkaller1: entered allmulticast mode [ 2186.727658][T26506] Bluetooth: hci12: command tx timeout [ 2188.772347][T26506] Bluetooth: hci12: command tx timeout [ 2188.819425][T32500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2188.928543][T32500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2189.037651][T32500] bond0 (unregistering): Released all slaves [ 2189.568307][T32513] netlink: 'syz.9.8054': attribute type 1 has an invalid length. [ 2190.110684][T32514] gretap2: entered promiscuous mode [ 2190.121138][ T31] INFO: task syz.0.7586:30891 blocked for more than 143 seconds. [ 2190.140068][T32514] bond0: (slave gretap2): making interface the new active one SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2190.179828][ T31] Not tainted syzkaller #0 [ 2190.184932][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2190.220159][ T31] task:syz.0.7586 state:D stack:25128 pid:30891 tgid:30891 ppid:25586 task_flags:0x440040 flags:0x00004004 [ 2190.253993][ T31] Call Trace: [ 2190.264436][T32514] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 2190.279867][ T31] [ 2190.282903][ T31] __schedule+0x1798/0x4cc0 [ 2190.287532][ T31] ? __pfx___schedule+0x10/0x10 [ 2190.330198][ T31] ? schedule+0x91/0x360 [ 2190.337165][ T31] schedule+0x165/0x360 [ 2190.369151][ T31] schedule_preempt_disabled+0x13/0x30 [ 2190.409953][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 2190.415597][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 2190.427547][T32516] macvlan2: entered promiscuous mode [ 2190.433315][T32516] macvlan2: entered allmulticast mode [ 2190.444110][T18610] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2190.470990][T32516] bond0: entered promiscuous mode [ 2190.480221][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2190.502531][ T31] down_read+0x98/0x2e0 [ 2190.506780][ T31] page_cache_ra_order+0x318/0xd40 [ 2190.580159][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 2190.604580][T32516] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2190.620633][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 2190.626103][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 2190.702045][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2190.711892][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2190.717384][ T31] filemap_fault+0x62c/0x1200 [ 2190.734693][T32516] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2190.764713][T32516] bond0: left promiscuous mode [ 2190.842120][ T31] ? __pagetable_ctor+0x253/0x340 [ 2190.859942][T26506] Bluetooth: hci12: command tx timeout [ 2190.862252][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 2190.934267][ T31] ? rcu_is_watching+0x15/0xb0 [ 2190.939287][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 2190.961113][ T31] __do_fault+0x135/0x390 [ 2190.972141][ T31] __handle_mm_fault+0x1847/0x5440 [ 2190.977365][ T31] ? __lock_acquire+0xab9/0xd20 [ 2191.000206][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2191.005806][ T31] ? __pfx_do_futex+0x10/0x10 [ 2191.069744][ T31] ? lock_vma_under_rcu+0xdf/0x3d0 [ 2191.075027][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2191.110103][ T31] handle_mm_fault+0x40a/0x8e0 [ 2191.115044][ T31] do_user_addr_fault+0xa81/0x1390 [ 2191.120436][ T31] ? rcu_is_watching+0x15/0xb0 [ 2191.125400][ T31] ? trace_page_fault_user+0x84/0x1e0 [ 2191.131339][ T31] exc_page_fault+0x76/0xf0 [ 2191.140829][ T31] asm_exc_page_fault+0x26/0x30 [ 2191.145790][ T31] RIP: 0033:0x7f663ca65209 [ 2191.152562][ T31] RSP: 002b:00007f663cedfb90 EFLAGS: 00010246 [ 2191.158754][ T31] RAX: 0000200000000140 RBX: 0000000000000002 RCX: ffffffffffffffbf [ 2191.167820][ T31] RDX: eacceed5e4d13724 RSI: 0000200000000040 RDI: 00005555950953c8 [ 2191.203694][ T31] RBP: 00007f663cdb7da0 R08: 0000001b32820000 R09: 0000000000000001 [ 2191.262274][ T31] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f663cdb5fac [ 2191.290701][ T31] R13: 00007f663cedfc80 R14: fffffffffffffffe R15: 00007f663cedfca0 [ 2191.299563][ T31] [ 2191.320247][ T31] INFO: task syz.0.7586:30894 blocked for more than 144 seconds. [ 2191.328311][ T31] Not tainted syzkaller #0 [ 2191.387354][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2191.419718][ T31] task:syz.0.7586 state:D stack:25928 pid:30894 tgid:30891 ppid:25586 task_flags:0x440040 flags:0x00004004 [ 2191.460995][ T31] Call Trace: [ 2191.464373][ T31] [ 2191.467339][ T31] __schedule+0x1798/0x4cc0 [ 2191.523438][ T31] ? __pfx___schedule+0x10/0x10 [ 2191.528427][ T31] ? schedule+0x91/0x360 [ 2191.557397][ T31] schedule+0x165/0x360 [ 2191.572913][ T31] schedule_preempt_disabled+0x13/0x30 [ 2191.590431][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 2191.596085][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 2191.615808][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2191.639909][ T31] down_read+0x98/0x2e0 [ 2191.644272][ T31] page_cache_ra_order+0x318/0xd40 [ 2191.649465][ T31] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 2191.712888][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 2191.718447][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 2191.740424][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2191.745996][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2191.761515][ T31] filemap_fault+0x62c/0x1200 [ 2191.780154][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 2191.792081][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 2191.797611][ T31] ? __handle_mm_fault+0x27b7/0x5440 [ 2191.834308][ T31] __do_fault+0x135/0x390 [ 2191.838733][ T31] __handle_mm_fault+0x3611/0x5440 [ 2191.851832][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2191.857400][ T31] ? find_vma+0xe7/0x160 [ 2191.865107][ T31] ? __pfx_find_vma+0x10/0x10 [ 2191.874115][ T31] handle_mm_fault+0x40a/0x8e0 [ 2191.878989][ T31] do_user_addr_fault+0x764/0x1390 [ 2191.884930][ T31] exc_page_fault+0x76/0xf0 [ 2191.889599][ T31] asm_exc_page_fault+0x26/0x30 [ 2191.895093][ T31] RIP: 0010:__get_user_8+0x14/0x30 [ 2191.900729][ T31] Code: ca e9 90 02 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2191.923282][ T31] RSP: 0018:ffffc90003d57eb8 EFLAGS: 00050287 [ 2191.930609][ T31] RAX: 00002000000000c0 RBX: 00002000000000c0 RCX: aeca6e3fad30e600 [ 2191.938742][ T31] RDX: 00007ffffffff000 RSI: ffffffff8dba675e RDI: ffffffff8be33680 [ 2191.952168][ T31] RBP: ffffc90003d57f48 R08: 0000000000000000 R09: ffffffff820b7ae0 [ 2191.965046][ T31] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: 00000000000000ce [ 2192.013485][ T31] R13: 00000000000000ce R14: 0000000000000005 R15: ffff88802bb61e00 [ 2192.035196][ T31] ? __might_fault+0xb0/0x130 [ 2192.040306][ T31] __se_sys_io_setup+0x2d/0x1a0 [ 2192.045249][ T31] do_syscall_64+0xfa/0x3b0 [ 2192.050338][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2192.055682][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.062759][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2192.067580][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.079319][ T31] RIP: 0033:0x7f663cb8ebe9 [ 2192.086574][ T31] RSP: 002b:00007f663da39038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2192.099235][ T31] RAX: ffffffffffffffda RBX: 00007f663cdb5fa0 RCX: 00007f663cb8ebe9 [ 2192.112013][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2192.130502][ T31] RBP: 00007f663cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2192.139128][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2192.147466][ T31] R13: 00007f663cdb6038 R14: 00007f663cdb5fa0 R15: 00007f663cedfa28 [ 2192.156220][ T31] [ 2192.235972][ T31] [ 2192.235972][ T31] Showing all locks held in the system: [ 2192.340157][ T31] 1 lock held by khungtaskd/31: [ 2192.345126][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2192.356377][ T31] 3 locks held by kworker/u8:3/49: [ 2192.362130][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2192.389890][ T31] #1: ffffc90000b97bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2192.453560][ T31] #2: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2192.513464][ T31] 4 locks held by kworker/u8:6/1107: [ 2192.518855][ T31] 4 locks held by kworker/u8:10/3510: [ 2192.600015][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2192.652798][ T31] #1: ffffc9000be1fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2192.664755][ T31] #2: ffffffff8f52b5b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2192.674900][ T31] #3: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: fib6_rules_net_exit_batch+0x20/0xc0 [ 2192.685076][ T31] 2 locks held by udevd/5237: [ 2192.691846][ T31] 2 locks held by getty/5627: [ 2192.696590][ T31] #0: ffff88814d9ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2192.706646][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2192.716908][ T31] 3 locks held by kworker/u8:1/16847: [ 2192.723972][ T31] #0: ffff88814cb5c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2192.736104][ T31] #1: ffffc90002f37bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2192.792533][ T31] #2: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 2192.802461][ T31] 5 locks held by kworker/0:5/18610: [ 2192.807867][ T31] #0: ffff8881446ca148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2192.821571][ T31] #1: ffffc9001871fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2192.835270][ T31] #2: ffff888027bd9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2192.844574][ T31] #3: ffff888027bde518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2192.855158][ T31] #4: ffff8880273a6668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2192.865258][ T31] 3 locks held by kworker/u8:12/20163: [ 2192.870829][ T31] 2 locks held by kworker/0:1/23342: [ 2192.876278][ T31] 2 locks held by syz.6.7585/30890: [ 2192.882569][ T31] 1 lock held by syz.0.7586/30891: [ 2192.887709][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2192.901438][ T31] 1 lock held by syz.0.7586/30894: [ 2192.906592][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2192.917937][ T31] 3 locks held by kworker/u9:0/30912: [ 2192.923813][ T31] #0: ffff8880318f1948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2192.935453][ T31] #1: ffffc90003e9fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2192.942174][T26506] Bluetooth: hci12: command tx timeout [ 2192.987974][ T31] #2: ffff88806bff8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 2193.012294][ T31] 1 lock held by syz.7.7624/31012: [ 2193.017507][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2193.037006][ T31] 1 lock held by syz.5.7644/31086: [ 2193.042549][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2193.053725][ T31] 1 lock held by syz.5.7644/31090: [ 2193.058921][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2193.070415][ T31] 1 lock held by syz.8.7784/31592: [ 2193.075619][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2193.086747][ T31] 1 lock held by syz.3.7818/31717: [ 2193.091958][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2193.104634][ T31] 2 locks held by syz.1.7890/31970: [ 2193.110596][ T31] #0: ffff88807cb280a8 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x2d4/0x2b20 [ 2193.121846][ T31] #1: ffff888022c25828 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 2193.149714][ T31] 1 lock held by syz.1.7890/31971: [ 2193.154924][ T31] #0: ffff888022c25828 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 2193.210591][ T31] 1 lock held by syz.0.7984/32267: [ 2193.215814][ T31] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2193.280140][ T31] 1 lock held by syz.2.7987/32275: [ 2193.287288][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2193.305077][ T31] 1 lock held by syz.2.7987/32276: [ 2193.311703][ T31] #0: ffff888022c259c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 2193.322718][ T31] 1 lock held by syz-executor/32478: [ 2193.328069][ T31] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 2193.337614][ T31] 3 locks held by syz.9.8054/32516: [ 2193.343240][ T31] #0: ffffffff8ec82460 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2193.354121][ T31] #1: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 2193.366655][ T31] #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2193.381403][ T31] 4 locks held by syz.0.8055/32515: [ 2193.386695][ T31] #0: ffff88804aef0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 2193.401322][ T31] #1: ffff88804aef00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 2193.414982][T26506] Bluetooth: hci7: command 0x0406 tx timeout [ 2193.421351][ T31] #2: ffffffff8f69d108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 2193.431747][ T31] #3: ffff888061c3f338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 2193.441501][ T31] 1 lock held by syz.4.8056/32520: [ 2193.446755][ T31] #0: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 2193.457850][ T31] [ 2193.460258][ T31] ============================================= [ 2193.460258][ T31] [ 2193.468834][ T31] NMI backtrace for cpu 0 [ 2193.468858][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2193.468882][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2193.468896][ T31] Call Trace: [ 2193.468905][ T31] [ 2193.468915][ T31] dump_stack_lvl+0x189/0x250 [ 2193.468955][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2193.468981][ T31] ? __pfx__printk+0x10/0x10 [ 2193.469034][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2193.469065][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2193.469095][ T31] ? __pfx__printk+0x10/0x10 [ 2193.469128][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2193.469164][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2193.469193][ T31] watchdog+0xf93/0xfe0 [ 2193.469228][ T31] ? watchdog+0x1de/0xfe0 [ 2193.469262][ T31] kthread+0x70e/0x8a0 [ 2193.469290][ T31] ? __pfx_watchdog+0x10/0x10 [ 2193.469316][ T31] ? __pfx_kthread+0x10/0x10 [ 2193.469345][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2193.469372][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2193.469398][ T31] ? __pfx_kthread+0x10/0x10 [ 2193.469424][ T31] ret_from_fork+0x3f9/0x770 [ 2193.469450][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2193.469477][ T31] ? __switch_to_asm+0x39/0x70 [ 2193.469503][ T31] ? __switch_to_asm+0x33/0x70 [ 2193.469528][ T31] ? __pfx_kthread+0x10/0x10 [ 2193.469556][ T31] ret_from_fork_asm+0x1a/0x30 [ 2193.469600][ T31] [ 2193.469630][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2193.625315][ C1] NMI backtrace for cpu 1 [ 2193.625335][ C1] CPU: 1 UID: 0 PID: 15867 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 2193.625355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2193.625368][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 2193.625396][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x83/0x90 [ 2193.625425][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 d8 da bc 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 2193.625439][ C1] RSP: 0018:ffffc900035a74c0 EFLAGS: 00000293 [ 2193.625453][ C1] RAX: ffffffff84c75ada RBX: ffff8880500c1770 RCX: 0000000000000000 [ 2193.625465][ C1] RDX: ffff888026728000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2193.625476][ C1] RBP: 0000000000000001 R08: 0001000000000000 R09: 0030004000060003 [ 2193.625487][ C1] R10: dffffc0000000000 R11: fffff520006b4e84 R12: 0000000000000000 [ 2193.625498][ C1] R13: ffff8880500c1770 R14: ffff88814c176a00 R15: dffffc0000000000 [ 2193.625511][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 2193.625524][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2193.625536][ C1] CR2: 0000200000404030 CR3: 000000007db06000 CR4: 00000000003526f0 [ 2193.625553][ C1] Call Trace: [ 2193.625562][ C1] [ 2193.625568][ C1] lockdep_rht_mutex_is_held+0x3a/0x90 [ 2193.625587][ C1] rhltable_lookup+0x14a/0x780 [ 2193.625607][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2193.625629][ C1] ? __lock_acquire+0xab9/0xd20 [ 2193.625651][ C1] ? __pfx_rhltable_lookup+0x10/0x10 [ 2193.625675][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 2193.625697][ C1] ? sta_info_get+0x4f/0x2a0 [ 2193.625718][ C1] sta_info_get+0x125/0x2a0 [ 2193.625740][ C1] ieee80211_ibss_rx_queued_mgmt+0x12be/0x2ae0 [ 2193.625767][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 2193.625786][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2193.625808][ C1] ? __lock_acquire+0xab9/0xd20 [ 2193.625846][ C1] ieee80211_iface_work+0x85f/0x12d0 [ 2193.625871][ C1] cfg80211_wiphy_work+0x2b8/0x470 [ 2193.625892][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2193.625908][ C1] process_scheduled_works+0xae1/0x17b0 [ 2193.625935][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2193.625958][ C1] worker_thread+0x8a0/0xda0 [ 2193.625987][ C1] kthread+0x70e/0x8a0 [ 2193.626008][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2193.626023][ C1] ? __pfx_kthread+0x10/0x10 [ 2193.626051][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2193.626071][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2193.626092][ C1] ? __pfx_kthread+0x10/0x10 [ 2193.626110][ C1] ret_from_fork+0x3f9/0x770 [ 2193.626130][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2193.626149][ C1] ? __switch_to_asm+0x39/0x70 [ 2193.626169][ C1] ? __switch_to_asm+0x33/0x70 [ 2193.626187][ C1] ? __pfx_kthread+0x10/0x10 [ 2193.626206][ C1] ret_from_fork_asm+0x1a/0x30 [ 2193.626232][ C1] [ 2193.969874][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2193.976798][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2193.985945][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2193.996119][ T31] Call Trace: [ 2193.999427][ T31] [ 2194.002382][ T31] dump_stack_lvl+0x99/0x250 [ 2194.007093][ T31] ? __asan_memcpy+0x40/0x70 [ 2194.011710][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2194.016938][ T31] ? __pfx__printk+0x10/0x10 [ 2194.021694][ T31] vpanic+0x281/0x750 [ 2194.025708][ T31] ? __pfx_vpanic+0x10/0x10 [ 2194.030342][ T31] ? preempt_schedule+0xae/0xc0 [ 2194.035249][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2194.040765][ T31] panic+0xb9/0xc0 [ 2194.044609][ T31] ? __pfx_panic+0x10/0x10 [ 2194.049057][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2194.054475][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2194.060757][ T31] watchdog+0xfd2/0xfe0 [ 2194.064957][ T31] ? watchdog+0x1de/0xfe0 [ 2194.069411][ T31] kthread+0x70e/0x8a0 [ 2194.073522][ T31] ? __pfx_watchdog+0x10/0x10 [ 2194.078239][ T31] ? __pfx_kthread+0x10/0x10 [ 2194.082868][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2194.088272][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2194.093503][ T31] ? __pfx_kthread+0x10/0x10 [ 2194.098343][ T31] ret_from_fork+0x3f9/0x770 [ 2194.102998][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2194.108146][ T31] ? __switch_to_asm+0x39/0x70 [ 2194.112943][ T31] ? __switch_to_asm+0x33/0x70 [ 2194.117733][ T31] ? __pfx_kthread+0x10/0x10 [ 2194.122363][ T31] ret_from_fork_asm+0x1a/0x30 [ 2194.127189][ T31] [ 2194.130526][ T31] Kernel Offset: disabled [ 2194.134946][ T31] Rebooting in 86400 seconds..