last executing test programs: 10m28.902898918s ago: executing program 32 (id=96): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffcc3f15f4a2ffffaaaaaaaaaaaa86dd60101040001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22fc3bc66d8069240d2a76fd4625525a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') open(&(0x7f00009e1000)='./file0\x00', 0x254000, 0x0) 10m26.735428371s ago: executing program 33 (id=99): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 10m3.869874848s ago: executing program 35 (id=113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x468, 0x4) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}]}}]}, 0x44}}, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) 6m50.886714287s ago: executing program 5 (id=666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x254000, 0x0) 6m48.040603948s ago: executing program 5 (id=673): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) close(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x80082102, &(0x7f0000000080)={r4, 0x3, r3, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 6m44.615695027s ago: executing program 5 (id=685): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4840) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$6lowpan_control(r2, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x4e22, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000dd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000013b000/0x4000)=nil, &(0x7f00009f3000/0x3000)=nil, &(0x7f0000c6a000/0x1000)=nil, &(0x7f0000336000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)="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", 0x129, r5}, 0x64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 6m39.614821332s ago: executing program 5 (id=698): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fef, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03040000b500000000008aea0000feff6ed048802ff233c104531bcdce"], 0xc8) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000680)=0x11) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) unshare(0x2c060000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x1}) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) socket$inet6(0xa, 0x2, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r5, 0x2cfc08c20dafc34e}, {r3, 0xf102}], 0x3, 0x7) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x1, @raw_data="ef1acb57f280da4d43b995b24d758e24e3b5cbe4517b2579172379c5194cd90ec3776700c850b653302c1d239544396ba76a5cb19cbddf683af0d98d85fe0b50d749acbf03781e3e381ea0332b0cb71ba4b482a1dc20d8d6f5a4b1d892d23ffd156f14880031ce60d61d0b70138aba90ec5b5ecbcb8b1680de1b7202450f927bffb5e4f80e32366efc9950680621de0fb9b0f89cd67881cd2eec2e2a29ab6f55d91ba6b4b47c5bc7415fe7677528f4787166d54b596db5933f7a2d293891221d4723056ab7f837e4"}) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x400) 6m38.499823407s ago: executing program 5 (id=705): r0 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x4d) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r2, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x450) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x6e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) listen(r4, 0x50) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f00000001c0)={0x1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x800000000a, 0x4, 0x2, 0x6, 0x9}, 0x0, &(0x7f00000002c0)={0x3c, 0x1, 0x6, 0x2844bb54, 0x9, 0x0, 0x0, 0x6}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYRES16=r6], 0x0) 6m35.30603495s ago: executing program 5 (id=725): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x40, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6m26.696558687s ago: executing program 2 (id=757): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="07007dc117e7bf29d4a900000400000200050000", @ANYRES32, @ANYBLOB="00001e0000040000000000000000000000000000d23f3c3072c51c7c5fccdc0d65a5b82d4a1b2ae9cd", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000440)=0x1000) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) syz_open_dev$mouse(&(0x7f00000000c0), 0x9f, 0x484000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6m25.027653161s ago: executing program 2 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80086f53, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x2d, '\x00', @buffer={"a8fe026aa6cd5b358e2b4b56376f5b6bfe0dd0e16c5bf7b19364cba7caf43f0b", 0x20}, 0x1}, {0x2c, '\x00', @data=0x8, 0x5}, {0x15, '\x00', @data=0xd6, 0x1}]}) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000400)={0x6f0, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3a}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xff}, @NL80211_ATTR_PEER_MEASUREMENTS={0x3e4, 0x111, 0x0, 0x1, {0x3e0, 0x5, 0x0, 0x1, [{0x354, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x78}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x63}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3a7b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xedac4745ab254fb5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2303}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xef64}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xad}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe2a2}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8b2}, @NL80211_ATTR_PEER_MEASUREMENTS={0x158, 0x111, 0x0, 0x1, {0x154, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x28db}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x17c, 0x111, 0x0, 0x1, {0x178, 0x5, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff00}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xe167}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x20048000) 6m24.896052102s ago: executing program 2 (id=766): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r8}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRES64=r9, @ANYBLOB="0c000d8005"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r13 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x56555959, 0x0, 0x5, [{}, {}, {0xfffffffe}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x3, 0xfffffffd}, {0x3}], 0x0, 0x0, 0x0, 0x0, 0x7}}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 6m24.600940334s ago: executing program 2 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) syz_usb_connect$uac1(0x3, 0xda, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000730904000000010100000a24010000060201020c24020502020602060006ff090401000001020000097801010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504071001000006000900020000040000000904020101ff", @ANYRES32=r4], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 6m24.013260312s ago: executing program 2 (id=769): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@generic={0x40, 0x0, 0x0, 0x8000, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m23.693896006s ago: executing program 2 (id=773): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000101040000000000e1000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) unshare(0x6020400) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x0, 0xdab, 0x6}, {0x6, 0x0, 0x2924, 0x79a, 0x10}, 0x8, 0x6, 0xb3f}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x400c840) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x5) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) setsockopt$inet_int(r2, 0x0, 0x2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "fc6767457b9500", "c7998c867c22b401046a89606ffcf92e", "2c5be7ad", "e22805c0707e52eb"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r11, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 6m23.335966718s ago: executing program 36 (id=773): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000101040000000000e1000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) unshare(0x6020400) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x0, 0xdab, 0x6}, {0x6, 0x0, 0x2924, 0x79a, 0x10}, 0x8, 0x6, 0xb3f}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x400c840) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x5) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) setsockopt$inet_int(r2, 0x0, 0x2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "fc6767457b9500", "c7998c867c22b401046a89606ffcf92e", "2c5be7ad", "e22805c0707e52eb"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r11, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 6m20.217689489s ago: executing program 37 (id=725): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x40, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m13.000513611s ago: executing program 8 (id=1370): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000003c0)={0x7, 0x0, {0x1, 0x3, 0xa98c, 0x2, 0x746000}, 0xfffffff2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x8, 0x8, "d463cd2641a51a7d"}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x1, 0x6}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)=""/80, 0x50}], 0x2) close(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1900, &(0x7f0000001600)={0x5, 0x8, 0x20000, {r2}}, 0x20) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x100) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)={0x80000001}) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r7, 0x7ca8e000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @local, 0x1, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000680)='\x00\x00\'', 0x3}], 0x2}, 0x404c880) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x100000) 3m12.861609173s ago: executing program 8 (id=1371): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fef, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setreuid(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x5, 0x1, 0x0, @adapter={0x2, 0x7, 0x0, 0xc46, 0x1}}]}) r2 = eventfd2(0x8, 0x801) r3 = epoll_create1(0x80000) r4 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x70800, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000000) r5 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0xa0001004}) read$FUSE(r6, &(0x7f0000003940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f, 0x401, &(0x7f00000001c0)=0x1) write$FUSE_ENTRY(r7, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x3, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0x0, {0x2, 0xb3b, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r8, r9, 0x3, 0x5}}}, 0x90) ioctl$TUNSETOWNER(r4, 0x400454cc, r8) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000002c0), 0x53d, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r11, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r11, &(0x7f0000000040)) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r12, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) getsockopt$IPT_SO_GET_INFO(r12, 0x0, 0x40, &(0x7f0000000200)={'filter\x00', 0x0, [0x4, 0x1000, 0xfffffff7, 0x7]}, &(0x7f0000000280)=0x54) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) 3m9.319337655s ago: executing program 8 (id=1383): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') socket$packet(0x11, 0xa, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x50, 0x0, 0xfffffffc, 0x0, 0x40000000000, 0xfffffffffffffffe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy(0x0, 0xffffffffffffffff, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r5, 0xa, 0x1c) prctl$PR_SET_MM_EXE_FILE(0x50, 0xd, 0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) shutdown(r6, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}]}}}]}, 0x48}}, 0x0) 3m8.372834637s ago: executing program 8 (id=1387): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x220582, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000440)={{0x0, 0x401}, 0x100, './file0\x00'}) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r5, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m5.828826212s ago: executing program 8 (id=1395): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) fcntl$lock(r4, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) r6 = userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r6, r2, 0x0) 3m3.020931407s ago: executing program 8 (id=1405): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0x1ffffff, 0x80, 0x1e0, 0x81}) syz_open_dev$loop(0x0, 0x7ff, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004380)=""/4124, 0xcde) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x100, 0x1a5) 2m50.508040042s ago: executing program 38 (id=1437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffcc3f15f4a2ffffaaaaaaaaaaaa86dd60101040001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22fc3bc66d8069240d2a76fd4625525a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb", 0x48}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@arp={0x806, @generic={0x313, 0x9, 0x6, 0xa, 0x3, @empty, "64abacdc3cd828fc3772", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, "402ab19a70c6ec37a957"}}}}, &(0x7f0000000380)={0x1, 0x1, [0x459, 0xe2a, 0xb69, 0x64d]}) getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') open(&(0x7f00009e1000)='./file0\x00', 0x254000, 0x0) 2m47.937512003s ago: executing program 39 (id=1405): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0x1ffffff, 0x80, 0x1e0, 0x81}) syz_open_dev$loop(0x0, 0x7ff, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004380)=""/4124, 0xcde) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x100, 0x1a5) 2m28.291651049s ago: executing program 9 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x7, 0x4, r1, 0x0, 0x0, 0xfffffffc}]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x8008005) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.708658323s ago: executing program 9 (id=1487): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r2, 0x7}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m27.302634806s ago: executing program 9 (id=1488): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000040)='j', 0x1, 0x4011, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x3) r3 = socket$kcm(0x21, 0x2, 0xa) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x40) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) sendfile(0xffffffffffffffff, r4, &(0x7f0000000400)=0xfffffffffffffffd, 0xffff) readv(r3, &(0x7f0000004500)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m23.903041893s ago: executing program 9 (id=1491): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) fcntl$lock(r4, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) r7 = userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r7, r2, 0x0) 2m20.126640824s ago: executing program 9 (id=1495): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xe9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xe6, 0x4, 0x9, "6c3c073d7b320e5321e1361967ab07ec", "a3615426987d72c89f9affbfb22afde9d3809e043873a80162854fb82fe89c06bcc5c8ded7b4d065a28775e58cdd246c0462f6ccf42bbeb1760855e00202b5e91ced9ccf3d46cc40feb0ec43ded0cc91f998b1146c8c7f5cea6c1e42dfd20d42d9c509171f845f020c60858c2329217421f7b0fa48da06984e2a8b17b41968c778210ce8281e996ce30fb8d6fa1d94e0758919802b1fef85591cb7437dd82555e9da44f97c9398a13198c7d3204a09c772b89dd1895d8f66a8d285f6eda7bddd7a730839ff340f3643f4491f8a9f68d3df"}, 0xe6, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x1, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x14b100, 0x0) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000200)=0x100) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x80, 0x482a, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x402c582b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x6, 0x100, 0x7}) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000002c0)=0x8, 0x4) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f00000003c0)={{[0x9, 0x6, 0xfd, 0x1]}, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{{@align=0x2aee, {0x7, 0x1, 0xfac, 0x2}}, 0x2cd3, 0x0, '^()\x00'}, {{@_ha_fsid={[0x2ac3, 0x10001]}, {0x0, 0xff30, 0x800, 0x27e}}, 0xb, 0x0, '\x00'}, {{@_ha_fsid={[0x1, 0x5]}, {0x3, 0xc, 0x10, 0x81}}, 0x3, 0x0, '/dev/hwrng\x00'}, {{@_ha_fsid={[0x1, 0x400]}, {0x2, 0xfff8, 0x3, 0x4e39}}, 0x1, 0x0, '!\':/!\x00'}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x4, 0xc000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipmr_newroute={0x28, 0x18, 0x200, 0x70bd2d, 0x25dfdbff, {0x80, 0x80, 0x0, 0x5, 0x0, 0x4, 0xfe, 0x6, 0x2000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @private=0xa010102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4c891) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca249435, &(0x7f0000000540)={0x3, 0x2, @status={[0xe8, 0x0, 0x4, 0x9, 0xe4, 0x9]}, [0x7f, 0x400, 0x8028, 0x7f, 0x4, 0x5, 0x7, 0x1ff, 0x5, 0x80000000, 0x8, 0x7, 0x8, 0x1, 0x9, 0x2, 0x101, 0xd, 0x8, 0x500f, 0x0, 0x10, 0x8d, 0x8000, 0x9, 0xd, 0x4, 0x3, 0x1, 0x8, 0x0, 0x7f, 0x0, 0x85, 0x0, 0x3, 0x7, 0x9, 0x4, 0x1000, 0x7, 0x9, 0x101, 0x9, 0x0, 0x1, 0x48, 0x7ff, 0x5, 0x7fffffffffffffff, 0x1a9, 0x400, 0x6, 0xfffffffffffffffb, 0x2, 0x8, 0x4, 0x93, 0x7, 0x6, 0x0, 0xcc, 0x8, 0xb]}) syz_open_dev$hidraw(&(0x7f0000000f80), 0x5, 0x48682) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000000fc0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001000)={'wg2\x00'}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000001040)={0x1, 0xffffffff, 0x4, 0x9, 0x6, 0x8}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000001080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x32b2f7, 0x3f9fea}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000001100)={[{0x0, 0x3, 0x5, 0xd, 0xef, 0x5, 0x62, 0x9, 0x0, 0x7, 0x4, 0xa, 0x5}, {0x10001, 0x5, 0x1, 0x7, 0x9, 0xd, 0x1, 0xb0, 0x9, 0x1, 0x14, 0x8, 0x4}, {0x100, 0x3580, 0x5, 0xc, 0x9, 0xf, 0x2, 0x5, 0x3, 0x81, 0x3, 0x4, 0x7ff}], 0x9}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8420000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_open_dev$usbfs(&(0x7f00000012c0), 0x8, 0x60200) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000001300)={0xa, 0x1}) fsetxattr(r3, &(0x7f0000001340)=@known='trusted.overlay.metacopy\x00', &(0x7f0000001380)='\x00', 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r6, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000700, r7, &(0x7f0000001400)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m19.610977319s ago: executing program 9 (id=1496): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x7, 0xf7, 0x0, 0x0, 0x2, 0x4}, ["", "", ""]}, 0x1c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0xdd37, 0x80, 0xa3, 0x81}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 2m4.279599166s ago: executing program 40 (id=1496): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x7, 0xf7, 0x0, 0x0, 0x2, 0x4}, ["", "", ""]}, 0x1c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0xdd37, 0x80, 0xa3, 0x81}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 1m26.884224467s ago: executing program 1 (id=1580): socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102000000201e04003040000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080407000904020000010200001204020101010200000b240201fb030801371fc807240108050210090582092000030201072501000e03008c3178fe53d1e4bc6d1bb575971e5ef775ec93d003f2a986521bac6f6914e8023e8a11aa82e6824c701a42eb5f6e175cd9e06ac00ed054169d30957f86ded6bb914c1688602ccbe986195b2805cb98999777b432a92fc9"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}]}}]}, 0x44}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0}) 1m26.040270856s ago: executing program 6 (id=1582): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0xa, 0x6) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000500)=""/4096) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x68}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES64=0x0, @ANYRES32, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESDEC=r5], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d001e1ff200001000000000004000000ff71f5d8d21046232f00000000000001fc020000e2ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) 1m25.454554592s ago: executing program 4 (id=1584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffcc3f15f4a2ffffaaaaaaaaaaaa86dd60101040001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22fc3bc66d8069240d2a76fd4625525a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@arp={0x806, @generic={0x313, 0x9, 0x6, 0xa, 0x3, @empty, "64abacdc3cd828fc3772", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, "402ab19a70c6ec37a957"}}}}, &(0x7f0000000380)={0x1, 0x1, [0x459, 0xe2a, 0xb69, 0x64d]}) getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') open(&(0x7f00009e1000)='./file0\x00', 0x254000, 0x0) 1m24.215519196s ago: executing program 6 (id=1587): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/56, 0x38}], 0x2}, 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10011, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0405619, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f0000002200)={0x4, &(0x7f00000021c0)=[{0xbdff, 0x6, 0x3, 0xfff}, {0x3, 0x55, 0x8, 0x2}, {0x3ff, 0x42, 0x3, 0x1}, {0xe2, 0x6, 0xd, 0x5}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 1m21.334673498s ago: executing program 4 (id=1590): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffcc3f15f4a2ffffaaaaaaaaaaaa86dd60101040001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22fc3bc66d8069240d2a76fd4625525a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x254000, 0x0) 1m21.134714493s ago: executing program 1 (id=1591): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x34, r2, 0x301, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) shutdown(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r4, &(0x7f0000000ec0)=[{&(0x7f0000000880)=""/209, 0xd1}], 0x1, 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000440)=0xf236) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x32314142}}) msgsnd(0x0, &(0x7f0000000000)={0x3, "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"}, 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000400), 0x80001, 0x0) 1m20.517200913s ago: executing program 1 (id=1592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x3f, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48895}, 0xc000) 1m19.587259186s ago: executing program 1 (id=1593): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) io_uring_setup(0xb, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x90000019}) epoll_pwait(r3, &(0x7f0000001100)=[{}], 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x16e, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0xffffff97, 0x0, 0x3, 0x1}, 0x8) 1m18.29660424s ago: executing program 6 (id=1595): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') lseek(r1, 0x10001, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1de, 0x0, 0x80000000}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010100}}, 0x24) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'bridge0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}) 1m18.046989895s ago: executing program 4 (id=1597): unshare(0x400) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) socket$inet6(0xa, 0x80002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x17, &(0x7f0000000600)={0x6, 0x40000000000000, 0x0, 0x40, 0x3, 0x5ed1, 0x0, 0x1000000000000007}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0xb, 0xa9, 0x3, 0x0, 0x1, 0x5}, 0x0, 0x0) 1m17.801381957s ago: executing program 6 (id=1598): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 1m17.605993497s ago: executing program 6 (id=1599): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x1, 0xeeee8000, 0xc, 0x2, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0xc, 0x3}, {0xf000, 0x80a0000, 0xe, 0x13, 0x1, 0x8, 0x3, 0xa, 0xff, 0x6, 0x2}, {0x5000, 0x54000, 0x4, 0xf, 0x5, 0x3, 0x26, 0x6, 0x3, 0x6, 0x5}, {0x3000, 0x0, 0x3, 0x4, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x22, 0x1, 0x6}, {0x9000, 0x30000, 0x0, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0x9}, {0x3000, 0x12000, 0x19, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbf, 0x18, 0x9, 0xf}, {0xa000, 0x8000000, 0xc, 0x1, 0x0, 0xf, 0x10, 0x3, 0x8, 0x0, 0x3, 0x8}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x7, 0x6, 0x4, 0xf9, 0x1, 0x8, 0x81, 0xfa}, {0x50000, 0xedd8}, {0xffff1000, 0x17}, 0x5, 0x0, 0x1000, 0x0, 0x100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000000000d, 0x7]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) r5 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238"], 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x8f) fchdir(r7) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) 1m16.8546543s ago: executing program 4 (id=1600): syz_emit_ethernet(0x56, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x1000000, 0x0, 0x44050}, 0x1000) 1m16.539529215s ago: executing program 4 (id=1601): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) fcntl$lock(r4, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) r7 = userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r7, r2, 0x0) 1m14.0583815s ago: executing program 1 (id=1605): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) fcntl$lock(r3, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r5) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) r6 = userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1m12.992237092s ago: executing program 4 (id=1607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f70f43f00"/21], 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r1, &(0x7f0000000d80)=0x9, r2, 0x0, 0x101, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="034886dd010000000000140000006019540003082c00fe88a43c22a400000000000000da2101ffa7"], 0xfdef) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000157f00", 0x1c) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x26e, 0x0, 0x4}]}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r9, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) socket$packet(0x11, 0x0, 0x300) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r11, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private2, @remote, @private1}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/15, 0xf}, 0x10}], 0x1, 0x42, 0x0) 1m12.801647553s ago: executing program 6 (id=1608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000001140)=""/222, 0xde}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/10, 0xa}], 0x1, &(0x7f00000008c0)=""/111, 0x6f}, 0x7}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/117, 0x75}], 0x3, &(0x7f0000000bc0)=""/137, 0x89}, 0x4}, {{&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/219, 0xdb}, {&(0x7f0000000e00)=""/159, 0x9f}, {&(0x7f0000000ec0)=""/62, 0x3e}], 0x3, &(0x7f0000000f40)=""/8, 0x8}, 0x6}, {{&(0x7f0000000f80)=@in6, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)}, {&(0x7f0000001040)=""/54, 0x36}, {&(0x7f0000001080)=""/117, 0x75}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000003bc0)=""/4097, 0x1001}, {&(0x7f0000002140)=""/34, 0x22}, {&(0x7f0000000700)=""/120, 0x78}, {&(0x7f00000022c0)=""/203, 0xcb}, {&(0x7f00000023c0)=""/214, 0xd6}, {&(0x7f00000024c0)=""/192, 0xc0}, {&(0x7f0000002580)=""/17, 0x11}], 0x7, &(0x7f0000002600)=""/20, 0x14}, 0x8}, {{&(0x7f0000002640)=@x25={0x9, @remote}, 0x80, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=""/173, 0xad}}], 0x7, 0x40002160, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x2003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x4000) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x10, 0x803, 0x0) 1m10.737789492s ago: executing program 1 (id=1611): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xffff, 0x0, 0x8001, 0x8000, 0x1, 0x0, 0x0, 0x101, r1}, &(0x7f0000000180)=0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = dup(r6) write$tun(r7, &(0x7f0000000cc0)={@val={0x0, 0x9}, @val={0x3, 0x3, 0x7, 0x7fff, 0x8, 0xffff}, @mpls={[], @ipv6=@udp={0x1, 0x6, "b9d1a5", 0x8, 0x11, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e20, 0x4e24, 0x8}}}}}, 0x3e) sendmsg$key(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="0206090c0600000025bd7000fcdbdf25040002008100540955000009000000000000000b000000000000000600000000000000"], 0x30}}, 0x24000040) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000240)="bad330fbc9b55400040000ea07563cf586dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xc, 0x6, @multicast}, 0x14) 57.830929454s ago: executing program 41 (id=1607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f70f43f00"/21], 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r1, &(0x7f0000000d80)=0x9, r2, 0x0, 0x101, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="034886dd010000000000140000006019540003082c00fe88a43c22a400000000000000da2101ffa7"], 0xfdef) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000157f00", 0x1c) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x26e, 0x0, 0x4}]}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r9, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) socket$packet(0x11, 0x0, 0x300) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r11, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private2, @remote, @private1}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/15, 0xf}, 0x10}], 0x1, 0x42, 0x0) 56.727902264s ago: executing program 42 (id=1608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000001140)=""/222, 0xde}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/10, 0xa}], 0x1, &(0x7f00000008c0)=""/111, 0x6f}, 0x7}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/117, 0x75}], 0x3, &(0x7f0000000bc0)=""/137, 0x89}, 0x4}, {{&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/219, 0xdb}, {&(0x7f0000000e00)=""/159, 0x9f}, {&(0x7f0000000ec0)=""/62, 0x3e}], 0x3, &(0x7f0000000f40)=""/8, 0x8}, 0x6}, {{&(0x7f0000000f80)=@in6, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)}, {&(0x7f0000001040)=""/54, 0x36}, {&(0x7f0000001080)=""/117, 0x75}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000003bc0)=""/4097, 0x1001}, {&(0x7f0000002140)=""/34, 0x22}, {&(0x7f0000000700)=""/120, 0x78}, {&(0x7f00000022c0)=""/203, 0xcb}, {&(0x7f00000023c0)=""/214, 0xd6}, {&(0x7f00000024c0)=""/192, 0xc0}, {&(0x7f0000002580)=""/17, 0x11}], 0x7, &(0x7f0000002600)=""/20, 0x14}, 0x8}, {{&(0x7f0000002640)=@x25={0x9, @remote}, 0x80, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=""/173, 0xad}}], 0x7, 0x40002160, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x2003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x4000) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x10, 0x803, 0x0) 55.644029477s ago: executing program 43 (id=1611): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xffff, 0x0, 0x8001, 0x8000, 0x1, 0x0, 0x0, 0x101, r1}, &(0x7f0000000180)=0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = dup(r6) write$tun(r7, &(0x7f0000000cc0)={@val={0x0, 0x9}, @val={0x3, 0x3, 0x7, 0x7fff, 0x8, 0xffff}, @mpls={[], @ipv6=@udp={0x1, 0x6, "b9d1a5", 0x8, 0x11, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e20, 0x4e24, 0x8}}}}}, 0x3e) sendmsg$key(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="0206090c0600000025bd7000fcdbdf25040002008100540955000009000000000000000b000000000000000600000000000000"], 0x30}}, 0x24000040) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000240)="bad330fbc9b55400040000ea07563cf586dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xc, 0x6, @multicast}, 0x14) 34.734937839s ago: executing program 3 (id=1647): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = getpid() prlimit64(r0, 0xd, &(0x7f0000000100)={0xa, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x34, 0x40, 0x1, 0x70bd28, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) socket$inet6(0xa, 0x800, 0x84000004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000540)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "fbab0a23bb7df8"}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001540)={{0x0, 0x9, 0x8000000000000000, 0x0, 0x0, 0xf65, 0x1c0, 0xfffffff2, 0x80000001, 0x4a9b, 0x8e, 0x5, 0x5, 0x9, 0x6}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000002540)={r8, r9, "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", "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"}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r6], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}, 0x1, 0x0, 0x30000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 34.283878115s ago: executing program 3 (id=1648): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) fcntl$lock(r4, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) r7 = userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r7, r2, 0x0) 33.469323406s ago: executing program 0 (id=1649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffcc3f15f4a2ffffaaaaaaaaaaaa86dd60101040001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22fc3bc66d8069240d2a76fd4625525a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x2, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x254000, 0x0) 32.229683417s ago: executing program 3 (id=1650): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7da20700000000000000000000fb4304"}) r3 = syz_open_pts(r0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0xa, "00f2ff1701049b14c8d423dbb3ce00"}) dup3(r3, r0, 0x0) read(r0, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r2, 0x0, 0x0) 31.271127948s ago: executing program 3 (id=1651): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="5ebaa5", 0x3, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f0000000140)=""/31, 0x1f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) 31.061113702s ago: executing program 0 (id=1652): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000240012800b7c6ba2dc726964676500001400028008001500000000000600270000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 30.74545838s ago: executing program 0 (id=1653): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x300, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 30.742025503s ago: executing program 3 (id=1654): r0 = socket$inet_udp(0x2, 0x2, 0x0) inotify_init() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="3c00000010000f042abd70000000000000000000", @ANYBLOB="0100000000c000001c00128009000100626f6e64000000000c0002800500010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r1, 0x0, 0x48000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x50000091) keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="04000000020000fbab1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000a2924291477b09ed001f2a27e0000000000004000000000000000000000000010000000100000002004e210000000000000000000000000000000000000000000000000000000000000000000000002000"/272], 0x10c) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x101, 0x481) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x100008}, 0xc) r12 = gettid() setpgid(0x0, r12) 30.191361908s ago: executing program 3 (id=1655): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4090) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1000, 0x1}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000200)=0x10, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}, 0x1, 0x0, 0x0, 0x240048a0}, 0x6004000) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x290000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x115, 0x70bd28, 0x25dfdbfd, {0x2, 0x18, 0x20, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r8 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r8], 0x1) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0x69c8c0) 30.189316565s ago: executing program 0 (id=1662): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socket$packet(0x11, 0x3, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0xffdd, 0x1}) 29.676817831s ago: executing program 0 (id=1656): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff020}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) sendmmsg$inet(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000640)='<', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002240)='.', 0x1}], 0x1}}], 0x2, 0x400a055) close_range(r0, 0xffffffffffffffff, 0x0) 28.635018857s ago: executing program 0 (id=1657): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) fcntl$lock(r4, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) r7 = userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r7, r2, 0x0) 12.31794682s ago: executing program 44 (id=1657): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) fcntl$lock(r4, 0xd, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0xffffffffffffffff}) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) r7 = userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r7, r2, 0x0) 11.988112384s ago: executing program 45 (id=1655): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4090) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1000, 0x1}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000200)=0x10, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}, 0x1, 0x0, 0x0, 0x240048a0}, 0x6004000) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x290000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x115, 0x70bd28, 0x25dfdbfd, {0x2, 0x18, 0x20, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r8 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r8], 0x1) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0x69c8c0) 7.463510664s ago: executing program 7 (id=1624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x48}}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x8, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)="01", 0x1}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x20200, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x2bdc, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fff, 0x400}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000440)="1a", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x1c, r11, 0x1, 0xfc, 0x6, @multicast}, 0x14) 6.402222087s ago: executing program 7 (id=1660): socket$inet6(0xa, 0x80003, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x1, 0x102, 0x4, {0x81, 0xfffffffb, 0x7fffffff, 0x6}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="050000000000000000002100000002000300", @ANYRES32=r2, @ANYRES32=r1], 0xd4}, 0x1, 0x0, 0x0, 0xd4}, 0x100020c0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c030040", @ANYRES16, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x400c845}, 0x44080) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0), 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0xa1b3a606282007e}], 0x1, &(0x7f0000000040), 0x0, 0x0) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0xfffc, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x3, 0x7fff0001}]}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/..\x00', 0x4, 0x300) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000740)={r8, 0x8a0, "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"}, &(0x7f0000000100)=0x8a8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140900001000010000000000e6000000000000000a200001020000010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800010600000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000101400000010000100"/232], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 5.30200426s ago: executing program 7 (id=1661): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = msgget$private(0x0, 0x1c0) (rerun: 32) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) (async) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b, 0x0, 0xf9}]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x9, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x5, &(0x7f0000000480)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x9, 0x9, 0x4, 0x9, 0x6}], &(0x7f00000004c0)='GPL\x00', 0xb, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x40, '\x00', r6, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x5, 0x10001, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x1, 0x3, 0x7, 0xa}, {0x5, 0x1, 0x8, 0x7}, {0x1, 0x5, 0xf, 0x7}, {0x5, 0x5, 0x2}, {0x3, 0x5, 0x4, 0x3}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x5, 0x1, 0xa}], 0x10, 0x3}, 0x94) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0700"/19, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0100000000000000000000000100"/28], 0x50) (rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 4.163305193s ago: executing program 7 (id=1663): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$video4linux(0x0, 0x7, 0x141000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) munmap(&(0x7f000016e000/0x1000)=nil, 0x1000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1380, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000002500)='./file1\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x2c0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r8, r9, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x401, 0x9, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x4, r8, r9, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x4, '&+%*!\xeb(^-@\x00'}}, {{0x3, 0x3, 0x10001, 0x200, 0xfefffc5b, 0x8, {0x0, 0x5, 0xedd, 0xff, 0x0, 0x4, 0xfff, 0x0, 0xb, 0xa000, 0xf8e9, 0x0, r9, 0x8}}, {0x1, 0x1, 0x1, 0x8, '\x00'}}, {{0x4, 0x0, 0x800, 0x3, 0x0, 0x96, {0x6, 0x1, 0x5, 0x8, 0x8000, 0x3, 0x7, 0x9, 0x9, 0x4000, 0x2, 0x0, r9, 0x5, 0x1}}, {0x4, 0x0, 0x2, 0x9, 'fd'}}]}, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f00000025c0)={0x90, 0x0, r4, {0x6, 0x0, 0x100000001, 0x100000000, 0x9, 0x2, {0x3, 0x9, 0xff, 0x6, 0x6, 0x2e, 0x1, 0x1, 0x80, 0x6000, 0x8, r5, r9, 0x3, 0x10}}}, 0x90) 736.479433ms ago: executing program 7 (id=1664): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000940)={0x60, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000140), &(0x7f0000000180)={'U+'}, 0x16, 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000040)='*.\x00') ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) r5 = socket(0x1e, 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x9, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="c3b15c0028e8da332bdf134b421bc55cd3e5a6f521026f01e745fbab3aaea24258628729aab267cad864769166e97637eacf7e6ebae33f482e4153688302ae4cb567b800d8877650371f0aa0d30f894f86c7ee0f7f14ec371465ef3e675b122c6d84c7449c06726cf75e16706c2fb9bd492c767e5cd872016b7d63d6af", @ANYRES16=r10, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f000000000000000000000000000000000014002000fe8000000000000000000000000000bb"], 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x89fe, &(0x7f0000000080)={'bridge0\x00'}) read$FUSE(r6, &(0x7f0000004fc0)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000940)=""/126, 0x7e, 0xe) read$usbmon(r6, &(0x7f00000000c0)=""/170, 0xaa) connect$can_bcm(r5, &(0x7f0000000040), 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) 0s ago: executing program 7 (id=1665): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x4, 0x7f85, 0x4}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = gettid() waitid(0x2, r3, 0x0, 0x8, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r5, 0x0, 0x78) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000d3e5aea4b440df207d41a993ebf24b078872f97b3429e8200103000000000043970aef785a0ea6220d49ef0597dd60f176e38ab8807fa6c557df61ed4c4aab3c6031b2d989b2fea57040174d8e6c99707a7cdb7249952d2d16e552c2ae23"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) kernel console output (not intermixed with test programs): ce 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.457789][T11146] usb 2-1: config 1 interface 0 has no altsetting 0 [ 680.493098][T11146] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 680.536032][T11146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.584582][T11146] usb 2-1: Product: syz [ 680.609696][T11146] usb 2-1: Manufacturer: syz [ 680.637791][T11146] usb 2-1: SerialNumber: syz [ 680.997849][T11147] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 681.031671][T11146] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 681.187930][T11147] usb 4-1: Using ep0 maxpacket: 16 [ 681.218639][T11147] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 681.259309][ T5776] usb 2-1: USB disconnect, device number 12 [ 681.277892][T11147] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 681.343360][T11147] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.415245][T11147] usb 4-1: config 1 interface 0 has no altsetting 0 [ 681.513668][T11147] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 681.557484][T11147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.592965][T11147] usb 4-1: Product: syz [ 681.658974][T11147] usb 4-1: Manufacturer: syz [ 681.692379][T11147] usb 4-1: SerialNumber: syz [ 682.131550][T11147] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 682.524237][ T5632] usb 4-1: USB disconnect, device number 10 [ 682.626240][ T5632] usblp0: removed [ 682.883166][T12451] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1506'. [ 683.024269][T12439] usblp0: removed [ 683.557844][T11146] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 683.758002][T11146] usb 2-1: Using ep0 maxpacket: 32 [ 683.785821][T11146] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 683.829196][T11146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.867948][T11146] usb 2-1: Product: syz [ 683.882482][T11146] usb 2-1: Manufacturer: syz [ 683.898186][T11146] usb 2-1: SerialNumber: syz [ 683.933829][T11146] usb 2-1: config 0 descriptor?? [ 683.962410][T11146] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 685.071725][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.166959][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.901610][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.913199][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.297814][T11147] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 686.357997][T11146] gspca_ov534_9: reg_w failed -71 [ 686.437856][T11147] usb 7-1: device descriptor read/64, error -71 [ 686.670366][T11146] gspca_ov534_9: Unknown sensor 0000 [ 686.670478][T11146] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 686.683848][T11147] usb 7-1: new low-speed USB device number 64 using dummy_hcd [ 686.733662][T11146] usb 2-1: USB disconnect, device number 13 [ 686.837855][T11147] usb 7-1: device descriptor read/64, error -71 [ 686.978446][T11147] usb usb7-port1: attempt power cycle [ 687.357885][T11147] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 687.420177][T11147] usb 7-1: device descriptor read/8, error -71 [ 687.688714][T11147] usb 7-1: new low-speed USB device number 66 using dummy_hcd [ 687.741027][T11147] usb 7-1: device descriptor read/8, error -71 [ 687.868254][ T809] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 687.885530][T11147] usb usb7-port1: unable to enumerate USB device [ 688.049227][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 688.073081][ T809] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.092198][ T809] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 688.102804][ T809] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.120129][ T809] usb 2-1: config 1 interface 0 has no altsetting 0 [ 688.131623][ T809] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 688.148835][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.167362][ T809] usb 2-1: Product: syz [ 688.175982][ T809] usb 2-1: Manufacturer: syz [ 688.193240][ T809] usb 2-1: SerialNumber: syz [ 688.607114][ T809] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 688.893245][ T809] usb 2-1: USB disconnect, device number 14 [ 689.350907][T12490] usblp0: removed [ 689.376985][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13 [ 689.627859][ T809] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 689.793089][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 689.793111][ T30] audit: type=1326 audit(1779637355.467:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 689.900907][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 689.909813][ T809] usb 4-1: not running at top speed; connect to a high speed hub [ 689.918293][ T30] audit: type=1326 audit(1779637355.537:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 689.964435][ T809] usb 4-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config [ 689.994125][ T809] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 690.014558][ T30] audit: type=1326 audit(1779637355.547:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a61ab code=0x7ffc0000 [ 690.057242][ T809] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.094902][ T809] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 690.185430][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.194573][ T30] audit: type=1326 audit(1779637355.547:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 690.238650][ T809] usb 4-1: Product: syz [ 690.251648][ T809] usb 4-1: Manufacturer: syz [ 690.262939][ T809] usb 4-1: SerialNumber: syz [ 690.349535][ T30] audit: type=1326 audit(1779637355.547:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 690.488166][ T30] audit: type=1326 audit(1779637355.547:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 690.624520][ T30] audit: type=1326 audit(1779637355.547:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 690.784734][ T30] audit: type=1326 audit(1779637355.547:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 690.942733][ T30] audit: type=1326 audit(1779637355.547:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 691.061757][ T30] audit: type=1326 audit(1779637355.547:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.6.1516" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 692.194065][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 692.223502][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.258098][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.275558][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.289243][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.299042][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.735024][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 693.147819][ T809] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 693.161602][ T809] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 693.178868][ T809] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 693.187368][ T809] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 693.435212][ T809] usb 4-1: USB disconnect, device number 11 [ 693.746811][ T9397] udevd[9397]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.041482][ T5776] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 694.125062][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.132619][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.173794][T12551] bridge_slave_0: entered allmulticast mode [ 694.239206][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 694.264645][T12551] bridge_slave_0: entered promiscuous mode [ 694.278956][ T5776] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 694.331197][ T5776] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 694.368361][ T50] Bluetooth: hci5: command tx timeout [ 694.388383][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.398256][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.399680][ T5776] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.421438][T12551] bridge_slave_1: entered allmulticast mode [ 694.476654][T12551] bridge_slave_1: entered promiscuous mode [ 694.525838][ T5776] usb 2-1: config 1 interface 0 has no altsetting 0 [ 694.571133][ T5776] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 694.602394][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.651538][ T5776] usb 2-1: Product: syz [ 694.675819][ T5776] usb 2-1: Manufacturer: syz [ 694.685679][ T5776] usb 2-1: SerialNumber: syz [ 694.749430][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.886615][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.052841][ T5776] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 695.226735][T12551] team0: Port device team_slave_0 added [ 695.262665][T12551] team0: Port device team_slave_1 added [ 695.337980][ T9] usb 2-1: USB disconnect, device number 15 [ 695.478412][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.510933][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.574842][T12571] usblp0: removed [ 695.723689][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.813415][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15 [ 695.835506][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.875129][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.980945][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.341162][T12551] hsr_slave_0: entered promiscuous mode [ 696.385078][T12551] hsr_slave_1: entered promiscuous mode [ 696.419019][T12551] debugfs: 'hsr0' already exists in 'hsr' [ 696.443361][T12551] Cannot create hsr debugfs directory [ 696.465978][ T50] Bluetooth: hci5: command tx timeout [ 698.203153][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 698.528876][ T50] Bluetooth: hci5: command tx timeout [ 698.986897][T12622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 699.274684][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 699.274700][ T30] audit: type=1326 audit(1779637364.967:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 699.503543][ T30] audit: type=1326 audit(1779637365.017:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 699.633885][ T30] audit: type=1326 audit(1779637365.037:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 699.752680][ T30] audit: type=1326 audit(1779637365.037:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 699.892833][ T30] audit: type=1326 audit(1779637365.037:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 699.992039][ T30] audit: type=1326 audit(1779637365.047:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 700.113819][ T30] audit: type=1326 audit(1779637365.047:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 700.223241][ T30] audit: type=1326 audit(1779637365.047:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 700.323524][ T30] audit: type=1326 audit(1779637365.047:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 700.428183][ T30] audit: type=1326 audit(1779637365.057:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.0.1533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 700.610188][ T50] Bluetooth: hci5: command tx timeout [ 700.939445][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16 [ 701.160261][ T809] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 701.347911][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 701.366093][ T809] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 701.419635][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 701.502420][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 701.593644][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 701.728560][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 701.852380][ T809] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 701.929868][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.986225][ T809] usb 2-1: Product: syz [ 702.039256][ T809] usb 2-1: Manufacturer: syz [ 702.066297][ T809] usb 2-1: SerialNumber: syz [ 702.132535][ T809] usb 2-1: config 0 descriptor?? [ 702.847313][T12551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 702.888785][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1535'. [ 702.980868][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 703.052370][T12551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 703.208201][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.263672][ T809] iforce 2-1:0.0: usb_submit_urb failed: -110 [ 703.294867][T12551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 703.310182][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.325164][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.364793][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.380802][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.406857][T12551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 703.420539][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.477921][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.520498][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.612689][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.622225][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.659723][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.702262][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.738685][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.780238][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.830066][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.860867][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.892007][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.921795][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.959141][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 703.989147][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 704.028841][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 704.072600][ T809] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 704.106171][ T809] input input15: Timeout waiting for response from device. [ 704.132951][ T5776] IPVS: starting estimator thread 0... [ 704.218525][T12551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.258014][T12677] IPVS: using max 37 ests per chain, 88800 per kthread [ 704.279154][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 704.279176][ T30] audit: type=1326 audit(1779637369.967:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 704.331998][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.425618][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.432825][ T8307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.453457][ T9403] usb 2-1: USB disconnect, device number 16 [ 704.495321][ T30] audit: type=1326 audit(1779637370.037:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 704.633741][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.640975][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.718937][ T30] audit: type=1326 audit(1779637370.037:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 704.881631][ T30] audit: type=1326 audit(1779637370.097:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 704.994828][ T30] audit: type=1326 audit(1779637370.107:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 705.151392][ T30] audit: type=1326 audit(1779637370.157:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 705.302876][ T30] audit: type=1326 audit(1779637370.157:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 705.468120][ T30] audit: type=1326 audit(1779637370.167:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 705.519326][T12551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.775540][ T30] audit: type=1326 audit(1779637371.437:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1539" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0601c code=0x7ffc0000 [ 705.833106][T12551] veth0_vlan: entered promiscuous mode [ 705.912878][ T30] audit: type=1326 audit(1779637371.447:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1539" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0601c code=0x7ffc0000 [ 706.048665][T12551] veth1_vlan: entered promiscuous mode [ 706.333629][T12551] veth0_macvtap: entered promiscuous mode [ 706.501257][T12551] veth1_macvtap: entered promiscuous mode [ 706.695864][T12551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.790841][T12551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.918181][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.958841][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.104140][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.173997][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.467863][T11147] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 707.681453][T11147] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 707.736512][T11147] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.789823][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.811768][T11147] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 707.834860][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.910007][T11147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.985096][T11147] usb 7-1: config 0 descriptor?? [ 708.024607][T12712] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 708.041536][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.124944][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.372878][T11147] usbhid 7-1:0.0: can't add hid device: -71 [ 708.411747][T11147] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 708.494593][T11147] usb 7-1: USB disconnect, device number 67 [ 708.765675][T12727] FAULT_INJECTION: forcing a failure. [ 708.765675][T12727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.839635][T12727] CPU: 0 UID: 0 PID: 12727 Comm: syz.4.1519 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.839672][T12727] Tainted: [L]=SOFTLOCKUP [ 708.839682][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.839696][T12727] Call Trace: [ 708.839705][T12727] [ 708.839715][T12727] dump_stack_lvl+0xe8/0x150 [ 708.839747][T12727] should_fail_ex+0x412/0x560 [ 708.839783][T12727] _copy_from_user+0x2d/0xb0 [ 708.839817][T12727] get_compat_msghdr+0xb3/0x4c0 [ 708.839843][T12727] ? _parse_integer_limit+0x1ae/0x1f0 [ 708.839870][T12727] ? __pfx_get_compat_msghdr+0x10/0x10 [ 708.839894][T12727] ? kstrtoull+0x12f/0x1d0 [ 708.839927][T12727] ___sys_sendmsg+0x201/0x360 [ 708.839960][T12727] ? __lock_acquire+0x6b5/0x2cf0 [ 708.839989][T12727] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.840025][T12727] ? get_pid_task+0x20/0x1f0 [ 708.840052][T12727] ? get_pid_task+0x20/0x1f0 [ 708.840078][T12727] ? get_pid_task+0x20/0x1f0 [ 708.840133][T12727] ? __fget_files+0x2a/0x420 [ 708.840160][T12727] ? __fget_files+0x3a0/0x420 [ 708.840197][T12727] __sys_sendmsg+0x183/0x260 [ 708.840233][T12727] ? __pfx___sys_sendmsg+0x10/0x10 [ 708.840297][T12727] __do_fast_syscall_32+0x229/0x6e0 [ 708.840321][T12727] ? do_fast_syscall_32+0x33/0x70 [ 708.840343][T12727] ? lockdep_hardirqs_on+0x7a/0x110 [ 708.840363][T12727] ? asm_int80_emulation+0x1a/0x20 [ 708.840385][T12727] ? do_int80_emulation+0x286/0x530 [ 708.840407][T12727] ? trace_irq_disable+0x3b/0x140 [ 708.840443][T12727] do_fast_syscall_32+0x33/0x70 [ 708.840465][T12727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.840491][T12727] RIP: 0023:0xf6fff01c [ 708.840511][T12727] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 708.840529][T12727] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 708.840552][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 708.840567][T12727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.840580][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.840593][T12727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.840606][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.840637][T12727] [ 709.738094][ T5776] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 709.918038][ T5776] usb 7-1: Using ep0 maxpacket: 32 [ 709.947640][ T5776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.985864][ T5776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.032680][ T5776] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 710.042240][T12738] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1548'. [ 710.071865][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.087862][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 710.162154][ T5776] usb 7-1: config 0 descriptor?? [ 710.201519][ T5776] hub 7-1:0.0: USB hub found [ 710.297541][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 710.356859][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.414563][ T9] usb 5-1: Product: syz [ 710.435595][ T9] usb 5-1: Manufacturer: syz [ 710.445183][ T5776] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 710.465576][ T9] usb 5-1: SerialNumber: syz [ 710.500557][ T9] usb 5-1: config 0 descriptor?? [ 710.569567][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 005 [ 710.879803][ T5776] hid-generic 0003:046D:C31C.0013: item fetching failed at offset 0/1 [ 710.931389][ T5776] hid-generic 0003:046D:C31C.0013: probe with driver hid-generic failed with error -22 [ 711.845485][ T5776] usb 7-1: reset high-speed USB device number 68 using dummy_hcd [ 712.056979][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 712.057004][ T30] audit: type=1326 audit(1779637377.747:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 712.178390][ T30] audit: type=1326 audit(1779637377.787:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 712.276009][ T30] audit: type=1326 audit(1779637377.797:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 712.520130][ T30] audit: type=1326 audit(1779637377.817:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 712.648284][ T5776] usbhid 7-1:0.0: reset_resume error -71 [ 712.682497][ T30] audit: type=1326 audit(1779637377.817:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 712.732940][ T5776] usb 7-1: USB disconnect, device number 68 [ 712.903661][ T9] (null): failure reading functionality [ 712.921997][ T9] i2c i2c-1: failure reading functionality [ 712.929038][ T30] audit: type=1326 audit(1779637377.817:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 712.994958][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 713.215250][ T9] usb 5-1: USB disconnect, device number 5 [ 713.285937][ T30] audit: type=1326 audit(1779637377.817:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 713.422350][ T30] audit: type=1326 audit(1779637377.827:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 713.627396][ T30] audit: type=1326 audit(1779637377.827:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 713.795468][ T30] audit: type=1326 audit(1779637377.837:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.3.1551" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 714.465688][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 715.421850][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 715.710050][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.772283][ T9] usb 2-1: config 0 has no interfaces? [ 715.830365][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 715.886449][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 715.950472][ T9] usb 2-1: Manufacturer: syz [ 716.023449][ T9] usb 2-1: config 0 descriptor?? [ 716.956852][T12790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 717.238279][ T5632] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 717.297810][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 717.469111][ T5632] usb 5-1: Using ep0 maxpacket: 32 [ 717.493238][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 717.511815][ T5632] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 717.537153][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.551807][ T5632] usb 5-1: config 0 has no interface number 0 [ 717.585548][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 717.606912][ T5632] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 717.640234][ T5632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.653151][ T9] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.669145][ T5632] usb 5-1: Product: syz [ 717.677295][ T5632] usb 5-1: Manufacturer: syz [ 717.693424][ T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 717.703132][ T5632] usb 5-1: SerialNumber: syz [ 717.736670][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.750376][ T5632] usb 5-1: config 0 descriptor?? [ 717.758431][ T9] usb 4-1: Product: syz [ 717.765967][ T5632] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 717.778659][ T9] usb 4-1: Manufacturer: syz [ 717.783864][ T9] usb 4-1: SerialNumber: syz [ 718.034327][ T5632] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 718.154437][ T5632] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 718.566500][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 718.580097][ T5632] usb 5-1: USB disconnect, device number 6 [ 718.686903][ T5632] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 718.747026][ T5632] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 718.793129][ T5632] quatech2 5-1:0.51: device disconnected [ 718.871222][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 718.994106][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 719.284420][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 719.349572][ T9] usb 4-1: USB disconnect, device number 12 [ 719.523818][T12825] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 719.703310][ T9704] udevd[9704]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.763213][ T809] usb 2-1: USB disconnect, device number 17 [ 720.855403][T12844] syzkaller0: entered promiscuous mode [ 720.925050][T12844] syzkaller0: entered allmulticast mode [ 722.228775][ T5708] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 722.395921][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1570'. [ 722.426992][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1570'. [ 722.468860][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 722.483791][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 722.532273][ T5708] usb 5-1: too many configurations: 106, using maximum allowed: 8 [ 722.653200][ T5708] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 722.700301][ T5708] usb 5-1: can't read configurations, error -61 [ 722.757820][ T9] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 722.881452][ T5708] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 722.989690][ T9] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 723.058474][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 723.129710][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 723.142234][ T9] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 723.164536][ T5708] usb 5-1: too many configurations: 106, using maximum allowed: 8 [ 723.183987][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.252258][ T9] usb 7-1: Product: syz [ 723.260113][ T5708] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 723.277420][ T9] usb 7-1: Manufacturer: syz [ 723.299534][ T5708] usb 5-1: can't read configurations, error -61 [ 723.312507][ T9] usb 7-1: SerialNumber: syz [ 723.335667][ T5708] usb usb5-port1: attempt power cycle [ 723.428549][ T9] rtl8150 7-1:1.0: couldn't find required endpoints [ 723.489607][ T9] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 723.747907][ T5708] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 723.804071][ T9] usb 7-1: USB disconnect, device number 69 [ 723.813902][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 723.861840][ T5708] usb 5-1: too many configurations: 106, using maximum allowed: 8 [ 723.912367][ T5708] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 723.961444][ T5708] usb 5-1: can't read configurations, error -61 [ 724.128109][ T5708] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 726.192236][ T5708] usb 5-1: device descriptor read/8, error -71 [ 726.259507][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 726.259531][ T30] audit: type=1326 audit(1779637391.897:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.1.1575" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0601c code=0x7ffc0000 [ 726.328122][ T5708] usb usb5-port1: unable to enumerate USB device [ 726.665977][T12915] FAULT_INJECTION: forcing a failure. [ 726.665977][T12915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.760430][T12915] CPU: 0 UID: 0 PID: 12915 Comm: syz.4.1579 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.760457][T12915] Tainted: [L]=SOFTLOCKUP [ 726.760463][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.760473][T12915] Call Trace: [ 726.760480][T12915] [ 726.760488][T12915] dump_stack_lvl+0xe8/0x150 [ 726.760512][T12915] should_fail_ex+0x412/0x560 [ 726.760563][T12915] _copy_from_user+0x2d/0xb0 [ 726.760598][T12915] get_compat_msghdr+0xb3/0x4c0 [ 726.760625][T12915] ? __pfx_get_compat_msghdr+0x10/0x10 [ 726.760650][T12915] ? __lock_acquire+0x6b5/0x2cf0 [ 726.760680][T12915] ___sys_recvmsg+0x1dd/0x590 [ 726.760696][T12915] ? __lock_acquire+0x6b5/0x2cf0 [ 726.760716][T12915] ? __pfx____sys_recvmsg+0x10/0x10 [ 726.760736][T12915] ? __fget_files+0x2a/0x420 [ 726.760768][T12915] ? __fget_files+0x3a0/0x420 [ 726.760794][T12915] do_recvmmsg+0x3a5/0x800 [ 726.760815][T12915] ? __pfx_do_recvmmsg+0x10/0x10 [ 726.760840][T12915] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 726.760862][T12915] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 726.760906][T12915] __sys_recvmmsg+0x1a5/0x290 [ 726.760930][T12915] ? __pfx___sys_recvmmsg+0x10/0x10 [ 726.760952][T12915] ? ksys_write+0x242/0x270 [ 726.760997][T12915] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 726.761026][T12915] __do_fast_syscall_32+0x229/0x6e0 [ 726.761043][T12915] ? do_fast_syscall_32+0x33/0x70 [ 726.761058][T12915] ? lockdep_hardirqs_on+0x7a/0x110 [ 726.761072][T12915] ? asm_int80_emulation+0x1a/0x20 [ 726.761088][T12915] ? do_int80_emulation+0x286/0x530 [ 726.761107][T12915] do_fast_syscall_32+0x33/0x70 [ 726.761123][T12915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 726.761143][T12915] RIP: 0023:0xf6fff01c [ 726.761157][T12915] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 726.761171][T12915] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 726.761187][T12915] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800084c0 [ 726.761198][T12915] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 726.761207][T12915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 726.761216][T12915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 726.761225][T12915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 726.761247][T12915] [ 726.782257][ T30] audit: type=1326 audit(1779637392.457:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 726.782313][ T30] audit: type=1326 audit(1779637392.457:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 726.782360][ T30] audit: type=1326 audit(1779637392.477:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 726.782407][ T30] audit: type=1326 audit(1779637392.477:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 726.805034][ T30] audit: type=1326 audit(1779637392.497:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 726.805098][ T30] audit: type=1326 audit(1779637392.497:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 726.816888][ T30] audit: type=1326 audit(1779637392.507:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 726.846937][ T30] audit: type=1326 audit(1779637392.527:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 726.865229][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.868760][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.891589][ T30] audit: type=1326 audit(1779637392.587:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.0.1578" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 727.822639][T12907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.844544][T12907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.832125][ T1343] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.832169][ T1343] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.832196][ T1343] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.832224][ T1343] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.058141][ T5632] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 729.970726][ T5632] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.031796][ T5632] usb 2-1: not running at top speed; connect to a high speed hub [ 730.087013][ T5632] usb 2-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config [ 730.146852][ T5632] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 730.231533][ T5632] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.366696][ T5632] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 730.407486][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.458459][ T5632] usb 2-1: Product: syz [ 730.490337][ T5632] usb 2-1: Manufacturer: syz [ 730.515716][ T5632] usb 2-1: SerialNumber: syz [ 730.969453][T12951] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 731.344787][ T809] IPVS: starting estimator thread 0... [ 731.471104][T12958] IPVS: using max 37 ests per chain, 88800 per kthread [ 733.362932][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 733.574185][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.613251][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.659148][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 733.714669][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 733.753092][ T5632] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 733.766826][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.792713][ T5632] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 733.829893][ T9] usb 4-1: config 0 descriptor?? [ 733.863219][ T5632] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 733.912483][ T5632] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 734.377560][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 734.377580][ T30] audit: type=1326 audit(1779637400.067:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 734.415595][ T5632] usb 2-1: USB disconnect, device number 18 [ 734.588918][ T30] audit: type=1326 audit(1779637400.127:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 734.796219][ T30] audit: type=1326 audit(1779637400.157:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 734.832810][T12989] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 734.901214][T10384] udevd[10384]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.993733][ T30] audit: type=1326 audit(1779637400.157:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 735.150249][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 735.201708][ T30] audit: type=1326 audit(1779637400.157:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 735.341440][T12988] ipvlan2: entered allmulticast mode [ 735.362624][T12988] syz_tun: entered allmulticast mode [ 735.465835][ T30] audit: type=1326 audit(1779637400.307:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 735.640274][ T30] audit: type=1326 audit(1779637400.307:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 735.769217][ T30] audit: type=1326 audit(1779637400.317:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.4.1590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 736.214472][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 736.242075][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 736.309044][ T9] usb 4-1: USB disconnect, device number 13 [ 737.478770][ T30] audit: type=1326 audit(1779637403.167:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13011 comm="syz.3.1596" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 737.547385][ T30] audit: type=1326 audit(1779637403.207:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13011 comm="syz.3.1596" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 737.889459][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 737.906467][T12998] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 737.942036][T12998] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 738.300376][ T5776] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 738.524010][ T5776] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.566215][ T5776] usb 7-1: config 0 has no interfaces? [ 738.585066][ T5776] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 738.618811][ T5776] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 738.644429][ T5776] usb 7-1: Manufacturer: syz [ 738.677033][ T5776] usb 7-1: config 0 descriptor?? [ 738.682330][T12998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 738.743955][T12998] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 738.939207][T12998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 739.028785][T12998] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 739.387606][T12998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 739.401987][T12998] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 739.519742][T13033] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 739.677502][T12998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 739.720141][T12998] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 739.787230][T12998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 739.819014][T12998] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 740.332908][T12998] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 740.392407][T12998] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 742.053062][ T9403] usb 7-1: USB disconnect, device number 70 [ 742.497816][ T5776] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 742.723182][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.773718][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.818529][ T5776] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 742.854734][ T5776] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 742.874359][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.923263][ T5776] usb 5-1: config 0 descriptor?? [ 742.926912][T13089] syzkaller0: entered promiscuous mode [ 742.942160][T13089] syzkaller0: entered allmulticast mode [ 744.040127][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 744.870946][T13118] netlink: 'syz.3.1610': attribute type 23 has an invalid length. [ 747.341734][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.348579][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.037113][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 748.037133][ T30] audit: type=1326 audit(1779637413.727:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 748.080427][ T30] audit: type=1326 audit(1779637413.767:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 748.112999][ T30] audit: type=1326 audit(1779637413.767:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 748.147348][ T30] audit: type=1326 audit(1779637413.767:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 748.199031][ T30] audit: type=1326 audit(1779637413.767:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 748.241820][ T30] audit: type=1326 audit(1779637413.767:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 748.304505][ T30] audit: type=1326 audit(1779637413.767:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 748.399836][ T30] audit: type=1326 audit(1779637413.767:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 748.511323][ T5776] usbhid 5-1:0.0: can't add hid device: -32 [ 748.526010][ T5776] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 748.546355][ T30] audit: type=1326 audit(1779637413.767:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 748.611331][ T30] audit: type=1326 audit(1779637413.767:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.1613" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 749.747553][T13159] netlink: zone id is out of range [ 757.877013][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 757.895770][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 757.904636][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 757.913145][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 757.927024][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 757.979792][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 757.992192][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 758.007179][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 758.019583][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 758.033718][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 759.052816][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 759.089912][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 759.132512][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 759.141367][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 759.149441][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 759.852068][ T5635] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 759.891180][ T5635] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 759.903558][ T5635] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 759.917735][ T5635] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 759.932436][ T5635] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 759.983724][T13087] ipvlan2: entered allmulticast mode [ 760.003642][T13087] syz_tun: entered allmulticast mode [ 760.119319][T13174] syzkaller1: entered promiscuous mode [ 760.130586][T13174] syzkaller1: entered allmulticast mode [ 760.137940][ T50] Bluetooth: hci7: command tx timeout [ 760.972302][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 760.972335][ T30] audit: type=1326 audit(1779637426.667:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 761.143520][ T30] audit: type=1326 audit(1779637426.717:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 761.285336][ T50] Bluetooth: hci8: command tx timeout [ 761.300406][ T30] audit: type=1326 audit(1779637426.727:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 761.476540][ T30] audit: type=1326 audit(1779637426.747:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 761.599717][ T30] audit: type=1326 audit(1779637426.747:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 761.711246][ T30] audit: type=1326 audit(1779637426.767:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 761.745531][ T30] audit: type=1326 audit(1779637426.777:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 761.773042][ T30] audit: type=1326 audit(1779637426.787:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 761.848014][ T30] audit: type=1326 audit(1779637426.807:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 761.927822][ T809] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 761.937388][ T30] audit: type=1326 audit(1779637426.817:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1625" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 762.059600][ T50] Bluetooth: hci9: command tx timeout [ 762.107757][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 762.131308][ T809] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.181566][ T809] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.208302][ T50] Bluetooth: hci7: command tx timeout [ 762.257578][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 762.296064][ T809] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 762.344286][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.407476][ T809] usb 4-1: config 0 descriptor?? [ 762.623873][ T5632] usb 5-1: USB disconnect, device number 11 [ 762.848645][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.895301][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.946728][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.018467][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.120980][ T809] usbhid 4-1:0.0: can't add hid device: -71 [ 763.152732][ T809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 763.233001][ T809] usb 4-1: USB disconnect, device number 14 [ 763.329302][ T50] Bluetooth: hci8: command tx timeout [ 763.358012][ T36] team0: Port device netdevsim1 removed [ 763.638981][ T809] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 763.808041][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 763.832661][ T809] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 763.879650][ T809] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 763.947079][ T809] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.021356][ T809] usb 4-1: config 1 interface 0 has no altsetting 0 [ 764.065379][ T809] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 764.108214][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.117196][T13244] bond1: left promiscuous mode [ 764.122288][T13244] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 764.137625][ T50] Bluetooth: hci9: command tx timeout [ 764.151444][ T809] usb 4-1: Product: syz [ 764.186564][ T809] usb 4-1: Manufacturer: syz [ 764.211331][ T809] usb 4-1: SerialNumber: syz [ 764.287933][ T50] Bluetooth: hci7: command tx timeout [ 764.497801][ T809] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 764.712975][ T809] usb 4-1: USB disconnect, device number 15 [ 764.977404][T13230] usblp0: removed [ 765.225828][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.258609][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.273251][T13198] bridge_slave_0: entered allmulticast mode [ 765.295881][T13198] bridge_slave_0: entered promiscuous mode [ 765.418481][ T50] Bluetooth: hci8: command tx timeout [ 765.501398][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.527853][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.554163][T13198] bridge_slave_1: entered allmulticast mode [ 765.584515][T13198] bridge_slave_1: entered promiscuous mode [ 765.716983][ T36] vlan2: left allmulticast mode [ 765.730541][ T36] vlan0: left allmulticast mode [ 765.744721][ T36] veth0_vlan: left allmulticast mode [ 765.760604][ T36] vlan2: left promiscuous mode [ 765.770731][ T36] vlan0: left promiscuous mode [ 765.781401][ T36] bridge0: port 3(vlan2) entered disabled state [ 765.801254][ T36] bridge_slave_1: left allmulticast mode [ 765.818010][ T36] bridge_slave_1: left promiscuous mode [ 765.825333][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.837308][ T36] bridge_slave_0: left allmulticast mode [ 765.843429][ T36] bridge_slave_0: left promiscuous mode [ 765.849913][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.211109][ T50] Bluetooth: hci9: command tx timeout [ 766.283500][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 766.377823][ T50] Bluetooth: hci7: command tx timeout [ 766.497695][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.510388][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.524259][ T36] bond0 (unregistering): Released all slaves [ 766.543037][ T36] bond1 (unregistering): Released all slaves [ 766.696155][ T36] bond2 (unregistering): Released all slaves [ 767.491202][ T50] Bluetooth: hci8: command tx timeout [ 767.534322][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.550805][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.577495][ T36] tipc: Disabling bearer [ 767.613434][ T36] tipc: Left network mode [ 767.760827][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.782925][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.806012][T13190] bridge_slave_0: entered allmulticast mode [ 767.841496][T13190] bridge_slave_0: entered promiscuous mode [ 767.863811][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.885215][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.909305][T13190] bridge_slave_1: entered allmulticast mode [ 767.936238][T13190] bridge_slave_1: entered promiscuous mode [ 767.991407][T13198] team0: Port device team_slave_0 added [ 768.006884][T13195] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.033866][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.082805][T13195] bridge_slave_0: entered allmulticast mode [ 768.107204][T13195] bridge_slave_0: entered promiscuous mode [ 768.255223][T13198] team0: Port device team_slave_1 added [ 768.317028][ T50] Bluetooth: hci9: command tx timeout [ 768.351223][T13195] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.392808][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.415360][T13195] bridge_slave_1: entered allmulticast mode [ 768.437082][T13195] bridge_slave_1: entered promiscuous mode [ 768.557393][T13190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.744237][T13190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.015491][T13195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.056813][T13195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.104905][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.125708][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.156611][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.436947][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.475365][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.538023][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.899906][T13190] team0: Port device team_slave_0 added [ 769.920821][T13190] team0: Port device team_slave_1 added [ 770.001233][T13195] team0: Port device team_slave_0 added [ 770.131828][T13195] team0: Port device team_slave_1 added [ 770.351692][T13190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.375272][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.427802][T13190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.579316][T13190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.600454][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.680708][T13190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.709534][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 770.709552][ T30] audit: type=1326 audit(1779637436.397:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 770.821135][ T30] audit: type=1326 audit(1779637436.447:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 770.863783][T13195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.884407][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.928856][ T30] audit: type=1326 audit(1779637436.447:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 770.958061][T13195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.013943][ T30] audit: type=1326 audit(1779637436.457:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 771.067594][ T30] audit: type=1326 audit(1779637436.457:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 771.143606][ T30] audit: type=1326 audit(1779637436.477:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 771.150605][T13198] hsr_slave_0: entered promiscuous mode [ 771.245695][T13198] hsr_slave_1: entered promiscuous mode [ 771.276281][T13198] debugfs: 'hsr0' already exists in 'hsr' [ 771.297763][T13198] Cannot create hsr debugfs directory [ 771.327880][ T30] audit: type=1326 audit(1779637436.477:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 771.414702][T13195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.430846][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.505565][ T30] audit: type=1326 audit(1779637436.497:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 771.557782][T13195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.599907][ T30] audit: type=1326 audit(1779637436.567:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 771.731934][ T30] audit: type=1326 audit(1779637436.567:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.1633" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6801c code=0x7ffc0000 [ 771.804427][T13190] hsr_slave_0: entered promiscuous mode [ 771.830500][T13190] hsr_slave_1: entered promiscuous mode [ 771.850959][T13190] debugfs: 'hsr0' already exists in 'hsr' [ 771.878550][T13190] Cannot create hsr debugfs directory [ 771.969323][ T36] hsr_slave_0: left promiscuous mode [ 771.992391][ T36] hsr_slave_1: left promiscuous mode [ 772.011384][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.039752][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.574171][ T36] team0 (unregistering): Port device team_slave_1 removed [ 772.648543][ T36] team0 (unregistering): Port device team_slave_0 removed [ 773.575643][T13195] hsr_slave_0: entered promiscuous mode [ 773.594266][T13195] hsr_slave_1: entered promiscuous mode [ 773.631305][T13195] debugfs: 'hsr0' already exists in 'hsr' [ 773.649320][T13195] Cannot create hsr debugfs directory [ 774.022516][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 774.631084][ T36] IPVS: stop unused estimator thread 0... [ 775.584049][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.973076][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.351848][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.718402][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.487468][T13198] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 777.525789][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.552365][T13198] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 777.599445][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.630044][T13198] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 777.666259][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.233776][T13198] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 778.270749][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.826969][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.106904][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.552652][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.852405][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.435774][T13441] openvswitch: netlink: IP tunnel dst address not specified [ 780.540298][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.642786][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.992712][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.999955][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.290701][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.298033][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.865736][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 781.865758][ T30] audit: type=1326 audit(1779637447.557:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 781.962363][ T36] bridge_slave_1: left allmulticast mode [ 781.973572][ T36] bridge_slave_1: left promiscuous mode [ 781.978347][ T30] audit: type=1326 audit(1779637447.557:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 782.057834][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.069029][ T30] audit: type=1326 audit(1779637447.557:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 782.149761][ T30] audit: type=1326 audit(1779637447.617:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 782.150088][ T36] bridge_slave_0: left allmulticast mode [ 782.236924][ T36] bridge_slave_0: left promiscuous mode [ 782.237396][ T30] audit: type=1326 audit(1779637447.617:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 782.331406][ T30] audit: type=1326 audit(1779637447.617:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 782.338727][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.417892][ T30] audit: type=1326 audit(1779637447.617:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 782.466753][ T30] audit: type=1326 audit(1779637447.637:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f61ab code=0x7ffc0000 [ 782.503520][ T30] audit: type=1326 audit(1779637447.637:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 782.531132][ T36] bridge_slave_1: left allmulticast mode [ 782.536953][ T36] bridge_slave_1: left promiscuous mode [ 782.542999][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.552830][ T36] bridge_slave_0: left allmulticast mode [ 782.565478][ T36] bridge_slave_0: left promiscuous mode [ 782.592363][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.612717][ T30] audit: type=1326 audit(1779637447.637:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.0.1649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 783.318150][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.336844][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.364366][ T36] bond0 (unregistering): Released all slaves [ 783.810253][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.868478][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.893524][ T36] bond0 (unregistering): Released all slaves [ 783.947898][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 784.143949][T13467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1652'. [ 784.298872][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.452865][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 784.467437][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 784.892637][T13198] veth0_vlan: entered promiscuous mode [ 784.942431][T13190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.980969][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.010489][T13190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 785.051442][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.138888][T13190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 785.193433][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.214714][T13198] veth1_vlan: entered promiscuous mode [ 785.294787][T13190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 785.342666][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.931589][ T36] hsr_slave_0: left promiscuous mode [ 785.941615][ T36] hsr_slave_1: left promiscuous mode [ 785.950329][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.971720][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.996316][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.033777][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.087819][ T36] hsr_slave_0: left promiscuous mode [ 786.095203][ T36] hsr_slave_1: left promiscuous mode [ 786.102792][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.140556][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.184449][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.207328][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.326060][ T36] veth1_macvtap: left promiscuous mode [ 786.340865][ T36] veth0_macvtap: left promiscuous mode [ 786.366507][ T36] veth1_vlan: left promiscuous mode [ 786.404004][ T36] veth0_vlan: left promiscuous mode [ 786.440940][ T36] veth1_macvtap: left promiscuous mode [ 786.459148][ T36] veth0_macvtap: left promiscuous mode [ 786.471979][ T36] veth1_vlan: left promiscuous mode [ 786.488721][ T36] veth0_vlan: left promiscuous mode [ 791.315851][ T36] team0 (unregistering): Port device team_slave_1 removed [ 791.498421][ T36] team0 (unregistering): Port device team_slave_0 removed [ 793.536347][T13188] udevd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 793.640196][T13188] CPU: 0 UID: 0 PID: 13188 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 793.640234][T13188] Tainted: [L]=SOFTLOCKUP [ 793.640243][T13188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.640257][T13188] Call Trace: [ 793.640266][T13188] [ 793.640276][T13188] dump_stack_lvl+0xe8/0x150 [ 793.640313][T13188] dump_header+0xd3/0x4c0 [ 793.640351][T13188] oom_kill_process+0x3ab/0x970 [ 793.640385][T13188] out_of_memory+0x1141/0x1410 [ 793.640427][T13188] ? __pfx_out_of_memory+0x10/0x10 [ 793.640466][T13188] __alloc_pages_may_oom+0x1ea/0x330 [ 793.640494][T13188] ? lockdep_hardirqs_on+0x7a/0x110 [ 793.640519][T13188] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 793.640545][T13188] ? unreserve_highatomic_pageblock+0x3e3/0x610 [ 793.640598][T13188] __alloc_pages_slowpath+0x6c2/0xd40 [ 793.640656][T13188] __alloc_frozen_pages_noprof+0x322/0x380 [ 793.640694][T13188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 793.640732][T13188] ? __pfx_policy_nodemask+0x10/0x10 [ 793.640779][T13188] alloc_pages_mpol+0x235/0x490 [ 793.640818][T13188] alloc_pages_noprof+0xac/0x2a0 [ 793.640843][T13188] folio_alloc_noprof+0x1e/0x30 [ 793.640865][T13188] filemap_alloc_folio_noprof+0x111/0x470 [ 793.640900][T13188] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 793.640928][T13188] ? filemap_fault+0x95e/0x1300 [ 793.640968][T13188] __filemap_get_folio_mpol+0x3fc/0xb00 [ 793.641007][T13188] filemap_fault+0x98e/0x1300 [ 793.641048][T13188] ? __pfx_filemap_fault+0x10/0x10 [ 793.641081][T13188] ? __pfx_filemap_map_pages+0x10/0x10 [ 793.641124][T13188] __do_fault+0x138/0x2a0 [ 793.641156][T13188] ? do_pte_missing+0x125b/0x33f0 [ 793.641186][T13188] do_pte_missing+0x2093/0x33f0 [ 793.641231][T13188] ? handle_mm_fault+0xee/0x3170 [ 793.641262][T13188] handle_mm_fault+0x1bd9/0x3170 [ 793.641305][T13188] ? handle_mm_fault+0xee/0x3170 [ 793.641340][T13188] ? __pfx_handle_mm_fault+0x10/0x10 [ 793.641364][T13188] ? lock_vma_under_rcu+0x45a/0x500 [ 793.641424][T13188] do_user_addr_fault+0xa73/0x1340 [ 793.641456][T13188] ? rcu_is_watching+0x15/0xb0 [ 793.641483][T13188] ? trace_page_fault_user+0x84/0x1e0 [ 793.641510][T13188] exc_page_fault+0x6a/0xc0 [ 793.641545][T13188] asm_exc_page_fault+0x26/0x30 [ 793.641566][T13188] RIP: 0033:0x7fe4a20b9ee0 [ 793.641602][T13188] Code: Unable to access opcode bytes at 0x7fe4a20b9eb6. [ 793.641613][T13188] RSP: 002b:00007ffc2996a9d8 EFLAGS: 00010246 [ 793.641633][T13188] RAX: 0000000000000005 RBX: 000055feb1884140 RCX: 0000000000000000 [ 793.641648][T13188] RDX: 000055feb187b3e0 RSI: 000055feb1884a70 RDI: 0000000000000000 [ 793.641662][T13188] RBP: 000055feb1871910 R08: 000055feb1884a80 R09: 0000000000000005 [ 793.641677][T13188] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 793.641690][T13188] R13: 00007ffc2996aa30 R14: 0000000000000000 R15: 0000000000000000 [ 793.641724][T13188] [ 793.969795][T13188] Mem-Info: [ 793.973065][T13188] active_anon:0 inactive_anon:221 isolated_anon:0 [ 793.973065][T13188] active_file:18 inactive_file:43 isolated_file:0 [ 793.973065][T13188] unevictable:768 dirty:0 writeback:0 [ 793.973065][T13188] slab_reclaimable:6967 slab_unreclaimable:104264 [ 793.973065][T13188] mapped:40968 shmem:768 pagetables:3816 [ 793.973065][T13188] sec_pagetables:0 bounce:0 [ 793.973065][T13188] kernel_misc_reclaimable:0 [ 793.973065][T13188] free:23607 free_pcp:1649 free_cma:0 [ 794.017670][T13188] Node 0 active_anon:0kB inactive_anon:44kB active_file:68kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102428kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12864kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 794.052038][T13188] Node 1 active_anon:200kB inactive_anon:448kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61444kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1536kB pagetables:10868kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 794.085736][T13188] Node 0 DMA free:10080kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 794.115651][T13188] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 794.121478][T13188] Node 0 DMA32 free:27952kB boost:18432kB min:52620kB low:61164kB high:69708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:44kB active_file:68kB inactive_file:12kB unevictable:1536kB writepending:0kB zspages:1588kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:5936kB local_pcp:236kB free_cma:0kB [ 794.154254][T13188] lowmem_reserve[]: 0 0 0 0 0 [ 794.159040][T13188] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 794.188386][T13188] lowmem_reserve[]: 0 0 0 0 0 [ 794.193200][T13188] Node 1 Normal free:56396kB boost:2048kB min:57752kB low:71676kB high:85600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:648kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:0kB zspages:4532kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 794.225441][T13188] lowmem_reserve[]: 0 0 0 0 0 [ 794.231867][T13188] Node 0 DMA: 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10080kB [ 794.267795][T13188] Node 0 DMA32: 59*4kB (UME) 186*8kB (UME) 234*16kB (ME) 129*32kB (UME) 48*64kB (UME) 33*128kB (M) 25*256kB (UME) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27900kB [ 794.335146][T13188] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 794.395112][T13188] Node 1 Normal: 564*4kB (UME) 482*8kB (ME) 342*16kB (UM) 257*32kB (ME) 181*64kB (UME) 78*128kB (ME) 44*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52640kB [ 794.488521][T13188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 794.570849][T13188] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 794.637066][T13188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 794.692665][T13188] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 794.759334][T13188] 1066 total pagecache pages [ 794.801209][T13188] 221 pages in swap cache [ 794.843236][T13188] Free swap = 90216kB [ 794.869842][T13188] Total swap = 124996kB [ 794.901039][T13188] 2097051 pages RAM [ 794.926332][T13188] 0 pages HighMem/MovableOnly [ 794.963084][T13188] 427136 pages reserved [ 794.989192][T13188] 0 pages cma reserved [ 795.023939][T13188] Unreclaimable slab info: [ 795.074650][T11912] syz.8.1405: page allocation failure: order:0, mode:0xd00(GFP_NOIO|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 795.096291][T13188] Name Used Total [ 795.130050][T13188] bio-184 7KB 8KB [ 795.157722][T11912] CPU: 0 UID: 0 PID: 11912 Comm: syz.8.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.157763][T11912] Tainted: [L]=SOFTLOCKUP [ 795.157773][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.157788][T11912] Call Trace: [ 795.157799][T11912] [ 795.157810][T11912] dump_stack_lvl+0xe8/0x150 [ 795.157843][T11912] warn_alloc+0x249/0x340 [ 795.157886][T11912] ? __pfx_warn_alloc+0x10/0x10 [ 795.157939][T11912] __alloc_pages_slowpath+0xcac/0xd40 [ 795.157997][T11912] __alloc_frozen_pages_noprof+0x322/0x380 [ 795.158037][T11912] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 795.158078][T11912] ? __pfx_policy_nodemask+0x10/0x10 [ 795.158114][T11912] ? alloc_pages_mpol+0xc7/0x490 [ 795.158157][T11912] alloc_pages_mpol+0x235/0x490 [ 795.158201][T11912] alloc_pages_noprof+0xac/0x2a0 [ 795.158226][T11912] relay_open_buf+0x28c/0xde0 [ 795.158270][T11912] relay_open+0x427/0x920 [ 795.158305][T11912] blk_trace_setup_prepare+0x425/0x5a0 [ 795.158337][T11912] blk_trace_setup+0x2f8/0x520 [ 795.158367][T11912] ? __pfx_blk_trace_setup+0x10/0x10 [ 795.158445][T11912] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 795.158503][T11912] sg_ioctl+0xa93/0x2220 [ 795.158548][T11912] ? __pfx_sg_ioctl+0x10/0x10 [ 795.158602][T11912] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 795.158643][T11912] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 795.158684][T11912] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 795.158729][T11912] ? __se_sys_futex_time32+0x3ab/0x440 [ 795.158769][T11912] ? rcu_is_watching+0x15/0xb0 [ 795.158812][T11912] __do_fast_syscall_32+0x229/0x6e0 [ 795.158840][T11912] ? do_fast_syscall_32+0x33/0x70 [ 795.158865][T11912] ? irqentry_exit+0x10f/0x760 [ 795.158893][T11912] do_fast_syscall_32+0x33/0x70 [ 795.158919][T11912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.158948][T11912] RIP: 0023:0xf70bf01c [ 795.158972][T11912] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 795.158992][T11912] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 795.159016][T11912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0481273 [ 795.159037][T11912] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.159051][T11912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.159065][T11912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 795.159077][T11912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.159110][T11912] [ 795.563711][T11912] Mem-Info: [ 795.645396][T11912] active_anon:16 inactive_anon:113 isolated_anon:0 [ 795.645396][T11912] active_file:37 inactive_file:18 isolated_file:0 [ 795.645396][T11912] unevictable:768 dirty:0 writeback:0 [ 795.645396][T11912] slab_reclaimable:6967 slab_unreclaimable:104738 [ 795.645396][T11912] mapped:40967 shmem:768 pagetables:3816 [ 795.645396][T11912] sec_pagetables:0 bounce:0 [ 795.645396][T11912] kernel_misc_reclaimable:0 [ 795.645396][T11912] free:17884 free_pcp:2562 free_cma:0 [ 795.720235][T13188] pid_3 17KB 23KB [ 795.734091][T13188] pid_2 58KB 70KB [ 795.834823][T11912] Node 0 active_anon:64kB inactive_anon:0kB active_file:104kB inactive_file:56kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102428kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12864kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 795.886591][T13188] bio-464 17KB 22KB [ 795.944366][T13188] bio-528 19KB 31KB [ 795.972340][ T32] oom_reaper: reaped process 11912 (syz.8.1405), now anon-rss:0kB, file-rss:20480kB, shmem-rss:0kB [ 795.998996][T13188] bio-544 19KB 31KB [ 796.028018][T11912] Node 1 active_anon:204kB inactive_anon:184kB active_file:104kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61440kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1536kB pagetables:10868kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 796.042877][T13188] bio-552 19KB 31KB [ 796.242303][T11912] Node 0 DMA free:10068kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.329995][T13188] zswap_entry 605KB 774KB [ 796.408680][T13188] AF_VSOCK 8KB 61KB [ 796.445271][T13188] sw_flow_stats 13KB 16KB [ 796.477252][T11912] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 796.500884][T13188] sw_flow 34KB 47KB [ 796.523657][T11912] Node 0 DMA32 free:22648kB boost:22528kB min:56716kB low:65260kB high:73804kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:140kB inactive_file:76kB unevictable:1536kB writepending:0kB zspages:1496kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:10144kB local_pcp:8172kB free_cma:0kB [ 796.635682][T13188] batadv_tt_change_cache 5KB 8KB [ 796.675773][T13188] batadv_tl_cache 15KB 16KB [ 796.725389][T13188] INET6_SMC 58KB 87KB [ 796.729081][T11912] lowmem_reserve[]: 0 0 0 0 0 [ 796.769740][T13188] SMC6 18KB 93KB [ 796.784195][T11912] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.851927][T13188] SMC 31KB 93KB [ 796.939214][T13188] TIPC 48KB 92KB [ 796.977479][T13188] rds_tcp_connection 15KB 31KB [ 796.997587][T11912] lowmem_reserve[]: 0 0 0 0 0 [ 797.019205][T13188] RDS 41KB 61KB [ 797.038595][T11912] Node 1 Normal free:38752kB boost:26624kB min:82328kB low:96252kB high:110176kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:712kB active_file:8kB inactive_file:52kB unevictable:1536kB writepending:0kB zspages:4464kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:40kB free_cma:0kB [ 797.150445][T13188] rds_connection 15KB 18KB [ 797.190830][T13188] SCTPv6 74KB 120KB [ 797.232244][T13188] SCTP 37KB 91KB [ 797.254449][T11912] lowmem_reserve[]: 0 0 0 0 0 [ 797.292591][T13188] sctp_chunk 10KB 41KB [ 797.308801][T11912] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10068kB [ 797.349661][T13188] sctp_bind_bucket 3KB 8KB [ 797.401731][T13188] L2TP/IPv6 28KB 63KB [ 797.417018][T11912] Node 0 DMA32: 58*4kB (UME) 180*8kB (UME) 225*16kB (ME) 119*32kB (ME) 42*64kB (ME) 29*128kB (UM) 20*256kB (ME) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 22648kB [ 797.488629][T13188] L2TP/IP 19KB 63KB [ 797.515061][T11912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 797.567996][T13188] KCM 27KB 62KB [ 797.599165][T11912] Node 1 Normal: 482*4kB (UME) 419*8kB (UME) 292*16kB (UM) 198*32kB (UME) 143*64kB (UME) 56*128kB (UME) 24*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38752kB [ 797.635411][T13188] kcm_mux 38KB 47KB [ 797.700580][T13188] RXRPC 52KB 64KB [ 797.716931][T11912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.752867][T13188] rxrpc_call_jar 215KB 255KB [ 797.778012][T11912] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 797.793874][T13188] can_receiver 11KB 23KB [ 797.850647][T13188] net_bridge_fdb_entry 33KB 47KB [ 797.855410][T11912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.895849][T11912] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 797.940580][T13188] nf-frags 9KB 15KB [ 797.973655][T11912] 1058 total pagecache pages [ 798.011081][T11912] 214 pages in swap cache [ 798.024999][T13188] MPTCPv6 19KB 95KB [ 798.054055][T11912] Free swap = 91516kB [ 798.073267][T13188] ip6-frags 9KB 15KB [ 798.085985][T11912] Total swap = 124996kB [ 798.121394][T11912] 2097051 pages RAM [ 798.128676][T13188] fib6_node 142KB 204KB [ 798.149204][T11912] 0 pages HighMem/MovableOnly [ 798.170429][T13188] ip6_dst_cache 189KB 255KB [ 798.190631][T11912] 427136 pages reserved [ 798.211910][T13188] RAWv6 129KB 154KB [ 798.218422][T11912] 0 pages cma reserved [ 798.261261][T13188] UDPv6 99KB 126KB [ 798.307839][T13188] tw_sock_TCPv6 17KB 23KB [ 798.355512][T13188] TCPv6 165KB 303KB [ 798.404244][T13188] ip_vs_conn 14KB 16KB [ 798.453909][T13188] nf_conntrack 15KB 23KB [ 798.494853][T13188] wg_peer 163KB 178KB [ 798.547570][T13188] allowedips_node 17KB 19KB [ 798.578236][T13188] t10_alua_lu_gp_cache 8KB 11KB [ 798.611213][T13188] scsi_sense_cache 1318KB 1332KB [ 798.658577][T13188] virtio_scsi_cmd 21KB 24KB [ 798.713504][T13188] bio-136 53KB 68KB [ 798.752606][T13188] io_kiocb 0KB 30KB [ 798.798328][T13188] bio-264 19KB 23KB [ 798.839245][T13188] mqueue_inode_cache 34KB 92KB [ 798.896233][T13188] f2fs_bio_post_read_ctx 30KB 31KB [ 798.950978][T13188] jfs_mp 14KB 15KB [ 799.003216][T13188] fuse_request 4KB 15KB [ 799.065169][T13188] cifs_small_rq 28KB 32KB [ 799.094581][T13188] cifs_request 67KB 67KB [ 799.134060][T13188] cifs_mpx_ids 8KB 11KB [ 799.165222][T13188] cifs_io_subrequest 42KB 47KB [ 799.215333][T13188] cifs_io_request 105KB 111KB [ 799.265043][T13188] nfs_commit_data 24KB 31KB [ 799.307055][T13188] nfs_write_data 38KB 47KB [ 799.349171][T13188] jbd2_inode 10KB 11KB [ 799.390179][T13188] ext4_system_zone 1KB 3KB [ 799.446009][T13188] ext4_io_end_vec 1KB 11KB [ 799.486862][T13188] kioctx 20KB 31KB [ 799.532750][T13188] aio_kiocb 5KB 18KB [ 799.580627][T13188] userfaultfd_ctx_cache 31KB 63KB [ 799.625138][T13188] fanotify_fid_event 11KB 15KB [ 799.680169][T13188] fanotify_mark 22KB 23KB [ 799.715198][T13188] dnotify_mark 11KB 11KB [ 799.782819][T13188] dnotify_struct 2KB 3KB [ 799.833422][T13188] fasync_cache 19KB 19KB [ 799.866172][T13188] zspage 134KB 141KB [ 799.921867][T13188] zs_handle 217KB 224KB [ 799.967161][T13188] pid_namespace 21KB 61KB [ 800.015675][T13188] kvm_gmem_inode_cache 27KB 30KB [ 800.059199][T13188] kvm_vcpu 41KB 156KB [ 800.097374][T13188] kvm_mmu_page_header 9KB 38KB [ 800.153357][T13188] pte_list_desc 7KB 31KB [ 800.190846][T13188] x86_emulator 57KB 94KB [ 800.230453][T13188] rpc_buffers 25KB 31KB [ 800.277847][T13188] rpc_tasks 8KB 11KB [ 800.320556][T13188] UNIX-STREAM 57KB 127KB [ 800.366200][T13188] UNIX 648KB 765KB [ 800.405778][T13188] mfc_cache 6KB 8KB [ 800.450038][T13188] MPTCP 21KB 61KB [ 800.499176][T13188] request_sock_subflow_v4 25KB 30KB [ 800.541888][T13188] tcp_bind2_bucket 8KB 20KB [ 800.586815][T13188] tcp_bind_bucket 20KB 32KB [ 800.635718][T13188] inet_peer 7KB 8KB [ 800.675530][T13188] xfrm_dst 10KB 15KB [ 800.718538][T13188] xfrm_state 15KB 63KB [ 800.763217][T13188] ip_fib_trie 35KB 36KB [ 800.809037][T13188] ip_fib_alias 92KB 106KB [ 800.853625][T13188] rtable 33KB 80KB [ 800.902954][T13188] RAW 33KB 63KB [ 800.947166][T13188] UDP 85KB 159KB [ 800.989197][T13188] tw_sock_TCP 9KB 15KB [ 801.039200][T13188] request_sock_TCP 17KB 23KB [ 801.091487][T13188] TCP 286KB 351KB [ 801.132162][T13188] fs_bio_integrity 7KB 8KB [ 801.175974][T13188] hugetlbfs_inode_cache 10KB 31KB [ 801.224762][T13188] netfs_subrequest 35KB 37KB [ 801.273509][T13188] netfs_request 105KB 111KB [ 801.312844][T13188] bio-280 21KB 23KB [ 801.357466][T13188] ep_head 1KB 16KB [ 801.398902][T13188] eventpoll_pwq 4KB 15KB [ 801.437807][T13188] eventpoll_epi 22KB 47KB [ 801.484010][T13188] inotify_inode_mark 36KB 46KB [ 801.532433][T13188] sgpool-128 17KB 29KB [ 801.576316][T13188] sgpool-64 136KB 159KB [ 801.626926][T13188] sgpool-32 46KB 47KB [ 801.665219][T13188] sgpool-16 37KB 45KB [ 801.704044][T13188] sgpool-8 14KB 33KB [ 801.742390][T13188] bio_crypt_ctx 9KB 11KB [ 801.783125][T13188] bio_integrity_data 7KB 8KB [ 801.837991][T13188] request_queue 190KB 302KB [ 801.886457][T13188] blkdev_ioc 16KB 19KB [ 801.927807][T13188] bio-200 79KB 93KB [ 801.949459][T13188] biovec-max 403KB 569KB [ 801.955642][T13188] biovec-128 68KB 95KB [ 801.961906][T13188] biovec-64 59KB 126KB [ 801.986066][T13188] biovec-16 20KB 41KB [ 802.026025][T13188] mm_slot 5KB 7KB [ 802.083817][T13188] ksm_mm_slot 6KB 8KB [ 802.122010][T13188] ksm_stable_node 9KB 11KB [ 802.158732][T13188] ksm_rmap_item 11KB 15KB [ 802.192757][T13188] user_namespace 42KB 46KB [ 802.227565][T13188] uid_cache 16KB 18KB [ 802.286765][T13188] dmaengine-unmap-256 26KB 30KB [ 802.329291][T13188] dmaengine-unmap-128 14KB 15KB [ 802.363659][T13188] dmaengine-unmap-16 7KB 8KB [ 802.392944][T13188] dmaengine-unmap-2 3KB 4KB [ 802.414335][T13188] QIPCRTR 26KB 62KB [ 802.427131][T13188] audit_buffer 23KB 35KB [ 802.435245][T13188] skbuff_ext_cache 19KB 36KB [ 802.453457][T13188] skbuff_small_head 4610KB 4710KB [ 802.460742][T13188] skbuff_fclone_cache 121KB 157KB [ 802.467164][T13188] skbuff_head_cache 6992KB 7402KB [ 802.476434][T13188] configfs_dir_cache 14KB 16KB [ 802.492339][T13188] file_lease_cache 7KB 7KB [ 802.508268][T13188] file_lock_cache 24KB 43KB [ 802.519516][T13188] file_lock_ctx 23KB 27KB [ 802.536596][T13188] fsnotify_inode_mark_connector 29KB 39KB [ 802.578820][T13188] fsnotify_mark_connector 6KB 7KB [ 802.604879][T13188] posix_timers_cache 28KB 40KB [ 802.635548][T13188] taskstats 56KB 79KB [ 802.674103][T13188] mem_cgroup_per_node 74KB 92KB [ 802.701665][ T36] team0 (unregistering): Port device team_slave_1 removed [ 802.735183][T13188] mem_cgroup 82KB 92KB [ 802.759115][T13188] proc_dir_entry 992KB 1020KB [ 802.788110][T13188] pde_opener 6KB 15KB [ 802.808635][T13188] seq_file 91KB 118KB [ 802.816174][T13188] sigqueue 28KB 43KB [ 802.862164][ T36] team0 (unregistering): Port device team_slave_0 removed [ 802.890972][T13188] shmem_inode_cache 7226KB 7631KB [ 802.903089][T13188] kernfs_iattrs_cache 10KB 15KB [ 802.917261][T13188] kernfs_node_cache 32923KB 33528KB [ 802.925430][T13188] mnt_cache 102KB 141KB [ 802.943889][T13188] filp 1397KB 1756KB [ 802.950623][T13188] names_cache 1332KB 1540KB [ 802.956838][T13188] net_namespace 145KB 145KB [ 802.980824][T13188] ima_iint_cache 26KB 50KB [ 803.007343][T13188] lsm_inode_cache 1551KB 2161KB [ 803.038853][T13188] lsm_file_cache 526KB 669KB [ 803.064089][T13188] key_jar 21KB 47KB [ 803.084309][T13188] uts_namespace 45KB 46KB [ 803.108230][T13188] nsproxy 4KB 15KB [ 803.114462][T13188] vm_area_struct 2962KB 3442KB [ 803.128440][T13188] fs_cache 47KB 64KB [ 803.141974][T13188] files_cache 165KB 255KB [ 803.163387][T13188] signal_cache 1011KB 2002KB [ 803.180339][T13188] sighand_cache 1295KB 2284KB [ 803.208890][T13188] task_struct 4804KB 5350KB [ 803.215148][T13188] cred 168KB 348KB [ 803.247748][T13188] anon_vma_chain 832KB 1126KB [ 803.264597][T13188] anon_vma 873KB 1152KB [ 803.283555][T13188] pid 169KB 322KB [ 803.303199][T13188] Acpi-Operand 112KB 198KB [ 803.323148][T13188] Acpi-ParseExt 4KB 23KB [ 803.344556][T13188] Acpi-Parse 8KB 23KB [ 803.360796][T13188] Acpi-State 4KB 27KB [ 803.388156][T13188] Acpi-Namespace 26KB 32KB [ 803.401841][T13188] shared_policy_node 7KB 8KB [ 803.424155][T13188] numa_policy 7KB 8KB [ 803.451570][T13188] perf_event 15KB 31KB [ 803.468210][T13188] trace_event_file 540KB 540KB [ 803.487151][T13188] ftrace_event_field 1031KB 1031KB [ 803.522881][T13188] pool_workqueue 827KB 896KB [ 803.523332][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 803.540973][T13188] task_group 49KB 63KB [ 803.553965][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 803.561096][T13188] maple_node 2889KB 3600KB [ 803.561125][T13188] mm_struct 548KB 918KB [ 803.561180][T13188] vmap_area 465KB 855KB [ 803.583033][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 803.605473][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 803.614737][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 803.623935][T13188] debug_objects_cache 3031KB 3341KB [ 803.682936][T13188] page->ptl 227KB 315KB [ 803.689648][T13188] kmalloc-cg-8k 3344KB 3520KB [ 803.695831][T13188] kmalloc-cg-4k 26256KB 27776KB [ 803.702856][T13188] kmalloc-cg-2k 15224KB 16256KB [ 803.709664][T13188] kmalloc-cg-1k 4692KB 5056KB [ 803.715808][T13188] kmalloc-cg-512 2399KB 2432KB [ 803.722978][T13188] kmalloc-cg-256 566KB 600KB [ 803.729989][T13188] kmalloc-cg-128 347KB 376KB [ 803.736430][T13188] kmalloc-cg-64 62KB 68KB [ 803.743175][T13188] kmalloc-cg-32 62KB 200KB [ 803.751390][T13188] kmalloc-cg-16 5KB 8KB [ 803.757548][T13188] kmalloc-cg-8 31KB 48KB [ 803.764204][T13188] kmalloc-cg-192 57KB 72KB [ 803.788205][T13188] kmalloc-cg-96 100KB 112KB [ 803.799534][T13188] kmalloc-8k 9760KB 10080KB [ 803.818171][T13188] kmalloc-4k 146592KB 149480KB [ 803.834804][T13188] kmalloc-2k 17164KB 17444KB [ 803.851503][T13188] kmalloc-1k 8932KB 13088KB [ 803.858966][T13188] kmalloc-512 12548KB 12852KB [ 803.905270][T13188] kmalloc-256 5435KB 5536KB [ 803.919915][T13188] kmalloc-128 1768KB 1788KB [ 803.926348][T13188] kmalloc-64 3841KB 3900KB [ 803.934066][T13188] kmalloc-32 3023KB 3596KB [ 803.940719][T13188] kmalloc-16 484KB 508KB [ 803.946889][T13188] kmalloc-8 512KB 564KB [ 803.985577][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 803.986963][T13188] kmalloc-192 2359KB 2380KB [ 804.017063][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 804.028047][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 804.054830][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 804.070579][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 804.127870][T13188] kmalloc-96 1920KB 2208KB [ 804.175067][T13188] kmem_cache_node 213KB 220KB [ 804.217751][T13188] kmem_cache 177KB 195KB [ 804.243931][T13188] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=udevd,pid=13188,uid=0 [ 804.277051][T13195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 804.296608][T13188] Out of memory (oom_kill_allocating_task): Killed process 13188 (udevd) total-vm:21140kB, anon-rss:0kB, file-rss:12kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:0 [ 804.340659][T13195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.353727][T13195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 804.392684][T13195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.491206][T13198] veth0_macvtap: entered promiscuous mode [ 804.554735][T13195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 804.581145][ T4995] udevd[4995]: worker [13188] terminated by signal 9 (Killed) [ 804.602810][T13195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.637261][T13198] veth1_macvtap: entered promiscuous mode [ 804.698906][T13195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 804.734639][T13195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.246292][T13496] syz.0.1657 (13496) used greatest stack depth: 18464 bytes left [ 805.689523][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.728385][ T5635] Bluetooth: hci4: command tx timeout [ 805.844989][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.992534][ T1010] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.001566][ T1010] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.047004][ T36] IPVS: stop unused estimator thread 0... [ 806.068997][ T36] IPVS: stop unused estimator thread 0... [ 806.079378][ T1010] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.090304][ T1010] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.127985][ T5635] Bluetooth: hci5: command tx timeout [ 806.494898][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.666200][T13190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.771592][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.834109][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.847886][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.973866][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.999688][T13195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.069833][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.078526][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.085960][T13504] bridge_slave_0: entered allmulticast mode [ 807.099830][T13504] bridge_slave_0: entered promiscuous mode [ 807.109250][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.116553][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.124864][T13504] bridge_slave_1: entered allmulticast mode [ 807.133438][T13504] bridge_slave_1: entered promiscuous mode [ 807.162735][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.176929][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.187434][T13507] bridge_slave_0: entered allmulticast mode [ 807.196299][T13507] bridge_slave_0: entered promiscuous mode [ 807.232260][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.255986][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.292870][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.322288][T13190] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.330452][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.339089][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.346437][T13507] bridge_slave_1: entered allmulticast mode [ 807.362948][T13507] bridge_slave_1: entered promiscuous mode [ 807.394494][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.459863][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.467165][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.501706][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.594349][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.638265][T13195] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.662368][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.691743][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.699082][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.710476][T13504] team0: Port device team_slave_0 added [ 807.791772][T13504] team0: Port device team_slave_1 added [ 807.808077][ T5635] Bluetooth: hci4: command tx timeout [ 807.894279][T13507] team0: Port device team_slave_0 added [ 807.914121][T13507] team0: Port device team_slave_1 added [ 807.935921][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.943628][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.090269][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.097534][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.152295][T13529] syzkaller0: entered promiscuous mode [ 808.158849][T13529] syzkaller0: entered allmulticast mode [ 808.177359][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.185812][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.218012][ T5635] Bluetooth: hci5: command tx timeout [ 808.221805][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.267950][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.276838][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.320827][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.334639][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.342481][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.375870][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.469078][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.490071][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.569271][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.753379][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 808.753399][ T30] audit: type=1326 audit(1779637474.447:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.7.1660" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fef01c code=0x0 [ 808.794400][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.812559][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.173465][T13507] hsr_slave_0: entered promiscuous mode [ 809.191253][T13507] hsr_slave_1: entered promiscuous mode [ 809.199111][T13507] debugfs: 'hsr0' already exists in 'hsr' [ 809.205104][T13507] Cannot create hsr debugfs directory [ 809.221450][T13504] hsr_slave_0: entered promiscuous mode [ 809.229205][T13504] hsr_slave_1: entered promiscuous mode [ 809.235825][T13504] debugfs: 'hsr0' already exists in 'hsr' [ 809.254495][T13504] Cannot create hsr debugfs directory [ 809.889059][ T5635] Bluetooth: hci4: command tx timeout [ 810.287893][ T5635] Bluetooth: hci5: command tx timeout [ 810.921448][T13190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.270345][T13195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.333667][ T36] bridge_slave_1: left allmulticast mode [ 811.350551][ T36] bridge_slave_1: left promiscuous mode [ 811.364953][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.401737][ T36] bridge_slave_0: left allmulticast mode [ 811.411690][ T36] bridge_slave_0: left promiscuous mode [ 811.417581][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.506585][ T36] bridge_slave_1: left allmulticast mode [ 811.524448][ T36] bridge_slave_1: left promiscuous mode [ 811.541262][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.574107][ T36] bridge_slave_0: left allmulticast mode [ 811.588696][ T36] bridge_slave_0: left promiscuous mode [ 811.596212][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.641880][ T36] veth5: left allmulticast mode [ 811.658828][ T36] veth5: left promiscuous mode [ 811.664050][ T36] bridge1: port 3(veth5) entered disabled state [ 811.686255][ T36] veth0_to_bond: left allmulticast mode [ 811.710561][ T36] veth0_to_bond: left promiscuous mode [ 811.728550][ T36] bridge1: port 2(veth0_to_bond) entered disabled state [ 811.756472][ T36] veth3: left allmulticast mode [ 811.770254][ T36] veth3: left promiscuous mode [ 811.782659][ T36] bridge1: port 1(veth3) entered disabled state [ 811.977947][ T5635] Bluetooth: hci4: command tx timeout [ 812.370924][ T5635] Bluetooth: hci5: command tx timeout [ 812.480711][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.516838][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.549007][ T36] bond0 (unregistering): Released all slaves [ 812.743157][ T36] batman_adv: batadv0: Removing interface: ip6gretap1 [ 813.248355][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.270783][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.293608][ T36] bond0 (unregistering): Released all slaves [ 813.336442][ T36] bond1 (unregistering): Released all slaves [ 814.246519][T13195] veth0_vlan: entered promiscuous mode [ 814.297566][T13190] veth0_vlan: entered promiscuous mode [ 814.357319][T13190] veth1_vlan: entered promiscuous mode [ 814.391170][T13195] veth1_vlan: entered promiscuous mode [ 815.002345][T13190] veth0_macvtap: entered promiscuous mode [ 815.221165][ T36] hsr_slave_0: left promiscuous mode [ 815.231414][ T36] hsr_slave_1: left promiscuous mode [ 815.248305][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.265801][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.291447][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.312208][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.385294][ T36] hsr_slave_0: left promiscuous mode [ 815.403081][ T36] hsr_slave_1: left promiscuous mode [ 815.418530][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.441883][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.476196][ T36] veth1_macvtap: left promiscuous mode [ 815.489885][ T36] veth0_macvtap: left promiscuous mode [ 815.505799][ T36] veth1_vlan: left promiscuous mode [ 815.518586][ T36] veth0_vlan: left promiscuous mode [ 816.380064][ T36] team0 (unregistering): Port device team_slave_1 removed [ 816.432617][ T36] team0 (unregistering): Port device team_slave_0 removed [ 817.232726][ T36] team0 (unregistering): Port device team_slave_1 removed [ 817.255847][ T36] team0 (unregistering): Port device team_slave_0 removed [ 817.576586][T13195] veth0_macvtap: entered promiscuous mode [ 817.617512][T13190] veth1_macvtap: entered promiscuous mode [ 817.678822][T13195] veth1_macvtap: entered promiscuous mode [ 817.921504][T13504] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 817.936885][T13504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.952415][T13504] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 817.978266][T13504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.074333][T13190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.094911][T13504] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 818.164117][T13504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.204205][T13504] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 818.243718][T13504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.508151][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.526419][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.543861][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.553721][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.566010][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.576052][T13195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.805546][T13195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.006740][ T1343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.018391][ T31] INFO: task syz.9.1496:12388 blocked for more than 143 seconds. [ 819.039453][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.049899][ T31] Tainted: G L syzkaller #0 [ 819.061128][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.084320][ T31] task:syz.9.1496 state:D stack:27136 pid:12388 tgid:12387 ppid:9194 task_flags:0x480040 flags:0x08080002 [ 819.118412][ T31] Call Trace: [ 819.121815][ T31] [ 819.124793][ T31] __schedule+0x1821/0x5740 [ 819.138300][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 819.149828][ T31] ? __pfx___schedule+0x10/0x10 [ 819.162773][ T31] ? schedule+0x90/0x360 [ 819.166059][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.179388][ T31] schedule+0x164/0x360 [ 819.183667][ T31] schedule_preempt_disabled+0x13/0x30 [ 819.197984][ T31] __mutex_lock+0x7f7/0x1550 [ 819.202771][ T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.209085][ T31] ? __kasan_slab_free+0x5c/0x80 [ 819.239964][ T31] ? kfree+0x1c5/0x640 [ 819.254735][ T31] ? tomoyo_path_number_perm+0x501/0x630 [ 819.278227][ T31] ? __mutex_lock+0x608/0x1550 [ 819.296988][ T31] ? blk_trace_setup+0x2d3/0x520 [ 819.324659][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 819.360820][ T31] blk_trace_setup+0x2d3/0x520 [ 819.377914][ T31] ? __pfx_blk_trace_setup+0x10/0x10 [ 819.385943][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 819.398550][ T31] sg_ioctl+0xa93/0x2220 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 819.407228][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 819.419388][ T31] ? __fget_files+0x2a/0x420 [ 819.433653][ T31] ? __fget_files+0x3a0/0x420 [ 819.447257][ T31] ? __fget_files+0x2a/0x420 [ 819.458104][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 819.473325][ T31] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 819.482403][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 819.508225][ T31] ? kmem_cache_free+0x182/0x650 [ 819.516949][ T31] ? __se_sys_futex_time32+0x3ab/0x440 [ 819.528648][ T31] ? rcu_is_watching+0x15/0xb0 [ 819.540009][ T31] __do_fast_syscall_32+0x229/0x6e0 [ 819.557900][ T31] ? do_fast_syscall_32+0x33/0x70 [ 819.579995][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 819.598048][ T31] ? asm_int80_emulation+0x1a/0x20 [ 819.604266][ T31] ? do_int80_emulation+0x286/0x530 [ 819.618116][ T31] ? trace_irq_disable+0x3b/0x140 [ 819.624672][ T31] do_fast_syscall_32+0x33/0x70 [ 819.635916][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 819.644685][ T31] RIP: 0023:0xf7f7401c [ 819.666960][ T31] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 819.676344][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0481273 [ 819.692305][ T31] RDX: 0000000080000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.701109][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 819.710490][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 819.726572][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 819.739601][ T31] [ 819.743423][ T31] [ 819.743423][ T31] Showing all locks held in the system: [ 819.753411][ T31] 1 lock held by khungtaskd/31: [ 819.800682][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 819.843571][ T31] 5 locks held by kworker/u8:2/36: [ 819.850691][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 819.862253][ T31] #1: ffffc90000ac7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 819.874411][ T31] #2: ffffffff8fdc2ca8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 819.884325][ T31] #3: ffff888050ed9590 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 819.908270][ T31] #4: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 819.931947][ T31] 2 locks held by getty/5385: [ 819.946820][ T31] #0: ffff8880371510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 819.966981][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 819.980447][ T31] 3 locks held by kworker/0:5/5715: [ 819.985755][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 819.997360][ T31] #1: ffffc900042efc40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 820.010272][ T31] #2: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 820.020794][ T31] 3 locks held by kworker/u8:12/8307: [ 820.026589][ T31] #0: ffff888032070140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 820.039701][ T31] #1: ffffc90005867c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 820.053073][ T31] #2: ffffffff8fdd1980 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 820.063403][ T31] 3 locks held by syz.8.1405/11912: [ 820.070593][ T31] 1 lock held by syz.9.1496/12388: [ 820.076598][ T31] #0: ffff888028832de8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d3/0x520 [ 820.087029][ T31] 3 locks held by syz-executor/13190: [ 820.092890][ T31] #0: ffff888193814ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 820.103932][ T31] #1: ffff8881938140b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 820.114575][ T31] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 820.126008][ T31] 7 locks held by syz-executor/13507: [ 820.132002][ T31] #0: ffff888036408410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 820.142037][ T31] #1: ffff888064dbc880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 820.153494][ T31] #2: ffff8880296b75a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 820.164196][ T31] #3: ffffffff8f650680 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 820.176228][ T31] #4: ffff888033326128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 820.198322][ T31] #5: ffff888033325258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 820.217858][ T31] #6: ffffffff8fdd1980 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 820.237049][ T31] 2 locks held by syz.7.1665/13604: [ 820.242700][ T31] #0: ffffffff8fdc2ca8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 820.264664][ T31] #1: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 820.275459][ T31] 1 lock held by syz-executor/13653: [ 820.282178][ T31] #0: ffffffff8fdc2ca8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 820.295492][ T31] 3 locks held by dhcpcd-run-hook/13656: [ 820.318038][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 820.331206][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 820.358870][ T31] #2: ffff88806725caf8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 820.387800][ T31] 8 locks held by cmp/13666: [ 820.392541][ T31] [ 820.469794][ T31] ============================================= [ 820.469794][ T31] [ 820.519709][ T31] NMI backtrace for cpu 0 [ 820.519734][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 820.519762][ T31] Tainted: [L]=SOFTLOCKUP [ 820.519770][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.519783][ T31] Call Trace: [ 820.519792][ T31] [ 820.519802][ T31] dump_stack_lvl+0xe8/0x150 [ 820.519831][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 820.519860][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.519885][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 820.519915][ T31] sys_info+0x135/0x170 [ 820.519937][ T31] watchdog+0xfd3/0x1030 [ 820.519976][ T31] ? watchdog+0x1c9/0x1030 [ 820.520012][ T31] kthread+0x389/0x470 [ 820.520039][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.520067][ T31] ? __pfx_kthread+0x10/0x10 [ 820.520095][ T31] ret_from_fork+0x514/0xb70 [ 820.520121][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.520143][ T31] ? __switch_to+0xc79/0x1410 [ 820.520177][ T31] ? __pfx_kthread+0x10/0x10 [ 820.520207][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.520249][ T31] [ 820.520258][ T31] Sending NMI from CPU 0 to CPUs 1: [ 820.639858][ C1] NMI backtrace for cpu 1 [ 820.639879][ C1] CPU: 1 UID: 0 PID: 1010 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.639905][ C1] Tainted: [L]=SOFTLOCKUP [ 820.639913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.639926][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 820.639962][ C1] RIP: 0010:debug_check_no_obj_freed+0x1f1/0x550 [ 820.639991][ C1] Code: 0f 84 44 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 74 12 48 89 ef e8 ad 01 74 fd 48 ba 00 00 00 00 00 fc ff df 48 8b 45 00 <48> 89 04 24 4c 8d 7d 18 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 12 4c [ 820.640007][ C1] RSP: 0018:ffffc9000523f900 EFLAGS: 00000046 [ 820.640023][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000001 [ 820.640034][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000523f860 [ 820.640048][ C1] RBP: ffff888145282ab8 R08: 0000000000000003 R09: 0000000000000004 [ 820.640061][ C1] R10: dffffc0000000000 R11: fffff52000a47f0c R12: ffff8880a9529370 [ 820.640075][ C1] R13: ffff8880a9529280 R14: 1ffff11028a50557 R15: ffff88802bc74358 [ 820.640091][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 820.640106][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.640119][ C1] CR2: 000055a9c87fd950 CR3: 0000000036e4e000 CR4: 00000000003526f0 [ 820.640137][ C1] Call Trace: [ 820.640144][ C1] [ 820.640157][ C1] ? nsim_dev_trap_report_work+0x7de/0xb90 [ 820.640188][ C1] kmem_cache_free+0xfd/0x650 [ 820.640219][ C1] nsim_dev_trap_report_work+0x7de/0xb90 [ 820.640257][ C1] ? process_scheduled_works+0xa70/0x1860 [ 820.640278][ C1] process_scheduled_works+0xb5d/0x1860 [ 820.640297][ C1] ? trace_contention_end+0x3b/0x160 [ 820.640338][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 820.640361][ C1] ? assign_work+0x3d5/0x5e0 [ 820.640381][ C1] worker_thread+0xa53/0xfc0 [ 820.640415][ C1] kthread+0x389/0x470 [ 820.640439][ C1] ? __pfx_worker_thread+0x10/0x10 [ 820.640458][ C1] ? __pfx_kthread+0x10/0x10 [ 820.640483][ C1] ret_from_fork+0x514/0xb70 [ 820.640504][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 820.640523][ C1] ? __switch_to+0xc79/0x1410 [ 820.640552][ C1] ? __pfx_kthread+0x10/0x10 [ 820.640576][ C1] ret_from_fork_asm+0x1a/0x30 [ 820.640607][ C1] [ 820.711581][ T5635] Bluetooth: hci1: command tx timeout [ 821.189080][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 821.196015][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 821.206746][ T31] Tainted: [L]=SOFTLOCKUP [ 821.211115][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 821.221387][ T31] Call Trace: [ 821.224718][ T31] [ 821.227688][ T31] vpanic+0x56c/0xa60 [ 821.231735][ T31] ? __pfx___schedule+0x10/0x10 [ 821.236648][ T31] ? __pfx_vpanic+0x10/0x10 [ 821.241210][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 821.247439][ T31] panic+0xc5/0xd0 [ 821.251212][ T31] ? __pfx_panic+0x10/0x10 [ 821.255676][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 821.261119][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 821.267337][ T31] watchdog+0x102c/0x1030 [ 821.271733][ T31] ? watchdog+0x1c9/0x1030 [ 821.276294][ T31] kthread+0x389/0x470 [ 821.280501][ T31] ? __pfx_watchdog+0x10/0x10 [ 821.285231][ T31] ? __pfx_kthread+0x10/0x10 [ 821.289884][ T31] ret_from_fork+0x514/0xb70 [ 821.294526][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 821.299699][ T31] ? __switch_to+0xc79/0x1410 [ 821.304434][ T31] ? __pfx_kthread+0x10/0x10 [ 821.309082][ T31] ret_from_fork_asm+0x1a/0x30 [ 821.314005][ T31] [ 821.317974][ T31] Kernel Offset: disabled [ 821.322360][ T31] Rebooting in 86400 seconds..