last executing test programs: 16m5.434113626s ago: executing program 32 (id=535): r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x378, 0x238, 0x238, 0x378, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0x0, [], 0x0, 0x80ff}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 13m22.289325389s ago: executing program 33 (id=1108): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r5, &(0x7f0000000380)='./cgroup\x00', r5, &(0x7f00000003c0)='./mnt\x00', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pidfd_getfd(r5, r0, 0x0) (async) r7 = pidfd_getfd(r5, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000007c0)=0x29efae97) r8 = dup(r6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000780)={0x7c, 0x0, &(0x7f0000000600)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/242, 0xf2, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/89, 0x59, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/224, 0xe0, 0x2, 0x31}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, 0x1}, @dead_binder_done], 0xf4, 0x0, &(0x7f0000000680)="89d9bdbf407530dbb43c2afbc88bbab6ded03f336e4d992edf0335c4b4f7ae9872aba79fc2e4531bd849567bf35bd88b7c60a60faa0aeba8ba462131ae0773a6697a6a60dbd778d56875cbc78b5a2bb15fda6b1f1d7434767442545df4e2972d8dc8a259ce28d247b0dabde285743c234cb95e43765107d77a34e60f21d318d4a6eda7d9338a989281167b3634fc1feaf10573f5f12035d40f8cae7f2aff387266be49d533d35b73bb6d131fc9de628d1f058ce08ff7eb4a85d61a59467615e4fd9ef145b08f58ea9d0deb927d180dc45965339fdb81877e07f86067cd9f83fa9724663da665697e6b2097a1a959f3fdc66f39f8"}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000780)={0x7c, 0x0, &(0x7f0000000600)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/242, 0xf2, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/89, 0x59, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/224, 0xe0, 0x2, 0x31}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, 0x1}, @dead_binder_done], 0xf4, 0x0, &(0x7f0000000680)="89d9bdbf407530dbb43c2afbc88bbab6ded03f336e4d992edf0335c4b4f7ae9872aba79fc2e4531bd849567bf35bd88b7c60a60faa0aeba8ba462131ae0773a6697a6a60dbd778d56875cbc78b5a2bb15fda6b1f1d7434767442545df4e2972d8dc8a259ce28d247b0dabde285743c234cb95e43765107d77a34e60f21d318d4a6eda7d9338a989281167b3634fc1feaf10573f5f12035d40f8cae7f2aff387266be49d533d35b73bb6d131fc9de628d1f058ce08ff7eb4a85d61a59467615e4fd9ef145b08f58ea9d0deb927d180dc45965339fdb81877e07f86067cd9f83fa9724663da665697e6b2097a1a959f3fdc66f39f8"}) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) connect$unix(r7, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", "f04daf4a", "0300", '\x00', ["50d5c2a700b600", "807d01e2e9ffe9ffffff0c00", "0c436d743c97c443084000", "ff810f00000000000000b100"]}) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) (async) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) ioctl$BLKCRYPTOPREPAREKEY(r4, 0xc040128b, &(0x7f0000000200)={&(0x7f0000000100)="89d64c27581f5b2c7768a94be2fb5c7ba2f68dfb314b92e41e0b6fe73eea89599b356ec3d5bf3e4b8923357f27586576d907c1105873f46f58918ecb3ce3", 0x3e, &(0x7f0000000140)=""/79, 0x4f}) io_uring_enter(r1, 0x25e7, 0x4000, 0x0, 0x0, 0x0) r11 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x4, 0x2, 0x21f, 0x0, r9}, &(0x7f0000000880)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r11, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r11, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0xffffffffffffffff, 0xffff}, 0x1}, 0x1) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 9m43.431495487s ago: executing program 6 (id=1979): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x52500, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r3 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r6, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) landlock_create_ruleset(&(0x7f0000000440)={0x6621, 0x2}, 0x18, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) 9m28.249475731s ago: executing program 34 (id=1979): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x52500, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r3 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r6, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) landlock_create_ruleset(&(0x7f0000000440)={0x6621, 0x2}, 0x18, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) 8m42.406863441s ago: executing program 35 (id=2168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x800003, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x6, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x15, 0x3, 0xf8a3, 0xff, 0x3, 0x9, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0xffffffff, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dc, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffd, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x6, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x100, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x4, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0x8, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0x6, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x5, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0xe, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}, @TCA_POLICE_RESULT={0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 8m14.400765441s ago: executing program 36 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) syz_clone(0x2001100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa45, 0xcd78, 0x2, 0x5, 0x9, 0x8, 0x7, 0x80000001, 0x8, 0x7fffffff, 0x3, 0x10000, 0x8, 0x2, 0x0, 0x671, 0x7fffffff, 0x1ff, 0x8, 0x1ff, 0x8, 0x0, 0x1, 0x0, 0x101, 0x6, 0x4, 0x92f2, 0x1, 0x8, 0x0, 0x8001, 0x3, 0x1ff, 0x8001, 0xfffffffb, 0x7f, 0x80000001, 0x8, 0x0, 0x8, 0x3, 0x8, 0x4, 0xfffffffa, 0x9, 0xb02, 0x9c8, 0x1, 0x3, 0x4, 0x9, 0xe, 0x66c, 0x6, 0x5, 0x1, 0x7, 0x4, 0x7, 0xff, 0x0, 0x7ff, 0x9, 0x2, 0xbe9, 0x8, 0x2, 0x401, 0x80000000, 0x10000, 0x4, 0x5, 0x9, 0x9, 0x7, 0x9, 0x7, 0x4c089cff, 0x8, 0x7, 0x7, 0x3, 0xf, 0x0, 0x8, 0x7d, 0xf, 0x7, 0x5, 0x1000, 0x80000001, 0xb8, 0x16, 0x5, 0xffff, 0x6151, 0x6, 0x0, 0x9b7, 0x56, 0x3, 0x1, 0x3, 0x3, 0x1, 0x40, 0x6, 0x9, 0x8, 0x6, 0xff27, 0xfffff800, 0xfff, 0x3, 0x5, 0x6, 0x1800000, 0xffff0566, 0xa, 0x3ff, 0x6, 0x7, 0x6ff3, 0xffffffff, 0x9d34, 0x83f, 0x0, 0x3, 0x2, 0x4, 0x9, 0x3, 0x6, 0x3ff, 0x0, 0x6, 0x1, 0x6, 0x5, 0xb7d, 0x0, 0x8, 0xe1, 0x1ff, 0x7ff, 0x249, 0x3, 0x3, 0x9, 0x8001, 0x8, 0x0, 0xfff, 0xb0, 0xffff7c98, 0x800, 0xf9, 0x2, 0xfffffff9, 0x1, 0x80000001, 0x101, 0x1000, 0x0, 0x9, 0x1000, 0x1, 0xf3, 0x4, 0x3, 0x7, 0x10000, 0x3, 0x8c2, 0x5, 0x7f106ec6, 0x8, 0xe0a, 0x9, 0x101, 0x8, 0x3, 0x0, 0x26, 0x2, 0xa, 0x1, 0x507a5961, 0x800, 0x85, 0x80000001, 0x6, 0x4, 0x3, 0x2, 0x1, 0xfffffff9, 0x200, 0x1000, 0xff, 0x81, 0x9, 0x9, 0x5, 0xfab, 0x54, 0x7, 0xa, 0x2b, 0x8000, 0x6, 0x9, 0x2, 0x2, 0x4, 0x9, 0x1000, 0x6, 0xffff5339, 0x1, 0x1, 0xc, 0x0, 0x4, 0x4, 0x39ee, 0x151, 0x5, 0x2, 0x5, 0x2, 0xfffffffe, 0x483a, 0x2, 0x100, 0x1, 0x2, 0x0, 0x80000001, 0x0, 0x9, 0x6, 0x5, 0x6, 0xcaf9, 0x8, 0x0, 0xfffffffc, 0x10000, 0x401, 0x2, 0x7, 0x7fffffff, 0x80000001, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x30, 0x1, {0x3, 0x1, 0x2, 0x3, 0x8, {0x5, 0x1, 0x0, 0x4, 0xad, 0x7f}, {0x1, 0x2, 0x3ff, 0x0, 0x5, 0x2}, 0x401, 0xc, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1000, 0x9, 0x3, 0x8, 0x2, 0x7, 0x100, 0x8, 0x4, 0x6, 0x8b, 0x9, 0x10000, 0x4, 0xa4, 0x8a, 0x7, 0xfffffffd, 0x7800000, 0x3, 0x8, 0x5, 0xf5fd, 0x8fd3, 0x6, 0xffff0001, 0x401, 0x1, 0x72ff, 0x1, 0x3, 0xd77, 0x1, 0x8, 0x8, 0x9, 0x0, 0x3, 0x2, 0x6a, 0x6, 0xfffffff9, 0x0, 0x3, 0x7, 0x0, 0x200, 0x5, 0xd6, 0x3, 0x4, 0x1000, 0x5d, 0x5, 0x100005, 0x200, 0x8, 0x10001, 0x8, 0xfffffffd, 0x6c75, 0x900, 0x4, 0x10000, 0x4c4, 0xa, 0x0, 0x2, 0xd, 0x6, 0x5, 0x273, 0x10, 0xfffffffc, 0x3, 0x7, 0x7, 0x8, 0xfffffffa, 0x80, 0xc, 0x1, 0xffffffff, 0x1, 0x10001, 0x3, 0x9, 0x8, 0x8, 0x17, 0x9, 0x7fffffff, 0x4, 0x0, 0x7cdc8a2b, 0x4, 0x7, 0x8, 0x7, 0xffff, 0x3, 0x1, 0x206, 0x4, 0x6, 0x7, 0x7fffffff, 0x4, 0x2c1df2ce, 0x18000000, 0x83cc, 0x0, 0x1, 0x5, 0x1, 0xb, 0x4, 0x7fff, 0x9, 0x6, 0x3, 0x3, 0x0, 0x53a6, 0x80000000, 0x6, 0x6, 0x1, 0x3, 0x6, 0x1000, 0x0, 0x6, 0x4, 0x7d28, 0x6, 0x3, 0x2, 0x28, 0x80, 0x971e, 0x6, 0x8001, 0x9, 0xb, 0x1000, 0x4, 0x5, 0xfd2a, 0x8, 0xffffffff, 0xb, 0x100, 0x1, 0x6, 0x5, 0x7ca, 0x8, 0x1, 0x3, 0x4, 0x3, 0xfffffffd, 0x1, 0x8, 0x0, 0xfffffff3, 0x97, 0x8, 0x7f, 0xd2, 0x9, 0x0, 0x5, 0x3, 0x2, 0xffffff36, 0x0, 0x3, 0x507, 0x800, 0x0, 0x8, 0x0, 0x6, 0x8a97, 0x0, 0x4, 0x200, 0xffffffc0, 0xfc61, 0x8, 0x8, 0x5, 0x80, 0x80000000, 0x8, 0x713bd693, 0x6, 0xffffffff, 0x0, 0x4, 0x0, 0x2a5ffce4, 0x5e, 0x9283, 0x4, 0x6, 0x7fff, 0x8, 0x1edc, 0x8001, 0x9, 0x6, 0x401, 0xfffffffc, 0x0, 0xd82, 0x2, 0xff, 0x7fff, 0x1, 0x0, 0x1, 0xf901, 0xd, 0x9, 0x5, 0x3, 0x4, 0xffffffff, 0x80000000, 0x7ff, 0x6, 0xf80b, 0x10000, 0x0, 0x2, 0x6, 0x5, 0x3c, 0x9, 0xfffff129, 0x2, 0x21075f57, 0xff, 0x0, 0xe142, 0x5f, 0x8, 0xfffffff9, 0x5, 0x7, 0x9, 0x100]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x1}, 0x800) 8m8.048793767s ago: executing program 37 (id=2280): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0xc000400) syz_open_procfs(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/220, 0xdc}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m3.548995815s ago: executing program 38 (id=2289): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x5, 0xb0, 0x20, 0xf9, 0x77, 0xfff9}) r1 = socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000007, 0x38011, r1, 0x4000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x2000fb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x4000000009, &(0x7f0000000380)=0x102) 5m10.622737759s ago: executing program 5 (id=2829): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b48, &(0x7f0000000080)) 5m9.520621405s ago: executing program 4 (id=2833): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), 0x0) epoll_create(0xaf2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/57, 0x39}], 0x1}, 0x0) syz_io_uring_setup(0x404e, &(0x7f0000000180)={0x0, 0x860d, 0x4048, 0x2, 0xef}, 0x0, 0x0) 5m7.907997523s ago: executing program 5 (id=2837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x20182) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000005, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f", 0x80000000, 0xfffffffc}) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) write$sndseq(r5, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result={0x0, 0x316}}], 0x1c) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x19) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m7.278517378s ago: executing program 4 (id=2840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0xfff0}, 0x0) 5m7.059936821s ago: executing program 4 (id=2841): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@delpolicy={0x60, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in=@local, 0x4a25, 0x8, 0x4e23, 0x6, 0xa, 0x30, 0x80, 0xc}}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd28, 0x100}}]}, 0x60}, 0x1, 0x0, 0x0, 0x12}, 0x4000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_delroute={0x54, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "cfbc6ac116946cf4a5b2f81c4d07"}}, @RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x11, "c46dbc71eefeb4f10ee8c075f067"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xa5}]}, 0x54}}, 0x4) r5 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000980)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x3, 0x57, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x97, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, 'H'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x9, 0xa}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x9, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf8, 0x72, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x7}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x90, 0x81, 0x1, 0x20, 0x40}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x40, 0xe}]}}) 5m6.919619678s ago: executing program 1 (id=2843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141b41, 0x191) fallocate(r2, 0x0, 0x1000000, 0x3) (async) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x50) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000200)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f00000003c0)=""/190, 0xbe}], 0x3, &(0x7f0000002380)=""/36, 0x24}, 0x3}, {{&(0x7f00000023c0)=@phonet, 0x80, &(0x7f0000002540)=[{&(0x7f0000002440)=""/153, 0x99}, {&(0x7f0000002500)=""/27, 0x1b}], 0x2, &(0x7f0000002580)=""/59, 0x3b}, 0x845}], 0x2, 0x10002, 0x0) (async) keyctl$invalidate(0x15, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x8, 0x32314d4e, 0x2e8a, 0x4, 0x1, @discrete={0x0, 0x9}}) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f00000004c0)) (async, rerun: 32) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_PIT(r5, 0xc048ae65, 0x0) (async) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 64) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (rerun: 64) sendfile(r8, r9, 0x0, 0x201f00) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/15, 0x108000, 0x0, 0xa, 0x3}, 0x20) 5m6.700577717s ago: executing program 1 (id=2845): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) process_vm_writev(0x0, &(0x7f0000001c80), 0x44, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @bt={0x6, 0x5, 0x1, 0x0, 0x2, 0x10000, 0xa, 0x8, 0x100007, 0x4, 0x2, 0x1, 0x6ac, 0x43cb, 0x4, 0x6, {0x85a6, 0x1}, 0xb2, 0x81}}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x5, 0x3fc, 0x1, 0x12, 0x4, 0x7d}, 0x9c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',default_permi'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004080)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0x9, 0x1, 0x0, {0x3, 0x1, 0x1, 0x400000000f91c, 0x6dc6, 0x7659, 0x170a, 0x7, 0xe000, 0x4000, 0xcd35, 0x0, 0xffffffffffffffff, 0x100a, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022b00001000000009046efd82deca6b0f12"], 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m5.149218556s ago: executing program 5 (id=2848): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pipe(&(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ceph\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92d") statx(r3, 0x0, 0x6000, 0x7ff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) openat(r4, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) 5m4.295570381s ago: executing program 4 (id=2849): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0xea891, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c7768b72de7747cb2", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f00004c9000/0x2000)=nil, 0x2000, 0xa) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x858000, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)=0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, &(0x7f0000000440)=""/142, 0x8e}, 0xc}], 0x1, 0x2, 0x0) io_setup(0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 5m2.718002765s ago: executing program 4 (id=2854): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8008563f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4010) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x11e, 0x80, 0x0, &(0x7f0000000240)) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 5m2.696188206s ago: executing program 5 (id=2855): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x40007, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x4, 0x0, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0x4, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x5, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x203, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x200e, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0xb, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x5, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) close(r12) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'wrr\x00', 0x4, 0xfffffff8, 0x4f}, 0x2c) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x24ac0) 5m2.456454663s ago: executing program 4 (id=2857): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, r5) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0106000000000000080009000000"], 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r4, 0x0, 0x0) r7 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r7, 0x107, 0x1, 0x0, 0x0) shutdown(r4, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x4b) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x110, 0x178, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x42000000) 5m2.241076367s ago: executing program 1 (id=2859): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x101801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a9857903dada4df2cee391efa858a16bae29eeab3acf6a6967dce4", 0x1b, 0x2004c000, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$netlink(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x2800005, 0x2, &(0x7f0000000000)=[{0x0, 0xffffffffffffff1a}], 0x1, 0x12}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000006a0001002abd7000fcdbdf25000000ea"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4000804) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x48000000000, r11}) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x0, r11}) 4m59.846023414s ago: executing program 9 (id=2861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa050003000200000024000100000000000000000000000000000000004100000000000000000fffff00000000080005000100000014000200776731"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 4m58.782679828s ago: executing program 9 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 4m58.163924826s ago: executing program 9 (id=2865): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 4m55.087472647s ago: executing program 0 (id=2867): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8008563f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4010) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x11e, 0x80, 0x0, &(0x7f0000000240)) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 4m54.739653507s ago: executing program 0 (id=2868): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0100001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000060000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000050000000000000000000000000000c40005"], 0x17c}}, 0x0) 4m54.476785283s ago: executing program 0 (id=2869): sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000feffffff00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4m54.287429116s ago: executing program 0 (id=2870): r0 = userfaultfd(0x801) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r3, 0x6, 0x9, 0xd}, &(0x7f0000000100)=0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x884000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x1d, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4m54.169077055s ago: executing program 0 (id=2871): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000200025a729a17000fddbdf250a0000cdff0000019f0001000800060000000000080017004e204e2305001500020000"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8000, 0x76d, 0x10000001, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0xe, "4372070000001000476fb2940acf"}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r7, 0xc008aec1, &(0x7f0000000640)={0xa, 0x0, [{0x4, 0x2, 0x2, 0x5, 0x400, 0x2, 0x3aa}, {0x2, 0x0, 0x0, 0x82e8, 0x200, 0xffffffff, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x3}, {0xb, 0x6, 0x0, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x5, 0x807, 0x2, 0x2}, {0xb, 0x5877c6ba, 0x5, 0x0, 0xf1, 0x0, 0x4}, {0x7, 0x7ff, 0x4, 0x18000000, 0x82e, 0x7, 0xd}, {0x1, 0xfffffff8, 0x1, 0xa, 0x5, 0xd0b, 0xd5}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x50}}, 0x0) 4m51.261429028s ago: executing program 0 (id=2872): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pipe(&(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ceph\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92d") statx(r3, 0x0, 0x6000, 0x7ff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) openat(r4, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) 4m51.127424324s ago: executing program 9 (id=2873): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) close_range(r0, r0, 0x0) r1 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x0, &(0x7f0000001140)) 4m50.925902722s ago: executing program 1 (id=2874): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x3245, 0x40, 0xfffffffd, 0x2e9}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m50.790833046s ago: executing program 5 (id=2875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 4m50.033098986s ago: executing program 5 (id=2876): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pipe(&(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ceph\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92d") statx(r3, 0x0, 0x6000, 0x7ff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) (fail_nth: 1) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat(r4, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) 4m50.023026333s ago: executing program 9 (id=2877): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_io_uring_setup(0x1e61, &(0x7f00000002c0)={0x0, 0x0, 0x400, 0x0, 0x20a}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)) lsm_get_self_attr(0x66, 0x0, 0x0, 0x1) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xc8040, 0x0) read$hidraw(r4, &(0x7f0000001240)=""/4096, 0x1000) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f00000011c0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="82d903", 0x3}, {&(0x7f0000000280)="50f81d8fec9ea5d54c96c9d1461288a69f", 0x11}], 0x2}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x2, 0x2404c0e4) 4m48.54131297s ago: executing program 1 (id=2878): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8008563f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4010) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x11e, 0x80, 0x0, &(0x7f0000000240)) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 4m47.777005532s ago: executing program 1 (id=2879): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003009b9c12e1f679dbd173797a32000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000090a010400000000000000000a0000047c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000500003804c000080080003400000000240000b80100001800b0001006e756d67656e00002c0001800a0001006c696d69740000001c0002800c000240392d6dd70a16cf7df900000000800000000c00014000000000000000081400000011000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000851}, 0x40) close(0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000040)=""/108) 4m34.117436566s ago: executing program 39 (id=2872): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pipe(&(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ceph\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92d") statx(r3, 0x0, 0x6000, 0x7ff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) openat(r4, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) 4m33.909309352s ago: executing program 9 (id=2881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000fffffffe00000000000106"], 0xffe) 4m33.76069606s ago: executing program 40 (id=2857): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, r5) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0106000000000000080009000000"], 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r4, 0x0, 0x0) r7 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r7, 0x107, 0x1, 0x0, 0x0) shutdown(r4, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x4b) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x110, 0x178, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x42000000) 4m33.612345919s ago: executing program 41 (id=2876): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pipe(&(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ceph\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92d") statx(r3, 0x0, 0x6000, 0x7ff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) (fail_nth: 1) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat(r4, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) 4m32.290622687s ago: executing program 42 (id=2879): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003009b9c12e1f679dbd173797a32000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000090a010400000000000000000a0000047c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000500003804c000080080003400000000240000b80100001800b0001006e756d67656e00002c0001800a0001006c696d69740000001c0002800c000240392d6dd70a16cf7df900000000800000000c00014000000000000000081400000011000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000851}, 0x40) close(0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000040)=""/108) 4m12.541060736s ago: executing program 43 (id=2881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000fffffffe00000000000106"], 0xffe) 3m13.282593873s ago: executing program 6 (id=2880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0100001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000060000006c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000050000000000000000000000000000c40005"], 0x17c}}, 0x0) 3m13.074021817s ago: executing program 2 (id=2896): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000000400000000000000fcdbdf2500ff0300", @ANYRES32=0x0, @ANYBLOB="88280000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) io_uring_setup(0x664c, &(0x7f0000000500)) r3 = accept(r0, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000) socket$kcm(0x29, 0x2, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket(0xa, 0x3, 0xff) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x0, 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r7 = socket$netlink(0x10, 0x3, 0x12) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) gettid() 3m11.62694211s ago: executing program 6 (id=2898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380102000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0xfffffffffffffff5, 0x0, 0x4000050}, 0x40) 3m10.495721475s ago: executing program 6 (id=2900): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40011) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r0, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000100)}, 0x27) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000000)=0x80000006, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x4}}}}}}}}, 0x0) 3m10.495012204s ago: executing program 3 (id=2883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) (async) ioctl$int_in(r2, 0x40000000af01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000ac0)) (rerun: 64) r5 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000002c0)={0x1, r5}) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0xff, 0x4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r6], 0x78}}, 0x20000800) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x0, 0x3, 0xe4, 0x0, @void}, "238e0c5f2dc26dd30ea88dfaac3df5fccdca524421ba58859cc962952d81ec59917086c22f91c0061dca507ba1eba2eaf327a76823fd739c93079345a53e4fcd0bba31e3ee971bfaba5af3b76fcb2a1794cd7b671057fbd9b5f14c16233e5d101136308390a795b152104f85fc6ed9d1a5f507f31ac86bc2c1995fb03944f9431b19921b95ea2260ca91a4d02293af6157eae53afb975c5e869287b14f2abcf639ca7715594476beefe9884bc8a97121ad042c4ee25cda533104deae2ef4f15f26fc53f7b8f3bbf7a0b3854353866ece11af0b4099ec68d1df8c33d0db7d42d7b01177ea617ab38745c979e19d1ce2de4b05325aaf74ffad910257509b37d5f74da1bd1971307ca05668df17c62bc62cd057082582d463c83232260c082345328a0d363d2a67517d8b6450a534c3de7bfd0ae4140be99e4e41bcf1069097b9f28f25d2d76984f14021637b8c381fd3dd778d8da5d6f738c8292fa27704237521f3fe90f4298110b57c1f5a988b6ef9ed8f3e3bab480ea6487814ca9716e8846f4edcdd5d5ab09963c3971f0c34d89f5bad07f3f2eb0b7c04fabd1f81c1de1edae9a413e3db95263893e4cd97838a28998bfe0ec9f5d76a699499c95c4df549b4363179dae2cb13d3b12afb97c362e4608cb0548d6b7f000a2a4bf47cee391c433336bac450d68295f9f650ac684493c9271d47d1c5543e554a56c9238fc04810249daca969d15ead416c35f3ebb995763a886821400907b36f62626cffbf3d4d2a7c85b585148f122eead2fd2319954733118600214d828fa0a6b253d34d16279422af9862243dd76d406c6e13d1982fbfcb88435b2c7b83d9b748dedfed1df76c84edbb6743ca4670b6294eb5f92043ec4642b1af8206ad7fdeb4881a78c78a5e15006b3c0914c312c9906b83b9d27897f544005ace4c2d6a57ddc54b83a5ab15deebe28a0705375fed748f4cebf5b2a7640b233bd76fdc2ae0fbf0d6e09a3acfbc819e708b88bd7ae31ec5cb27c6efa93d2594a34e8dd56d11da34dcbca5007a1ecbea778ddfcb9cce1c160f9e9a732e1870b55bad34082780a7a0d7243bcd939e33a1153c132e3fd3a292cc01e1f51551ec8e0643258fb1201b63e8dd19bc738e7f2014fc00a766f5a6b6f36d8e4efc35bc1ea2eee66e9f61bbad7b66f04658abfbe77ad4d4c85819884f70b52b622dc77d5e0c62d1cedac59107a5e9c8e6d07de4fa73d7ccd2ecb9ce0e09a61aee4f74a96f90cb0bfd7896c23172fa2bab5123836c1800ff9111cf83e84bf9f4c595422a0b54db58567f03d020023dab629e69ccae854c0e6e90e6e416e51f611d38a383c1d9c2cf2e67026578b2c20de9b0375834a44c8debfb8579865fd0ce2a780b67c9ad16d300d1447b34ad509614cb879b80453db1516c8d1d0f0c7b1752086d11b7f5f492d988bb4fddf42d78841741fc4c4a81e5c8ecf4182b2b00bdc6cba26729787fa5a7c7082fef8716b618278e2ccf5a1a17d7b9acb7dec5cd3ea56cc71ceaa015062af35b7195ef0fb1c284b6f90df52483e064f00e23f20e2f1864a07cc13cb82a1f1f223d170fb9c65000da71e6306b0f123b0fb97dc03a60036e399e25037a8a3b344f25cdcd47f3446ad42a2f841fdd3ae74a93e54b08425fbcd723a5ba9b8fa038c4235636622189e744da8d3091b3c696eb71e4f29b6c6b2d27ac27da00d0e825d8c4c3030216cda1265eeb04a4083fe490511b72d306fa2ff3e907b6abf90dc9af0d94fe275b2c407976a4d3c2d9e6ca61b0feee80c82e091088f64e926a1ca94a536992b2262c30f3509bbefb2cf1c7fd4a9cc9eae01fe823653724ba5d10a9e7e5ee0cc63a8d834c41d7b4003c1f8be5cefa174e055f564d23cf1de8ef85e894e1939b6aceb8c438b194787fe0a3f90f7180338a83dfdbf56c55ba2a2daa610c90e5482ddbc3b6974292fd4fe769f2c1b40919f1afdba2ec69772955fac1335672a25adaf6d392ee5ab3220422f131db05193b5b95f07926f3cd1d6a8e7d9ca2f70e4c3c4e9b0ab8bf9d798e63e8bac013930b62c44e5065a2e7ef01608d8b28f316cdbb813de912211fffa6d3bda1f3e7ce6a1ef065424b95eeb610a180d6a7c2c3169e7f571db3600108b63c0bdc4c98588df3edf06e6a85cb7f2b1959e99a82b23b99e26797d6be0d435d00fb038d603888f4d05fd0b4b52a5e8d2a93f32d75fd5fd6d4905741570a83b2a55995226e44bedaf0b399ea16efee88010e64061a7c4aad62d1e7f1cd680ccf395c1205a3ee0fb2bcd626d5efa7890a59685e49ed66aeab0e9b21d742b7d7a0f2199e7937bce606f4a7651ec0ba11a3f6ae7122b13c20cf09d66acebbc391412cb46eea35376f987f639aaed8fac8292f154ca270f529ec1d19a77334e8f1a04af26daac6e91d7b54b23b8779fb56a4ae830bf7d8234dd1b2c429c24bd252fe149b9d44a5b4512dbeef768838259989e2080cc7c1b4155e625b3a6d7a190e944a89cb6a8d0dcb58fd3c2f40591a9d975674cfffa2cebaae7cd53549f7b55d33f1b0455b7e744ea805108e43fd980e134526d3c751643b9fc271852e9fb9ce66cd0e244448e8d165d1038440490db57dbf6e09a2b66d6c1906302c108feab1c86ecc70140508fc13dc6ce170e81cfb76ece2a6666f36a035dfedc97671ada2b6fc2165a9e5b7508ecbf7be860f677135b19c0183674382209477f3a7f675bb4ec282943f1dc88a252f5f248d9ed9ab80c614494f7dd0a23e51439b4c42517aa9cc2825be23a380acccf80f13c9ef131f4aabfffe900e17f93f0a4a7e19774b3d0da144c001f115fcad54b1923974284dbf47f210e6008e480051ddd13c5a2abb7b13e312e1fd10aa4edc822d3a97849c11e62bc279d94919f308f4eeded2a901801034e393ae307ffdcd3ad731e6b6bdc17dd838724c30cfe5ef22b063fd3fe1d1e71aba95bb822b0504bd1b1d56ca70e7a4b6e6075e8650bdeeb7e44251c4f2889cbaa1fb44605909759bb1db0e15cb215866f3c741a2df7b7343a07e2b79fc71ef70069ef82a7095afa27ea0cf3bcc49ef4fdba6458e241f223815919319168e46be6fc8261d73d32d620a96e4fdbd5d2789afbb6776edf71651f2f6aaa8e5ddd81aec3d8c825f1477198af3cc5cd4122a721224d14f8f48edd052cba0900638e92536bb76140ba0a4290b382b1a42ec7ec3f6fc21c01ed317236d55cbb555022d32274756990dab9bffb6cb058359d1c7b653080aea2ec4f550b6162c38cf8e7f91f1ac96559dcc2f8f6eea347657848c070d06e080e344268f85aa84e5cb595ec17dedc379efbf5c775ad6fc8721e9ddafdb6faa1ae5873f7237342bea15f9b20e43f3d2b7838dec2e10fee0e91a66579b5d70b6f2dc2e3ebe93663942077b67b3e56815e9a8ef09b740388d3fbf2245b6c16bd997ede21bde42386f3609db6e3497c378aa5f28a36382234710d98597e975dc344024a4003df1f547ac6c89cd3b8eb8b87b525ad987390ef12194c8833e8a22ddc2624cdded8a38968258f577d457ca75601a860674e0b93cd541a23a6d8d7a3d97a883944b1f81f47addc481bee1be8747ef7ef7a4c146014c7c6a4b7caff7ea94ea5147e7420846ae4f82f685daf788b6b627d30919a6294b827a8d7d2200c39094a816ada9e5357284f9c94c09fe1bdc2d38f5b9c8fad3d2a4134c6fa87d7b0b7a409d2db3b500b80235cdf090d87f5568c2096daccfb9c7fbfc2575881d3cecaa8c82db0de3a7e16a2b9b3a2f0ca136f0a96816ef7a1df60384539f253198e5cf9711ba1a3d776f10a63c004c7ded059cf2a036fc9803e01dad92543cf649c9684de087a6d3e83999753f39e5b93d8d49993fb119000b12cec4efc002cf5a97f6c69d79056588ed9384388add824d4e5712ef5c8e5a7463cc4844537b9c589a7f3dbf1c0573d353648760aa35b398b16bd6e59fe2037fb1d7044d307a4835743e06d0ea9b6befe629558538ba3c7a49a8616ad1db0e641ac07af409aaac4617ffa3f725d4ba362f846ca0c4389814cf3039d122e6d4ff785f03bdbf492abf3ab0445b630e93b028d4d24573b6ff1689b7163f54f9b9385a8acaeb20f89ac3ad195e12c083d90788567a8d16221e72dab8d91cf0c5415aff65f633a841108c847a1738eec1745fe8506246d18de9ab87a52b0f6c9017c49958ed55176ff797d38cdb64d76b278218d9d0bcd5480fadcd56547cf18686bd03a0f0119da99bac19bc8858d3185242128e3577d52818b90387007ddeb193a4470fd93af9f5b7193a3173f03195fe907d3e3a7cdc17f347b7c323a141404c84acd8fb71d68669f3bc556b13d79429afeb3aa53fdce832c488ce178e0af98d8d83aeac940f5a98fedc96864ff50a7290bc10384e4cd31f0c609e0518d7df118f77d1bed92d3e7630bd53c485f0a3da4fdc3ce0c19e7ed071aeb9a7e91da90fe02c93204ff46ba19301dafefd825c3f6788dd804fc617815179d5ed682c66ad248a03e4f8af17e6ae0682cf86c5d6fbb4def92f423ca75cedbabd70d001e8954604fc9cd1ee4f08f425c74259c32290cfc7ce25dee5f0ef4c0095964811a724ef7e14ff4644f385fb585ad82f89d42e68272e3b2b40aa4ad19cc3249f484d35494697e2d59d06c0fd889a99ba971c2902b4ed4bd98776e3bcb62cd1aaecca98dead2bd18fb9d360bcaf04a3aa471528861d211834568fc4f73d55951c2dd79f3c7daf2a6542ac43caba4e6b90936f817a2008e6377192a8e656ee85e3dd4f7ed55c04558cc9e92bba8c9d5d211d4bb264f3ff32680ee1d6289b93396367f3228c27e18a103ce7b444b0b58992848998f6098118580931e5ea3c6245d0d991c15a2802d28afa725d99501dcc133de69cdda9f6a3a831482bb6df4053f26d9ad67313e1b7ee8c6766979dff18d3df9598bd1bd7411088ee6691ac3b0797527c5aeb5991ba46d780b39d665fa756cceaaeac45f9a2156863655fb43276c9f5cb2f2ece1d62e46c5137cf4cb4fc1361bcac1e99a9ddb36286b147a3b3aa054aaee1c35aa24363497e0eb7499191a915144db0b87ee7a6d7c8812e1304819531ced22b260e32b6def23cddb3c6ae6834801ab1cbb327ff8e5b654651bbcb49422613c88af943e02d28abe317cadfb778dbdffb14978132a3bc30e37daf3e9f616acf5e3cef7108ef78d4937d06a710f891a30dc7cc2067f96eab3c13c743948b11161ca4b51528b3a12fc280c3b13ada4b227e6b60511e5e197ebe375535a4f24e7614af67cfd0e7a878e909a3c5439547e9b3b0f3a3556d5cd8155045e8367dee75c5513b26367b2981676caa3989f492e3e3c8dae1805e58d12d7253c7d4bc7a0e39af29f2522d4e126ce184b93b9ff17f0d27fd609e8cc93ef18cbd84fdfbf602b11a367bcc036a7bd70fe50d6d27db7ea8918080295439ca0e4cdfdaa2503a03cbc5b7c42c9a5cc4da88eb340b6a5f36f95a6239736028c4d9a1d866f6b56ac96049ad88c4064f59ede1ea7563656c29c7b5d6d3ca5710e56110e974cc8111ba8d26e5263a060479e0e7215a86b48af0ec7f5524c798b46f12e91322d5e897ce21bdf13263133c38668a7f58d7030c8c37248bed87ba5c8886b106a78f8a58217e82c1ed1a088ad40b5c957753"}}}}, 0xfce) 3m9.948799649s ago: executing program 3 (id=2901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x58000000}, 0x0) 3m9.746814237s ago: executing program 2 (id=2902): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582de", @ANYRESDEC], 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000840), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582de", @ANYRESDEC], 0x0) (async) fsmount(r0, 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000840), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) 3m9.531368492s ago: executing program 3 (id=2904): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "74bb1bf389563cff", "33a4b1187960f333e4a5290df376768ea153a65ae1d1c721227600", "409b00f8", "b1532567d590bb09"}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x6, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x8ee}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1010, r3, 0x675b000) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001600010a00200000000000000a000000040002000c000a000000b5c1"], 0x24}}, 0x4090) syz_emit_ethernet(0x102, &(0x7f0000000540)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000100", 0xc8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x87, 0x1, @loopback, @rand_addr=' \x01\x00', [@routing={0x6c, 0x0, 0x1, 0x5}, @hopopts={0xc, 0x11, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x2, 0x82, "4fc4823421498ad5d3c363f44472bae8657f1f7f2b84bcb5ab284b52c81287bfa970baf6f0c4cbe1b6a835017215445c63275b28bfd59659a3925be76476d00c84c3f6a70cfbdb5d4bdddca7e0fe2790f0fd4f70950000000008013be89270ed3c5eccc91257100ad48807a7850c43389c826b7a9a74606a4a1aa486f3a37e04a7bc"}]}]}}}}}}}, 0x0) 3m8.675037621s ago: executing program 8 (id=2906): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x31, 0x2f, 0x26, 0x40, 0x2a39, 0x3fa0, 0x6301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xb4, 0x1c}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x31, 0x2f, 0x26, 0x40, 0x2a39, 0x3fa0, 0x6301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xb4, 0x1c}}]}}]}}, 0x0) 3m8.428588858s ago: executing program 3 (id=2907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000140)={0x6, 0x1, 0x9, 0x3, &(0x7f0000000780)=[{}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x40040c5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4606, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 3m8.342509105s ago: executing program 2 (id=2908): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect$cdc_ecm(0x4, 0x94, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011001020000102505a1a440000102030109028200ff9496b0db081708d166ffaf0187f9010108400d0904008102020600020a240600004421d9f89605240006000d240f010600000003000500070c241bb1e9000006090400f807240a740d240a07f1060e0c241b00000002c2b80300800c241be004f7ff9909008007090581030808037200090582024002010e00090503020800de000600"/163], &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x1d, 0x0, 0x2, 0xd7, 0x3}, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f1000010b100108043616000907ff07e6"], 0x2, [{0x61, &(0x7f0000000480)=@string={0x61, 0x3, "d25d158f40f9f4588f5579e8f2df85245071aecd3cd2a60498613888152b3fe654a70295f1b96efd3ecc0d7d3503ee40dbdc5f51b9eac3e6548ef21ac5e295273ad28a99af5a645bf53aab18195ce2962211c0dccbc5ff533622a0d7b90cb8"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x0, 0x21, 0x6e, {0x6e, 0x10, "dc175ee42bac188a740bebd6e71b40f857de69a02f473df720cf2c99ee1888346b08c186aa9a4264dfcf2577a963daf6545cc91ccfc061c7b72d7ad86acc65535b948c082245b37303523ed4b96a9ff4ef73615230cbe9fd81784c517ebdb2c12dff7ee3efbade3403e37149"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000680)={0x20, 0x18, 0x82, "7e595cd26e4b8a171c4662e14ce554a8f974c5dc1577928a8cc5d7ab56ac303f360756ab6f0f8dc55a01430bbed395f142dc208de871d41964f6f412e11f0a0d42a649897e01e1bf0bfd2127d0899aab4397e7bcc8e1eb5c3edda33825a8f7c0e51cba1d57072f676ff7aed338d1b755a2e5e5990b957d39c1c19d86c02c3b5e3b22"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x31}}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x2000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0xdddd1000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xdddd1000, 0xb, 0x4f, 0x2, 0x7, 0x19, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x8, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0xeeef0000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}]}, 0x98}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f0000000240)=0x7, 0x4) msgget$private(0x0, 0x200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffffffffffc525) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x810) 3m7.187000828s ago: executing program 2 (id=2909): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="d967754534f5ddedb603ce2efde4b33ccaf075de8b7c8827fb8dacb34e7fdbdb27598d1021f6e8b44881e28b7e2853b64ece855b481996588f0eb2281b64722bd27cb750b8c0ac4394db0c81e1eec3969b1dacdc13a40c672abd6aea4bcd7d8b1c08b39874a7ac41d651fc93882ca3fb5acd8e72026a8474c3991ad090c8db359df8ff57f6dcbfa9aaab0d1558b997568460e269026b4e04b5b7da79634ca3bdce62ad8eb7a27cd83ed1b46bc17fbd2b499431d3573b3947672900080000000000006e160f9b1f176c9dbd2bd46b4f68211a57e52cf1370008a7f35078da4c1cb67d394fde730351489044d8a91f8995462ba4bac460aa65d9cdc336d4124dce0f18a96f63232100999e43bf16bfe8e1e52e1fa0ca22060ea69c8eda20c314a706d9ec32705017a4e405ec92eeab3676bcf4d6d0700d1be63063dba43422fc9dedeac3b816752bdf80539db4c51b8f3828e42ef7ab51f1744e8a399aa00db66c0e56ed0331731a138762fc85808ea08b2bb3e4b92631f8cf34cac598359270a18653e67c10516f75183320db085f571e4faea2dadb4f457e6a1403951b3d9f88c577a4fba6ba0797174e83057f0b384b6de73b934c0020e5083867d850a3f4820f6501ca4bfd0dbb1629818c139759ce0585a38690a675dbed6580be2c5a5417233fd8da92e491ce3483271bd2c79d1b98151482df3400"/514], 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = open(0x0, 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) kcmp(r0, r1, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fcntl$setsig(r7, 0xa, 0x9) unshare(0x2040400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0x12a, 0xfffffffffffffffe}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xa0}}, 0x20050800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) 3m7.06325022s ago: executing program 7 (id=2910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa0500030002000000240001000000000000000000000000000000000041000000000000000000000001000000080005000100000014000200776731"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 3m6.945594268s ago: executing program 8 (id=2911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) 3m6.422136117s ago: executing program 3 (id=2912): write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) close(0x3) r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x5, 0x58803) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x1074}, 0x1, 0x0, 0x0, 0x20000080}, 0x20880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) read$FUSE(r4, &(0x7f0000006300)={0x2020}, 0x402) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f00000001c0)=0x121) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce010203010902240001000000000904"], 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) 3m5.495540758s ago: executing program 7 (id=2913): r0 = socket(0x10, 0x3, 0x0) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) gettid() (async) r1 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffff7f, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m3.27262331s ago: executing program 2 (id=2914): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) 3m2.738173323s ago: executing program 8 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r1, 0x4, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2, 0xfffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020731a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m2.248822415s ago: executing program 3 (id=2916): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x115080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@code={0xa, 0x63, {"470f01cbb9330000000f01c10f009000000000430f78c3f3440f09410fc79b000000000f201e430f0766b822000f00d866baf80cb8d521f18aefb9800800d70f3235000400000f30b0f67daceeaceec76b01"}}], 0x63}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x4, &(0x7f00000002c0)={0x2, 0x1e, 0x15, 0xff81}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904", @ANYRESOCT], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000680)={0x0, 0xc, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x14, 0x6, "232000f1e942"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000000000000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$KIOCSOUND(r8, 0x4b2f, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x95, "d8327cbec6b58a2d76383d405a2294375d1c0fd4bee64f2426e80a14b86642992c3eb801f7b117d4e4965aba1e0e9b2c461bfa464887f8342e23afd5bd5cf98171b0b80b6464a80c4fe8a56248021e2fc51437cefa21d5331059d009ce804da93bf48e361349dceed849d795994ecf4399a41cd1457f281312957bfa4fb7c5aeb856bfa28057e9eccee3a9bd1e55baf92442fa46ae"}, &(0x7f0000000100)=0x9d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000340)={&(0x7f0000000280)=@in6={0xa, 0x9, 0x9, @remote}, 0x1c, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000000000008400cf000002000000050d0004", @ANYRES32=r9, @ANYBLOB="300000000000000084000000010000000800810002000000feffffff000300005603000008000000d7050000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000050000001000000009000000200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000e0000002000000002000000000000000840000000200000007000e002a0f000000020000", @ANYRES32=0x0], 0xc0, 0x20040080}, 0x24004046) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = socket$kcm(0x29, 0x7, 0x0) sendmmsg$inet(r12, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r13, 0xc028ae92, &(0x7f0000000000)={0x80000000}) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000300)={0x2, 0x0, [{0x0, 0x0, 0x800000007fd}, {0xb08, 0x0, 0x7}]}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x3bd, 0x0, 0x8}]}) 3m2.094990535s ago: executing program 8 (id=2917): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000280)={0xa, 0x0, 0x24, @empty, 0x2, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010000406c256d0000000000000109022400010000000009045d00010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xd7, 0xeef, 0x7302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x62, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0x1d, 0xd, 0x1, {0x22, 0xfc4}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x3, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x7, 0xdb}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x4a, 0x5, 0x40, 0x10}, 0x8b, &(0x7f00000000c0)={0x5, 0xf, 0x8b, 0x1, [@generic={0x86, 0x10, 0x1, "89e2dfa4d9d39070a8068ad1eac12f17de7885a01507beb4f07adbd9e3cc1b64a6d96d2d412d5b0281cb67bf6cfec7598c8c6b7b751d52111a77f7c9705d9c219669d89b0f6e350cadd45f9bce1ea1ef3f37751dfc0f77c82f0cb47c11d879645de2a95d7a920f0d53b29e405067973dc82dfeb1e00a0fee73f7d3c036af03b5fd7137"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x0}, 0x0) 3m2.090913757s ago: executing program 7 (id=2918): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0xdc, 0x24, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff5, 0xe}, {0x4, 0x2adc7af85364f6b8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3e9e}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}, @qdisc_kind_options=@q_netem={{0xa}, {0x8c, 0x2, {{0x8001, 0x9, 0x0, 0x2, 0x9, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x400, 0x1376, 0x8, 0xd}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0xfffffff9}}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x3, 0x2, 0xffff}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x7d53b91edfdc3297}, @TCA_NETEM_REORDER={0xc, 0x3, {0x9, 0x9}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8}, @TCA_NETEM_DELAY_DIST={0x5, 0x2, "9f"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x2}}, @TCA_NETEM_LOSS={0x4}]}}}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0xdc}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) 3m1.947797964s ago: executing program 6 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xa}, @FRA_FLOW={0x8, 0xb, 0x8001}]}, 0x2c}}, 0x8) 3m1.642100318s ago: executing program 7 (id=2920): userfaultfd(0x80001) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0}, 0x1c) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) (async, rerun: 64) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(r0, r4, 0x0, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2503feffffff0000000016000000140001800d000100756465599cb2a6cb35c12dfe"], 0x28}}, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3m1.36671357s ago: executing program 7 (id=2921): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_io_uring_setup(0x48044d3, &(0x7f0000000180)={0x0, 0x77da, 0x0, 0x0, 0x8f}, &(0x7f0000000200), 0x0) r1 = creat(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x3, 0xf6, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0xb, 0xc0, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x61, 0x8}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0x6, 0xa, 0x3, 0x8, 0x9], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0xf0, 0x0, 0xff}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0x9, "cb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xd, 0x2, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5e, 0x5, "", "b97a67"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x9e4, 0xfb, "66511b0506e238"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x2, 0xd0, 0xb, "0a861a", "28a47c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf8, 0x5, 0x1, {0x7, 0x25, 0x1, 0x4, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7457, 0x8, 0xf3, "123ff500ca05a9c7"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x0, 0x1, "d99d", "abd3db"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0xfa, "", "e3d0d5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x1, 0x8, {0x7, 0x25, 0x1, 0x1, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x110, 0x5, 0x2, 0x1f, 0xff, 0xd7}, 0x3e, &(0x7f0000000980)={0x5, 0xf, 0x3e, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0xb2, 0x3, 0x4, 0xf0f, 0x7, [0x0, 0x0, 0xc0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xe5, "6833c9d4b4f4d634670249ff232ef661"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x8, 0x9}]}, 0x5, [{0x34, &(0x7f00000009c0)=@string={0x34, 0x3, "c568ec3b0ab3f737b3b5cc4a65ee180f048c69631504c6f510453ef5e56bd07a1476d4c30d424c13b89755ecdaddb673d455"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x45, &(0x7f0000000a40)=@string={0x45, 0x3, "88e58f4e4388e9edadc06d409904a9aafd303d34e0cf6375411e90ec6ac4495c680e9771bb55a3998dbc616920896f498dcedc882d276da3fd0abefba3b39e0e2bffd5"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x41b}}]}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x6, 0x0, [0x52, 0x7, 0x8, 0x7, 0x1c, 0xe, 0xff, 0x1, 0x62da, 0xff, 0x1ff, 0x2, 0x401, 0x8, 0x2, 0x41], 0x10}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xff], 'syzkaller0\x00', '\x00', {0xff}, {0xff}, 0x87, 0x2, 0x9, 0x12}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xb5, 0x9, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc020) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009080)={0x2020}, 0x2020) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev(r8, &(0x7f00000001c0)=[{&(0x7f0000000180)="f4a32564", 0x4}], 0x1000000000000229, 0xb, 0x7) syz_usb_control_io(r0, 0x0, 0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x200080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x74, 0x1, 0x88, @private0, @private2, 0x7800, 0x7, 0x8, 0x101}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000c00)={&(0x7f0000000bc0)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r11, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r6, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x80}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x0, {0x2, 0x0, 0x4}, 0x1}, 0x18) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m0.767702819s ago: executing program 6 (id=2922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000140)={0x6, 0x1, 0x9, 0x3, &(0x7f0000000780)=[{}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x40040c5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4606, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 3m0.460133466s ago: executing program 2 (id=2923): socket$kcm(0xa, 0x5, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x200000000000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 2m59.759902353s ago: executing program 8 (id=2924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0100001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000060000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000050000000000000000000000000000c40005"], 0x17c}}, 0x0) 2m59.520941119s ago: executing program 8 (id=2925): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) pread64(r2, 0x0, 0x0, 0x10000000000a) (async) pread64(r2, 0x0, 0x0, 0x10000000000a) close(r1) (async) close(r1) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3b5c00, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0xc0) socket$rds(0x15, 0x5, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) (async) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000100)) (async) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r11, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x2}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) 2m52.169506878s ago: executing program 7 (id=2926): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, 0x0, 0x2000a800) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b51500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000001000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x84) 2m26.823945261s ago: executing program 44 (id=2922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000140)={0x6, 0x1, 0x9, 0x3, &(0x7f0000000780)=[{}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x40040c5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4606, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 0s ago: executing program 45 (id=2916): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x115080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@code={0xa, 0x63, {"470f01cbb9330000000f01c10f009000000000430f78c3f3440f09410fc79b000000000f201e430f0766b822000f00d866baf80cb8d521f18aefb9800800d70f3235000400000f30b0f67daceeaceec76b01"}}], 0x63}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x4, &(0x7f00000002c0)={0x2, 0x1e, 0x15, 0xff81}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904", @ANYRESOCT], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000680)={0x0, 0xc, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x14, 0x6, "232000f1e942"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000000000000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$KIOCSOUND(r8, 0x4b2f, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x95, "d8327cbec6b58a2d76383d405a2294375d1c0fd4bee64f2426e80a14b86642992c3eb801f7b117d4e4965aba1e0e9b2c461bfa464887f8342e23afd5bd5cf98171b0b80b6464a80c4fe8a56248021e2fc51437cefa21d5331059d009ce804da93bf48e361349dceed849d795994ecf4399a41cd1457f281312957bfa4fb7c5aeb856bfa28057e9eccee3a9bd1e55baf92442fa46ae"}, &(0x7f0000000100)=0x9d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000340)={&(0x7f0000000280)=@in6={0xa, 0x9, 0x9, @remote}, 0x1c, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000000000008400cf000002000000050d0004", @ANYRES32=r9, @ANYBLOB="300000000000000084000000010000000800810002000000feffffff000300005603000008000000d7050000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000050000001000000009000000200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000e0000002000000002000000000000000840000000200000007000e002a0f000000020000", @ANYRES32=0x0], 0xc0, 0x20040080}, 0x24004046) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = socket$kcm(0x29, 0x7, 0x0) sendmmsg$inet(r12, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r13, 0xc028ae92, &(0x7f0000000000)={0x80000000}) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000300)={0x2, 0x0, [{0x0, 0x0, 0x800000007fd}, {0xb08, 0x0, 0x7}]}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x3bd, 0x0, 0x8}]}) kernel console output (not intermixed with test programs): 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 790.299414][T16274] RSP: 002b:00007f2cc1d87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 790.299438][T16274] RAX: ffffffffffffffda RBX: 00007f2cc11e5fa0 RCX: 00007f2cc0f8e15c [ 790.299456][T16274] RDX: 000000000000000f RSI: 00007f2cc1d870a0 RDI: 0000000000000006 [ 790.299470][T16274] RBP: 00007f2cc1d87090 R08: 0000000000000000 R09: 0000000000000000 [ 790.299485][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.299498][T16274] R13: 00007f2cc11e6038 R14: 00007f2cc11e5fa0 R15: 00007f2cc130fa28 [ 790.299534][T16274] [ 790.530394][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.886988][T16278] loop2: detected capacity change from 0 to 7 [ 790.900782][ T5951] loop2: [ 790.904678][ T5951] loop2: partition table partially beyond EOD, truncated [ 790.931039][T16278] loop2: [ 790.935000][T16278] loop2: partition table partially beyond EOD, truncated [ 791.528500][T16291] loop2: detected capacity change from 0 to 7 [ 791.539975][T16291] Dev loop2: unable to read RDB block 7 [ 791.553698][T16291] loop2: unable to read partition table [ 791.559863][T16291] loop2: partition table beyond EOD, truncated [ 791.654108][T12656] usb 5-1: USB disconnect, device number 116 [ 791.697848][T16291] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 792.073870][T16283] syzkaller0: entered promiscuous mode [ 792.079447][T16283] syzkaller0: entered allmulticast mode [ 792.454978][T16311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.521359][T16312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 792.568639][T16311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.254191][T16326] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 793.804991][T16332] xt_hashlimit: max too large, truncated to 1048576 [ 794.918970][T16358] xt_l2tp: invalid flags combination: 4 [ 795.783276][T16378] fuse: Unknown parameter 'fsuuid' [ 795.802000][T16378] veth1_macvtap: left promiscuous mode [ 796.392166][T16382] ip6t_srh: unknown srh match flags 5F28 [ 796.963157][T16391] fuse: Unknown parameter 'grˆ Rp_çSiid' [ 800.062168][ T30] audit: type=1326 audit(1767207911.183:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.192328][ T30] audit: type=1326 audit(1767207911.183:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.257628][ T30] audit: type=1326 audit(1767207911.183:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.338806][ T30] audit: type=1326 audit(1767207911.183:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.494984][ T30] audit: type=1326 audit(1767207911.183:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.527231][ T30] audit: type=1326 audit(1767207911.183:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.629174][ T30] audit: type=1326 audit(1767207911.473:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.629216][ T30] audit: type=1326 audit(1767207911.473:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 800.629251][ T30] audit: type=1326 audit(1767207911.613:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f949cf8df90 code=0x7ffc0000 [ 800.629284][ T30] audit: type=1326 audit(1767207911.613:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.4.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949cf8f749 code=0x7ffc0000 [ 801.022592][T16444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 802.189871][T16471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 802.287953][ T890] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 802.683543][ T890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.701702][ T890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.732298][T14324] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 802.761288][ T890] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 802.775412][ T890] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 802.795142][ T890] usb 10-1: Manufacturer: syz [ 803.036461][ T890] usb 10-1: config 0 descriptor?? [ 803.048448][T14324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 803.093923][T14324] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 803.155870][T14324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.205094][T14324] usb 5-1: Product: syz [ 803.257004][T14324] usb 5-1: Manufacturer: syz [ 803.378257][ T890] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 803.393325][ T890] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 803.440553][T14324] usb 5-1: SerialNumber: syz [ 803.554201][ T890] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 803.617730][T14324] usb 5-1: config 0 descriptor?? [ 803.650817][ T890] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 803.847768][ T890] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 803.872409][ T890] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 803.916820][ T890] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 804.138173][ T890] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 804.192775][ T890] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 804.200381][ T890] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 804.289773][T16488] syzkaller0: entered promiscuous mode [ 804.295898][T16488] syzkaller0: entered allmulticast mode [ 804.761426][ T890] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -71 [ 804.797373][ T890] usb 10-1: USB disconnect, device number 24 [ 805.439453][T16507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2554'. [ 805.506270][T16499] fido_id[16499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 805.531626][T16507] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2554'. [ 805.632347][T14324] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 805.718336][T16507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2554'. [ 805.778391][T16510] QAT: Invalid ioctl 21531 [ 805.810761][T16507] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2554'. [ 805.832335][T14324] usb 10-1: device descriptor read/64, error -71 [ 806.073801][T14324] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 806.214477][T14324] usb 10-1: device descriptor read/64, error -71 [ 806.362645][T14324] usb usb10-port1: attempt power cycle [ 806.766666][T14308] usb 5-1: USB disconnect, device number 117 [ 806.833164][T14324] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 807.265405][T14324] usb 10-1: device descriptor read/8, error -71 [ 807.522903][T14324] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 807.553457][T14324] usb 10-1: device descriptor read/8, error -71 [ 807.664376][T14324] usb usb10-port1: unable to enumerate USB device [ 809.917206][T16589] netlink: 'syz.1.2569': attribute type 5 has an invalid length. [ 811.162442][T14308] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 811.306086][T14308] usb 5-1: device descriptor read/64, error -71 [ 811.572713][T14308] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 811.720430][T14308] usb 5-1: device descriptor read/64, error -71 [ 811.853363][T14308] usb usb5-port1: attempt power cycle [ 812.091544][T16627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 812.238080][T14308] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 812.297111][T14308] usb 5-1: device descriptor read/8, error -71 [ 812.562592][T14308] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 812.663127][T14308] usb 5-1: device descriptor read/8, error -71 [ 812.818295][T14308] usb usb5-port1: unable to enumerate USB device [ 812.837759][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 812.837787][ T30] audit: type=1326 audit(1767207923.973:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16640 comm="syz.9.2579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc60f8f749 code=0x0 [ 813.254315][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 813.572333][T14308] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 813.752335][T14308] usb 6-1: Using ep0 maxpacket: 8 [ 813.831728][T14308] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 813.856616][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 813.872292][T14308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.880735][T14308] usb 6-1: Product: syz [ 813.909931][T14308] usb 6-1: Manufacturer: syz [ 813.935980][T14308] usb 6-1: SerialNumber: syz [ 813.952838][T14308] usb 6-1: config 0 descriptor?? [ 813.975682][T14308] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 814.081224][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.087944][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.294588][T14308] gspca_sonixj: reg_r err -71 [ 814.321583][T14308] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 814.411840][T14308] usb 6-1: USB disconnect, device number 27 [ 814.702680][ T57] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 814.972126][ T57] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 815.008114][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 815.065117][ T57] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 815.095351][ T57] usb 10-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 815.129465][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.163476][ T57] usb 10-1: config 0 descriptor?? [ 815.199959][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2591'. [ 815.593759][ T57] usbhid 10-1:0.0: can't add hid device: -32 [ 815.600006][ T57] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 816.882494][T14324] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 817.044477][T14324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.062442][T14324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 817.101753][T14324] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 817.136345][T14324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 817.153741][T14324] usb 5-1: SerialNumber: syz [ 817.397722][T16715] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 817.418252][T14324] usb 5-1: 0:2 : does not exist [ 817.487925][T14308] usb 10-1: USB disconnect, device number 29 [ 817.558559][T14324] usb 5-1: USB disconnect, device number 122 [ 817.718703][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.888245][T16727] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2596'. [ 818.124429][T16734] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2597'. [ 819.474446][T16754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2603'. [ 820.788135][T16788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.840427][T16788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.986039][T16791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2611'. [ 821.062773][T16791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2611'. [ 821.087155][T16791] erspan0: entered promiscuous mode [ 821.140931][T16791] gretap0: entered promiscuous mode [ 821.265568][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 822.246217][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.303118][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.465025][T16827] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2616'. [ 823.561713][T16834] loop2: detected capacity change from 0 to 7 [ 823.706214][T16834] Dev loop2: unable to read RDB block 7 [ 823.711891][T16834] loop2: unable to read partition table [ 823.799077][T16834] loop2: partition table beyond EOD, truncated [ 823.871790][T16834] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 825.493815][T16857] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 827.495883][T16899] input: syz1 as /devices/virtual/input/input43 [ 827.593761][T16899] binder: 16897:16899 ioctl c0306201 0 returned -14 [ 828.800736][T16930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.836375][T16902] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2633'. [ 828.878546][T16930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.029738][T16940] loop7: detected capacity change from 0 to 16384 [ 829.175547][ T5915] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 829.377318][T16942] loop7: detected capacity change from 16384 to 16383 [ 830.015517][T16942] Dev loop7: unable to read RDB block 8 [ 830.043896][T16942] loop7: unable to read partition table [ 830.053855][T16954] netlink: 'syz.9.2644': attribute type 21 has an invalid length. [ 830.061883][T16954] netlink: 'syz.9.2644': attribute type 1 has an invalid length. [ 830.071226][T16942] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 830.112607][T16954] netlink: 144 bytes leftover after parsing attributes in process `syz.9.2644'. [ 830.667687][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2646'. [ 830.690981][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2646'. [ 831.228511][ T30] audit: type=1326 audit(1767207942.363:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 831.441462][ T30] audit: type=1326 audit(1767207942.393:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 831.528592][ T30] audit: type=1326 audit(1767207942.393:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 831.532911][T16950] Bluetooth: hci4: command 0x0406 tx timeout [ 831.557466][T16951] Bluetooth: hci3: command 0x0406 tx timeout [ 831.701541][ T30] audit: type=1326 audit(1767207942.393:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 831.841254][ T30] audit: type=1326 audit(1767207942.393:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 831.998562][ T30] audit: type=1326 audit(1767207942.393:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 832.033348][ T30] audit: type=1326 audit(1767207942.393:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 832.107493][ T30] audit: type=1326 audit(1767207942.393:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 832.168786][ T30] audit: type=1326 audit(1767207942.393:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 832.291010][ T30] audit: type=1326 audit(1767207942.393:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.9.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc60f8f749 code=0x7ffc0000 [ 832.722567][T17004] netlink: 'syz.4.2655': attribute type 10 has an invalid length. [ 832.751135][T17004] bond0: (slave netdevsim0): Releasing backup interface [ 832.804452][T17004] batman_adv: batadv0: Adding interface: netdevsim0 [ 832.815153][T17004] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.878433][T17004] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 833.471245][T17014] loop4: detected capacity change from 0 to 7 [ 833.504239][T17014] Dev loop4: unable to read RDB block 7 [ 833.521155][T17014] loop4: AHDI p1 p2 p3 [ 833.525774][T17014] loop4: partition table partially beyond EOD, truncated [ 833.533173][T17014] loop4: p1 start 16777216 is beyond EOD, truncated [ 833.592718][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2660'. [ 833.637048][T17014] loop4: p2 start 1702059890 is beyond EOD, truncated [ 833.724008][T17021] input: syz0 as /devices/virtual/input/input44 [ 835.078760][T17049] netlink: 'syz.4.2667': attribute type 13 has an invalid length. [ 835.145037][T17049] gretap0: refused to change device tx_queue_len [ 835.173475][T17049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 835.622334][T14311] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 835.809623][T14311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.862686][T14311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 835.928442][T14311] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 835.977488][T14311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 836.013141][T14311] usb 5-1: SerialNumber: syz [ 836.199033][T17073] x_tables: duplicate underflow at hook 1 [ 836.268061][T14311] usb 5-1: 0:2 : does not exist [ 836.324397][T14311] usb 5-1: USB disconnect, device number 124 [ 836.606047][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.570374][T17107] netlink: zone id is out of range [ 837.575727][T17107] netlink: get zone limit has 4 unknown bytes [ 837.630661][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 837.665700][T17111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 838.316729][T17123] binder: 17120:17123 ioctl 40046205 0 returned -22 [ 840.463655][T17177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.522964][T17177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.550722][T17177] netlink: 'syz.1.2693': attribute type 11 has an invalid length. [ 840.612304][T17177] netlink: 'syz.1.2693': attribute type 6 has an invalid length. [ 840.652125][T17177] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.2693'. [ 841.797395][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2701'. [ 841.881012][T17218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.914109][T17218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.192511][ T10] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 842.390405][T17232] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 842.850681][ T10] usb 10-1: device descriptor read/64, error -71 [ 843.113486][T17254] netlink: 'syz.0.2712': attribute type 11 has an invalid length. [ 843.142342][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 843.272302][ T10] usb 10-1: device descriptor read/64, error -71 [ 843.383745][ T10] usb usb10-port1: attempt power cycle [ 843.843337][ T10] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 843.913105][ T10] usb 10-1: device descriptor read/8, error -71 [ 844.152302][ T10] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 844.233196][ T10] usb 10-1: device descriptor read/8, error -71 [ 844.345874][ T10] usb usb10-port1: unable to enumerate USB device [ 844.423762][T17290] netlink: 'syz.1.2721': attribute type 1 has an invalid length. [ 845.393176][T17306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.415169][T17306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.450697][T17306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.472718][T17306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.530245][T17306] loop3: detected capacity change from 0 to 7 [ 845.540905][T17306] Dev loop3: unable to read RDB block 7 [ 845.557668][T17306] loop3: unable to read partition table [ 845.578101][T17306] loop3: partition table beyond EOD, truncated [ 845.593749][T17306] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 845.668523][T17312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.691016][T17312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.372730][T14308] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 846.522468][T14308] usb 5-1: device descriptor read/64, error -71 [ 846.833953][T14308] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 846.972443][T14308] usb 5-1: device descriptor read/64, error -71 [ 847.084906][T14308] usb usb5-port1: attempt power cycle [ 847.318481][T17352] netlink: 'syz.9.2732': attribute type 1 has an invalid length. [ 847.426449][T14308] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 847.483889][T14308] usb 5-1: device descriptor read/8, error -71 [ 847.782533][T14308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 847.815549][T14308] usb 5-1: device descriptor read/8, error -71 [ 847.902406][T12656] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 847.932684][T14308] usb usb5-port1: unable to enumerate USB device [ 848.063888][T12656] usb 6-1: Using ep0 maxpacket: 8 [ 848.075343][T12656] usb 6-1: config 1 has an invalid interface number: 6 but max is 0 [ 848.106185][T12656] usb 6-1: config 1 has no interface number 0 [ 848.140822][T12656] usb 6-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 848.162088][T12656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.172394][T12656] usb 6-1: Product: syz [ 848.178473][T12656] usb 6-1: Manufacturer: syz [ 848.235321][T12656] usb 6-1: SerialNumber: syz [ 848.753903][T17375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.763454][T17375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.971851][T17371] syzkaller0: entered promiscuous mode [ 848.977572][T17371] syzkaller0: entered allmulticast mode [ 850.844998][T12656] usb 6-1: palm_os_4_probe - error -71 getting connection info [ 850.952323][T12656] visor 6-1:1.6: Handspring Visor / Palm OS converter detected [ 851.022488][T14324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 851.060219][T12656] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 851.175115][T12656] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 851.203345][T14324] usb 5-1: Using ep0 maxpacket: 32 [ 851.210553][T14324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.238557][T12656] usb 6-1: USB disconnect, device number 28 [ 851.265374][T14324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.284994][T12656] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 851.304217][T14324] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 851.341769][T12656] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 851.355868][T14324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.388201][T12656] visor 6-1:1.6: device disconnected [ 851.418443][T14324] usb 5-1: config 0 descriptor?? [ 851.782582][T12656] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 851.923794][T14324] ft260 0003:0403:6030.0022: unknown main item tag 0x7 [ 851.982344][T12656] usb 6-1: Using ep0 maxpacket: 8 [ 852.015174][T12656] usb 6-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 852.055451][T12656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.085857][T12656] usb 6-1: Product: syz [ 852.102554][T12656] usb 6-1: Manufacturer: syz [ 852.116258][T17401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.132286][T12656] usb 6-1: SerialNumber: syz [ 852.154630][T17401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.170967][T12656] usb 6-1: config 0 descriptor?? [ 852.191406][T14324] ft260 0003:0403:6030.0022: chip code: 6424 8183 [ 852.205655][T12656] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 852.380118][T17422] input: syz1 as /devices/virtual/input/input46 [ 852.393706][T14324] ft260 0003:0403:6030.0022: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 852.424303][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.479535][T17406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.480866][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.499168][T17406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.521661][T17422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.530157][T12656] usb 6-1: USB disconnect, device number 29 [ 852.567744][T17422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.594921][T14324] ft260 0003:0403:6030.0022: failed to retrieve status: -71, no wakeup [ 852.604958][T14324] ft260 0003:0403:6030.0022: failed to retrieve status: -71 [ 852.630955][T14324] ft260 0003:0403:6030.0022: failed to reset I2C controller: -71 [ 852.682818][T14324] usb 5-1: USB disconnect, device number 3 [ 853.458821][T17449] delete_channel: no stack [ 853.480109][T17443] kvm: pic: non byte read [ 853.492772][T17443] kvm: pic: non byte read [ 853.515682][T17449] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2748'. [ 853.803307][T14324] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 853.967813][T14324] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 853.977439][T14324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.996323][T14324] usb 6-1: Product: syz [ 854.010062][T14324] usb 6-1: Manufacturer: syz [ 854.041454][T14324] usb 6-1: SerialNumber: syz [ 854.059515][T14324] usb 6-1: config 0 descriptor?? [ 855.662796][T14324] usb 6-1: Firmware version (0.0) predates our first public release. [ 855.692650][T14324] usb 6-1: Please update to version 0.2 or newer [ 856.312587][T12656] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 856.534788][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 856.544762][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.544789][ T52] Tainted: [L]=SOFTLOCKUP [ 856.544796][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 856.544807][ T52] Workqueue: hci4 hci_rx_work [ 856.544830][ T52] Call Trace: [ 856.544837][ T52] [ 856.544845][ T52] dump_stack_lvl+0xe8/0x150 [ 856.544869][ T52] sysfs_create_dir_ns+0x259/0x280 [ 856.544889][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 856.544908][ T52] ? do_raw_spin_unlock+0x122/0x240 [ 856.544935][ T52] kobject_add_internal+0x6ab/0xcc0 [ 856.544962][ T52] kobject_add+0x155/0x220 [ 856.544985][ T52] ? __pfx_kobject_add+0x10/0x10 [ 856.545005][ T52] ? _raw_spin_unlock+0x28/0x50 [ 856.545032][ T52] ? get_device_parent+0x366/0x3a0 [ 856.545051][ T52] device_add+0x408/0xb80 [ 856.545070][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 856.545088][ T52] le_conn_complete_evt+0xf1d/0x1420 [ 856.545118][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 856.545139][ T52] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 856.545155][ T52] ? __asan_memcpy+0x40/0x70 [ 856.545174][ T52] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 856.545191][ T52] ? skb_pull_data+0xfb/0x200 [ 856.545216][ T52] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 856.545239][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 856.545264][ T52] hci_event_packet+0x78f/0x1260 [ 856.545284][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 856.545307][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 856.545328][ T52] ? kcov_remote_start+0x49b/0x7a0 [ 856.545352][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 856.545379][ T52] hci_rx_work+0x3ee/0x1060 [ 856.545401][ T52] ? process_scheduled_works+0x9ef/0x1770 [ 856.545419][ T52] process_scheduled_works+0xad1/0x1770 [ 856.545457][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.545472][ T52] ? do_raw_spin_lock+0x121/0x290 [ 856.545506][ T52] worker_thread+0x8a0/0xda0 [ 856.545542][ T52] kthread+0x711/0x8a0 [ 856.545565][ T52] ? __pfx_worker_thread+0x10/0x10 [ 856.545591][ T52] ? __pfx_kthread+0x10/0x10 [ 856.545615][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 856.545639][ T52] ? __pfx_kthread+0x10/0x10 [ 856.545661][ T52] ret_from_fork+0x510/0xa50 [ 856.545679][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 856.545694][ T52] ? __switch_to+0xc9e/0x1480 [ 856.545719][ T52] ? __pfx_kthread+0x10/0x10 [ 856.545741][ T52] ret_from_fork_asm+0x1a/0x30 [ 856.545776][ T52] [ 856.545799][ T52] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 856.805286][ T52] Bluetooth: hci4: failed to register connection device [ 856.822285][T12656] usb 10-1: Using ep0 maxpacket: 32 [ 856.835606][T12656] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 856.846706][T12656] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 856.860599][T12656] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 856.871516][T12656] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.879750][T12656] usb 10-1: Product: syz [ 856.885637][T12656] usb 10-1: Manufacturer: syz [ 856.890379][T12656] usb 10-1: SerialNumber: syz [ 856.899321][T12656] usb 10-1: config 0 descriptor?? [ 856.927508][T14311] usb 6-1: USB disconnect, device number 30 [ 856.939801][T12656] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 856.994968][T17486] netlink: 'syz.4.2756': attribute type 2 has an invalid length. [ 857.307495][T17487] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 858.048982][ T4496] usb 10-1: Failed to submit usb control message: -110 [ 858.125509][ T4496] usb 10-1: unable to send the bmi data to the device: -110 [ 858.209421][ T4496] usb 10-1: unable to get target info from device [ 858.248050][ T4496] usb 10-1: could not get target info (-110) [ 858.251450][ T57] usb 10-1: USB disconnect, device number 34 [ 858.285284][ T4496] usb 10-1: could not probe fw (-110) [ 858.625726][T17513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.638578][T17513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.734758][T17532] netlink: 'syz.9.2765': attribute type 21 has an invalid length. [ 860.623369][T17543] fuse: Unknown parameter 'gp_id' [ 860.782250][T17543] geneve2: entered allmulticast mode [ 862.820868][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 862.833847][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 862.842564][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 862.850799][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 862.869666][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 863.038485][T17564] syzkaller0: entered promiscuous mode [ 863.044383][T17564] syzkaller0: entered allmulticast mode [ 863.974188][T17584] openvswitch: netlink: Flow actions attr not present in new flow. [ 864.022690][T12656] usb 2-1: USB disconnect, device number 60 [ 864.242338][T14308] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 864.466840][ T3661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.468152][T14308] usb 5-1: Using ep0 maxpacket: 32 [ 864.488530][T14308] usb 5-1: unable to get BOS descriptor or descriptor too short [ 864.498266][T14308] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 864.651483][T14308] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 864.682579][ T57] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 864.757164][T14308] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 864.775733][T14308] usb 5-1: config 128 has no interface number 0 [ 864.847432][T14308] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 864.912356][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 864.938475][ T57] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 864.947701][T14308] usb 5-1: config 128 interface 127 has no altsetting 0 [ 864.952772][ T52] Bluetooth: hci5: command tx timeout [ 864.976172][ T3661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.063366][ T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.084926][T14308] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 865.118763][T14308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.132315][ T57] usb 6-1: config 0 has no interface number 0 [ 865.151255][ T57] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 865.164357][T14308] usb 5-1: Product: syz [ 865.181375][T17567] chnl_net:caif_netlink_parms(): no params data found [ 865.197008][T14308] usb 5-1: Manufacturer: syz [ 865.202106][T14308] usb 5-1: SerialNumber: syz [ 865.209015][ T57] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 865.241010][ T57] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 865.269351][T17599] loop2: detected capacity change from 0 to 7 [ 865.286662][ T5951] loop2: [ 865.289700][ T5951] loop2: partition table partially beyond EOD, truncated [ 865.304157][ T57] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 20627, setting to 1024 [ 865.380082][ T57] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 865.390929][ T57] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 865.405472][ T57] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 865.472624][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.494065][T14308] usb 5-1: USB disconnect, device number 4 [ 865.524053][ T57] usb 6-1: config 0 descriptor?? [ 865.532908][T17599] loop2: [ 865.537084][T17599] loop2: partition table partially beyond EOD, truncated [ 865.570664][T17591] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.606350][T17591] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.728505][ T3661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.740348][ T57] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 865.752085][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.275496][ T3661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.455428][T17567] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.467960][T17567] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.486346][T17567] bridge_slave_0: entered allmulticast mode [ 866.503239][T17567] bridge_slave_0: entered promiscuous mode [ 866.548358][T17567] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.570057][T17567] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.617723][T17567] bridge_slave_1: entered allmulticast mode [ 866.649490][T17567] bridge_slave_1: entered promiscuous mode [ 866.662749][T17618] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 866.727972][T17618] xt_bpf: check failed: parse error [ 866.824736][T17620] program syz.9.2790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.907064][T17621] netlink: 'syz.9.2790': attribute type 26 has an invalid length. [ 867.025305][ T52] Bluetooth: hci5: command tx timeout [ 867.212462][ T57] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 867.245324][T17567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.260486][T17625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2791'. [ 867.367205][T17625] binder: 17622:17625 unknown command 0 [ 867.402340][ T57] usb 10-1: device descriptor read/64, error -71 [ 867.412359][T17625] binder: 17622:17625 ioctl c0306201 200000000080 returned -22 [ 867.445565][T17567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.530778][T12656] usb 6-1: USB disconnect, device number 31 [ 867.567269][T17624] binder: 17622:17624 ioctl ae80 0 returned -22 [ 867.682571][ T57] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 867.806438][T17567] team0: Port device team_slave_0 added [ 867.844774][T17567] team0: Port device team_slave_1 added [ 867.857486][ T57] usb 10-1: device descriptor read/64, error -71 [ 867.904995][ T3661] bridge_slave_1: left allmulticast mode [ 867.905025][ T3661] bridge_slave_1: left promiscuous mode [ 867.905337][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.910518][ T3661] bridge_slave_0: left allmulticast mode [ 867.910547][ T3661] bridge_slave_0: left promiscuous mode [ 867.910782][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.973020][ T57] usb usb10-port1: attempt power cycle [ 868.322542][ T57] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 868.343229][ T57] usb 10-1: device descriptor read/8, error -71 [ 868.627912][ T57] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 868.715550][ T57] usb 10-1: device descriptor read/8, error -71 [ 868.852767][ T57] usb usb10-port1: unable to enumerate USB device [ 869.153063][ T52] Bluetooth: hci5: command tx timeout [ 869.189195][ T890] IPVS: starting estimator thread 0... [ 869.375009][T17658] IPVS: using max 38 ests per chain, 91200 per kthread [ 869.953470][T17663] loop2: detected capacity change from 0 to 7 [ 869.961533][ T5879] loop2: [ 869.964774][ T5879] loop2: partition table partially beyond EOD, truncated [ 869.985028][T17663] loop2: [ 869.988037][T17663] loop2: partition table partially beyond EOD, truncated [ 870.455163][ T3661] bond0 (unregistering): (slave c5ÿ): Releasing backup interface [ 870.475830][ T3661] ÿ: left promiscuous mode [ 870.486334][T17677] fuse: Bad value for 'user_id' [ 870.495850][ T3661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.505098][T17677] fuse: Bad value for 'user_id' [ 870.507981][ T3661] bond_slave_1: left promiscuous mode [ 870.521843][ T3661] bond0 (unregistering): Released all slaves [ 870.784227][ T3661] bond1 (unregistering): Released all slaves [ 870.931178][T17567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.941030][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.980350][T17567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.156537][ T3661] tipc: Left network mode [ 871.190808][ T52] Bluetooth: hci5: command tx timeout [ 871.233661][T17567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.240819][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.267886][T17567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.487103][T17567] hsr_slave_0: entered promiscuous mode [ 871.499221][T17567] hsr_slave_1: entered promiscuous mode [ 871.512437][T17567] debugfs: 'hsr0' already exists in 'hsr' [ 871.520657][T17567] Cannot create hsr debugfs directory [ 871.652344][T12656] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 871.804498][T12656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.836993][T12656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.866225][T12656] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 871.885126][T12656] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 871.912078][T12656] usb 5-1: Manufacturer: syz [ 871.938564][T12656] usb 5-1: config 0 descriptor?? [ 872.037282][ T3661] hsr_slave_0: left promiscuous mode [ 872.046962][ T3661] 1·: left promiscuous mode [ 872.055447][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.070218][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.094447][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.115778][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.175533][ T3661] veth1_macvtap: left promiscuous mode [ 872.186362][ T3661] veth0_macvtap: left promiscuous mode [ 872.209555][ T3661] veth1_vlan: left promiscuous mode [ 872.231374][ T3661] veth0_vlan: left promiscuous mode [ 872.478065][T12656] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 872.514368][T12656] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 872.556575][T12656] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 872.617138][T12656] usb 5-1: USB disconnect, device number 5 [ 872.996145][T17715] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 873.595925][ T3661] team0 (unregistering): Port device team_slave_1 removed [ 873.695677][ T3661] team0 (unregistering): Port device team_slave_0 removed [ 873.976284][T17732] xt_socket: unknown flags 0xc [ 875.508946][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.522552][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.570622][T17739] loop5: detected capacity change from 0 to 7 [ 875.603740][ C1] blk_print_req_error: 25 callbacks suppressed [ 875.603761][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.619651][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.631584][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.641282][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.650065][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.659749][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.668749][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.678477][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.686687][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.696404][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.726449][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.736238][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.744675][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.754399][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.762676][T17739] ldm_validate_partition_table(): Disk read failed. [ 875.769996][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.779791][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.789013][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.798995][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.807318][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.816945][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 875.826460][T17739] Dev loop5: unable to read RDB block 0 [ 875.834284][T17739] loop5: unable to read partition table [ 875.851426][T17739] loop5: partition table beyond EOD, truncated [ 875.862815][T17739] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 875.987010][T17742] loop2: detected capacity change from 0 to 7 [ 876.020635][ T5879] loop2: [ 876.024318][ T5879] loop2: partition table partially beyond EOD, truncated [ 876.043601][T17742] loop2: [ 876.046655][T17742] loop2: partition table partially beyond EOD, truncated [ 877.570206][ T3661] IPVS: stop unused estimator thread 0... [ 878.699243][T14324] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 878.892483][T17567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 878.902339][T14324] usb 6-1: Using ep0 maxpacket: 16 [ 878.919490][T14324] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.931298][T14324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 878.948595][T14324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 878.960945][T14324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 50939, setting to 1024 [ 878.981381][T14324] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.064418][T17567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 879.113001][T14324] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.122653][T14324] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 879.135143][T14324] usb 6-1: Manufacturer: syz [ 879.153246][T17567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 879.154953][T14324] usb 6-1: config 0 descriptor?? [ 879.199381][T17567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 879.305936][T17805] loop2: detected capacity change from 0 to 7 [ 879.363283][T17805] loop2: [ 879.390993][T17783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.402903][T17805] loop2: partition table partially beyond EOD, truncated [ 879.442577][T17808] binder: BINDER_SET_CONTEXT_MGR already set [ 879.444183][T17783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.530460][T17808] binder: 17780:17808 ioctl 4018620d 200000000100 returned -16 [ 879.581763][T17567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.600436][T14304] usb 6-1: USB disconnect, device number 32 [ 879.661572][T17567] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.729147][T14549] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.736344][T14549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.846327][T14549] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.853564][T14549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.106960][T17567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.349707][T17567] veth0_vlan: entered promiscuous mode [ 880.423373][T17567] veth1_vlan: entered promiscuous mode [ 880.512898][T17567] veth0_macvtap: entered promiscuous mode [ 880.531694][T17567] veth1_macvtap: entered promiscuous mode [ 880.607527][T17567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.638836][T17567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.680141][T15628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.680183][T15628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.680211][T15628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.680238][T15628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.280190][T15628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.304798][T15628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.460496][T14809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.549843][T14809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.164022][T14308] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 882.343358][T14308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 882.354809][T14308] usb 2-1: not running at top speed; connect to a high speed hub [ 882.436873][T14308] usb 2-1: config 219 has an invalid interface number: 147 but max is 1 [ 882.454766][T14308] usb 2-1: config 219 has an invalid interface number: 147 but max is 1 [ 882.505771][T14308] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 882.592402][T14308] usb 2-1: config 219 has no interface number 0 [ 882.614221][T14308] usb 2-1: config 219 interface 147 has no altsetting 0 [ 882.659038][T14308] usb 2-1: config 219 interface 147 has no altsetting 1 [ 882.692738][T14308] usb 2-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=9e.d4 [ 882.705278][T14308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.725846][T14308] usb 2-1: Product: syz [ 882.730190][T14308] usb 2-1: Manufacturer: syz [ 882.735547][T14308] usb 2-1: SerialNumber: syz [ 883.014712][T17846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.050513][T17846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.109233][T14308] HFC-S_USB 2-1:219.147: probe with driver HFC-S_USB failed with error -5 [ 883.169276][T14308] usb 2-1: USB disconnect, device number 61 [ 883.260209][T17862] loop2: detected capacity change from 0 to 7 [ 883.285726][T17862] loop2: [ 883.288857][T17862] loop2: partition table partially beyond EOD, truncated [ 883.698473][T17867] tipc: Started in network mode [ 883.704519][T17867] tipc: Node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 883.748109][T17867] tipc: Enabling of bearer rejected, failed to enable media [ 883.858864][T17849] tipc: Started in network mode [ 883.889232][T17849] tipc: Node identity 72a3f55f5a56, cluster identity 4711 [ 883.931992][T17849] tipc: Enabled bearer , priority 0 [ 884.031947][T17848] tipc: Disabling bearer [ 885.433378][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 885.537963][T17911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.634610][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 885.670533][ T57] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 885.698538][T17918] fuse: Unknown parameter 'grou00000000000000000000' [ 885.742292][ T57] usb 5-1: config 2 has no interface number 0 [ 885.754104][ T57] usb 5-1: config 2 interface 31 has no altsetting 0 [ 885.794013][ T57] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 885.812267][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.827374][T17920] FAULT_INJECTION: forcing a failure. [ 885.827374][T17920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.852872][T17920] CPU: 0 UID: 0 PID: 17920 Comm: syz.0.2846 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.852908][T17920] Tainted: [L]=SOFTLOCKUP [ 885.852917][T17920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.852932][T17920] Call Trace: [ 885.852942][T17920] [ 885.852952][T17920] dump_stack_lvl+0xe8/0x150 [ 885.852988][T17920] should_fail_ex+0x414/0x560 [ 885.853029][T17920] _copy_to_user+0x31/0xb0 [ 885.853060][T17920] vt_do_kdgkb_ioctl+0x2a1/0x400 [ 885.853086][T17920] vt_ioctl+0xf90/0x1f20 [ 885.853123][T17920] ? __pfx_vt_ioctl+0x10/0x10 [ 885.853167][T17920] ? __fget_files+0x2a/0x420 [ 885.853201][T17920] ? __fget_files+0x3a0/0x420 [ 885.853229][T17920] ? __fget_files+0x2a/0x420 [ 885.853268][T17920] tty_ioctl+0x929/0xde0 [ 885.853290][T17920] ? __pfx_tty_ioctl+0x10/0x10 [ 885.853312][T17920] __se_sys_ioctl+0xfc/0x170 [ 885.853336][T17920] do_syscall_64+0xec/0xf80 [ 885.853360][T17920] ? rcu_is_watching+0x15/0xb0 [ 885.853387][T17920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.853409][T17920] ? clear_bhb_loop+0x60/0xb0 [ 885.853437][T17920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.853459][T17920] RIP: 0033:0x7fa7b0d8f749 [ 885.853480][T17920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.853500][T17920] RSP: 002b:00007fa7b1bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.853525][T17920] RAX: ffffffffffffffda RBX: 00007fa7b0fe6180 RCX: 00007fa7b0d8f749 [ 885.853542][T17920] RDX: 0000200000000080 RSI: 0000000000004b48 RDI: 0000000000000006 [ 885.853558][T17920] RBP: 00007fa7b1bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 885.853572][T17920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.853586][T17920] R13: 00007fa7b0fe6218 R14: 00007fa7b0fe6180 R15: 00007fa7b110fa28 [ 885.853621][T17920] [ 886.082367][ T57] usb 5-1: Product: syz [ 886.086716][ T57] usb 5-1: Manufacturer: syz [ 886.092259][ T57] usb 5-1: SerialNumber: syz [ 886.362603][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 886.519212][T17899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.529328][T17899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.597249][T17899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.669744][T17899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.808064][ T9] usb 2-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 886.827289][ T57] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 886.867068][ T9] usb 2-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config [ 886.906772][ T57] usb 5-1: USB disconnect, device number 6 [ 886.935166][ T9] usb 2-1: config 16 has no interfaces? [ 886.940860][ T9] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 887.012686][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.102622][T14549] wlan1: Trigger new scan to find an IBSS to join [ 888.579716][T17944] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 888.671031][T17944] tipc: Enabled bearer , priority 10 [ 889.566469][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'. [ 889.683519][T14324] usb 2-1: USB disconnect, device number 62 [ 889.855587][ T57] tipc: Node number set to 687207775 [ 890.504417][T17988] fuse: Bad value for 'fd' [ 891.108074][ T63] wlan1: Trigger new scan to find an IBSS to join [ 893.030386][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.069325][T18006] binder: 18004:18006 ioctl c00c6211 ffffffffffffffff returned -14 [ 894.152363][T18010] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2865'. [ 897.596165][T18021] loop2: detected capacity change from 0 to 7 [ 897.617792][T18021] loop2: [ 897.620892][T18021] loop2: partition table partially beyond EOD, truncated [ 901.715723][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2874'. [ 901.751230][T18042] 8021q: VLANs not supported on caif0 [ 917.091788][ C1] sched: DL replenish lagged too much [ 919.798475][T13684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 919.821995][T13684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 919.907211][T13684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 921.121416][T16950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 921.132480][T16950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 921.141253][T16950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 921.154318][T16950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 921.162148][T16950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 921.191103][T16950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 921.494600][T16950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 936.460311][ T52] Bluetooth: hci6: command tx timeout [ 936.472921][T16950] Bluetooth: hci0: command tx timeout [ 936.556594][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 937.068161][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.082539][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.545861][ T52] Bluetooth: hci0: command tx timeout [ 938.566035][ T52] Bluetooth: hci6: command tx timeout [ 940.678380][T16950] Bluetooth: hci6: command tx timeout [ 940.684021][T16950] Bluetooth: hci0: command tx timeout [ 941.259877][T16950] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 941.283340][T16950] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 941.295880][T16950] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 941.304081][T16950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 941.311901][T16950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 942.334001][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 942.348733][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 942.357743][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 942.366408][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 942.410360][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 942.752462][T16950] Bluetooth: hci6: command tx timeout [ 942.804139][T16950] Bluetooth: hci0: command tx timeout [ 943.353554][T16950] Bluetooth: hci7: command tx timeout [ 944.542557][ T52] Bluetooth: hci8: command tx timeout [ 944.657124][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 944.689204][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 944.712995][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 944.721054][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 944.730608][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 945.422634][ T52] Bluetooth: hci7: command tx timeout [ 946.622312][ T52] Bluetooth: hci8: command tx timeout [ 946.800581][ T52] Bluetooth: hci1: command tx timeout [ 947.502386][ T52] Bluetooth: hci7: command tx timeout [ 948.702366][ T52] Bluetooth: hci8: command tx timeout [ 948.862455][ T52] Bluetooth: hci1: command tx timeout [ 949.582405][ T52] Bluetooth: hci7: command tx timeout [ 950.782343][ T52] Bluetooth: hci8: command tx timeout [ 950.942356][ T52] Bluetooth: hci1: command tx timeout [ 953.663578][ T52] Bluetooth: hci1: command tx timeout [ 953.760086][ T1308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.978600][ T1308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.105998][ T1308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.264594][ T1308] batman_adv: batadv0: Removing interface: netdevsim0 [ 954.286800][ T1308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.074080][T18072] chnl_net:caif_netlink_parms(): no params data found [ 955.399416][ T1308] vlan2: left promiscuous mode [ 955.414874][ T1308] bridge0: port 3(vlan2) entered disabled state [ 955.437866][ T1308] bridge_slave_1: left allmulticast mode [ 955.449088][ T1308] bridge_slave_1: left promiscuous mode [ 955.456627][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.475765][ T1308] bridge_slave_0: left promiscuous mode [ 955.481577][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.915601][ T1308] erspan0 (unregistering): left promiscuous mode [ 955.954296][ T1308] gretap0 (unregistering): left promiscuous mode [ 956.697187][ T1308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.716529][ T1308] bond0 (unregistering): Released all slaves [ 956.741664][T18079] chnl_net:caif_netlink_parms(): no params data found [ 956.904824][ T1308] : left promiscuous mode [ 956.980998][T18083] chnl_net:caif_netlink_parms(): no params data found [ 957.028504][T18074] chnl_net:caif_netlink_parms(): no params data found [ 957.068369][T18081] chnl_net:caif_netlink_parms(): no params data found [ 957.248363][ T1308] tipc: Left network mode [ 957.728829][T18072] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.763877][T18072] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.774633][T18072] bridge_slave_0: entered allmulticast mode [ 957.785323][T18072] bridge_slave_0: entered promiscuous mode [ 958.027940][T18072] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.035567][T18072] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.043310][T18072] bridge_slave_1: entered allmulticast mode [ 958.051247][T18072] bridge_slave_1: entered promiscuous mode [ 958.060139][T18079] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.068701][T18079] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.078210][T18079] bridge_slave_0: entered allmulticast mode [ 958.086767][T18079] bridge_slave_0: entered promiscuous mode [ 958.122019][T18083] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.130816][T18083] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.138794][T18083] bridge_slave_0: entered allmulticast mode [ 958.148488][T18083] bridge_slave_0: entered promiscuous mode [ 958.254613][T18079] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.261826][T18079] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.271953][T18079] bridge_slave_1: entered allmulticast mode [ 958.280427][T18079] bridge_slave_1: entered promiscuous mode [ 958.318225][T18083] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.352709][T18083] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.360128][T18083] bridge_slave_1: entered allmulticast mode [ 958.368688][T18083] bridge_slave_1: entered promiscuous mode [ 958.751233][T18072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.804614][T18074] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.811930][T18074] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.822078][T18074] bridge_slave_0: entered allmulticast mode [ 958.830830][T18074] bridge_slave_0: entered promiscuous mode [ 958.870515][T18081] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.881694][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.895101][T18081] bridge_slave_0: entered allmulticast mode [ 958.909450][T18081] bridge_slave_0: entered promiscuous mode [ 958.921726][T18072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.941302][T18079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.951729][T18074] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.961398][T18074] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.970179][T18074] bridge_slave_1: entered allmulticast mode [ 958.979172][T18074] bridge_slave_1: entered promiscuous mode [ 958.989947][T18083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.010921][T18081] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.032542][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.039904][T18081] bridge_slave_1: entered allmulticast mode [ 959.073689][T18081] bridge_slave_1: entered promiscuous mode [ 959.155099][T18079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.215836][ T1308] hsr_slave_0: left promiscuous mode [ 959.248859][ T1308] hsr_slave_1: left promiscuous mode [ 959.255650][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.280668][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.504996][ T1308] team0 (unregistering): Port device batadv2 removed [ 959.592136][ T1308] team0 (unregistering): Port device batadv1 removed [ 960.558260][ T1308] team0 (unregistering): Port device team_slave_1 removed [ 960.646398][ T1308] team0 (unregistering): Port device C removed [ 961.627479][T18083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.000692][T18081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.016222][T18072] team0: Port device team_slave_0 added [ 962.026743][T18081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.100483][T18074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.173962][T18083] team0: Port device team_slave_0 added [ 962.181875][T18072] team0: Port device team_slave_1 added [ 962.218567][T18079] team0: Port device team_slave_0 added [ 962.238407][T18074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.251412][T18083] team0: Port device team_slave_1 added [ 962.362787][T18079] team0: Port device team_slave_1 added [ 962.511338][T18081] team0: Port device team_slave_0 added [ 962.616467][T18072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.627914][T18072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.655437][T18072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.711179][T18081] team0: Port device team_slave_1 added [ 962.724234][T18074] team0: Port device team_slave_0 added [ 962.731695][T18083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.751685][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.778713][T18083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.799183][T18072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.806635][T18072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.836079][T18072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.849476][T18079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.862079][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.898780][T18079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.949228][T18074] team0: Port device team_slave_1 added [ 963.007001][T18083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.016790][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.049532][T18083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.077520][T18079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.085207][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.113720][T18079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.217627][T18081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.235687][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.264383][T18081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.334820][T18081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.341940][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.374782][ T1308] IPVS: stop unused estimator thread 0... [ 963.396726][T18081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.527376][T18074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.535373][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.563321][T18074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.704055][T18074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.711810][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.755720][T18074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.874455][T18072] hsr_slave_0: entered promiscuous mode [ 963.881373][T18072] hsr_slave_1: entered promiscuous mode [ 963.907170][T18079] hsr_slave_0: entered promiscuous mode [ 963.915378][T18079] hsr_slave_1: entered promiscuous mode [ 963.921902][T18079] debugfs: 'hsr0' already exists in 'hsr' [ 963.928927][T18079] Cannot create hsr debugfs directory [ 963.994591][T18083] hsr_slave_0: entered promiscuous mode [ 964.010879][T18083] hsr_slave_1: entered promiscuous mode [ 964.024314][T18083] debugfs: 'hsr0' already exists in 'hsr' [ 964.030198][T18083] Cannot create hsr debugfs directory [ 964.048460][T18081] hsr_slave_0: entered promiscuous mode [ 964.055787][T18081] hsr_slave_1: entered promiscuous mode [ 964.063358][T18081] debugfs: 'hsr0' already exists in 'hsr' [ 964.069141][T18081] Cannot create hsr debugfs directory [ 964.813667][T18074] hsr_slave_0: entered promiscuous mode [ 964.820212][T18074] hsr_slave_1: entered promiscuous mode [ 964.830089][T18074] debugfs: 'hsr0' already exists in 'hsr' [ 964.836533][T18074] Cannot create hsr debugfs directory [ 964.895582][T15401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.040821][T15401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.235204][T15401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.379753][T15401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.704411][T15401] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.823679][T15401] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.947199][T15401] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.020121][T15401] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.259548][T15401] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.381743][T15401] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.485735][T15401] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.578026][T15401] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.774252][T15401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.880092][T15401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.970132][T15401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.055481][T15401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.294543][T15401] bridge_slave_1: left allmulticast mode [ 967.300271][T15401] bridge_slave_1: left promiscuous mode [ 967.308406][T15401] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.327042][T15401] bridge_slave_0: left allmulticast mode [ 967.342523][T15401] bridge_slave_0: left promiscuous mode [ 967.350505][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.376608][T15401] bridge_slave_1: left allmulticast mode [ 967.388278][T15401] bridge_slave_1: left promiscuous mode [ 967.394459][T15401] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.418458][T15401] bridge_slave_0: left allmulticast mode [ 967.425171][T15401] bridge_slave_0: left promiscuous mode [ 967.431030][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.446890][T15401] bridge_slave_1: left allmulticast mode [ 967.455591][T15401] bridge_slave_1: left promiscuous mode [ 967.461448][T15401] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.477043][T15401] bridge_slave_0: left allmulticast mode [ 967.483224][T15401] bridge_slave_0: left promiscuous mode [ 967.489041][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.502102][T15401] bridge_slave_1: left allmulticast mode [ 967.509029][T15401] bridge_slave_1: left promiscuous mode [ 967.515610][T15401] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.526177][T15401] bridge_slave_0: left allmulticast mode [ 967.531883][T15401] bridge_slave_0: left promiscuous mode [ 967.553940][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.277240][T15401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.296841][T15401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.307883][T15401] bond0 (unregistering): Released all slaves [ 968.816692][T15401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.827492][T15401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.838397][T15401] bond0 (unregistering): Released all slaves [ 968.853598][T15401] bond1 (unregistering): Released all slaves [ 969.219597][T15401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.230512][T15401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.241249][T15401] bond0 (unregistering): Released all slaves [ 969.609609][T15401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.621074][T15401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.633136][T15401] bond0 (unregistering): Released all slaves [ 969.854741][T15401] tipc: Left network mode [ 970.066090][T15401] tipc: Disabling bearer [ 970.076143][T15401] tipc: Left network mode [ 971.201293][T15401] hsr_slave_0: left promiscuous mode [ 971.219303][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.228892][T15401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.239652][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.251678][T15401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.266742][T15401] hsr_slave_0: left promiscuous mode [ 971.273649][T15401] hsr_slave_1: left promiscuous mode [ 971.279762][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.287315][T15401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.295983][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.303543][T15401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.321454][T15401] hsr_slave_0: left promiscuous mode [ 971.329124][T15401] hsr_slave_1: left promiscuous mode [ 971.336735][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.344437][T15401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.353557][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.360992][T15401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.373454][T15401] hsr_slave_0: left promiscuous mode [ 971.379603][T15401] hsr_slave_1: left promiscuous mode [ 971.386027][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.394210][T15401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.403827][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.411274][T15401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.500853][T15401] veth1_macvtap: left promiscuous mode [ 971.506896][T15401] veth0_macvtap: left promiscuous mode [ 971.512797][T15401] veth1_vlan: left promiscuous mode [ 971.518203][T15401] veth0_vlan: left promiscuous mode [ 971.524985][T15401] veth1_macvtap: left promiscuous mode [ 971.530587][T15401] veth0_macvtap: left promiscuous mode [ 971.536458][T15401] veth1_vlan: left promiscuous mode [ 971.541843][T15401] veth0_vlan: left promiscuous mode [ 971.548712][T15401] veth0_macvtap: left promiscuous mode [ 971.554832][T15401] veth1_vlan: left promiscuous mode [ 971.560210][T15401] veth0_vlan: left promiscuous mode [ 971.567371][T15401] veth1_macvtap: left promiscuous mode [ 971.573074][T15401] veth0_macvtap: left promiscuous mode [ 971.578774][T15401] veth1_vlan: left promiscuous mode [ 971.584410][T15401] veth0_vlan: left promiscuous mode [ 972.342302][T15401] team0 (unregistering): Port device team_slave_1 removed [ 972.391453][T15401] team0 (unregistering): Port device team_slave_0 removed [ 973.277625][T15401] team0 (unregistering): Port device team_slave_1 removed [ 973.327265][T15401] team0 (unregistering): Port device team_slave_0 removed [ 974.240463][T15401] team0 (unregistering): Port device team_slave_1 removed [ 974.296400][T15401] team0 (unregistering): Port device team_slave_0 removed [ 975.168922][T15401] team0 (unregistering): Port device team_slave_1 removed [ 975.214903][T15401] team0 (unregistering): Port device team_slave_0 removed [ 976.547474][T18079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 976.576667][T18079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 976.600945][T18079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 976.618919][T18079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 976.765048][T18072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 976.777813][T18072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 976.790382][T18072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 976.813234][T18072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 976.944941][T18081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 976.969919][T18081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 977.004926][T18081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 977.015337][T15401] IPVS: stop unused estimator thread 0... [ 977.038456][T15401] IPVS: stop unused estimator thread 0... [ 977.074062][T18081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 977.198528][T18079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.211586][T18083] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 977.223398][T18083] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 977.244386][T18083] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 977.277478][T18083] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 977.334623][T18079] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.376210][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.383373][ T4496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.425624][T15401] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.432878][T15401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.455124][T18074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 977.469373][T18072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.481755][T18074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 977.514013][T18074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 977.529921][T18074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 977.575697][T18072] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.607042][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.614293][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.668025][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.675259][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.688968][T18081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.779119][T18081] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.792078][T18083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.813961][T15319] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.821080][T15319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.859835][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.866995][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.924306][T18083] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.954794][T18079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.994187][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.001344][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.018668][T18074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.055323][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.062527][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.098030][T18072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.128954][T18074] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.161467][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.168663][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.209143][T15401] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.216323][T15401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.231322][T18081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.266659][T18079] veth0_vlan: entered promiscuous mode [ 978.316410][T18079] veth1_vlan: entered promiscuous mode [ 978.360909][T18072] veth0_vlan: entered promiscuous mode [ 978.408239][T18083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.419630][T18072] veth1_vlan: entered promiscuous mode [ 978.469403][T18079] veth0_macvtap: entered promiscuous mode [ 978.479070][T18081] veth0_vlan: entered promiscuous mode [ 978.495709][T18079] veth1_macvtap: entered promiscuous mode [ 978.549009][T18081] veth1_vlan: entered promiscuous mode [ 978.636677][T18072] veth0_macvtap: entered promiscuous mode [ 978.687000][T18079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.814163][T18079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.867790][T18081] veth0_macvtap: entered promiscuous mode [ 978.910769][T16950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 978.920691][T16950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 978.930133][T16950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 978.940900][T18083] veth0_vlan: entered promiscuous mode [ 978.949102][T16950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 978.957254][T16950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 979.006777][T18081] veth1_macvtap: entered promiscuous mode [ 979.023992][T13684] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 979.035891][T13684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 979.044988][T13684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 979.053153][T13684] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 979.063586][T13684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 979.132895][T15401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.192773][T18083] veth1_vlan: entered promiscuous mode [ 979.236639][T15401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.295681][T15401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.457414][T18081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.466472][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 979.476938][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 979.487880][T15401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.496907][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 979.505745][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 979.513424][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.706310][T18081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.746768][ T5967] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.757566][ T5967] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.771871][ T5967] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.879692][ T5967] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.021247][T18083] veth0_macvtap: entered promiscuous mode [ 980.137052][T18083] veth1_macvtap: entered promiscuous mode [ 980.361119][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.375862][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.386627][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.395951][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.405343][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.429015][T18083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.580586][T18311] chnl_net:caif_netlink_parms(): no params data found [ 980.613267][T18083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.839403][T18313] chnl_net:caif_netlink_parms(): no params data found [ 980.852711][ T5966] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.861532][ T5966] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.946691][T15401] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.995762][T15401] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.025727][ T52] Bluetooth: hci2: command tx timeout [ 981.066182][T18315] chnl_net:caif_netlink_parms(): no params data found [ 981.077494][T18311] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.085882][T18311] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.093777][T18311] bridge_slave_0: entered allmulticast mode [ 981.101064][T18311] bridge_slave_0: entered promiscuous mode [ 981.102775][ T52] Bluetooth: hci3: command tx timeout [ 981.148933][T18311] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.157223][T18311] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.164990][T18311] bridge_slave_1: entered allmulticast mode [ 981.172428][T18311] bridge_slave_1: entered promiscuous mode [ 981.298124][ T1159] bridge_slave_1: left allmulticast mode [ 981.303900][ T1159] bridge_slave_1: left promiscuous mode [ 981.309687][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.319696][ T1159] bridge_slave_0: left allmulticast mode [ 981.325695][ T1159] bridge_slave_0: left promiscuous mode [ 981.331529][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.585849][ T52] Bluetooth: hci0: command tx timeout [ 981.700687][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.712357][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.722713][ T1159] bond0 (unregistering): Released all slaves [ 981.737710][T18313] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.753744][T18313] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.762087][T18313] bridge_slave_0: entered allmulticast mode [ 981.770487][T18313] bridge_slave_0: entered promiscuous mode [ 981.831386][T18311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.855272][T18313] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.863131][T18313] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.870411][T18313] bridge_slave_1: entered allmulticast mode [ 981.880825][T18313] bridge_slave_1: entered promiscuous mode [ 981.914527][T18311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.004522][ T1159] hsr_slave_0: left promiscuous mode [ 982.010609][ T1159] hsr_slave_1: left promiscuous mode [ 982.016927][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.025019][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.268438][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 982.319327][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 982.462791][ T52] Bluetooth: hci4: command tx timeout [ 982.797955][T18315] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.808058][T18315] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.817059][T18315] bridge_slave_0: entered allmulticast mode [ 982.825112][T18315] bridge_slave_0: entered promiscuous mode [ 982.879123][T18311] team0: Port device team_slave_0 added [ 982.888989][T18311] team0: Port device team_slave_1 added [ 982.898021][T18313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.923379][T18315] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.930512][T18315] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.938205][T18315] bridge_slave_1: entered allmulticast mode [ 982.945897][T18315] bridge_slave_1: entered promiscuous mode [ 983.006042][T18313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.089420][T18311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.097077][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.125508][ T52] Bluetooth: hci2: command tx timeout [ 983.131440][T18311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.182838][ T52] Bluetooth: hci3: command tx timeout [ 983.194082][T18311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.201095][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.230495][T18311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.251890][T18315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.261664][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.273279][T18315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.288174][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.335588][T18313] team0: Port device team_slave_0 added [ 983.388549][T18313] team0: Port device team_slave_1 added [ 983.411802][T18324] chnl_net:caif_netlink_parms(): no params data found [ 983.439597][T18315] team0: Port device team_slave_0 added [ 983.481049][T18311] hsr_slave_0: entered promiscuous mode [ 983.489968][T18311] hsr_slave_1: entered promiscuous mode [ 983.497563][T18311] debugfs: 'hsr0' already exists in 'hsr' [ 983.503867][T18311] Cannot create hsr debugfs directory [ 983.511388][T18315] team0: Port device team_slave_1 added [ 983.554352][T18313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.561362][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.587752][T18313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.600762][T18313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.608633][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.634777][T18313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.659270][T18315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.666363][ T52] Bluetooth: hci0: command tx timeout [ 983.666392][T18315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.697995][T18315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.734244][T15319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.744860][T18315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.751848][T18315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.780539][T15319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.789149][T18315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.013871][T18313] hsr_slave_0: entered promiscuous mode [ 984.020707][T18313] hsr_slave_1: entered promiscuous mode [ 984.035058][T18313] debugfs: 'hsr0' already exists in 'hsr' [ 984.040867][T18313] Cannot create hsr debugfs directory [ 984.096543][T18324] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.104334][T18324] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.111658][T18324] bridge_slave_0: entered allmulticast mode [ 984.120399][T18324] bridge_slave_0: entered promiscuous mode [ 984.140479][T18315] hsr_slave_0: entered promiscuous mode [ 984.147300][T18315] hsr_slave_1: entered promiscuous mode [ 984.154853][T18315] debugfs: 'hsr0' already exists in 'hsr' [ 984.160659][T18315] Cannot create hsr debugfs directory [ 984.175426][T18324] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.183042][T18324] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.190830][T18324] bridge_slave_1: entered allmulticast mode [ 984.198486][T18324] bridge_slave_1: entered promiscuous mode [ 984.315222][ T1159] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.494995][T18324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.557082][ T52] Bluetooth: hci4: command tx timeout [ 984.616492][ T1159] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.652275][T14304] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 984.730033][T18324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.842724][T14304] usb 9-1: Using ep0 maxpacket: 8 [ 984.865574][T14304] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.877049][T14304] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 984.886537][T14304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.916568][T14304] usb 9-1: config 0 descriptor?? [ 984.975207][ T1159] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.046227][T18324] team0: Port device team_slave_0 added [ 985.124451][ T1159] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.150985][T14304] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 985.178254][T18324] team0: Port device team_slave_1 added [ 985.192600][ T52] Bluetooth: hci2: command tx timeout [ 985.278187][ T52] Bluetooth: hci3: command tx timeout [ 985.518559][T18324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.530534][T18324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.597038][T18324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.657483][T18324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.672494][T18324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.703267][T18324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.742403][ T52] Bluetooth: hci0: command tx timeout [ 985.947160][T18324] hsr_slave_0: entered promiscuous mode [ 985.962706][T18324] hsr_slave_1: entered promiscuous mode [ 985.969893][T18324] debugfs: 'hsr0' already exists in 'hsr' [ 985.976135][T18324] Cannot create hsr debugfs directory [ 986.336603][ T1159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.427996][ T1159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.551173][ T1159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.623464][ T52] Bluetooth: hci4: command tx timeout [ 986.673572][ T1159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.809751][T18313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 986.823412][T18313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 986.835215][T18313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 986.853516][T18313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 987.016066][ T1159] bridge_slave_1: left allmulticast mode [ 987.023267][ T1159] bridge_slave_1: left promiscuous mode [ 987.029370][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.040747][ T1159] bridge_slave_0: left allmulticast mode [ 987.048391][ T1159] bridge_slave_0: left promiscuous mode [ 987.054774][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.068451][ T1159] bridge_slave_1: left allmulticast mode [ 987.074449][ T1159] bridge_slave_1: left promiscuous mode [ 987.080267][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.094691][ T1159] bridge_slave_0: left allmulticast mode [ 987.100451][ T1159] bridge_slave_0: left promiscuous mode [ 987.106919][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.121552][ T1159] bridge_slave_1: left allmulticast mode [ 987.130728][ T1159] bridge_slave_1: left promiscuous mode [ 987.136977][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.151608][ T1159] bridge_slave_0: left allmulticast mode [ 987.159521][ T1159] bridge_slave_0: left promiscuous mode [ 987.166605][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.272973][ T52] Bluetooth: hci2: command tx timeout [ 987.345843][ T52] Bluetooth: hci3: command tx timeout [ 987.407633][T18057] usb 9-1: USB disconnect, device number 2 [ 987.822632][ T52] Bluetooth: hci0: command tx timeout [ 988.116183][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.128844][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.140110][ T1159] bond0 (unregistering): Released all slaves [ 988.702738][ T52] Bluetooth: hci4: command tx timeout [ 988.719571][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.731321][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.741770][ T1159] bond0 (unregistering): Released all slaves [ 989.082607][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.093760][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.105152][ T1159] bond0 (unregistering): Released all slaves [ 989.523817][ T1159] hsr_slave_0: left promiscuous mode [ 989.553207][ T1159] hsr_slave_1: left promiscuous mode [ 989.559404][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.593882][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.604440][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.611894][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.635744][ T1159] hsr_slave_0: left promiscuous mode [ 989.649124][ T1159] hsr_slave_1: left promiscuous mode [ 989.661087][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.669274][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.684722][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.695238][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.720810][ T1159] hsr_slave_0: left promiscuous mode [ 989.731004][ T1159] hsr_slave_1: left promiscuous mode [ 989.738501][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.755863][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.866107][ T1159] veth1_macvtap: left promiscuous mode [ 989.875859][ T1159] veth0_macvtap: left promiscuous mode [ 989.888540][ T1159] veth1_vlan: left promiscuous mode [ 989.900123][ T1159] veth0_vlan: left promiscuous mode [ 989.915897][ T1159] veth1_macvtap: left promiscuous mode [ 989.921654][ T1159] veth0_macvtap: left promiscuous mode [ 989.933746][ T1159] veth1_vlan: left promiscuous mode [ 989.943876][ T1159] veth0_vlan: left promiscuous mode [ 989.957349][ T1159] veth0_macvtap: left promiscuous mode [ 989.967159][ T1159] veth1_vlan: left promiscuous mode [ 989.978201][ T1159] veth0_vlan: left promiscuous mode [ 991.360389][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 991.438485][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 992.545446][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 992.598013][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 993.421932][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 993.468248][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 993.955863][T18372] syzkaller1: entered promiscuous mode [ 993.961377][T18372] syzkaller1: entered allmulticast mode [ 994.255493][T18313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.356205][T18313] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.413280][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.420553][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.455300][T18311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 994.471420][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.478689][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.497493][T18311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 994.609335][T18311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 994.643592][T18311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 994.999488][T18437] netlink: 'syz.8.2892': attribute type 1 has an invalid length. [ 995.048706][T18437] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2892'. [ 995.119921][T18313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.155700][T18437] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2892'. [ 995.433682][T18324] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 995.498768][T18324] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 995.520148][T18324] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 995.583094][T18324] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 995.601990][T18311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.684016][T18313] veth0_vlan: entered promiscuous mode [ 995.746851][T18311] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.769269][T18315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 995.789089][T18313] veth1_vlan: entered promiscuous mode [ 995.804787][T18315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 995.849416][T18315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 995.878716][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.885879][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.905389][T18315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 995.984019][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.991241][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.118708][T18313] veth0_macvtap: entered promiscuous mode [ 996.149933][T18313] veth1_macvtap: entered promiscuous mode [ 996.259884][T18311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 996.273010][T18311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 996.300866][T18313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.340494][T18313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.391242][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.412119][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.421159][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.430043][ T6877] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 996.451493][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.483311][T18311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.510049][T18324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.572259][ T6877] usb 9-1: device descriptor read/64, error -71 [ 996.615180][T18315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.671227][T18324] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.680349][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.710251][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.717524][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.726769][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.795567][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.802915][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.820222][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.828749][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.835644][ T6877] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 996.855392][T18315] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.884281][T18311] veth0_vlan: entered promiscuous mode [ 996.898867][T15401] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.906100][T15401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.935136][T15401] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.942410][T15401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.972703][ T6877] usb 9-1: device descriptor read/64, error -71 [ 997.014052][T18311] veth1_vlan: entered promiscuous mode [ 997.082548][ T6877] usb usb9-port1: attempt power cycle [ 997.156673][T18486] bond0: entered promiscuous mode [ 997.161924][T18486] bond_slave_0: entered promiscuous mode [ 997.191575][T18486] bond_slave_1: entered promiscuous mode [ 997.204623][T18486] dummy0: entered promiscuous mode [ 997.220109][T18486] hsr1: entered promiscuous mode [ 997.232011][T18486] hsr1: entered allmulticast mode [ 997.242846][T18486] bond0: entered allmulticast mode [ 997.260454][T18486] bond_slave_0: entered allmulticast mode [ 997.282453][T18486] bond_slave_1: entered allmulticast mode [ 997.288396][T18486] dummy0: entered allmulticast mode [ 997.348184][T18324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.426254][ T6877] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 997.435569][T18311] veth0_macvtap: entered promiscuous mode [ 997.456922][T18311] veth1_macvtap: entered promiscuous mode [ 997.474953][ T6877] usb 9-1: device descriptor read/8, error -71 [ 997.635638][T18315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.666379][T18324] veth0_vlan: entered promiscuous mode [ 997.688757][T18311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.738382][T18311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.746792][ T6877] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 997.796904][ T6877] usb 9-1: device descriptor read/8, error -71 [ 997.824286][T18324] veth1_vlan: entered promiscuous mode [ 997.846010][T15401] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.865509][T15401] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.905280][T15401] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.923224][ T6877] usb usb9-port1: unable to enumerate USB device [ 997.936137][T15401] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.130068][T18315] veth0_vlan: entered promiscuous mode [ 998.185030][T18315] veth1_vlan: entered promiscuous mode [ 998.198057][T18324] veth0_macvtap: entered promiscuous mode [ 998.263820][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.272329][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.279552][T18324] veth1_macvtap: entered promiscuous mode [ 998.386924][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.395090][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.459981][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.483892][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.591059][T18324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.639358][T18315] veth0_macvtap: entered promiscuous mode [ 998.685931][T18324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.716511][T18315] veth1_macvtap: entered promiscuous mode [ 998.731167][ T33] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.770251][T18513] loop2: detected capacity change from 0 to 7 [ 998.785188][ T33] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.798071][T18513] loop2: [ 998.801185][T18513] loop2: partition table partially beyond EOD, truncated [ 998.823009][ T33] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.863837][ T33] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.909995][T18315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.954288][T18315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.082889][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.091721][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.112325][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.211593][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.357917][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.437701][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.101497][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.118016][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.592251][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1000.811621][ T9] usb 3-1: config 0 has no interfaces? [ 1000.824741][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1000.834464][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.844949][ T9] usb 3-1: Product: syz [ 1000.849196][ T9] usb 3-1: Manufacturer: syz [ 1000.854440][ T9] usb 3-1: SerialNumber: syz [ 1000.864306][ T9] usb 3-1: config 0 descriptor?? [ 1000.944285][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.962623][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.992507][T14298] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1001.073005][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.112607][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.142460][T14298] usb 8-1: Using ep0 maxpacket: 32 [ 1001.155369][T14298] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1001.174889][T14298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.212903][T14298] usb 8-1: Product: syz [ 1001.224099][T14298] usb 8-1: Manufacturer: syz [ 1001.276846][T14298] usb 8-1: SerialNumber: syz [ 1001.351371][T14298] usb 8-1: config 0 descriptor?? [ 1001.401171][T14298] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1002.160039][T14298] gspca_topro: reg_w err -71 [ 1002.192547][T14298] gspca_topro: Sensor soi763a [ 1002.316577][T14308] usb 3-1: USB disconnect, device number 99 [ 1002.362731][T14298] usb 8-1: USB disconnect, device number 10 [ 1002.752317][T14308] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1002.772353][T14298] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1002.974245][T14308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1002.989615][T14298] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1003.023998][T14298] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.036071][T14308] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1003.077722][T14308] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1003.096035][T14298] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.126763][T14308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.154791][T14298] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1003.179700][T14308] usb 3-1: config 0 descriptor?? [ 1003.195763][T18578] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1003.205285][T14298] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1003.216971][T14298] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1003.232057][T14298] usb 8-1: Manufacturer: syz [ 1003.250923][T14298] usb 8-1: config 0 descriptor?? [ 1003.434943][T18578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.471315][T18578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.553840][T18605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.663058][T18605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.705551][T14298] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 1003.764924][T14298] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1003.792398][T14323] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1003.942530][T18613] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1003.986030][T18614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2907'. [ 1004.046363][T14323] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 1004.067430][T14323] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.078671][T18613] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1004.124092][T14323] usb 9-1: Product: syz [ 1004.164944][T14323] usb 9-1: Manufacturer: syz [ 1004.197712][T14323] usb 9-1: SerialNumber: syz [ 1004.241709][T14323] usb 9-1: config 0 descriptor?? [ 1004.309398][T14304] usb 8-1: USB disconnect, device number 11 [ 1004.654184][T14323] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1004.683548][T14323] usb 9-1: USB disconnect, device number 7 [ 1004.756281][T18413] udevd[18413]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.536600][T18632] random: crng reseeded on system resumption [ 1006.081928][T18625] kthread_run failed with err -4 [ 1006.202294][T14298] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1006.342285][T14323] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1006.480927][T14298] usb 9-1: Using ep0 maxpacket: 16 [ 1006.505257][T14298] usb 9-1: config 0 has no interfaces? [ 1006.514371][T14298] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1006.530702][T14298] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1006.552304][T14323] usb 4-1: device descriptor read/64, error -71 [ 1006.564868][T14298] usb 9-1: Manufacturer: syz [ 1006.673617][T14298] usb 9-1: config 0 descriptor?? [ 1006.832366][T14323] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1007.078887][T14323] usb 4-1: device descriptor read/64, error -71 [ 1007.312873][T14323] usb usb4-port1: attempt power cycle [ 1007.742020][T14323] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1007.853924][T14323] usb 4-1: device descriptor read/8, error -71 [ 1008.341606][T14323] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1008.419966][T14323] usb 4-1: device descriptor read/8, error -71 [ 1008.562495][T14323] usb usb4-port1: unable to enumerate USB device [ 1009.035354][T14323] usb 9-1: USB disconnect, device number 8 [ 1009.522501][T18670] tipc: Started in network mode [ 1009.552521][T18670] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1009.595905][T18670] tipc: Enabling of bearer rejected, failed to enable media [ 1010.055694][T18676] usb usb8: usbfs: process 18676 (syz.3.2916) did not claim interface 0 before use [ 1010.498856][T14323] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1010.508779][ T43] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1010.686251][T14323] usb 9-1: config 0 has an invalid interface number: 93 but max is 0 [ 1010.695943][ T43] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 1010.722332][T14323] usb 9-1: config 0 has no interface number 0 [ 1010.742308][ T43] usb 4-1: config 0 has no interface number 0 [ 1010.748474][ T43] usb 4-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 1010.785105][T14323] usb 9-1: config 0 interface 93 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.826879][T14323] usb 9-1: config 0 interface 93 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.847290][ T43] usb 4-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 1010.873794][T14323] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1010.892488][ T43] usb 4-1: config 0 interface 48 has no altsetting 0 [ 1010.899443][T14323] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.912385][ T43] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1010.974195][T14323] usb 9-1: config 0 descriptor?? [ 1010.982205][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.049584][ T43] usb 4-1: config 0 descriptor?? [ 1011.150990][ T890] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1011.320414][ T890] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1011.372243][ T890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.409128][T18678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.456253][ T890] usb 8-1: config 0 descriptor?? [ 1011.500350][T18678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.544760][ T890] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1011.556610][T14323] usbhid 9-1:0.93: can't add hid device: -71 [ 1011.574650][T14323] usbhid 9-1:0.93: probe with driver usbhid failed with error -71 [ 1011.594874][ T43] usb 4-1: string descriptor 0 read error: -71 [ 1011.625055][T14323] usb 9-1: USB disconnect, device number 9 [ 1011.644997][ T43] pegasus 4-1:0.48: probe with driver pegasus failed with error -71 [ 1011.710303][ T43] usb 4-1: USB disconnect, device number 124 [ 1011.725556][T18693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.763718][T18693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.470829][ T890] gspca_cpia1: usb_control_msg 02, error -71 [ 1012.478252][ T890] gspca_cpia1: usb_control_msg 05, error -71 [ 1012.485863][ T890] gspca_cpia1: usb_control_msg 04, error -71 [ 1012.491977][ T890] cpia1 8-1:0.0: probe with driver cpia1 failed with error -71 [ 1012.565173][ T890] usb 8-1: USB disconnect, device number 12 [ 1059.959558][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.974696][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1073.624174][T13684] Bluetooth: hci1: command tx timeout [ 1112.515930][T16950] Bluetooth: hci2: command 0x0406 tx timeout [ 1112.522018][T16950] Bluetooth: hci0: command 0x0406 tx timeout [ 1112.537583][T16950] Bluetooth: hci3: command 0x0406 tx timeout [ 1114.565583][T16950] Bluetooth: hci4: command tx timeout [ 1121.387817][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.402287][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.876486][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.248284][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1229.431407][ T31] INFO: task kworker/0:5:5901 blocked for more than 143 seconds. [ 1229.678491][ T31] Tainted: G L syzkaller #0 [ 1229.693781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1232.712060][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1232.719079][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18716/1:b..l [ 1232.727737][ C0] rcu: (detected by 0, t=10503 jiffies, g=129201, q=754 ncpus=2) [ 1232.735604][ C0] task:syz.6.2922 state:R running task stack:25688 pid:18716 tgid:18716 ppid:18311 task_flags:0x40044c flags:0x00080002 [ 1232.750688][ C0] Call Trace: [ 1232.754015][ C0] [ 1232.756994][ C0] __schedule+0x149b/0x4fd0 [ 1232.761562][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 1232.766992][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1232.772066][ C0] ? __pfx___schedule+0x10/0x10 [ 1232.776983][ C0] ? irqentry_exit+0x5dd/0x660 [ 1232.781801][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1232.787210][ C0] preempt_schedule_common+0x83/0xd0 [ 1232.792511][ C0] preempt_schedule_thunk+0x16/0x30 [ 1232.797845][ C0] _raw_spin_unlock+0x3f/0x50 [ 1232.802550][ C0] unmap_page_range+0x38bc/0x4170 [ 1232.807610][ C0] ? mas_next_slot+0xc20/0xcf0 [ 1232.812567][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1232.818044][ C0] ? mas_find+0xb0e/0xd30 [ 1232.822477][ C0] ? unmap_vmas+0x144/0x580 [ 1232.826995][ C0] unmap_vmas+0x399/0x580 [ 1232.831436][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1232.836410][ C0] exit_mmap+0x239/0xb10 [ 1232.840845][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1232.846057][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1232.850829][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1232.856482][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1232.861279][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1232.866582][ C0] __mmput+0x118/0x430 [ 1232.870670][ C0] exit_mm+0x169/0x230 [ 1232.874760][ C0] do_exit+0x627/0x22f0 [ 1232.878938][ C0] ? __pfx_do_exit+0x10/0x10 [ 1232.883586][ C0] do_group_exit+0x21c/0x2d0 [ 1232.888197][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1232.893516][ C0] get_signal+0x1285/0x1340 [ 1232.898048][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 1232.903635][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1232.909829][ C0] ? exc_page_fault+0x71/0xd0 [ 1232.914515][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 1232.919734][ C0] exit_to_user_mode_loop+0x87/0x4e0 [ 1232.925054][ C0] ? rcu_is_watching+0x15/0xb0 [ 1232.929917][ C0] do_syscall_64+0x2b7/0xf80 [ 1232.934533][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.940627][ C0] ? trace_irq_disable+0x37/0x100 [ 1232.945716][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1232.950413][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.956331][ C0] RIP: 0033:0x7f9478d8f749 [ 1232.960781][ C0] RSP: 002b:00007f947910fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1232.969205][ C0] RAX: 0000000000000001 RBX: 00007f9478fe5fa8 RCX: 00007f9478d8f749 [ 1232.977184][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9478fe5fa8 [ 1232.985164][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000027910fe7f [ 1232.993240][ C0] R10: 00007f9478fe5fa0 R11: 0000000000000246 R12: 00007f9478fe5fac [ 1233.001241][ C0] R13: 00007f9478fe5fa0 R14: 000000000000011b R15: 0000000000000003 [ 1233.009279][ C0] [ 1234.371606][ T31] task:kworker/0:5 state:D stack:22208 pid:5901 tgid:5901 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1234.392889][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 1234.400110][ T31] Call Trace: [ 1234.412614][ T31] [ 1234.415635][ T31] __schedule+0x149b/0x4fd0 [ 1234.420566][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1234.434801][ T31] ? __pfx___schedule+0x10/0x10 [ 1234.439748][ T31] ? schedule+0x91/0x360 [ 1234.453086][ T31] schedule+0x165/0x360 [ 1234.466991][ T31] schedule_preempt_disabled+0x13/0x30 [ 1234.482845][ T31] __mutex_lock+0x7e6/0x1350 [ 1234.487524][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1234.510559][ T31] ? reg_check_chans_work+0x156/0xf00 [ 1234.525317][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1234.530488][ T31] ? register_lock_class+0x31/0x2e0 [ 1234.544902][ T31] reg_check_chans_work+0x156/0xf00 [ 1234.550213][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1234.564405][ T31] ? lock_acquire+0x107/0x340 [ 1234.569164][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1234.584299][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1234.590118][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1234.605470][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1234.611283][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1234.626301][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1234.650378][ T31] process_scheduled_works+0xad1/0x1770 [ 1234.665285][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1234.671430][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1234.686419][ T31] worker_thread+0x8a0/0xda0 [ 1234.691220][ T31] kthread+0x711/0x8a0