last executing test programs: 30m23.269733757s ago: executing program 0 (id=695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x9d9d6d0683454daa, 0x3}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e0000009500000000000000bd6482afcdfe986e9674a3c1419714961356fac4be989b4820f842475fe0388d33d8a58016b340325f9003784774c042e8b687ba0fa1e306a944f7d77c85de7e000f8abd38aa80fd0d0dc604b76770"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 30m19.88092119s ago: executing program 0 (id=701): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x1, 0x3}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 30m16.076387134s ago: executing program 0 (id=710): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r2 = userfaultfd(0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/40, 0x28}, {0x0}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 30m15.401286839s ago: executing program 0 (id=713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) r3 = io_uring_setup(0x1d0a, &(0x7f00000003c0)={0x0, 0x903, 0x80, 0x1, 0x36d}) fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@pppol2tpv3={0x1e, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x4048040) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffed5) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) socket$inet(0x2, 0x800, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) 30m14.014389424s ago: executing program 0 (id=719): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040), 0x111, 0x9}}, 0x4c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 30m10.662800928s ago: executing program 0 (id=728): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/40, 0x28}, {0x0}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 30m10.055979841s ago: executing program 32 (id=728): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/40, 0x28}, {0x0}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 2m7.182478893s ago: executing program 3 (id=3759): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r3, 0x1) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r7, &(0x7f0000000680)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, 0x80000001, 0x3) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000300)=0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) 2m3.512367693s ago: executing program 3 (id=3765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0xe0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x844a}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r6, 0x5608, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868", 0x68}], 0x1}, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000c00), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r9 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt(r9, 0x6bf, 0x100, 0x0, 0x0) 2m0.169908425s ago: executing program 3 (id=3769): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x1, 0x7ef7, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000824) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48010000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800800024000000001080001400000001105000300000000000900010073797a30000000000900020073797a32"], 0x170}, 0x1, 0x0, 0x0, 0x8800}, 0xfc851d372f3ac962) 1m53.899741119s ago: executing program 3 (id=3777): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000200)=""/73) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(r2, &(0x7f0000000340)=""/42, 0x2a) socket(0x1e, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 1m49.373007841s ago: executing program 3 (id=3784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00002bbd7000fcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x48081}, 0x8015) socket$unix(0x1, 0x5, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f0000000000)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000380)={0x171b, 0x78, 0x300, 0x0, 0xe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x9f9, 0x3, 0x5, 0x800803d, 0x1, 0x7, 0x5f, 0x200, 0x1, 0x3}) r4 = socket$tipc(0x1e, 0x5, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x3adc0, 0xc4, 0x19}, 0x18) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"00eb00", 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e00", "8600", "03000600", "fc599184", ["8bff03deffffff00001000", "c2a4a110cfc1bac26ef76ef7", '\x00', "00113a071fa0fcd9c500"]}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001c00010028bd7000fedbdf251c000000", @ANYRES32=0x0, @ANYBLOB="1000030608000f000000000014000100fc0000000000000d0000000000660001001cf26cfb609f03000000000000000000000000000100000d00100000004ed25fdaba"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000600000000b703000005000000850000000600000095000000000000005a2e60a24430ddc67d98cf73a92e89cbd71ef04dab9b3ac699d109df67f1c9d0236be3f7c2"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$TIOCCBRK(r11, 0x5428) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000640)={0x19, 0x0, 0x7}) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000300)={{0xfec00000, 0x2000, 0xd, 0x5, 0x2, 0xe8, 0x9, 0xc4, 0x0, 0x3, 0x7, 0xe}, {0x50000, 0xc000, 0x9, 0xa, 0x5, 0x30, 0x7, 0x3, 0x4, 0xd, 0xd, 0x80}, {0xd000, 0xffff1000, 0xd, 0xfd, 0x2, 0x11, 0x6, 0x7, 0x8, 0xe1, 0x9, 0x8b}, {0xb000, 0xeeef0000, 0x0, 0x4, 0x1, 0xb, 0x0, 0x1, 0x1, 0x9, 0x6, 0x40}, {0x2, 0xf000, 0xd, 0x0, 0x2, 0xd4, 0x2, 0xfd, 0x6, 0x1, 0x7, 0xf7}, {0x30000, 0x2000, 0x3, 0x10, 0x3, 0xe, 0x5, 0xf9, 0x6, 0x73, 0xe9, 0x1}, {0x0, 0xb000, 0xd, 0xc, 0x7, 0x9, 0x3, 0x4, 0x2, 0xfb, 0x3, 0xb}, {0xd000, 0xffffffff, 0xe, 0x7, 0x2, 0x5, 0xf9, 0x7, 0x2, 0x0, 0x84, 0xd}, {0x7000, 0xff}, {0xf000, 0xfff9}, 0x40050002, 0x0, 0x80a0000, 0x242, 0xe, 0x3800, 0x1000, [0x1, 0x8, 0xfffffffffffffff8, 0xd6]}) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0x70000, 0xfffffffffffffffd, 0xc, 0x2}) write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1ce4a628, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x50]}, 0x2c) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 1m48.426144129s ago: executing program 3 (id=3787): msgget$private(0x0, 0x1c0) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b, 0x0, 0xf9}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x220, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1ec, 0x2, [@TCA_MATCHALL_ACT={0x1e8, 0x2, [@m_csum={0x1e4, 0xa, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x8, 0x6, 0x4}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff80, 0x8000, 0x20000000, 0x9, 0x3}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0x0, 0x3}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x6, 0x7, 0x3ff}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x0, 0x1, 0x5}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc34f, 0x0, 0x7, 0x8, 0x8}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x7, 0x4, 0x6}, 0x7}}]}, {0xf1, 0x6, "88b2082aa1666b0dbb891f66b9241d986ae08868397bdf153323a7d5975c3d146e00f0488dbacfa21a09ea5d4c5391f5aba4097ef310a9480bb68a90be07e1c9960c81aac049f59c812060e2b4af463b7795fb09326210d4946936cab7c3af539b5b57f9a4c20d9219a883ef762d4806634796b5fd67a17a44ac5f3d0964b2ca3b20b0e702ac7dbfd05188948324c539076e93378b17cb1e2ad9a2a5d430fe95e3048552d7cc7c16c9171e70e1a751b57fae26ae5e8399fca9a4649d5165c7d80b62033bf3c7166e638733f3589a624d7d1feec9c3054adc985e0fbd98ed3613d7e23d732d8efcb7084f461c64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000400)=""/95, 0x40, 0x5f, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7ff, '\x00', r5, 0xffffffffffffffff, 0x1}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) 1m33.330826973s ago: executing program 33 (id=3787): msgget$private(0x0, 0x1c0) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x8b, 0x0, 0xf9}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x220, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1ec, 0x2, [@TCA_MATCHALL_ACT={0x1e8, 0x2, [@m_csum={0x1e4, 0xa, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x8, 0x6, 0x4}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff80, 0x8000, 0x20000000, 0x9, 0x3}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0x0, 0x3}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x6, 0x7, 0x3ff}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x0, 0x1, 0x5}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc34f, 0x0, 0x7, 0x8, 0x8}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x7, 0x4, 0x6}, 0x7}}]}, {0xf1, 0x6, "88b2082aa1666b0dbb891f66b9241d986ae08868397bdf153323a7d5975c3d146e00f0488dbacfa21a09ea5d4c5391f5aba4097ef310a9480bb68a90be07e1c9960c81aac049f59c812060e2b4af463b7795fb09326210d4946936cab7c3af539b5b57f9a4c20d9219a883ef762d4806634796b5fd67a17a44ac5f3d0964b2ca3b20b0e702ac7dbfd05188948324c539076e93378b17cb1e2ad9a2a5d430fe95e3048552d7cc7c16c9171e70e1a751b57fae26ae5e8399fca9a4649d5165c7d80b62033bf3c7166e638733f3589a624d7d1feec9c3054adc985e0fbd98ed3613d7e23d732d8efcb7084f461c64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000400)=""/95, 0x40, 0x5f, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7ff, '\x00', r5, 0xffffffffffffffff, 0x1}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) 1m26.870338278s ago: executing program 1 (id=3807): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000140009052cbd70000000000002080000", @ANYRES32=r5, @ANYBLOB="140006000500000009000000be2181c2bd17896781958a12e7d504009a850000fdffffff08000200ac1414bb080001000000"], 0x3c}}, 0x44000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', r5, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r6, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) close(r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r12, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r11, 0x8010500c, &(0x7f0000000180)) sendmmsg$inet(r9, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x43}}], 0x40000000000003a, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r7, 0xffffffffffffffff, 0x0) 1m25.416427163s ago: executing program 1 (id=3809): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x44, 0x6, 0x500, 0x0, 0x130, 0x0, 0x0, 0x98, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x90, 0x1b8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000", @ANYRES16], 0x1c}}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff7e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="84130000", @ANYRES16=0x0, @ANYBLOB="84052dbd7000f9dbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x8800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m18.697224716s ago: executing program 1 (id=3815): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x5, 0x6, @tid=r0}, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x100, 0x803, "000000ffff0600000800", "00000002", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="99177fa56f05ece65fbcee5586dd60000000001011ff0000898af70200000000001000000001fe80000000000000000a3289a90000aa00000e22001090780203000000000000509c390acc00177a20dae7e6e16f1ce85d12ea4b3f251c1e6745678582a7c028c1f56b3d19a9f076b52d4f627acdff55ebb6521fd40388193d49922a65aac0db2cf94c06bcaa28e1107b37ca623d957434681cf1267ef1e79e6c4929d1dc9b82368bd694c5c0c09dac19273190c311fd2f7debdbecc4f26e5c067d58615acd42a6e3b38642c362605cd6fd4d997db88b81f42e89499f0da3661953ae"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xc7) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x4) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) io_destroy(0x0) 1m11.027187315s ago: executing program 1 (id=3824): r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = memfd_create(&(0x7f0000000400)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9){\xb8\xce\xeb\x9b\x84F\xbc2\xb2\x98Ms\xcb\x01\x90>n\xbf\xddN\xeeG\xb1\x85\xee\xec;\xff\x9cx\xf4\xces\xae\xc0\xcfB\x80=B.\x03\xc6\xb91\xa3\x96!\x87\xa6\xd7\\\x8a\xde\x19\x18I\xd9\xb4\x85j\xda,\x0e\xfcK\x19\xd5\x91\xab\xd5\x8aS27G\xc4\xebl\x00.tt\xa6\x860\xbe\x86\x9bj\xe0\x81=\x85\xbc\x1e\x00\x14V\xdf\x7f-I\x83\rU\xe0\\w\x89\x00drN\\\xd4\x1cs\xf4\x1c\xc7\xd8*\x8bzJ\xa9\x87\xcd\x90\x15\xfc\x1bO\xcf\xbf\x81 \x01\x9e\xc8\x01\x9c\"\x97\xd2D\xd5\x06\xb2\xdei\xd0>\xde\xc1\xf3)\x91k\xed:\xfa,!\xaa\xac\xcb\xbb\xea\xdc\xc0\x93\x80\xa3E{D\f\xb6\xc4 n\xf5\xce\xfe\x12e\xf2~\xa6ZT\x8fj\xdb`\x958O\x03\x14\xb6?\xb0\xc0\xadv\xf8\xe4\xe6\xbd\xe8', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0x3, 0x1, 0x4, 0x1a, "518aba4d000000000000000000000000002000"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x103302, 0x0) ioctl$TUNGETVNETLE(r2, 0x80086601, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bind$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x20, 0xffff}, [], {0x4, 0x7}}, 0x24, 0x3) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1m7.054762612s ago: executing program 1 (id=3829): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0xf8, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xa, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x81}}}}}]}}]}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r2, &(0x7f0000000980), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x10004c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x7, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x7, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0xb13, 0x9, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x0, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x800001, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000f, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x9, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbb, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0xef5b454, 0x80000000, 0xb, 0x7fff, 0x8ffff, 0xa620, 0x67, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x13e4, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x6, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0x1, 0x1, 0x1ff, 0xffc, 0xfff]}, 0x45c) syz_clone3(&(0x7f0000000540)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0x2, 0x0, 0x2, 0x200, 0xa}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048014) socket$nl_netfilter(0x10, 0x3, 0xc) 1m3.046389655s ago: executing program 1 (id=3834): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffb5, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4008040) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x23) bind$packet(r6, &(0x7f0000000080)={0x11, 0x19, r7, 0x1, 0x0, 0x6, @random}, 0x14) write(r5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, &(0x7f0000001140)) 47.902205985s ago: executing program 34 (id=3834): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffb5, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4008040) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x23) bind$packet(r6, &(0x7f0000000080)={0x11, 0x19, r7, 0x1, 0x0, 0x6, @random}, 0x14) write(r5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, &(0x7f0000001140)) 33.673478936s ago: executing program 4 (id=3865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[0x0]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300001030000000060db279c870749a04c1674cd15000000000100000814000ba0100017000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev\x00') 30.742719607s ago: executing program 5 (id=3867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0x2, 0x70bd26, 0x6df, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {0x10, 0xfff2}, {0x6, 0x8}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x8, 0x800, 0x2, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x2, 0x7ff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xca14}, @qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xc38}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000080)={@remote, r11}, 0x14) 30.236361407s ago: executing program 2 (id=3868): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x11, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x68) landlock_restrict_self(r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r7, &(0x7f0000000000)='./file0\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r4, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) 27.639552584s ago: executing program 4 (id=3870): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@delqdisc={0x128, 0x25, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0x7, 0xfff1}, {0xfff1, 0xb}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x4, 0x7aad, 0x8c, 0x1, 0x9, 0x8000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xe7, 0x1, 0x9, 0x7, 0x2, 0x3, 0x401, 0x5}}, {0xe, 0x2, [0x5, 0x6, 0x80, 0x7f, 0x8001]}}, {{0x1c, 0x1, {0x4, 0x3, 0x1, 0xc2, 0x0, 0xe2, 0x0, 0x3}}, {0xa, 0x2, [0x2, 0x81, 0x9]}}, {{0x1c, 0x1, {0x20, 0x5, 0x6, 0x2, 0x1, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x55, 0x4, 0x3, 0x7, 0x2, 0x1000, 0x6}}, {0x4}}]}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x6, 0x5, 0x0, 0x1, 0x9fea}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xfd, 0xcbe, 0x3, 0x5, 0x0, 0x4}}, {0x4}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x4044850) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@caif=@util={0x25, "46a4b6411a4e403dcc47ede7db3dfb55"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0xff}], 0x1, &(0x7f00000001c0)=[{0xc, 0xff, 0x8}, {0x30, 0x1, 0xa5, "3a22219fbe3e3d51dc5db191febf22fabafad95e3389df84f302ff43162fbdda88"}], 0x3c}, 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300001030000000060db279c870749a04c1674cd15000000000100000814000ba0100017000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @private2, 0x4000a, 0x23}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xc, 0x84, 0x71}], 0xc}}], 0x2, 0x44055) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') sendfile(r4, r5, 0x0, 0x201f00) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902"], 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x19) 23.409365263s ago: executing program 4 (id=3871): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0x9375, 0x1, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r3, 0x0, 0x3, 0xb, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064"}, 0x96) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) shmget(0x2, 0x1000, 0x80, &(0x7f000014d000/0x1000)=nil) close(r2) execve(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'ip6gretap0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r2, 0x0, 0x0, 0x20004804, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffff7f00000800"], 0x0) 20.954517251s ago: executing program 2 (id=3874): socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0xe, 0x11, 0xff, @local, @private1, {[], "edac99e59c7b644049a480fdc35c"}}}}, 0x44) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x3, 0x4, {@in6_addr=@mcast2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 20.654699448s ago: executing program 5 (id=3875): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x6, 0x1) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x82802, 0x60) write$tcp_mem(r5, &(0x7f0000000740)={0xfffffffffffffff8, 0x20, 0x0, 0x20, 0xdc15}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x404290}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="49b293b093b172a7ddf83744b8fda4e3ea00348893333d5a3894b7f5a4f71b20b26d392fc2d6950d88644f15c12d0e0ffec4254df0b3738740ef0c6aa735b804c95d", @ANYRESHEX], 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000001600)=""/4093, 0xffd}, {&(0x7f0000000540)=""/249, 0xf9}], 0x6}, 0x20122) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 19.831571633s ago: executing program 4 (id=3876): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0xf) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x67) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x300f, 0xf95e, 0x0, 0x4, 0xfffffffa, 0x540a9fbc5b5b789b}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xe0000012}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x20048800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 16.649610264s ago: executing program 7 (id=3850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000100b02abd7000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003007465616d30000000000000000000000008000400d4000000300016802c0001"], 0x6c}, 0x1, 0x0, 0x0, 0x2a5ab9fefff63ca5}, 0x24000010) r1 = socket$inet6_udp(0xa, 0x2, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r8, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x184, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_TESTDATA={0xb8, 0x45, "c10260d1990ec13e6c63c536694676aac66ee4cc460d06a8a4990e22918e5a150fadd83149f495f2b630938ad283dfee8792c10e9a1de09218ea74ec5d0aec9fecb60356d8e27411a9cad5073ff3603b8eaf8267ace8843b6320fda3ce67e1977557e4941241f38a0b91e7159ffefc21e3f6fd50cd86e3dbcf22c85897c5e5d19338d49c10f79db26cb9b373366d2d87fd7d76ca092f3e5992e72c3f2881ae6220ccf5bfe3f1f929bb5162f486503c98f91276a7"}, @NL80211_ATTR_TESTDATA={0x88, 0x45, "22f49aa0de6a4817dd15f536e67a61a279a2d8615d5c62142922e12d5ac38df921f4df9738ab788b3894e60622c53bdff4cc06185f5d7909206699dee6e6a04141b7aad1a7447ea4ac7953734a192d531ba5ef6642acfeebd45ec95422c3482d94ef23ab9b31f1923835ec3de9fffc77535d55b95ba3805d86c4f3e9e688369213ddd1e1"}, @NL80211_ATTR_TESTDATA={0x1b, 0x45, "fc13e764cab6fe61c2722f76c24c74abed020965d770f4"}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x20000044) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) preadv2(r10, 0x0, 0x0, 0x10001, 0x6, 0x3) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r14 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000500)='X', 0x1, 0xfffffffffffffffe) r15 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r14, r15, r15}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$KVM_SET_CPUID(r13, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x4000ff00, 0x3e158d1e, 0x688, 0xfffffff8, 0x7}]}) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d4, 0x10c, 0x940c, 0x3002, 0x700, 0x2c0, 0x30c, 0x3d8, 0x3d8, 0x30c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x7fff, 0x7, 0x8001, '\x00', 'syz1\x00', {0x1ff}}}}, {{@uncond, 0x0, 0x198, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x10, 0x9, 0x0, 0x1, 'syz1\x00', 0xbd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x2, 0x4, 0x6, 'syz1\x00', 'syz1\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x430) sendto$inet6(r1, &(0x7f0000000000)="7e06", 0x2, 0x4895, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}, 0x1c) lseek(r1, 0x1, 0x4) 16.245460939s ago: executing program 5 (id=3878): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000111401060000000000000200080001000000000008004f000200000008004b"], 0x28}}, 0x0) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000003}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x14}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r11, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000980)=0x1) 16.186499014s ago: executing program 6 (id=3879): r0 = fsopen(&(0x7f0000001c80)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000001cc0)='noxattr', &(0x7f0000001d00)="a9", 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x60183, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8a, 0x0, &(0x7f0000000600)="e3ef7f6700001544940000000000000000000000040033a42c9550f5810011e0f0544b00aab0d153bf01de50151803c474719193461531001128afc5bb008000001c6f04aa6846a184d8f21d2eed60c9355bed06b10fadb3a923a73e05030000002d0f57b0041e37a64645ccd27f108a4ec2338e16fe123fb981532a0bd4b31bbcf191c2ceab6e7cfc58", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0xffffffffffffff9c) r4 = fsopen(&(0x7f0000000240)='ext2\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r5) ptrace(0x4208, r5) ptrace$peekuser(0x3, r5, 0x4) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xe, &(0x7f0000000780)=ANY=[@ANYRES64=r4], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000bc0)={{}, 0x1}) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') close(0x3) 15.711426032s ago: executing program 7 (id=3880): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(r4, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_GETMDB={0x18, 0x56, 0x5, 0x70bd2b, 0x25dfdbfb, {0x7, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt(r1, 0x7, 0x8, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f0000000300)="255cc1", 0x3, 0x40cd0, 0x0, 0x0) fanotify_init(0x200, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000\x00\x00\x00\x00\x00\x00\n\'00000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40020, &(0x7f0000000280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x2f947e0a0f4328e7}}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x5) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) 14.178016371s ago: executing program 2 (id=3881): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff, 0x8}, 0xc) lseek(r0, 0x7fff, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = getpid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000100001aeb9d4df0000000000fddbdf25ffffffff00ffffffff0000000000000700000000000000fffd0000002000bb84f832206b1adcdac3a76b84308c000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000100004d86c000000fe80000000000000000000000000001f0000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000f7ffffffffffffff000000000000"], 0x134}}, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x6acbc2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x2, 0x2, 0x1, 0x2}}, 0x26) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r6, 0x5501) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x240088c4) io_uring_setup(0x25b2, &(0x7f0000000040)={0x0, 0xef0c, 0x4000, 0x0, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0xc, r8, 0x0, 0x0, 0x5}]) kcmp(r2, r2, 0x4, r3, r1) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000140)=""/92, 0x5c}, {0x0}], 0x2, 0xa, 0x5) 12.96721246s ago: executing program 6 (id=3882): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000001680)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x800007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r3 = memfd_create(&(0x7f0000004480)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\xb9\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\x01\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00#\x00d\x1d\x06sNE4{\xdev\f\xbe\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xc1pI[\x1c\x00\x00\x00\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304a"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000000)={0xa, 0x100, 0x4, {0x80000004, 0x1, 0x2, 0x8800001}}) r8 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x3e, 0xd, 0x6, 0x5, "51dddb69"}, 0x400, 0x1, {0x0}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 10.094907375s ago: executing program 2 (id=3884): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="9e0000000000"], 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) syz_usb_connect(0x0, 0x2d, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x4, &(0x7f0000000040)=[{0xf0, 0x0, 0xfffffff4}, {0x6, 0x0, 0x7f}, {0x10, 0x0, 0xfe}, {0x4, 0x0, 0x9}]}, 0x1, 0x8, 0x7, 0x1, 0x0, 0x5e99, 0x100000000, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000180)={0x0}) r6 = openat$panthor(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f00000007c0)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x2, 0x508, 0x5, 0x4, 0x4, 0x4, 0xfffffffffffffffc, 0xe], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000004c0)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r2, 0xc0186449, &(0x7f0000000440)={r3, 0x0, {0x28, 0x5, &(0x7f0000000340)=[{0x7, 0xa8d04e80, 0xf68b885c7663b300, 0x21ea, 0x0, {0x10, 0x1, &(0x7f0000000100)=[{0x1, 0x0, 0xb092}]}}, {0xffffff3b, 0x843cc778, 0xcd75aba2ac7622c0, 0xa, 0x0, {0x10, 0x2, &(0x7f0000000140)=[{0x0, r4, 0x8001}, {0xff, 0x0, 0x4}]}}, {0x40, 0xeb7a4fa0, 0xaa6a6db95cb0bc00, 0x40000000, 0x0, {0x10, 0x1, &(0x7f00000001c0)=[{0x80000000, r5}]}}, {0x6, 0x106c8be8, 0xcfa8aefcea595780, 0x59, 0x0, {0x10, 0x4, &(0x7f0000000240)=[{0x80000000, 0x0, 0x200}, {0x0, r7, 0x5}, {0x1, 0x0, 0x400ff}, {0x80000000, r8, 0x273}]}}, {0x49, 0xc123e390, 0x4e18d690b30ebb80, 0x4, 0x0, {0x10, 0x4, &(0x7f0000000300)=[{0xff, 0x0, 0x40000000e}, {0x1, r9, 0x42}, {0x0, 0x0, 0x80000001}, {0xff, 0x0, 0x8000000000000001}]}}]}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r11, @ANYRESOCT=r0, @ANYRES32=r12], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x24008071) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 9.821387211s ago: executing program 6 (id=3885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000200)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2e, 0x639ad587beb9ea67, 0x70bd25, 0x25dfdbfc, {0xb}, [@typed={0xa, 0x2, 0x0, 0x0, @binary="7a25b390ad66"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) landlock_restrict_self(r3, 0x5) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='source', &(0x7f0000000300)='%\x13 |\xff\xe0\xfe(\r\xcc:\xa4\x10\xc5;\xed\xda%\x15\x00\x00', 0x0) r6 = userfaultfd(0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) close(0x3) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 8.458253295s ago: executing program 4 (id=3886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) r3 = io_uring_setup(0x1d0a, &(0x7f00000003c0)={0x0, 0x903, 0x80, 0x1, 0x36d}) fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@pppol2tpv3={0x1e, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x4048040) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$FIONREAD(r2, 0x541b, 0x0) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffed5) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) socket$inet(0x2, 0x800, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{0x0}], 0x1) 7.525635309s ago: executing program 6 (id=3887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, 0x0, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$tun(r7, &(0x7f00000003c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0xdc, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x0, 0x4, 0x0, 0x2, 0x50, 0x2}, @dstopts={0x33, 0xd, '\x00', [@hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x38, {0x0, 0xc, 0x2, 0xfff9, [0xff, 0x5, 0x4, 0x5, 0x7, 0x81]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x43, 0x668c, [0x8, 0xc, 0x6]}}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @hopopts={0x3b, 0x1, '\x00', [@pad1, @generic={0x3, 0x4, "135eb837"}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x104) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'gact\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) read(r4, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000440)={0x2, 0xfa}, 0x2) r8 = dup3(r3, r2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 5.685759184s ago: executing program 2 (id=3888): pipe(&(0x7f0000000180)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) modify_ldt$write(0x1, &(0x7f0000000240)={0x1000, 0x0, 0x2000}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x82000000) 5.649237099s ago: executing program 5 (id=3889): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x5, 0x3, 0x0, 0x0, 0x1, 0xc}, 0x2, {0x4, 0x45, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@arm64={0x10, 0xe4, 0xf2}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2d2ff7b8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001040)={0x14, 0x3, 0x1, 0xda2e794dc4f1d9f5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x800) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) setns(r8, 0x10000000) sendto$inet6(r4, &(0x7f0000000380)="e5", 0x1, 0x20000894, &(0x7f0000001380)={0xa, 0x4e22, 0xfffffffe, @mcast2}, 0x1c) 5.191686816s ago: executing program 6 (id=3890): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r2, &(0x7f00000000c0)=""/173, 0xad) close(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r4) 4.192604072s ago: executing program 7 (id=3891): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r2, &(0x7f00000000c0)=""/173, 0xad) close(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r5) 3.616759898s ago: executing program 4 (id=3892): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) capget(&(0x7f0000000040)={0x20071026}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r6, &(0x7f0000005140)={0x2020}, 0xfffffea2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 2.250733646s ago: executing program 6 (id=3893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000060a0104000000000000000002000000100004800800018008000100667764000900010073797a30000000003e00020079f573797a3200000000140000001100010000000000000000000100"], 0x64}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4", 0x1f) r6 = accept4$alg(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000002a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x801}], 0x1, 0x40002) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r7, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000) ioctl$PPPIOCSPASS(r3, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce, 0x0, 0x3ff}]}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[@ANYRES64=r8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000180)={0x10200, 0x5, 0x203000, 0x1000, &(0x7f0000002000/0x1000)=nil, 0x80}) 363.821972ms ago: executing program 7 (id=3894): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000111401060000000000000200080001000000000008004f000200000008004b"], 0x28}}, 0x0) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000003}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x14}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r11, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000980)=0x1) 361.506091ms ago: executing program 5 (id=3904): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xed9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000300)=0xfffffffe) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup2(0xffffffffffffffff, r6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x9d2, &(0x7f00000009c0)="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", &(0x7f0000000700)="77c1806bb972a2e3544a4d02a63881fb78155da49694bf5d8d33247327b9c31e71859348241be8ef265d456c1e2480e037c5d400d063010d7dee0768a680cf869c71a3b220578e7d68178d2784bc4e31ad78de15a5b25e7186a9464ede89aa13b0e88faf03a287aec5e9df566f71913ebe08482d235c5feef2aa6e06656aaeccdcb4b5a0fb5759203595088b7df4a9f4df3831900b9ccdceeb", 0x1000, 0x99}) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)='/vekiB(\x00\x00', 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 2 (id=3895): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc490) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x20008000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) sendto$inet6(r6, &(0x7f0000000380)="b382", 0x2, 0x20060000, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0xf4, 0x0, 0x7, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "d685ccf4c7a153bdf8ceed1cfb375128932876f0860dfdd61b90e936bbf8e3f74bf9475e71b40b0042a1384d0eae3fd310f0f98fd4d26a07a1396400b16b7c4c0533e8f6c8a1df8cb73c3ad49a73f14a55e127fb3931c64ad8bde2d4b5228d90ffdaacbfb522d20101407d5641dd63ca2b7ac72cd3aa8ba37538edb899a543f53eee0274629f51deebd132ff10cb2c8a297d480475bbeb79ee641882b61d7f4eaeec60cee966a4d929ec8218ad2ba1fb5f3f835501bba88a"}]}]}, 0xf4}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x800) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): scriptor of length 255, skipping remainder of the config [ 1956.577579][T20808] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1956.601473][T20808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1956.614085][T20808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.629328][T20808] usb 5-1: config 0 descriptor?? [ 1956.634986][T20804] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1956.674048][T20808] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1956.837098][T20804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1956.855788][T20804] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1956.884108][T20804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.897638][T20804] usb 3-1: Product: syz [ 1956.902257][T20804] usb 3-1: Manufacturer: syz [ 1956.908216][T20804] usb 3-1: SerialNumber: syz [ 1957.132274][T24332] IPv6: NLM_F_CREATE should be specified when creating new route [ 1957.157780][T24332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1957.165130][T24332] IPv6: NLM_F_CREATE should be set when creating new route [ 1957.172405][T24332] IPv6: NLM_F_CREATE should be set when creating new route [ 1957.179737][T24332] IPv6: NLM_F_CREATE should be set when creating new route [ 1957.215831][T24338] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1957.263259][T24336] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3530'. [ 1957.308844][T20804] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1957.510400][T20804] usb 3-1: USB disconnect, device number 111 [ 1957.626988][T22092] udevd[22092]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1959.047851][T20830] usb 5-1: USB disconnect, device number 122 [ 1959.182115][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3534'. [ 1959.222303][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3534'. [ 1959.233707][ T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1959.296723][T24359] netlink: 'syz.5.3534': attribute type 4 has an invalid length. [ 1959.426604][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1959.479588][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1959.491522][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.501212][ T24] usb 3-1: Product: syz [ 1959.508248][ T24] usb 3-1: Manufacturer: syz [ 1959.523207][ T24] usb 3-1: SerialNumber: syz [ 1959.540958][ T24] usb 3-1: config 0 descriptor?? [ 1959.705777][T20808] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1959.874460][T20808] usb 6-1: Using ep0 maxpacket: 16 [ 1959.901666][T20808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1959.949523][T20808] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1959.980334][T20808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.010225][T20808] usb 6-1: Product: syz [ 1960.023425][T20808] usb 6-1: Manufacturer: syz [ 1960.037519][T20808] usb 6-1: SerialNumber: syz [ 1960.075538][T24359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1961.265503][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1961.888517][ T24] usb 3-1: USB disconnect, device number 112 [ 1963.321524][T20808] usb 6-1: selecting invalid altsetting 1 [ 1963.393228][T20808] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1963.428531][T20808] usb 6-1: USB disconnect, device number 88 [ 1963.466552][T24173] udevd[24173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1964.078037][T24392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1964.358976][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 1964.579403][T24393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1966.063660][T20804] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1966.224157][T20804] usb 6-1: Using ep0 maxpacket: 8 [ 1966.236479][T20804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1966.249764][T20804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1966.273670][T20804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1966.289525][T20804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1966.344222][T20804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1966.360070][T20804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.618377][T20804] usb 6-1: GET_CAPABILITIES returned 0 [ 1966.624828][T20804] usbtmc 6-1:16.0: can't read capabilities [ 1966.902688][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1968.158568][ T30] audit: type=1800 audit(1779450342.562:1887): pid=24414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3544" name="bus" dev="ramfs" ino=125415 res=0 errno=0 [ 1968.907278][T20804] usb 6-1: USB disconnect, device number 89 [ 1969.375482][T24442] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5646] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[24442] [ 1969.424504][ T24] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1969.537073][T20804] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1969.654351][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1969.669788][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1969.683609][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1969.705288][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.731462][ T24] usb 5-1: config 0 descriptor?? [ 1969.737788][T20804] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1969.748058][T20804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.792115][T20804] usb 6-1: config 0 descriptor?? [ 1969.976744][T24441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.018695][T24441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.192244][ T24] ath6kl: Failed to submit usb control message: -71 [ 1970.202544][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 1970.213134][ T24] ath6kl: Unable to send get target info: -71 [ 1970.284062][ T24] ath6kl: Failed to init ath6kl core: -71 [ 1970.311091][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1970.378627][ T24] usb 5-1: USB disconnect, device number 123 [ 1971.710290][T24453] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3551'. [ 1972.514423][T24453] bond0 (unregistering): Released all slaves [ 1972.626176][T20804] usb 6-1: Cannot set autoneg [ 1972.633314][T20804] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1972.709855][T20804] usb 6-1: USB disconnect, device number 90 [ 1975.344265][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1975.355051][T14022] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1975.985476][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.991891][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.326172][T24509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1976.379831][T24509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1976.483714][T20808] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1976.661100][T20808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.684010][T20808] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1976.695413][T20808] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1976.708250][T20808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.726707][T20808] usb 6-1: config 0 descriptor?? [ 1976.743056][T20808] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1976.752335][T20808] dvb-usb: bulk message failed: -22 (3/0) [ 1976.803323][T20808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1976.837660][T20808] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1976.868174][T20808] usb 6-1: media controller created [ 1976.884398][T20808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1976.957911][T20808] dvb-usb: bulk message failed: -22 (6/0) [ 1976.978867][T20808] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1977.011730][T20808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69 [ 1977.079497][T20808] dvb-usb: schedule remote query interval to 150 msecs. [ 1977.101249][T20808] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1977.178539][T20808] usb 6-1: USB disconnect, device number 91 [ 1977.254176][T20808] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1977.416596][T24521] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1977.495022][T24524] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' already exists in 'ieee80211' [ 1978.371100][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3567'. [ 1978.465455][T20804] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1978.516823][T24533] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3567'. [ 1978.633823][T20804] usb 3-1: Using ep0 maxpacket: 8 [ 1978.641638][T20804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1978.654711][T20804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1978.672292][T20804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1978.693766][T20804] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1978.708629][T20804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.756871][T20804] usb 3-1: config 0 descriptor?? [ 1979.022605][T24530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.041881][T24542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3570'. [ 1979.068400][T24530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.416557][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x4 [ 1979.424425][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x6 [ 1979.431496][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x5 [ 1979.443669][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x0 [ 1979.451960][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x0 [ 1979.466326][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x0 [ 1979.480064][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x0 [ 1979.497030][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x0 [ 1979.531173][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x0 [ 1979.549621][T20804] elecom 0003:056E:00FE.009F: unknown main item tag 0x0 [ 1979.565612][T20804] elecom 0003:056E:00FE.009F: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.2-1/input0 [ 1980.034061][T20830] usb 3-1: USB disconnect, device number 113 [ 1980.546127][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 1981.776848][T24578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1982.028302][T24574] binder: 24563:24574 ioctl c0306201 800003c0 returned -14 [ 1983.436408][T24592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3579'. [ 1984.859095][T24606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1984.959375][T24615] syz_tun: Device is already in use. [ 1985.352969][T24606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.368132][T24606] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1985.900750][T24624] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1985.914951][T24624] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1986.003798][T24623] IPVS: stopping master sync thread 16785 ... [ 1986.232765][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'. [ 1986.624582][T24607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3580'. [ 1986.638345][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 1990.041084][T24661] ip6t_REJECT: ECHOREPLY is not supported [ 1990.175051][T24668] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1990.194019][T20830] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1990.365646][T20830] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1990.376460][T20830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.390930][T20830] usb 6-1: Product: syz [ 1990.395582][T20830] usb 6-1: Manufacturer: syz [ 1990.400525][T20830] usb 6-1: SerialNumber: syz [ 1990.483783][ T24] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1990.633901][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1990.668846][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1990.716180][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1990.751845][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.775986][ T24] usb 3-1: Product: syz [ 1990.781463][ T24] usb 3-1: Manufacturer: syz [ 1990.789427][ T24] usb 3-1: SerialNumber: syz [ 1990.829396][ T24] usb 3-1: config 0 descriptor?? [ 1990.868300][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1990.894082][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1991.525224][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1992.014463][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1992.038933][ T24] em28xx 3-1:0.0: board has no eeprom [ 1992.362824][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1992.624176][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1992.638631][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 1992.658791][T17499] em28xx 3-1:0.0: Binding DVB extension [ 1992.666107][T20830] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1992.703238][ T24] usb 3-1: USB disconnect, device number 114 [ 1992.720347][T20830] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1992.738519][T20830] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1992.751558][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 1992.781362][T20830] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1992.822928][T20830] usb 6-1: USB disconnect, device number 92 [ 1992.910651][T24682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1992.930163][T17499] em28xx 3-1:0.0: Registering input extension [ 1992.953987][ T24] em28xx 3-1:0.0: Closing input extension [ 1992.966569][T24686] bridge0: port 3(team0) entered blocking state [ 1992.999921][T24686] bridge0: port 3(team0) entered disabled state [ 1993.025117][ T24] em28xx 3-1:0.0: Freeing device [ 1993.033130][T24686] team0: entered allmulticast mode [ 1993.045082][T24686] team_slave_0: entered allmulticast mode [ 1993.051040][T24686] team_slave_1: entered allmulticast mode [ 1993.070954][T24686] team0: entered promiscuous mode [ 1993.077924][T24686] team_slave_0: entered promiscuous mode [ 1993.084012][T24686] team_slave_1: entered promiscuous mode [ 1993.123077][T24686] bridge0: port 3(team0) entered blocking state [ 1993.130835][T24686] bridge0: port 3(team0) entered forwarding state [ 1993.266064][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1995.552055][T24708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1995.559495][T24708] IPv6: NLM_F_CREATE should be set when creating new route [ 1995.566761][T24708] IPv6: NLM_F_CREATE should be set when creating new route [ 1995.895077][T24713] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1996.333887][T17499] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1996.506807][T17499] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1996.525118][T17499] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 0 [ 1996.538544][T17499] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1996.556974][T17499] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1996.575404][T17499] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1996.587619][T17499] usb 3-1: Product: syz [ 1996.593876][T17499] usb 3-1: Manufacturer: syz [ 1996.602427][T17499] usb 3-1: SerialNumber: syz [ 1996.615777][T17499] usb 3-1: config 0 descriptor?? [ 1996.641668][T17499] usb 3-1: selecting invalid altsetting 0 [ 1996.929767][T24720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1996.959523][T24720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.144861][T17499] usb 3-1: USB disconnect, device number 115 [ 1999.056449][T24755] xt_cgroup: invalid path, errno=-2 [ 1999.396464][T24747] input: syz0 as /devices/virtual/input/input71 [ 2000.562066][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3609'. [ 2000.691654][T24761] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 2000.942363][T24767] ip6t_REJECT: ECHOREPLY is not supported [ 2000.969670][T24767] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.3610'. [ 2000.984020][T17499] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2001.133908][T17499] usb 3-1: Using ep0 maxpacket: 8 [ 2001.141071][T17499] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2001.150646][T17499] usb 3-1: config 179 has no interface number 0 [ 2001.157304][T17499] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2001.171604][T17499] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2001.199353][T17499] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2001.213326][T17499] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2001.227844][T17499] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2001.270512][T17499] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2001.279813][T17499] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2001.291157][T17499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.341582][T17499] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input72 [ 2001.414812][ T4981] input input72: unable to receive magic message: -110 [ 2001.460346][ T4981] input input72: unable to receive magic message: -32 [ 2001.470940][ T4981] input input72: unable to receive magic message: -32 [ 2001.494866][ T4981] input input72: unable to receive magic message: -32 [ 2001.604586][ T4981] input input72: unable to receive magic message: -32 [ 2001.710787][T24759] input input72: unable to receive magic message: -32 [ 2002.162566][T20808] usb 3-1: USB disconnect, device number 116 [ 2002.162812][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2002.407877][T24775] xt_nat: multiple ranges no longer supported [ 2003.256921][T24787] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5643] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[24787] [ 2005.342813][T24802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3616'. [ 2005.531698][T24802] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2006.519767][T24801] ipvlan0: entered allmulticast mode [ 2006.570387][T24801] syz_tun: entered allmulticast mode [ 2006.692982][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 2006.704177][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 2007.345603][T14022] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2007.345742][ T3370] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2009.298737][T24836] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3622'. [ 2009.349129][T24838] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' already exists in 'ieee80211' [ 2011.643907][T20808] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2011.882741][T20808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2011.894833][T20808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2011.931306][T24866] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2011.950166][T20808] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2011.960667][T20808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.975257][T20808] usb 2-1: config 0 descriptor?? [ 2012.223223][T24859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.291372][T24859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.410083][T20808] ath6kl: Failed to submit usb control message: -71 [ 2012.410137][T20808] ath6kl: unable to send the bmi data to the device: -71 [ 2012.410154][T20808] ath6kl: Unable to send get target info: -71 [ 2012.414820][T20808] ath6kl: Failed to init ath6kl core: -71 [ 2012.416494][T20808] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2012.435864][T20808] usb 2-1: USB disconnect, device number 120 [ 2013.231323][T24883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3631'. [ 2013.303105][T24863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2013.326137][T24863] team0: Port device bond0 added [ 2013.331897][T24864] bridge0: port 1(team0) entered blocking state [ 2013.339090][T24864] bridge0: port 1(team0) entered disabled state [ 2013.364559][T24864] team0: entered allmulticast mode [ 2013.369994][T24864] team_slave_0: entered allmulticast mode [ 2013.377814][T24864] team_slave_1: entered allmulticast mode [ 2013.395691][T24864] bond0: entered allmulticast mode [ 2013.402774][T24864] gretap1: entered allmulticast mode [ 2013.471251][T24864] team0: left allmulticast mode [ 2013.477067][T24864] team_slave_0: left allmulticast mode [ 2013.484452][T24864] team_slave_1: left allmulticast mode [ 2013.491707][T24864] bond0: left allmulticast mode [ 2013.498859][T24864] gretap1: left allmulticast mode [ 2016.583887][T20808] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2016.743901][T20808] usb 6-1: Using ep0 maxpacket: 16 [ 2016.754265][T20808] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 2016.794963][T20808] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 2016.810408][T20808] usb 6-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 2016.822335][T20808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.831366][T20808] usb 6-1: Product: Ђ [ 2016.835953][T20808] usb 6-1: Manufacturer: 谗莃✵᥶㗗ë“좽訆屘ꥡ艌簆Დꮵ⸵ꉟ哮㡃㨠ë¹ã²»è’…墣웜Έ䤛䅗ìŠä’‘鞦է쒱阻쪛Ⅽæ„뼽៮ì’⺾췆ტ฀쉚箥䜆յꥣ≩烔哗䫿㣇â±ç‘˜ç©è ç¤²æ™â¯“é²æ°±ì‘šï´žâº¬ [ 2016.860731][T20808] usb 6-1: SerialNumber: syz [ 2017.587301][T20808] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 2017.709680][T20808] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2017.776592][T20808] usb 6-1: USB disconnect, device number 93 [ 2017.815391][T24173] udevd[24173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2018.409721][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3639'. [ 2019.114723][T17499] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2019.273679][T17499] usb 5-1: Using ep0 maxpacket: 32 [ 2019.286224][T17499] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2019.314352][T17499] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2019.346910][T17499] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2019.378299][T17499] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2019.442194][T17499] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2019.472991][T17499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.497235][T17499] usb 5-1: Product: syz [ 2019.519666][T17499] usb 5-1: Manufacturer: syz [ 2019.550042][T17499] usb 5-1: SerialNumber: syz [ 2019.588237][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2019.630803][T17499] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input73 [ 2019.836147][T17499] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2019.855232][T17499] (id 0x00) [ 2019.983754][T17499] rc_core: IR keymap rc-imon-pad not found [ 2020.001089][T17499] Registered IR keymap rc-empty [ 2020.012797][T17499] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2020.042173][T17499] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2020.093934][T24964] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2020.109026][T17499] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 2020.175151][T17499] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input74 [ 2020.247476][T17499] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:124> initialized [ 2020.283649][T24964] usb 6-1: Using ep0 maxpacket: 32 [ 2020.300602][T24964] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 2020.346338][T24964] usb 6-1: config 1 has no interface number 0 [ 2020.373692][T24964] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2020.430187][T24964] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 2020.476811][T24964] usb 6-1: config 1 interface 236 has no altsetting 0 [ 2020.505650][T24964] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 2020.536317][T24964] usb 6-1: config 1 has no interface number 0 [ 2020.551610][T24964] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2020.568342][T24964] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 2020.587712][T24964] usb 6-1: config 1 interface 236 has no altsetting 0 [ 2020.631414][T24964] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 2020.665722][T24964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.686863][T24964] usb 6-1: Product: syz [ 2020.696061][T24964] usb 6-1: Manufacturer: syz [ 2020.707181][T24964] usb 6-1: SerialNumber: syz [ 2020.731833][T24964] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected [ 2020.987094][T24969] usb 6-1: USB disconnect, device number 94 [ 2021.187605][T18644] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2021.208593][T18644] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.230549][T18644] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2021.252992][T18644] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.289066][T18644] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2021.310283][T18644] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.432731][T24957] usb 5-1: USB disconnect, device number 124 [ 2021.462087][T24986] SET target dimension over the limit! [ 2022.272500][T25000] netlink: 'syz.1.3644': attribute type 23 has an invalid length. [ 2022.305316][T24995] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3643'. [ 2022.323700][T24995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3643'. [ 2022.747181][T25010] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3644'. [ 2022.824012][T25010] veth0_to_bond: default FDB implementation only supports local addresses [ 2023.894431][T24979] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 2024.098844][T24979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.120561][T24979] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2024.138585][T25014] netlink: 580 bytes leftover after parsing attributes in process `syz.1.3647'. [ 2024.164538][T24979] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2024.178765][T24979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.191287][T24979] usb 3-1: Product: syz [ 2024.200559][T24979] usb 3-1: Manufacturer: syz [ 2024.208234][T24979] usb 3-1: SerialNumber: syz [ 2024.217305][T24979] usb 3-1: config 0 descriptor?? [ 2024.382853][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 2025.146933][T24962] usb 3-1: USB disconnect, device number 117 [ 2025.175688][T24957] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2025.345599][T24957] usb 5-1: Using ep0 maxpacket: 8 [ 2025.354511][T24957] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2025.374030][T24957] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2025.390468][T24957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2025.405971][T24957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2025.417594][T24957] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2025.438767][T24957] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2025.448369][T24957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.457084][T24957] usb 5-1: Product: syz [ 2025.461631][T24957] usb 5-1: Manufacturer: syz [ 2025.467117][T24957] usb 5-1: SerialNumber: syz [ 2025.487178][T24957] usb 5-1: config 0 descriptor?? [ 2025.709178][T25023] x_tables: ip6_tables: set.3 match: invalid size 48 (kernel) != (user) 32 [ 2025.793979][T20842] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2025.812196][T25027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3649'. [ 2025.899551][T25029] netlink: 'syz.4.3649': attribute type 21 has an invalid length. [ 2025.951253][T25029] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3649'. [ 2025.963947][T20842] usb 3-1: Using ep0 maxpacket: 8 [ 2025.981568][T20842] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2025.996096][T20842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2026.019038][T20842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2026.044080][T20842] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2026.073000][T24957] iowarrior 5-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 2026.094583][T20842] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2026.117547][T24957] usb 5-1: USB disconnect, device number 125 [ 2026.127008][T20842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.360431][T20842] usb 3-1: GET_CAPABILITIES returned 0 [ 2026.367402][T20842] usbtmc 3-1:16.0: can't read capabilities [ 2026.601524][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2026.634785][ T30] audit: type=1326 audit(1779450401.042:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.2.3651" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcf01c code=0x0 [ 2027.266238][T25051] kvm: Disabled LAPIC found during irq injection [ 2027.513819][T20842] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2027.678901][T20842] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2027.710779][T20842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2027.726609][T20842] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2027.738458][T20842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.768091][T20842] usb 6-1: config 0 descriptor?? [ 2028.007392][T25051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.076590][T25051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.097463][T20842] ath6kl: Failed to submit usb control message: -71 [ 2028.108640][T20842] ath6kl: unable to send the bmi data to the device: -71 [ 2028.120869][T20842] ath6kl: Unable to send get target info: -71 [ 2028.155900][T20842] ath6kl: Failed to init ath6kl core: -71 [ 2028.169177][T20842] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2028.225609][T20842] usb 6-1: USB disconnect, device number 95 [ 2028.371136][T24957] usb 3-1: USB disconnect, device number 118 [ 2028.492353][T25063] fuse: Bad value for 'fd' [ 2029.780631][T25075] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2029.880438][T25076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2030.034188][T25076] team0: Port device bond0 added [ 2033.176446][T25128] program syz.4.3667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2034.949719][T25138] kvm: Disabled LAPIC found during irq injection [ 2035.214205][T20842] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2035.365964][T20842] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2035.381780][T20842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2035.422527][T20842] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2035.449798][T20842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.507788][T20842] usb 3-1: config 0 descriptor?? [ 2035.723006][T25138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.734071][T25138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.754979][T20842] ath6kl: Failed to submit usb control message: -71 [ 2035.761797][T20842] ath6kl: unable to send the bmi data to the device: -71 [ 2035.772211][T20842] ath6kl: Unable to send get target info: -71 [ 2035.800857][T20842] ath6kl: Failed to init ath6kl core: -71 [ 2035.809333][T20842] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2035.862974][T20842] usb 3-1: USB disconnect, device number 119 [ 2036.064302][T24979] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2036.228238][T24979] usb 2-1: Using ep0 maxpacket: 8 [ 2036.240993][T24979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.283850][T24979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2036.307349][T24979] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2036.354616][T24979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2036.414450][T24979] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2036.434021][T24979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.442424][T24979] usb 2-1: Product: syz [ 2036.454946][T24979] usb 2-1: Manufacturer: syz [ 2036.464804][T24979] usb 2-1: SerialNumber: syz [ 2036.485098][T24979] usb 2-1: config 0 descriptor?? [ 2036.542662][T24979] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 2036.852356][T24979] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 2036.865962][T24979] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 2036.977224][T24979] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2037.236155][T25146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3671'. [ 2037.420604][T25143] bridge0: left promiscuous mode [ 2037.434694][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.448827][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.511793][T25143] dummy0: left allmulticast mode [ 2037.599593][T25143] wg1: left promiscuous mode [ 2037.639542][T25143] wg1: left allmulticast mode [ 2037.799215][T25143] veth0_to_team: left promiscuous mode [ 2037.909113][T25143] macvlan0: left promiscuous mode [ 2038.075316][T24957] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2038.125922][T25143] bridge14: left promiscuous mode [ 2038.172562][T25143] bridge14: left allmulticast mode [ 2038.207039][T25143] bridge15: left promiscuous mode [ 2038.238821][T25143] bridge15: left allmulticast mode [ 2038.287780][T25143] bridge16: left promiscuous mode [ 2038.337625][T25143] bridge16: left allmulticast mode [ 2038.402795][T25143] bridge17: left promiscuous mode [ 2038.451933][T25143] bridge17: left allmulticast mode [ 2038.473805][T24957] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2038.556862][T25143] bridge19: left promiscuous mode [ 2038.586971][T25143] bridge19: left allmulticast mode [ 2038.658937][T25143] bridge20: left promiscuous mode [ 2038.706720][T25143] bridge20: left allmulticast mode [ 2038.758390][T25143] vlan2: left allmulticast mode [ 2038.813089][T25143] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2038.911585][T25143] bridge21: left promiscuous mode [ 2038.929830][T25143] bridge21: left allmulticast mode [ 2038.973240][T25143] bridge22: left promiscuous mode [ 2039.058874][T25143] bridge22: left allmulticast mode [ 2039.077806][T25143] bridge23: left promiscuous mode [ 2039.103029][T25143] bridge23: left allmulticast mode [ 2039.149665][T25143] bridge24: left promiscuous mode [ 2039.164141][T25143] bridge24: left allmulticast mode [ 2039.208003][T25143] bridge26: left promiscuous mode [ 2039.215629][T25143] bridge26: left allmulticast mode [ 2039.245692][T25143] macsec1: left promiscuous mode [ 2039.257719][T25143] macsec1: left allmulticast mode [ 2039.264632][T25143] virt_wifi0: left allmulticast mode [ 2039.350526][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2039.362856][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2039.401424][T14022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.411607][T14022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2039.655200][T24002] usb 2-1: USB disconnect, device number 121 [ 2040.075166][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 2040.086962][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 2040.125090][T25196] netlink: 'syz.4.3679': attribute type 4 has an invalid length. [ 2040.374004][T24979] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2040.463942][T24002] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2040.544486][T24979] usb 2-1: Using ep0 maxpacket: 32 [ 2040.553950][T24979] usb 2-1: config 2 has an invalid interface number: 194 but max is 0 [ 2040.572433][T24979] usb 2-1: config 2 has no interface number 0 [ 2040.594698][T24979] usb 2-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 2040.615924][T24979] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 2040.638327][T24002] usb 5-1: Using ep0 maxpacket: 16 [ 2040.651453][T24002] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 2040.666830][T24979] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 2040.682248][T24979] usb 2-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 2040.698214][T24002] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2040.723670][T24979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.742460][T24002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.769406][T24002] usb 5-1: Product: syz [ 2040.779516][T24002] usb 5-1: Manufacturer: syz [ 2040.808467][T25194] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2040.825384][T24002] usb 5-1: SerialNumber: syz [ 2040.847189][T25197] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2040.870827][T25194] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2041.084126][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2041.246818][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2041.261939][ T9] usb 3-1: config 0 has no interface number 0 [ 2041.274841][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2041.286110][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.298557][ T9] usb 3-1: Product: syz [ 2041.311506][ T9] usb 3-1: Manufacturer: syz [ 2041.327919][ T9] usb 3-1: SerialNumber: syz [ 2041.350749][ T9] usb 3-1: config 0 descriptor?? [ 2041.611253][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2041.648939][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2041.671318][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2041.691055][ T9] usb 3-1: media controller created [ 2041.752612][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2041.851243][T24979] usb 2-1: string descriptor 0 read error: -71 [ 2041.881005][T24979] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2042.082269][T24979] usb 2-1: USB disconnect, device number 122 [ 2042.386528][T24957] usb 3-1: USB disconnect, device number 120 [ 2043.108964][T24002] usb 5-1: selecting invalid altsetting 1 [ 2043.223219][T24002] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2043.239947][T24002] usb 5-1: USB disconnect, device number 126 [ 2043.308464][T24173] udevd[24173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2043.627846][T25223] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 2043.885154][T25214] batadv_slave_1: entered promiscuous mode [ 2043.892327][T25214] batadv_slave_1: left promiscuous mode [ 2045.331959][T25234] IPVS: stopping master sync thread 16882 ... [ 2045.968207][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3686'. [ 2046.977367][T25245] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3688'. [ 2051.924196][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3705'. [ 2052.335022][T24979] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2052.409749][T25282] bridge0: port 3(team0) entered disabled state [ 2052.416929][T25282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.424611][T25282] bridge0: port 1() entered disabled state [ 2052.514253][T24979] usb 2-1: Using ep0 maxpacket: 32 [ 2052.521349][T24979] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.536053][T24979] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2052.576915][T24979] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2052.597561][T24979] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2052.672888][T24979] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2052.702598][T24979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.718891][T24979] usb 2-1: Product: syz [ 2052.731767][T24979] usb 2-1: Manufacturer: syz [ 2052.738990][T24979] usb 2-1: SerialNumber: syz [ 2052.758487][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2052.813019][T24979] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input75 [ 2053.114157][T24979] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2053.129875][T24979] (id 0x00) [ 2053.316501][T24979] rc_core: IR keymap rc-imon-pad not found [ 2053.363211][T24979] Registered IR keymap rc-empty [ 2053.378502][T24979] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2053.405126][T24979] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2053.464992][T24979] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 2053.491265][T24979] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input76 [ 2053.612469][T24979] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:123> initialized [ 2054.219201][T25282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2054.357677][T25282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2054.863859][T24980] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2055.033858][T24980] usb 6-1: Using ep0 maxpacket: 8 [ 2055.049600][T24980] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2055.065971][T24980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.084022][T24980] usb 6-1: Product: syz [ 2055.088361][T24980] usb 6-1: Manufacturer: syz [ 2055.093505][T24980] usb 6-1: SerialNumber: syz [ 2055.100865][T24980] usb 6-1: config 0 descriptor?? [ 2055.135981][T24980] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2055.845239][T24980] gspca_sonixj: reg_r err -110 [ 2055.850405][T24980] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 2055.950350][T25282] bridge18: port 2(veth5) entered disabled state [ 2055.958788][T25282] bridge18: port 1(veth3) entered disabled state [ 2056.624265][T20842] usb 2-1: USB disconnect, device number 123 [ 2056.777340][T25321] Cannot find add_set index 0 as target [ 2057.090892][T25299] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2057.236629][T25301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.291611][T25301] team0: Port device bond0 added [ 2057.318737][T25304] bridge0: port 1(team0) entered blocking state [ 2057.405267][T25304] bridge0: port 1(team0) entered disabled state [ 2057.451044][T25304] team0: entered allmulticast mode [ 2057.503376][T25304] vlan0: entered allmulticast mode [ 2057.527144][T25304] veth0_vlan: entered allmulticast mode [ 2057.540130][T25304] bond0: entered allmulticast mode [ 2057.776130][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.820033][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2058.022828][T24957] usb 6-1: USB disconnect, device number 96 [ 2058.848363][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2058.864011][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.356309][T20842] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2059.525741][T20842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.556303][T20842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2059.603673][T20842] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2059.615166][T20842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.645434][T25346] kAFS: unable to lookup cell '(,c¾Ì' [ 2059.651168][T20842] usb 4-1: Product: syz [ 2059.661100][T20842] usb 4-1: Manufacturer: syz [ 2059.672248][T20842] usb 4-1: SerialNumber: syz [ 2059.696776][T20842] usb 4-1: config 0 descriptor?? [ 2060.110116][T25352] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3703'. [ 2061.957912][T20842] usb 4-1: USB disconnect, device number 111 [ 2062.084533][T24962] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2062.243917][T24962] usb 5-1: Using ep0 maxpacket: 32 [ 2062.261332][T24962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.292712][T24962] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2062.306905][T24962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.324256][T24962] usb 5-1: Product: syz [ 2062.332352][T24962] usb 5-1: Manufacturer: syz [ 2062.340642][T24962] usb 5-1: SerialNumber: syz [ 2062.364663][T24962] usb 5-1: config 0 descriptor?? [ 2062.376658][T24962] usb 5-1: no audio or video endpoints found [ 2062.441595][T25362] bond1: option mode: unable to set because the bond device has slaves [ 2063.658977][T24962] usb 5-1: USB disconnect, device number 127 [ 2066.259432][T25406] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3715'. [ 2066.624162][ T9] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2066.637548][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 2066.804159][ T9] usb 6-1: device descriptor read/64, error -32 [ 2067.053763][ T9] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2067.243654][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 2067.304505][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.317080][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2068.032067][T25415] netlink: 'syz.2.3717': attribute type 4 has an invalid length. [ 2068.118565][T25421] netlink: 'syz.2.3717': attribute type 4 has an invalid length. [ 2070.724721][T25427] netem: change failed [ 2070.770577][ T9] usb 6-1: string descriptor 0 read error: -71 [ 2070.779518][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2070.801980][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.836537][ T9] usb 6-1: can't set config #1, error -71 [ 2070.845958][ T9] usb 6-1: USB disconnect, device number 98 [ 2071.344078][T25239] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2072.145995][T24002] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2072.376018][T24002] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2072.399072][T24002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.423639][T24002] usb 5-1: Product: syz [ 2072.468618][T24002] usb 5-1: Manufacturer: syz [ 2072.515810][T24002] usb 5-1: SerialNumber: syz [ 2072.530983][T24002] usb 5-1: config 0 descriptor?? [ 2073.588760][T24002] usb 5-1: Firmware version (0.0) predates our first public release. [ 2073.644125][T24002] usb 5-1: Please update to version 0.2 or newer [ 2075.134190][T20842] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2075.293657][T20842] usb 6-1: Using ep0 maxpacket: 32 [ 2075.322776][T20842] usb 6-1: config 2 has an invalid interface number: 194 but max is 0 [ 2075.336498][T20842] usb 6-1: config 2 has no interface number 0 [ 2075.353658][T20842] usb 6-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 2075.380561][T20842] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 2075.399079][T20842] usb 6-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 2075.417142][T20842] usb 6-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 2075.441352][T20842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.470836][T25464] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2075.532032][T25464] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2075.818509][T24962] usb 5-1: USB disconnect, device number 2 [ 2076.779259][T20842] usb 6-1: string descriptor 0 read error: -71 [ 2076.805801][T20842] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2077.048823][T20842] usb 6-1: USB disconnect, device number 99 [ 2078.359449][T24002] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2078.547759][T24002] usb 6-1: Using ep0 maxpacket: 8 [ 2078.576752][T24002] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.604404][T24002] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2078.618996][T24002] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2078.651033][T24002] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2078.676290][T24002] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2078.687310][T24002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.697413][T24002] usb 6-1: Product: syz [ 2078.704201][T24002] usb 6-1: Manufacturer: syz [ 2078.713052][T24002] usb 6-1: SerialNumber: syz [ 2078.724955][T24002] usb 6-1: config 0 descriptor?? [ 2078.747942][T24002] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 2078.985672][T25504] xt_nat: multiple ranges no longer supported [ 2079.042207][T24002] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 2079.060738][T24002] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 2079.079830][T24002] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2079.336221][T25488] gre0: left promiscuous mode [ 2079.480155][T25488] 8021q: adding VLAN 0 to HW filter on device team0 [ 2079.509209][T25488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2079.725860][T25488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2079.784843][T25488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2079.901226][T25488] veth1_vlan: left promiscuous mode [ 2079.970386][T25488] veth0_vlan: left promiscuous mode [ 2080.053035][T25488] veth0_vlan: entered promiscuous mode [ 2080.164041][T25488] veth1_vlan: entered promiscuous mode [ 2080.220951][T25488] veth1_macvtap: left promiscuous mode [ 2080.277340][T25488] veth0_macvtap: left promiscuous mode [ 2080.302755][T25488] veth0_macvtap: entered promiscuous mode [ 2080.346052][T25488] veth1_macvtap: entered promiscuous mode [ 2080.440153][T25488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2080.495057][T25488] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 2080.540645][T25488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2080.616675][T25488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2080.677057][T25488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2081.035215][T25488] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 2081.128815][T25488] bridge13: left promiscuous mode [ 2081.140210][T25488] bridge13: left allmulticast mode [ 2081.288704][T24980] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2081.397538][T14022] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.412094][T14022] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.428697][T24962] usb 6-1: USB disconnect, device number 100 [ 2081.476566][T14022] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.511586][T14022] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.559227][T14022] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.596353][T14022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.609846][T14022] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.625707][T14022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.332103][T25526] SET target dimension over the limit! [ 2083.456855][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 2083.568720][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 2083.611415][T24962] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2083.660602][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 2083.790385][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 2083.799478][T24962] usb 3-1: Using ep0 maxpacket: 32 [ 2083.821783][T24962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2083.855572][T24962] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2083.866547][T24962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.883652][T24962] usb 3-1: Product: syz [ 2083.889986][T24962] usb 3-1: Manufacturer: syz [ 2083.926735][T24962] usb 3-1: SerialNumber: syz [ 2083.942409][T24962] usb 3-1: config 0 descriptor?? [ 2083.956556][T24962] usb 3-1: no audio or video endpoints found [ 2084.201987][T14022] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2084.232635][T14022] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2084.375410][T14022] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2084.401229][T14022] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2086.238346][T24002] usb 3-1: USB disconnect, device number 121 [ 2086.925216][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 2087.025959][T25556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3743'. [ 2087.081619][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3743'. [ 2087.137378][T25561] trusted_key: encrypted_key: insufficient parameters specified [ 2088.416354][T25576] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 2088.442174][T25573] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2088.674433][T25583] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3747'. [ 2089.013969][T24962] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2089.023889][T20842] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2089.196888][T20842] usb 4-1: Using ep0 maxpacket: 8 [ 2089.210166][T24962] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 2089.224098][T24962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.234972][T20842] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2089.258350][T20842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2089.268574][T24962] usb 6-1: Product: syz [ 2089.272889][T24962] usb 6-1: Manufacturer: syz [ 2089.277715][T24962] usb 6-1: SerialNumber: syz [ 2089.282541][T20842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2089.297663][T24962] usb 6-1: config 0 descriptor?? [ 2089.318304][T20842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2089.351112][T24962] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 2089.380485][T20842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2089.436279][T20842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2089.453791][T20842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.779670][T20842] usb 4-1: GET_CAPABILITIES returned 0 [ 2089.794625][T25583] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 2089.812586][T20842] usbtmc 4-1:16.0: can't read capabilities [ 2089.878154][T24962] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input77 [ 2090.188133][T24962] usb 6-1: USB disconnect, device number 101 [ 2090.435193][T24002] usb 4-1: USB disconnect, device number 112 [ 2093.763513][T25623] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3752'. [ 2094.983915][T24962] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2095.146961][T24962] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2095.184892][T24962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2095.206901][T24962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2095.225889][T24962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2095.251906][T24962] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2095.271659][T24962] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2095.288295][T24962] usb 4-1: Manufacturer: syz [ 2095.305109][T24962] usb 4-1: config 0 descriptor?? [ 2095.752364][T24962] hid_parser_main: 27 callbacks suppressed [ 2095.752382][T24962] appleir 0003:05AC:8243.00A0: unknown main item tag 0x0 [ 2095.805572][T24962] appleir 0003:05AC:8243.00A0: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2096.398429][T25239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2096.415324][T25239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2096.467672][T25628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2096.674310][T25637] batadv_slave_1: entered promiscuous mode [ 2096.717108][T25637] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 2097.003585][T20842] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2097.013020][T25637] batadv_slave_1: left promiscuous mode [ 2097.083114][T24980] usb 4-1: USB disconnect, device number 113 [ 2097.183735][T20842] usb 2-1: Using ep0 maxpacket: 16 [ 2097.225695][T20842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.247116][T20842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2097.266322][T20842] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2097.283141][T20842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.312262][T20842] usb 2-1: config 0 descriptor?? [ 2097.868249][T25639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3758'. [ 2097.957017][T25624] [U]  [ 2098.006416][T20842] usbhid 2-1:0.0: can't add hid device: -32 [ 2098.019992][T20842] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 2098.042670][T20842] usb 2-1: USB disconnect, device number 124 [ 2098.865475][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.871909][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.524659][T20842] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2099.704433][T20842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.729100][T20842] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2099.766823][T20842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2099.780152][T20842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.803743][T20842] usb 3-1: Product: syz [ 2099.814929][T20842] usb 3-1: Manufacturer: syz [ 2099.822421][T20842] usb 3-1: SerialNumber: syz [ 2099.869644][T20842] cdc_mbim 3-1:1.0: skipping garbage [ 2100.090539][T25667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2100.812484][T25667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2100.860713][T20842] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 2100.902514][T20842] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 2100.919186][T20842] wwan wwan0: port wwan0mbim0 attached [ 2100.959327][T20842] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 32:27:76:c9:17:94 [ 2101.609287][ C0] wdm_int_callback: 1877 callbacks suppressed [ 2101.609390][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.622185][ C0] wdm_int_callback: 1877 callbacks suppressed [ 2101.622201][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.635109][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.641830][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.648299][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.655031][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.661451][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.668150][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.674839][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.681564][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.687946][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.694633][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.700961][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.707640][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.714171][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.720863][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.727252][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.733947][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.740307][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2101.746993][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2101.879745][T24980] usb 3-1: USB disconnect, device number 122 [ 2101.902452][T24980] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 2102.164447][T25667] team_slave_0: left promiscuous mode [ 2102.202445][T25667] team_slave_1: left promiscuous mode [ 2102.421522][T25667] wg1: left promiscuous mode [ 2102.443096][T25667] wg1: left allmulticast mode [ 2103.122343][T25667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2103.217622][T25667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2103.355531][T18644] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2103.497078][T25667] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 2103.516481][T25667] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 2103.857545][T25667] bridge17: left promiscuous mode [ 2103.906567][T25667] bridge17: left allmulticast mode [ 2103.928581][T25667] bridge18: port 2(veth5) entered disabled state [ 2103.935319][T25667] bridge18: port 1(veth3) entered disabled state [ 2103.994305][T25667] bridge19: left promiscuous mode [ 2104.002576][T25667] bridge19: left allmulticast mode [ 2104.011151][T25667] bridge20: left promiscuous mode [ 2104.017681][T25667] bridge20: left allmulticast mode [ 2104.033351][T25667] bridge21: left promiscuous mode [ 2104.046877][T25667] bridge21: left allmulticast mode [ 2104.096428][T25667] bridge22: left promiscuous mode [ 2104.107184][T25667] bridge22: left allmulticast mode [ 2104.119324][T25667] vlan2: left allmulticast mode [ 2104.126071][T25667] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2104.202226][T25667] bridge23: left promiscuous mode [ 2104.227193][T25667] bridge23: left allmulticast mode [ 2104.383133][T25667] bridge25: left promiscuous mode [ 2104.398282][T25667] bridge25: left allmulticast mode [ 2104.502745][T25667] hsr1: left promiscuous mode [ 2104.601517][T25667] gretap1: left promiscuous mode [ 2104.772187][T25667] bridge0: left promiscuous mode [ 2104.807757][T25667] bridge0: left allmulticast mode [ 2104.906931][T24980] wwan wwan0: port wwan0mbim0 disconnected [ 2105.010773][T25222] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.048133][T25222] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.387891][T25222] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.407564][T25222] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.476117][T20842] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 2105.638987][T20842] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2105.658621][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2105.701279][T20842] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2105.774886][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2105.807323][T25721] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3769'. [ 2105.825238][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2105.876692][T20842] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2105.907745][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2105.945182][T20842] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2105.985682][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2106.029705][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2106.068727][T20842] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2106.090009][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2106.114079][T20842] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2106.137565][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2106.179324][T25730] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2106.200630][T20842] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2106.277278][T20842] usb 3-1: string descriptor 0 read error: -22 [ 2106.296805][T20842] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2106.321168][T20842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.367750][T20842] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2108.973912][T24980] usb 3-1: USB disconnect, device number 123 [ 2109.813947][T24980] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2109.993743][T24980] usb 3-1: Using ep0 maxpacket: 16 [ 2110.001093][T24980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.017769][T24980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2110.057535][T24980] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2110.102989][T24980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.192192][T24980] usb 3-1: config 0 descriptor?? [ 2110.704138][T25752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3775'. [ 2110.819128][T25752] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3775'. [ 2110.869868][T25752] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3775'. [ 2110.894350][T24980] usbhid 3-1:0.0: can't add hid device: -32 [ 2110.901715][T24980] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2110.921100][T24980] usb 3-1: USB disconnect, device number 124 [ 2111.158499][ T30] audit: type=1326 audit(1779450485.562:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.233914][ T30] audit: type=1326 audit(1779450485.592:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.277373][ T30] audit: type=1326 audit(1779450485.592:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.317247][T25757] netlink: 'syz.4.3776': attribute type 4 has an invalid length. [ 2111.389350][ T30] audit: type=1326 audit(1779450485.592:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.415109][T25757] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3776'. [ 2111.437270][ T30] audit: type=1326 audit(1779450485.592:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.585356][ T30] audit: type=1326 audit(1779450485.592:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.694443][ T30] audit: type=1326 audit(1779450485.592:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.741633][ T30] audit: type=1326 audit(1779450485.592:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.819390][ T30] audit: type=1326 audit(1779450485.592:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2111.911689][ T30] audit: type=1326 audit(1779450485.592:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25754 comm="syz.4.3776" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2112.313082][T25773] input: syz0 as /devices/virtual/input/input78 [ 2115.524887][T25790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'. [ 2115.851554][T25796] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3784'. [ 2115.967401][T24980] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2116.260002][T24980] usb 3-1: Using ep0 maxpacket: 16 [ 2116.288530][T24980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.312972][T24980] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2116.536544][T25792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3782'. [ 2116.616160][T25792] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3782'. [ 2116.883990][T24002] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2117.077981][T24002] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.078066][T24002] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2117.078093][T24002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.101535][T24002] usb 5-1: config 0 descriptor?? [ 2117.145571][T24002] pwc: Askey VC010 type 2 USB webcam detected. [ 2117.829225][T24002] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2117.845292][T24002] pwc: recv_control_msg error -32 req 02 val 2700 [ 2117.862501][T24002] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2117.898847][T24002] pwc: recv_control_msg error -32 req 04 val 1000 [ 2117.921865][T24002] pwc: recv_control_msg error -32 req 04 val 1300 [ 2117.954128][T24002] pwc: recv_control_msg error -32 req 04 val 1400 [ 2117.993012][T24002] pwc: recv_control_msg error -32 req 02 val 2000 [ 2118.009191][T24002] pwc: recv_control_msg error -32 req 02 val 2100 [ 2118.019195][T24002] pwc: recv_control_msg error -32 req 04 val 1500 [ 2118.049952][T24002] pwc: recv_control_msg error -32 req 02 val 2500 [ 2118.086543][T24002] pwc: recv_control_msg error -32 req 02 val 2400 [ 2118.149941][T25811] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 2118.185431][T25811] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 2119.120057][T24002] pwc: recv_control_msg error -71 req 02 val 2900 [ 2119.160200][T24002] pwc: recv_control_msg error -71 req 02 val 2800 [ 2119.198320][T24002] pwc: recv_control_msg error -71 req 04 val 1100 [ 2119.214913][T24002] pwc: recv_control_msg error -71 req 04 val 1200 [ 2119.237571][T24002] pwc: Registered as video103. [ 2119.249322][T24002] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 2119.318999][T24002] usb 5-1: USB disconnect, device number 3 [ 2119.909568][T24980] usb 3-1: string descriptor 0 read error: -71 [ 2119.963693][T24980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2119.980592][T24980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.016773][T24980] usb 3-1: can't set config #1, error -71 [ 2120.058990][T24980] usb 3-1: USB disconnect, device number 125 [ 2120.431301][T25820] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3788'. [ 2120.697688][T25827] ip6t_REJECT: ECHOREPLY is not supported [ 2121.079344][T25829] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.3790'. [ 2124.453594][T20842] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2124.610120][T20842] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2124.624582][T20842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2124.641083][T20842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2124.672130][T20842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2124.705536][T20842] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2124.721144][T20842] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2124.743903][T20842] usb 6-1: Manufacturer: syz [ 2124.786239][T20842] usb 6-1: config 0 descriptor?? [ 2125.316293][T20842] appleir 0003:05AC:8243.00A1: unknown main item tag 0x0 [ 2125.350456][T20842] appleir 0003:05AC:8243.00A1: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 2125.765476][T25846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2125.803813][T25846] netlink: 'syz.5.3793': attribute type 12 has an invalid length. [ 2126.773738][T20842] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2126.990639][T20842] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2127.002529][T20842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.018186][T20842] usb 2-1: config 0 has no interface number 0 [ 2127.026603][T20842] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2127.098485][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2127.098504][ T30] audit: type=1326 audit(1779450501.502:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.192357][ T30] audit: type=1326 audit(1779450501.542:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.256031][T20842] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2127.269995][T20842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.291553][T20842] usb 2-1: Product: syz [ 2127.300002][ T30] audit: type=1326 audit(1779450501.552:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.360256][T24962] usb 6-1: USB disconnect, device number 102 [ 2127.369642][T20842] usb 2-1: Manufacturer: syz [ 2127.376054][ T30] audit: type=1326 audit(1779450501.552:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.404196][T20842] usb 2-1: SerialNumber: syz [ 2127.478118][T20842] usb 2-1: config 0 descriptor?? [ 2127.528959][ T30] audit: type=1326 audit(1779450501.552:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.639808][ T30] audit: type=1326 audit(1779450501.562:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.641067][T20842] yurex 2-1:0.50: Could not find endpoints [ 2127.726404][ T30] audit: type=1326 audit(1779450501.732:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.764527][ T30] audit: type=1326 audit(1779450501.732:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.813396][ T30] audit: type=1326 audit(1779450501.752:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2127.870579][ T30] audit: type=1326 audit(1779450501.752:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25853 comm="syz.4.3795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2128.317629][T25857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3795'. [ 2129.515332][T25867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2130.721562][T20842] usb 2-1: USB disconnect, device number 125 [ 2132.292664][T21630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2132.313374][T21630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2132.334621][T21630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2132.347853][T21630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2132.360306][T21630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2133.416043][T25901] bridge0: port 1(bridge_slave_0) entered blocking state [ 2133.451309][T25901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2133.479453][T25901] bridge_slave_0: entered allmulticast mode [ 2133.510149][T25901] bridge_slave_0: entered promiscuous mode [ 2133.537524][T25918] netlink: 'syz.5.3804': attribute type 4 has an invalid length. [ 2133.555797][T25901] bridge0: port 2(bridge_slave_1) entered blocking state [ 2133.575486][T25901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2133.592126][T25901] bridge_slave_1: entered allmulticast mode [ 2133.621685][T25901] bridge_slave_1: entered promiscuous mode [ 2133.863849][T25901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2133.892906][T25901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2133.944851][T25901] team0: Port device team_slave_0 added [ 2133.952729][T25901] team0: Port device team_slave_1 added [ 2133.963967][T24962] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2134.125709][T24962] usb 6-1: Using ep0 maxpacket: 16 [ 2134.160174][T24962] usb 6-1: config 0 has no interfaces? [ 2134.212595][T24962] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2134.254801][T24962] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2134.268256][T25901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2134.283158][T24962] usb 6-1: Manufacturer: syz [ 2134.309010][T25901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2134.349355][T24962] usb 6-1: config 0 descriptor?? [ 2134.435646][T25901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2134.463901][ T5633] Bluetooth: hci5: command tx timeout [ 2134.521927][T25901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2134.552729][T25901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2134.598095][T25901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2134.824592][T25901] hsr_slave_0: entered promiscuous mode [ 2134.843204][T25901] hsr_slave_1: entered promiscuous mode [ 2134.866213][T25901] debugfs: 'hsr0' already exists in 'hsr' [ 2134.884914][T25901] Cannot create hsr debugfs directory [ 2136.059203][T25923] misc userio: Invalid payload size [ 2136.091929][T25923] misc userio: No port type given on /dev/userio [ 2136.158919][T25901] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2136.201124][T25923] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 2136.201124][T25923] program syz.4.3805 not setting count and/or reply_len properly [ 2136.258994][T25924] IPv6: NLM_F_CREATE should be specified when creating new route [ 2136.378284][T25901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2136.397805][T25901] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2136.436876][T25901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2136.446065][T25901] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2136.457902][T25901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2136.468426][T25901] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2136.487547][T25901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2136.530379][T25923] misc userio: The device must be registered before sending interrupts [ 2136.545487][ T5633] Bluetooth: hci5: command tx timeout [ 2136.709530][T25901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2136.785258][T25901] 8021q: adding VLAN 0 to HW filter on device team0 [ 2136.837136][T14022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2136.844386][T14022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2136.925142][T18920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2136.932450][T18920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2137.239243][T25901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2137.319400][T25901] veth0_vlan: entered promiscuous mode [ 2137.360086][T25901] veth1_vlan: entered promiscuous mode [ 2137.499877][T25901] veth0_macvtap: entered promiscuous mode [ 2137.554878][T25901] veth1_macvtap: entered promiscuous mode [ 2137.622127][T25901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2137.689907][T25901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2137.791621][T25241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.820319][T25241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.879013][T25241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.902512][T25241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.283899][T25935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3807'. [ 2138.360089][T24962] usb 6-1: USB disconnect, device number 103 [ 2138.561822][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2138.596573][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2138.627740][ T5633] Bluetooth: hci5: command tx timeout [ 2138.801398][T25222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2138.833959][T25222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2139.084195][T24962] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2139.305890][T24962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.319190][T24962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2139.329095][T24962] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 2139.339696][T24962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.365609][T24962] usb 3-1: config 0 descriptor?? [ 2140.082004][T25934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.129391][T25934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.318486][T24962] cypress 0003:04B4:07B1.00A2: unknown main item tag 0x0 [ 2140.343514][T24962] cypress 0003:04B4:07B1.00A2: item fetching failed at offset 6/41 [ 2140.361161][T24962] cypress 0003:04B4:07B1.00A2: parse failed [ 2140.375973][T24962] cypress 0003:04B4:07B1.00A2: probe with driver cypress failed with error -22 [ 2140.704271][ T5633] Bluetooth: hci5: command tx timeout [ 2141.845529][T24979] usb 3-1: USB disconnect, device number 126 [ 2142.008435][T25941] fuse: Unknown parameter '0x000000000000000a' [ 2142.510961][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2142.510980][ T30] audit: type=1326 audit(1779450516.912:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2142.621221][ T30] audit: type=1326 audit(1779450516.972:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2142.747798][ T30] audit: type=1326 audit(1779450516.982:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2142.829327][ T30] audit: type=1326 audit(1779450516.992:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2142.939643][ T30] audit: type=1326 audit(1779450516.992:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2143.082429][ T30] audit: type=1326 audit(1779450516.992:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2143.217745][ T30] audit: type=1326 audit(1779450516.992:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2143.413146][ T30] audit: type=1326 audit(1779450517.012:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2144.380757][ T30] audit: type=1326 audit(1779450518.782:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2144.489188][ T30] audit: type=1326 audit(1779450518.782:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25961 comm="syz.4.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 2145.297628][T25972] bond1: (slave lo): Releasing backup interface [ 2145.311992][T25972] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2145.449734][T25972] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2147.530021][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2147.530042][ T30] audit: type=1326 audit(1779450521.902:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2147.703058][ T30] audit: type=1326 audit(1779450522.092:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2147.786431][ T30] audit: type=1326 audit(1779450522.172:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2148.112439][ T30] audit: type=1326 audit(1779450522.512:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2148.184769][ T30] audit: type=1326 audit(1779450522.542:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2148.322871][ T30] audit: type=1326 audit(1779450522.542:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2148.440064][ T30] audit: type=1326 audit(1779450522.842:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2148.542200][ T30] audit: type=1326 audit(1779450522.872:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2148.902894][ T30] audit: type=1326 audit(1779450523.222:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.3815" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 2150.653023][T26020] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2153.506766][ T30] audit: type=1326 audit(1779450527.902:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.2.3822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcf01c code=0x0 [ 2154.364487][ T30] audit: type=1326 audit(1779450528.762:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26036 comm="syz.4.3823" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7fc00000 [ 2154.994106][T24979] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2155.202523][T24979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.253176][T24979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2155.283563][T20842] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2155.284815][T24979] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2155.357865][T24979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.421447][T24979] usb 2-1: config 0 descriptor?? [ 2155.473783][T20842] usb 3-1: Using ep0 maxpacket: 16 [ 2155.513161][T20842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.559232][T26065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3827'. [ 2155.579122][T20842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2155.714360][T20842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2155.820409][T20842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2155.895213][T20842] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2155.981146][T20842] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2156.097684][T20842] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2156.142575][T20842] usb 3-1: Manufacturer: syz [ 2156.248299][T20842] usb 3-1: config 0 descriptor?? [ 2156.282392][T24979] Bluetooth: Can't get state to change to load ram patch err [ 2156.342688][T24979] Bluetooth: Loading patch file failed [ 2156.372483][T24979] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 2156.442839][T24979] usb 2-1: USB disconnect, device number 126 [ 2156.836469][T20842] rc_core: IR keymap rc-hauppauge not found [ 2156.871016][T20842] Registered IR keymap rc-empty [ 2156.905711][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2156.953566][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2156.991517][T20842] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2157.018017][T20842] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input80 [ 2157.123342][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.144208][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.172095][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.183798][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.207513][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.224212][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.243591][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.272405][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.285315][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.303963][T20842] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2157.336761][T20842] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2157.336801][T20842] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2158.062699][ T5633] Bluetooth: hci5: connection err: -111 [ 2158.597828][T24957] usb 3-1: USB disconnect, device number 127 [ 2158.925841][T20842] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 2159.104229][T20842] usb 2-1: too many endpoints for config 0 interface 0 altsetting 248: 255, using maximum allowed: 30 [ 2159.125544][T20842] usb 2-1: config 0 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2159.156381][T20842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2159.189320][T20842] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 2159.222702][T20842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.268605][T20842] usb 2-1: config 0 descriptor?? [ 2159.477032][T26073] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2159.525953][T26073] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2160.145964][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.170012][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.200194][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.225861][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.243009][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.265184][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.286866][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.314081][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.322224][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.330741][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.344631][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.357614][T20842] cherry 0003:046A:0027.00A3: unknown main item tag 0x0 [ 2160.367769][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3832'. [ 2160.393526][T20842] cherry 0003:046A:0027.00A3: hidraw0: USB HID v0.0a Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 2160.692282][ T30] audit: type=1326 audit(1779450535.092:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26071 comm="syz.5.3828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf700f01c code=0x0 [ 2160.847740][T26089] QAT: Device 0 not found [ 2160.963568][T20842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2161.080126][T24969] usb 2-1: USB disconnect, device number 127 [ 2161.133906][T20842] usb 5-1: Using ep0 maxpacket: 16 [ 2161.160578][T20842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2161.182835][T20842] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2161.241403][T26091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3832'. [ 2161.261520][T26091] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3832'. [ 2164.386552][T20842] usb 5-1: string descriptor 0 read error: -71 [ 2164.400592][T20842] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2164.413212][T20842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.440370][T20842] usb 5-1: can't set config #1, error -71 [ 2164.459420][T20842] usb 5-1: USB disconnect, device number 4 [ 2165.124229][T20842] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2165.375033][T20842] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2165.392348][T20842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.422623][T20842] usb 5-1: config 0 has no interface number 0 [ 2165.436963][T20842] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2165.535774][T20842] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2165.551181][T20842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.565083][T20842] usb 5-1: Product: syz [ 2165.571334][T20842] usb 5-1: Manufacturer: syz [ 2165.579039][T20842] usb 5-1: SerialNumber: syz [ 2165.593686][T20842] usb 5-1: config 0 descriptor?? [ 2165.626050][T20842] yurex 5-1:0.50: Could not find endpoints [ 2165.638489][ T30] audit: type=1326 audit(1779450540.032:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26117 comm="syz.2.3837" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x7fc00000 [ 2166.803922][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2166.997741][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2167.049831][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2167.110309][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2167.179214][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2167.293881][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2167.380747][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2167.457176][ T9] usb 3-1: Manufacturer: syz [ 2167.512815][ T9] usb 3-1: config 0 descriptor?? [ 2168.058099][ T9] hid_parser_main: 30 callbacks suppressed [ 2168.058128][ T9] appleir 0003:05AC:8243.00A4: unknown main item tag 0x0 [ 2168.135712][ T9] appleir 0003:05AC:8243.00A4: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 2168.855596][T26134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2168.936615][T26136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2169.187498][T26134] netlink: 'syz.2.3839': attribute type 12 has an invalid length. [ 2169.423967][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3840'. [ 2169.439949][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3840'. [ 2169.456546][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3840'. [ 2169.783622][T24957] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 2170.023508][T24957] usb 3-1: device descriptor read/64, error -32 [ 2170.303617][T24957] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 2170.473585][T24957] usb 3-1: device descriptor read/64, error -32 [ 2170.753655][T24957] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 2170.794198][T24957] usb 3-1: device descriptor read/8, error -32 [ 2171.048628][T24979] usb 5-1: USB disconnect, device number 5 [ 2171.064000][T24957] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 2171.084318][T26128] raw-gadget.1 gadget.2: failed to queue suspend event [ 2171.239156][T26128] raw-gadget.1 gadget.2: failed to queue disconnect event [ 2171.325581][T24957] usb 3-1: device not accepting address 2, error -71 [ 2171.387381][T20842] usb 3-1: USB disconnect, device number 2 [ 2171.893918][T24979] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2172.061057][T24979] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2172.099142][T24979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.122077][T24979] usb 5-1: config 0 descriptor?? [ 2172.150137][T24979] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2172.600171][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.642229][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.663856][T24979] gspca_sunplus: reg_w_riv err -110 [ 2172.681441][T24979] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 2172.702845][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.766768][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.854262][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.915781][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.954100][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.973468][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2172.999977][ T9] hid-generic 0006:0008:0001.00A5: unknown main item tag 0x0 [ 2173.059413][ T9] hid-generic 0006:0008:0001.00A5: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2173.549087][T26163] fido_id[26163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2173.741827][T26144] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 2173.865942][T26144] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 2173.970747][T24979] usb 5-1: USB disconnect, device number 6 [ 2175.402797][T26172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2175.546605][T26172] bridge28: entered promiscuous mode [ 2175.589704][T26172] bridge28: entered allmulticast mode [ 2175.710891][T26172] team0: Port device bridge28 added [ 2175.734815][T26175] bridge0: port 1(team0) entered blocking state [ 2175.766630][T26175] bridge0: port 1(team0) entered disabled state [ 2175.774923][T26175] team0: entered allmulticast mode [ 2175.791880][T26175] team_slave_0: entered allmulticast mode [ 2175.799486][T26175] team_slave_1: entered allmulticast mode [ 2175.907381][T26175] bond0: entered allmulticast mode [ 2175.960612][T26175] gretap1: entered allmulticast mode [ 2176.131837][T26175] team0: left allmulticast mode [ 2176.195308][T26175] team_slave_0: left allmulticast mode [ 2176.270092][T26175] team_slave_1: left allmulticast mode [ 2176.276749][T26175] bond0: left allmulticast mode [ 2176.327750][T26175] gretap1: left allmulticast mode [ 2177.405505][T21630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2177.419569][T21630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2177.429971][T21630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2177.444794][T26191] netlink: 'syz.6.3851': attribute type 7 has an invalid length. [ 2177.446686][T21630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2177.471836][T21630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2177.636015][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2177.645586][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2177.655838][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2177.711470][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2177.723809][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2179.825218][T21630] Bluetooth: hci6: command tx timeout [ 2181.388757][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3852'. [ 2181.903687][T21630] Bluetooth: hci6: command tx timeout [ 2183.993720][T21630] Bluetooth: hci6: command tx timeout [ 2186.063999][T21630] Bluetooth: hci6: command tx timeout [ 2187.322661][T26200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.333653][T26200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2187.403307][T26200] bridge_slave_0: entered allmulticast mode [ 2187.474072][T26200] bridge_slave_0: entered promiscuous mode [ 2187.498141][T26238] bond0: option mode: unable to set because the bond device is up [ 2187.562716][T26239] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2187.576449][T26239] bond0: (slave lo): refused to change device type [ 2187.610965][T26239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2188.185547][T26200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2188.222638][T26200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.272055][T26200] bridge_slave_1: entered allmulticast mode [ 2188.298273][T26200] bridge_slave_1: entered promiscuous mode [ 2188.443125][T26200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2188.486646][T26200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2188.673010][T26200] team0: Port device team_slave_0 added [ 2188.702078][T26200] team0: Port device team_slave_1 added [ 2188.872313][T26200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2188.897769][T26200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2188.980216][T26200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2189.153216][T26259] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 2189.160356][T26259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2189.190616][T26259] vhci_hcd vhci_hcd.0: Device attached [ 2189.233963][T24979] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2189.310905][T26200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2189.322467][T26200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2189.393680][T24979] usb 5-1: Using ep0 maxpacket: 8 [ 2189.406983][T24979] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 2189.411089][T26200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2189.434198][T24980] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 2189.458642][T24979] usb 5-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2189.475956][T24979] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2189.485116][T24979] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 2189.495063][T24979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.508164][T24979] usb 5-1: Product: syz [ 2189.512452][T24979] usb 5-1: Manufacturer: syz [ 2189.518180][T24979] usb 5-1: SerialNumber: syz [ 2189.593234][T26200] hsr_slave_0: entered promiscuous mode [ 2189.600771][T26200] hsr_slave_1: entered promiscuous mode [ 2189.607988][T26200] debugfs: 'hsr0' already exists in 'hsr' [ 2189.616750][T26200] Cannot create hsr debugfs directory [ 2189.852796][T24979] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input81 [ 2189.873927][ T4981] bcm5974 5-1:1.0: could not read from device [ 2189.883336][T26266] vhci_hcd: connection reset by peer [ 2189.917743][T25915] vhci_hcd vhci_hcd.4: stop threads [ 2189.935248][T25915] vhci_hcd vhci_hcd.4: release socket [ 2189.965182][T25915] vhci_hcd vhci_hcd.4: disconnect device [ 2190.121178][T24979] usb 5-1: USB disconnect, device number 7 [ 2190.134403][ T4981] bcm5974 5-1:1.0: could not read from device [ 2190.480573][T26241] udevd[26241]: Error opening device "/dev/input/event4": No such file or directory [ 2190.502660][T26241] udevd[26241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2190.527361][T26241] udevd[26241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2190.555565][T26241] udevd[26241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2190.576571][T26241] udevd[26241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2190.744429][T26200] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2190.759397][T26200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2190.769528][T26200] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2190.835239][T26200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2190.847346][T26200] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2191.190672][T26200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2191.212972][T26200] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2191.729182][T26200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2191.743956][T24979] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2191.946007][T26291] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2192.252409][T24979] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2192.406516][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.422832][T24979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.498795][T26292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2192.634946][T26200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2192.657358][T26200] 8021q: adding VLAN 0 to HW filter on device team0 [ 2192.683150][T24979] usb 3-1: Product: syz [ 2192.698640][T25222] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.705858][T25222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2192.751868][T25222] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.759093][T25222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2192.907161][T26200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2192.977864][T24979] usb 3-1: Manufacturer: syz [ 2193.004358][T24979] usb 3-1: SerialNumber: syz [ 2193.458041][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2193.768309][T24979] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2193.820473][ T48] bond0: (slave netdevsim1): Releasing backup interface [ 2193.856057][T24979] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2193.902525][T24979] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2193.959428][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2193.975485][T24979] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2194.112590][T24979] usb 3-1: USB disconnect, device number 3 [ 2194.181987][T26200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2194.472332][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.534450][T24980] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2194.611283][T26200] veth0_vlan: entered promiscuous mode [ 2194.644647][T26200] veth1_vlan: entered promiscuous mode [ 2195.023030][T26200] veth0_macvtap: entered promiscuous mode [ 2195.042644][T26200] veth1_macvtap: entered promiscuous mode [ 2195.074760][T26200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2195.095055][T26200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2195.178116][T18920] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.200134][T26300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3867'. [ 2195.238937][T18920] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.280885][T18920] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.559834][T18920] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.185248][ T48] bridge_slave_1: left allmulticast mode [ 2196.191065][ T48] bridge_slave_1: left promiscuous mode [ 2196.203007][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.247879][ T48] : left allmulticast mode [ 2196.281188][ T48] : left promiscuous mode [ 2196.311187][ T48] bridge0: port 1() entered disabled state [ 2197.090013][ T48] veth5: left allmulticast mode [ 2197.107261][ T48] veth5: left promiscuous mode [ 2197.139345][ T48] bridge21: port 2(veth5) entered disabled state [ 2197.210601][ T48] veth3: left allmulticast mode [ 2197.220185][ T48] veth3: left promiscuous mode [ 2197.238898][ T48] bridge21: port 1(veth3) entered disabled state [ 2199.553874][T20842] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2199.703765][T20842] usb 5-1: Using ep0 maxpacket: 8 [ 2199.722666][T20842] usb 5-1: config 0 has no interfaces? [ 2199.732016][T20842] usb 5-1: config 0 has no interfaces? [ 2199.778944][T20842] usb 5-1: config 0 has no interfaces? [ 2199.817503][T20842] usb 5-1: config 0 has no interfaces? [ 2199.852819][T20842] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2199.870445][T20842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.939233][T20842] usb 5-1: config 0 descriptor?? [ 2200.189442][ T48] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2201.495442][T24979] usb 5-1: USB disconnect, device number 8 [ 2202.963216][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2203.049915][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2203.091995][ T48] bond0 (unregistering): Released all slaves [ 2203.213967][ T48] bond1 (unregistering): Released all slaves [ 2203.309203][ T48] bond2 (unregistering): Released all slaves [ 2203.363905][ T48] bond3 (unregistering): (slave lo): Releasing backup interface [ 2203.393242][ T48] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2203.422947][ T48] bond3 (unregistering): Released all slaves [ 2203.905610][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2204.359090][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3874'. [ 2205.503263][T26106] .`: (slave syz_tun): Releasing backup interface [ 2206.608608][T25222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2206.640968][ T48] : left promiscuous mode [ 2206.653586][T25222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2207.083094][ T48] tipc: Disabling bearer [ 2207.110806][ T48] tipc: Left network mode [ 2207.469453][T25222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2207.548265][T25222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2207.668253][ T48] IPVS: stopping master sync thread 16606 ... [ 2208.578886][T26390] team0: entered promiscuous mode [ 2208.601481][T26390] team_slave_0: entered promiscuous mode [ 2208.658648][T26390] team_slave_1: entered promiscuous mode [ 2208.714544][T26390] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3850'. [ 2208.753651][T26390] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2208.864905][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2210.942949][ T30] audit: type=1326 audit(1779450585.342:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26393 comm="syz.6.3879" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf704f01c code=0x0 [ 2210.998187][T26417] QAT: Device 0 not found [ 2211.243225][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2211.631358][T26424] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3881'. [ 2211.888553][T26424] input: syz1 as /devices/virtual/input/input82 [ 2212.249231][T26438] ip6t_REJECT: ECHOREPLY is not supported [ 2213.441919][ T5291] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2215.179167][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2215.204728][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2215.343216][ T48] veth1_macvtap: left promiscuous mode [ 2215.399377][ T48] veth0_macvtap: left promiscuous mode [ 2215.519186][T26471] kAFS: unable to lookup cell 'ÿ' [ 2215.539788][T26471] kAFS: unable to lookup cell ' |ÿàþ(Ì' [ 2215.857577][ T48] pim6reg (unregistering): left allmulticast mode [ 2216.759739][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2217.069109][T26469] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3884'. [ 2217.084124][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2217.973809][T26486] misc userio: Invalid payload size [ 2217.995578][T26486] misc userio: No port type given on /dev/userio [ 2218.038091][T26486] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 2218.038091][T26486] program syz.6.3887 not setting count and/or reply_len properly [ 2218.299873][T26489] IPv6: NLM_F_CREATE should be specified when creating new route [ 2218.462546][T26486] misc userio: The device must be registered before sending interrupts [ 2220.228143][ T48] IPVS: stop unused estimator thread 0... [ 2221.723266][T18644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2221.746844][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.783810][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.746722][T18644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2223.131422][T26519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3893'. [ 2223.205979][T26519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3893'. [ 2223.626061][T18644] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 2223.648512][T18644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2224.317243][T18644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2225.080948][T18644] ------------[ cut here ]------------ [ 2225.086784][T18644] refcount_t: addition on 0; use-after-free. [ 2225.094567][T18644] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#0: kworker/u8:13/18644 [ 2225.105020][T18644] Modules linked in: [ 2225.110190][T18644] CPU: 0 UID: 0 PID: 18644 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 2225.121538][T18644] Tainted: [L]=SOFTLOCKUP [ 2225.126128][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2225.136215][T18644] Workqueue: netns cleanup_net [ 2225.141061][T18644] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 2225.147211][T18644] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 4b 69 13 fd 48 8d 3d 64 5c 89 0b 67 48 0f b9 3a eb 4a e8 38 69 13 fd 48 8d 3d 61 5c 89 0b <67> 48 0f b9 3a eb 37 e8 25 69 13 fd 48 8d 3d 5e 5c 89 0b 67 48 0f [ 2225.167157][T18644] RSP: 0000:ffffc90005d07270 EFLAGS: 00010293 [ 2225.173266][T18644] RAX: ffffffff84b25b88 RBX: 0000000000000002 RCX: ffff88802e7abd80 [ 2225.181363][T18644] RDX: 0000000000000000 RSI: ffffffff8f1100c0 RDI: ffffffff903bb7f0 [ 2225.189369][T18644] RBP: 0000000000000000 R08: ffff88802e7abd80 R09: 0000000000000005 [ 2225.197644][T18644] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888078734000 [ 2225.205675][T18644] R13: ffff888078734000 R14: ffff88802273783c R15: dffffc0000000000 [ 2225.213807][T18644] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 2225.222776][T18644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2225.229719][T18644] CR2: 000055c12b3df710 CR3: 0000000096b96000 CR4: 00000000003526f0 [ 2225.237849][T18644] Call Trace: [ 2225.241138][T18644] [ 2225.244117][T18644] nsim_fib_event_nb+0x101e/0x1210 [ 2225.249317][T18644] ? leaf_walk_rcu+0x6a9/0x720 [ 2225.254491][T18644] call_fib_notifier+0x45/0x80 [ 2225.259385][T18644] fib_notify+0x36b/0x5e0 [ 2225.264070][T18644] ? __pfx_fib_notify+0x10/0x10 [ 2225.269015][T18644] ? register_fib_notifier+0x6a/0x360 [ 2225.274428][T18644] ? net_generic+0x1e/0x240 [ 2225.278939][T18644] ? net_generic+0x1e/0x240 [ 2225.283823][T18644] register_fib_notifier+0x184/0x360 [ 2225.289128][T18644] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 2225.295450][T18644] ? register_fib_notifier+0x6a/0x360 [ 2225.300843][T18644] nsim_fib_create+0x877/0xa10 [ 2225.305685][T18644] ? __pfx_nsim_fib_create+0x10/0x10 [ 2225.310983][T18644] nsim_dev_reload_up+0x374/0x7c0 [ 2225.316321][T18644] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 2225.321892][T18644] devlink_reload+0x4f8/0x8c0 [ 2225.326744][T18644] ? __pfx_devlink_reload+0x10/0x10 [ 2225.331952][T18644] ? xa_get_mark+0x6fc/0x7b0 [ 2225.336650][T18644] devlink_pernet_pre_exit+0x1ff/0x420 [ 2225.342134][T18644] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2225.348451][T18644] ? class_remove_file_ns+0x121/0x160 [ 2225.353973][T18644] ops_undo_list+0x187/0x940 [ 2225.358592][T18644] ? __pfx_ops_undo_list+0x10/0x10 [ 2225.363808][T18644] ? idr_destroy+0x218/0x290 [ 2225.368453][T18644] ? do_raw_spin_unlock+0xf5/0x210 [ 2225.373932][T18644] cleanup_net+0x56b/0x800 [ 2225.378377][T18644] ? __pfx_cleanup_net+0x10/0x10 [ 2225.383326][T18644] ? process_scheduled_works+0xa70/0x1860 [ 2225.389127][T18644] ? process_scheduled_works+0xa70/0x1860 [ 2225.394917][T18644] process_scheduled_works+0xb5d/0x1860 [ 2225.400590][T18644] ? __pfx_process_scheduled_works+0x10/0x10 [ 2225.406841][T18644] ? assign_work+0x3d5/0x5e0 [ 2225.411441][T18644] worker_thread+0xa53/0xfc0 [ 2225.416195][T18644] kthread+0x389/0x470 [ 2225.420281][T18644] ? __pfx_worker_thread+0x10/0x10 [ 2225.425494][T18644] ? __pfx_kthread+0x10/0x10 [ 2225.430106][T18644] ret_from_fork+0x514/0xb70 [ 2225.434980][T18644] ? __pfx_ret_from_fork+0x10/0x10 [ 2225.440100][T18644] ? __switch_to+0xc79/0x1410 [ 2225.444830][T18644] ? __pfx_kthread+0x10/0x10 [ 2225.449443][T18644] ret_from_fork_asm+0x1a/0x30 [ 2225.454258][T18644] [ 2225.457291][T18644] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2225.464580][T18644] CPU: 0 UID: 0 PID: 18644 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 2225.475777][T18644] Tainted: [L]=SOFTLOCKUP [ 2225.480101][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2225.490182][T18644] Workqueue: netns cleanup_net [ 2225.494966][T18644] Call Trace: [ 2225.498249][T18644] [ 2225.501231][T18644] vpanic+0x56c/0xa60 [ 2225.505245][T18644] ? __pfx__printk+0x10/0x10 [ 2225.509844][T18644] ? __pfx_vpanic+0x10/0x10 [ 2225.514348][T18644] ? is_bpf_text_address+0x292/0x2b0 [ 2225.519667][T18644] ? is_bpf_text_address+0x26/0x2b0 [ 2225.524879][T18644] panic+0xc5/0xd0 [ 2225.528622][T18644] ? __pfx_panic+0x10/0x10 [ 2225.533052][T18644] ? ret_from_fork_asm+0x1a/0x30 [ 2225.538000][T18644] __warn+0x315/0x4c0 [ 2225.541982][T18644] ? refcount_warn_saturate+0x9f/0x110 [ 2225.547451][T18644] ? refcount_warn_saturate+0x9f/0x110 [ 2225.552933][T18644] __report_bug+0x29a/0x540 [ 2225.557570][T18644] ? devlink_pernet_pre_exit+0x1ff/0x420 [ 2225.563211][T18644] ? ops_undo_list+0x187/0x940 [ 2225.567982][T18644] ? cleanup_net+0x56b/0x800 [ 2225.572587][T18644] ? refcount_warn_saturate+0x9f/0x110 [ 2225.578058][T18644] ? __pfx___report_bug+0x10/0x10 [ 2225.583106][T18644] report_bug_entry+0x19a/0x290 [ 2225.588062][T18644] ? refcount_warn_saturate+0x9f/0x110 [ 2225.593532][T18644] ? refcount_warn_saturate+0xa4/0x110 [ 2225.599027][T18644] handle_bug+0xce/0x200 [ 2225.603272][T18644] exc_invalid_op+0x1a/0x50 [ 2225.607776][T18644] asm_exc_invalid_op+0x1a/0x20 [ 2225.612629][T18644] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 2225.618714][T18644] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 4b 69 13 fd 48 8d 3d 64 5c 89 0b 67 48 0f b9 3a eb 4a e8 38 69 13 fd 48 8d 3d 61 5c 89 0b <67> 48 0f b9 3a eb 37 e8 25 69 13 fd 48 8d 3d 5e 5c 89 0b 67 48 0f [ 2225.638325][T18644] RSP: 0000:ffffc90005d07270 EFLAGS: 00010293 [ 2225.644400][T18644] RAX: ffffffff84b25b88 RBX: 0000000000000002 RCX: ffff88802e7abd80 [ 2225.652370][T18644] RDX: 0000000000000000 RSI: ffffffff8f1100c0 RDI: ffffffff903bb7f0 [ 2225.660352][T18644] RBP: 0000000000000000 R08: ffff88802e7abd80 R09: 0000000000000005 [ 2225.668351][T18644] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888078734000 [ 2225.676332][T18644] R13: ffff888078734000 R14: ffff88802273783c R15: dffffc0000000000 [ 2225.684315][T18644] ? refcount_warn_saturate+0x98/0x110 [ 2225.689798][T18644] nsim_fib_event_nb+0x101e/0x1210 [ 2225.694920][T18644] ? leaf_walk_rcu+0x6a9/0x720 [ 2225.699699][T18644] call_fib_notifier+0x45/0x80 [ 2225.704473][T18644] fib_notify+0x36b/0x5e0 [ 2225.708818][T18644] ? __pfx_fib_notify+0x10/0x10 [ 2225.713675][T18644] ? register_fib_notifier+0x6a/0x360 [ 2225.719063][T18644] ? net_generic+0x1e/0x240 [ 2225.723585][T18644] ? net_generic+0x1e/0x240 [ 2225.728102][T18644] register_fib_notifier+0x184/0x360 [ 2225.733491][T18644] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 2225.739770][T18644] ? register_fib_notifier+0x6a/0x360 [ 2225.745152][T18644] nsim_fib_create+0x877/0xa10 [ 2225.749924][T18644] ? __pfx_nsim_fib_create+0x10/0x10 [ 2225.755235][T18644] nsim_dev_reload_up+0x374/0x7c0 [ 2225.760289][T18644] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 2225.765857][T18644] devlink_reload+0x4f8/0x8c0 [ 2225.770629][T18644] ? __pfx_devlink_reload+0x10/0x10 [ 2225.775857][T18644] ? xa_get_mark+0x6fc/0x7b0 [ 2225.780480][T18644] devlink_pernet_pre_exit+0x1ff/0x420 [ 2225.785958][T18644] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2225.792051][T18644] ? class_remove_file_ns+0x121/0x160 [ 2225.797439][T18644] ops_undo_list+0x187/0x940 [ 2225.802048][T18644] ? __pfx_ops_undo_list+0x10/0x10 [ 2225.807167][T18644] ? idr_destroy+0x218/0x290 [ 2225.811763][T18644] ? do_raw_spin_unlock+0xf5/0x210 [ 2225.816889][T18644] cleanup_net+0x56b/0x800 [ 2225.821320][T18644] ? __pfx_cleanup_net+0x10/0x10 [ 2225.826276][T18644] ? process_scheduled_works+0xa70/0x1860 [ 2225.832007][T18644] ? process_scheduled_works+0xa70/0x1860 [ 2225.837766][T18644] process_scheduled_works+0xb5d/0x1860 [ 2225.843399][T18644] ? __pfx_process_scheduled_works+0x10/0x10 [ 2225.849424][T18644] ? assign_work+0x3d5/0x5e0 [ 2225.854033][T18644] worker_thread+0xa53/0xfc0 [ 2225.858676][T18644] kthread+0x389/0x470 [ 2225.862762][T18644] ? __pfx_worker_thread+0x10/0x10 [ 2225.867880][T18644] ? __pfx_kthread+0x10/0x10 [ 2225.872482][T18644] ret_from_fork+0x514/0xb70 [ 2225.877134][T18644] ? __pfx_ret_from_fork+0x10/0x10 [ 2225.882249][T18644] ? __switch_to+0xc79/0x1410 [ 2225.886946][T18644] ? __pfx_kthread+0x10/0x10 [ 2225.891555][T18644] ret_from_fork_asm+0x1a/0x30 [ 2225.896340][T18644] [ 2225.900153][T18644] Kernel Offset: disabled [ 2225.904524][T18644] Rebooting in 86400 seconds..