last executing test programs: 29m42.368109763s ago: executing program 4 (id=1290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf3, 0x46, 0x7, 0x20, 0x458, 0x7003, 0xd919, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x74, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x37, 0x96, 0xc3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0xe, 0x5, "8f55c7e5d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f0000001380)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 29m39.1402402s ago: executing program 4 (id=1304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x4c}, {0x84}, {0x6}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 29m36.96270015s ago: executing program 4 (id=1308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x4, [{0x1, 0x1}, {0x8}, {0x9}, {0x1, 0x1}]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6f0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) lstat(0x0, 0x0) getpid() ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) getresuid(&(0x7f0000000540), 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 29m34.940348401s ago: executing program 4 (id=1311): unshare(0x8000000) r0 = semget$private(0x0, 0x1, 0xf) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xffffffff, 0x9, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) close(r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x16, 0x4, "bf5f05e9"}, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x0, 0xb, 0x4, "ae7a9499"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x3, 0x8a100f44, 0xe0, 0x0, 0xffffffff, 0xb51, 0x0, 0x0, 0x100, 0x8}}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) tee(r3, r3, 0xaf06, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c040000) 29m32.572993555s ago: executing program 4 (id=1324): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc1004114, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x80000024) fcntl$notify(r6, 0x402, 0x80000032) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400f5001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x1}, 0x6e) 29m30.500024815s ago: executing program 4 (id=1333): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff26}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25070000"], 0x14}, 0x1, 0x0, 0x0, 0xc0c1}, 0x8000010) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000680)={0x6, 0x2, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000001c0)={0x1, @raw_data="3ba64ef20e50eaf75247423328a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b3bdc8968c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe38085dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b832e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e00"}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) syz_open_dev$amidi(&(0x7f0000000000), 0x9, 0x109082) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) 29m15.259351716s ago: executing program 32 (id=1333): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff26}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25070000"], 0x14}, 0x1, 0x0, 0x0, 0xc0c1}, 0x8000010) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000680)={0x6, 0x2, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000001c0)={0x1, @raw_data="3ba64ef20e50eaf75247423328a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b3bdc8968c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe38085dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b832e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e00"}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) syz_open_dev$amidi(&(0x7f0000000000), 0x9, 0x109082) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) 28m27.565712527s ago: executing program 5 (id=1545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc000, 0xfffffff7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x100000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) link(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r5}) r6 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback}, 0x1c, 0x0}, 0x40043) r7 = dup(r0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x101e00, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') openat$ppp(0xffffffffffffff9c, 0x0, 0x22d00, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) 28m26.033007039s ago: executing program 5 (id=1553): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x10200, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x4) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x7, 0x4, 0x9, 0x0, 0x7, 0xb000, 0x8080000, '\x00', 0x401}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe80000000000000000010000000000000040000000000000717000000000400"], 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 28m25.385568334s ago: executing program 5 (id=1554): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="bd5e235e8e80"}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r4, &(0x7f0000000f00)=ANY=[], 0x66) execveat(r4, 0x0, 0x0, 0x0, 0x1000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYBLOB="00012dbd7000fcdbdf25010000000000000001410000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 28m23.121910937s ago: executing program 5 (id=1559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f07000000647976dd9b04c91bba86653d303043e8a8303030303030343030303000000000000000000000000000000000d551be2cd68e28ea80802b7d5d64842ef1e1425a1f574114ec258a26cb84b14d6fd5c2b8fd8ebcec88e36d5098c8903c013e6fc800cf29a5e437f1c829abbf244bc33986ff30ff9d5600834be4a00d3743fddd37d69196298096af386a212193410996d9f13a76b0ec28c420200cb8f35258e96e2973f523d8df645df9b180ba6082ca", @ANYRESHEX=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x880011, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYBLOB="22a3bd56f38303589a929c03ff5aab9899c042e89d961aa3bafec02ddc95dcd7917606b201fdc2bf8dfc84c4d096ac7469cfd6dd82b3b0839fa31739350bf779b80a2a39b37658ed76d68663410bd77f2868e025809952e4dd66f5daac11d8b8132c6c6b5aa57b7c0b90fe1b52fc745af499a92889570cec5d9a61ddc7049abe97fb37d60d6f1ff35198050cfa74ca9ad1b018f141ff32a5f5d36e5c188b4d4f8f2db028f0590b5c3603e336aec969f93e7e58e66b560c541519e5b296d01b0ac7182dd011c0a6", @ANYBLOB="bda777067daf181ecdcfef0e721e1b6e4be30d9f868b4a9edea1d0b4ef8f67097d01d4f1f18df138b7bf9d0914c769fe07b4fed57398011115216e84dfd71f5fe3d5ae1ac9e45fd92a9f64791c4d3c9d124c954305a52b03b38da6f60e2e5ad0cb87764db777a5761188951d48dd7e7972ac642ab07e638e79a30dda10e53cf9666af7535685195df04c34e225c70282388b9920dfdae1b47c5f074120cb09566581015ec3d9c45c383664cd58b2a6039ca07388a05085623709fb1873d2e728d3231c2759037f82d810cf64ec6b9e7c86e72acba2c4e90c9d83913737b0db41f080d7ea3337b8886df53f876669d96697d36ab89a47d7", @ANYRES32=r2, @ANYRESHEX=r2], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000000)=@req={0x28, &(0x7f00000000c0)={'hsr0\x00', @ifru_data=0x0}}) write$6lowpan_control(r7, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x250c00, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r10, 0x80045006, 0x0) 28m18.622138527s ago: executing program 5 (id=1571): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x3000000, 0x8030, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setsockopt$inet_opts(r0, 0x0, 0x1b, &(0x7f0000000080)="34fee7bfce2557852c4f09a55ebe13fe0e3df0", 0x13) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 28m17.367995919s ago: executing program 5 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffdf8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 28m16.286140443s ago: executing program 33 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffdf8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 14m55.398960046s ago: executing program 2 (id=4356): r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) sendmsg$xdp(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c001}, 0x4000) fsmount(r0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000001480)=""/233, 0xe9}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000001700)=""/194, 0xc2}], 0x9}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 14m54.577985614s ago: executing program 2 (id=4357): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1b0, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe, 0x7a}}}}, [@NL80211_ATTR_IE={0xa5, 0x2a, [@ht={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0xffff, 0x7, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x2, 0x99}}, @preq={0x82, 0x83, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x4, 0x5, 0x8, @device_b, 0x8, @value=@device_b, 0x0, 0x0, 0x9, [{{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @device_a, 0x8001}, {{}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0xf}, {{}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x6}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}, @NL80211_ATTR_IE={0xc4, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x9, @val=0x800, @void, @void}}, @channel_switch={0x25, 0x3, {0x1, 0xac, 0x5}}, @random_vendor={0xdd, 0xaf, "e428bebff1a2d69c36962873d73f16569b48b00c39ec7a17ea4303062bd13b25f5b541d7aa43bd7bbf561394774334a439175f6d8685640c02f56d4767f5ed00d7b2a9851d9718f34c55061cb1534dece6973ae8f789d33bc3c8971a011fc9d2dcda27553eab4302676cdb93ee74b3d5167faf010aa7662d45b17e9633ee5a837386cd3c4155c2a6af54334562267b940f731233826fb1bd54d8f49a3e20f03ce2cbc2837899553b4ad9f096ab2996"}, @supported_rates]}]}, 0x1b0}}, 0x240488c4) r3 = landlock_create_ruleset(&(0x7f0000000400)={0x10d8, 0x1, 0x1}, 0x18, 0x3) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x501000, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc802}, 0x8001) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20400800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3f5, 0x20, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000000}, 0x4c041) writev(r4, &(0x7f0000001800)=[{&(0x7f00000007c0)="d41bf744d0c0c17763f0c54862546f60d086c0bdab5f1ab42d67bd785e90820fbc33c57389e0553831c58cf4cb60d6007466", 0x32}, {&(0x7f0000000800)="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", 0x1000}], 0x2) utime(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x9, 0x7fff}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000018c0)={0x3, 0x0, [{}, {}, {}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001940)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000001980)=0x19, 0x4) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x98, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffff4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001b40), 0x2300, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000001b80)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), r6) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r8, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x50004) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001d00)='dvmrp1\x00', 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r6) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000001e00)={0x0, 0x101, 0xc26, r0, 0x0, &(0x7f0000001dc0)={0x9c0909, 0x6, '\x00', @p_u8=&(0x7f0000001d80)=0xff}}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001f40)) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000002140)={0x8, 0x2}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000002180)) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f00000021c0)={@broadcast, @empty}) 14m53.469615134s ago: executing program 2 (id=4362): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="8528c6799c81"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r6, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x30000, 0x0, 0x80}, 0x4000) syz_emit_ethernet(0x46, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x3, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) timerfd_gettime(r4, &(0x7f00000002c0)) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r10, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 14m47.491291109s ago: executing program 2 (id=4373): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xc844) 14m46.930642524s ago: executing program 2 (id=4374): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) r2 = socket(0x2, 0x3, 0xff) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r4, 0x8}, &(0x7f0000000180)=0x8) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0xc0000080}]}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0xc0000080}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb", 0x7}], 0x1, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x208, 0x29, 0x36, {0x5e, 0x3d, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}, @generic={0x4, 0x70, "886d75eac987b5ae13d32699ac0837b0de62b0ce8773176250e206dc7f377c73f901645722b7e1bc9a2fb52479b5efa85efcd059ee9c6e7d625c1777847d34ff35ff7033ff26e0ea0bf970d945a42983d8a243b7317be77506e799251e20bec8ea06bff4f30151dd0f60ab6f732f67d1"}, @jumbo={0xc2, 0x4, 0xffffffff}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x3e0}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 14m46.481513908s ago: executing program 2 (id=4378): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r4, &(0x7f0000000080)=""/47, 0x2f) madvise(&(0x7f0000d0a000/0x3000)=nil, 0x3000, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0xfffffffffffffd8b, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r8 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000100), 0x0) socket$inet(0x2, 0x2, 0x0) 14m31.220448312s ago: executing program 34 (id=4378): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r4, &(0x7f0000000080)=""/47, 0x2f) madvise(&(0x7f0000d0a000/0x3000)=nil, 0x3000, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0xfffffffffffffd8b, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r8 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000100), 0x0) socket$inet(0x2, 0x2, 0x0) 10m33.970682237s ago: executing program 0 (id=5103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0x23d3, 0x42, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f00000001c0), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x24}}, 0x40) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0903, 0x8000, '\x00', @p_u8=0x0}}) bind$packet(r3, &(0x7f0000000240)={0x11, 0xf6, r4, 0x1, 0x10, 0x6, @random="65bf04142f09"}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r11, &(0x7f0000000a40)=[{&(0x7f0000000680)="67bc", 0x2}], 0x1) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 10m33.733345116s ago: executing program 0 (id=5107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001800)={0x804, 0x14, 0x200, 0x70bd28, 0x25dfdbfd, {0x3, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "13dde9a4bb72c879f99f63a2d11ddf2d1a79dc4b9a40680175ad2cd0cf97deb28854b6d3581585ed09fb70799652197f2daeab1ecde71fd559a1caa5d671033b4a67cc6556d78d4bf9a97b50b2da2f75189d1d2eca21a53fe92ac7660f1e6dad0c4ba75bd7c50b680bf8b3c96c69383e8220c23f04cc8ffd391d"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "1017d90abb4b29e65763b621ea5e00d0311f153129d06f2709c1ad37de7dfa606249a744919e8b28dfdcdcc6c078b2e7d09d3f31d2ee76fad6b63f8e08ad7ffbc4f3621fded8a11d9263797695495aeab5560e70b8440217babc6c2d1e6b8d8190867838e63c540af27a43ae20bdc647c9276bcae8bacf51a406208d9e3ce20c563dec7c9b"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "62473410f0c133eeca5d81a272cd1a265cba65c6d21382aa4c4e0b7043c06da5e761929919ce75d2b3d305bccb86c9c7edb12eddfb779c75f5676154debc7c5ea61294e1bc0c1947063a0ef98f01d63709d0fe0994a63048ab65fb1e043054df53b075b85917805329334c63010890714bc3094f1d2eec9d4e3d019edc20d3dfeccf3b0d82b16656c00594e4297b8f299cce4d31aaa3b317fe70076d85dbd57ce26d4919d129113e8176c0f0c9955c258b3450d1316a7b5679597e41f06880416abe6c7a72ad7d977a07"}, @INET_DIAG_REQ_BYTECODE={0x611, 0x1, "a9da156a28060f96c9bff5c7875b6a288d93b56decc324cd7c6bbb1f41e04ab69ed86c39ad9bcb22b90707cb87a1cf9fd9481e6896e9aab153319734f0e6350c61e3271e8d6837a7a463620229ddd06b6ff82ff3e11b0cfede5575cacc97353c5f16b3573c7848615661f6287ddef47105ba545e2a802387487c3f6e7a62c5c88ca6800ff49af6bd02790388f32f65790926b02b230d837be2ebcdfc94b25d25aeea8f2840adcd54ac3fb93a6cfd7909079edc897ccbd90a6a355dd7f77deb79b65ed27657ea7eccad9792dfded2f7e0db76fdc24a48c0e2e220164756afa23b8b00dbf6251cd16d16478128fbc2492592f46d8f54522dbb5a45e97b7b0e154be4cc13f28a8a868853c531327d88850ff107dae69b481b40bf9a2f1cd04908a2060a8d15d0366a685e1bf7e4fe1ebd1076178a540a4adbfdf5a87e01a23ee05ea887c8192c894bca8f2bd3b5c65360aba2ab3d12d3e377a85fe96679bce649fd8ada86b184689445e41aaa7fbd46dbe35d1dddfb2164e3124a113048cc84ff8210429d61b5676ca023365fd2c72b2d280fc1b670d02889c01b831c75560d56c1336fed823fa6b8cfcaee5b11bc015844874183a8f7b67f8128b1fc84c135c467bb367cd7001840cf72cc8a3c9474dc918c4a3f8f8370318507bc9122e0b40a00b1d98092697a916b47dd3e1a78ab8ef5ec01b9340da670faa163aa83318b3394e99c438bbd40ef7bf95ce3c59b4fed021a1fd996a4f0e1478de7a95aae0db121dd3e3985894f5f1ab1c708b4f8a5c5ea0f50245f3fe174ecdf1f0bc0795b434945c7e8bcbe85a1545673e96e6a237f4b1c15013bc7aa21c6d1dc52f884b35a0986b8156619e37a416855b0eed5270ed7903f477375a83611b0a039eb6007fc79bbca568a96ed879d1951ddb8e99c24d9cb2eab334a6018bfd2bb6a50b8fd388e0c37df44d908cf2d247d8545522679c5b96363cf9e4ca497243fb928a8f13db75b3a99c0213f17d6e31eda7a63b5a7ca210f95a65724a0894bb13a059e5a3c68380c593429792e33fe0a448452452e13276105a49fecf5735615dad2ccd5d13de07b2afae1dbfa1c395a9d1780ab953b32c525c056974b5ab15634da4287c8a460ed96318022bd8fde20c7882da6ee8c98db0183ce4931423bc70f5f649be150ebea46497b104f8a3361480782c281d53db3563c0eeb40fc9940ef657d7f6e631830078bc54e32748c030fd0800ac24b10619eb1af342339db97718137dec915e21e5418a9df11952ca88438091e177390461f60d572ea7c4598527ff6c9facc609348d8bd962aa8eba57130a419a8db394949b32850b02e168bf7422b9c2403a04014e737329189b1cebf766e83d59bd43835bb25055261e81467a6fe6238b70dbf714a0ec4c5c4bfab830230cb824c2aee7d2a5cb23a4ab61a7f9a92a907618314e4454a58bcbf61b22697d4241a587f642421b0615d22ce35df5e4d45125072ae9d26d99766bd263b93c84e1f1854eea07c19a1b1a7c44b6f43a73c37a79f66186d6bfd5fb4792079e2870af291cd51a51f54efec0af0eddee47a93b6576a71813e147dfd6739587c068bb46b818983f2c6ab7ca795c05b365dbede322ba08a4ae628000f4fd500e34c6a26fcc9d965067d93fa1dccf0b43869fd934d685d3b7902dee676c641f02f06bda2761517e161cf1082de5dfc853e9ef5e4fe222f934fb06297a2911984c779cc693974b443e8b389906d434229ebba207d6bfd90662bc3cca8aca26cb3c5cc5042223b04e6b8f3bcaa278497802afb3cff695a8e83093356322be05ec83c5fd2c10c6ec0c5e6e48292eef0e1ff1adacf8912dc759218244561c8374041a8b04214f41034600755f54b7a20b26f614031238b87506148d4a593d0e4a6ce90f495ed6a4bcf016cbc0d58f2d30b8efa4caf5ddb3071497c9f0030ea08444a8bf5652528f28a30974194abc85718908d5749127d0fe276192346ce3a3673e022be8a65ccbec47c8ccdb57131518a9d1042b005084db5c4ab50f9a449a80051fc40ebc01422a51092b510c927735f82df94843c11da2d47e9ed955eb552e9ff950e1fffa74a339031005f97bbdb6cb0f648b1aa334f56d397005d69a10370ebad24c33f95df8ed7858c983e9329e7040645c21a3def9b982f90b052d5cf6f3df15b9f55"}]}, 0x804}, 0x1, 0x0, 0x0, 0x1}, 0x20000409) 10m33.672085533s ago: executing program 0 (id=5108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000000c0)="e0b9545dd30a", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x300000000000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r11, &(0x7f000000bf00), 0x0, 0x40008269, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r12 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r13) syz_open_dev$tty1(0xc, 0x4, 0x1) 10m31.030076336s ago: executing program 0 (id=5117): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x7c5b}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(r6, &(0x7f0000000bc0)='./file0\x00', 0x800) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @jumbo={0xc2, 0x4, 0x33}]}]}}}}}, 0x0) move_mount(r7, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001800110101000000000000000a0080000002ff08"], 0xa0}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 10m27.997386037s ago: executing program 0 (id=5122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) io_setup(0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(r7, &(0x7f0000000080)='./file0\x00', 0x8800) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r8, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f00000004c0)="3cc5", 0x2, 0x7) 10m27.420316483s ago: executing program 0 (id=5124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000000004"}) 10m26.174451736s ago: executing program 35 (id=5124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000000004"}) 48.539301627s ago: executing program 3 (id=7486): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000540)={0x40, 0x31, 0x1, 'U'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x82, 0x1, "ab8c61"}, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffbfa}, {0x7e902da6, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x5, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0x642) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181a80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4003ff2, 0x7, 0x6, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 46.5888598s ago: executing program 3 (id=7497): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000240)=@generic={0x1, 0xffffffff80000000, 0x9}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r4, 0xfffffffffffffffe, &(0x7f0000000300)=0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x50, r6, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x100000000, 0xffffffffd, 0xffffffff, 0x41, 0x4, 0x4, 0x80, 0x3, 0xa1f, 0x68ff, 0x5, 0x9, 0x3, 0x2], 0x10000, 0x40246}) 44.914947547s ago: executing program 3 (id=7504): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff04, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0xfffffffe, 0x6, 0x0}) 44.775054535s ago: executing program 3 (id=7506): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x4) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r1, 0x7a98, 0x0, 0xe0, 0x0, 0x0) 44.686683944s ago: executing program 3 (id=7507): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtclass={0x34, 0x28, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {0x3, 0x4}, {0x8, 0x2}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) 44.589582859s ago: executing program 3 (id=7508): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r4, &(0x7f0000000080)=""/47, 0x2f) madvise(&(0x7f0000d0a000/0x3000)=nil, 0x3000, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0xfffffffffffffd8b, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r8 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r0, &(0x7f0000000100), 0x0) socket$inet(0x2, 0x2, 0x0) 39.32191908s ago: executing program 6 (id=7528): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xa00000000000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 39.013956045s ago: executing program 6 (id=7529): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x9}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0x6, 0x1) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) epoll_create1(0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) 37.648891128s ago: executing program 1 (id=7531): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x21) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000480)=0x32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) r7 = fsopen(&(0x7f0000009c40)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r7) ftruncate(r6, 0x200004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0xc80, 0x138, 0x138, 0x9b0, 0x9b0, 0xb48, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10, 0x3}, {0xffffffff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x9, 0x1}], [{0x6, 0x80000001}, {0xffffffc7, 0x4}, {0x7, 0x2}, {0x8, 0xffff}, {0x7, 0x81}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0xfff}, {0x800, 0x1}], 0x9, 0x3}, {[{0x19008000}, {0x26bb, 0x2}, {0x7b3, 0x3}, {0x1}, {0xe, 0x2}, {}, {0x9, 0x2}, {0x10000, 0x1}, {0x0, 0x2}, {0x2fab, 0x1}, {0x597, 0x1}], [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x401}, {0x8, 0x9}, {0x8, 0x8}, {0x0, 0x4}, {0xfff, 0x4}, {0xd, 0x7ff}, {0x4, 0x6}, {0x3d, 0x5}, {0x942f}], 0x8, 0xa}, {[{0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x7}, {0x4, 0x2}, {0x7, 0x2}, {0xffff, 0x1}, {0x4, 0x1}, {0xfffffff7, 0x2}], [{0xe547, 0x10000}, {0x4, 0xf78}, {0x81, 0x1c10}, {0x3}, {0x8000200, 0x5}, {0x4, 0x9}, {0x80000001, 0xffff}, {0xaf3d, 0x2}, {0x3c, 0xc}, {0x3e, 0x9}, {0x3, 0x4}], 0x0, 0x3}, {[{0x6, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0xdeca, 0x1}, {0xfd}, {0x401, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x81}], [{0x1, 0xfd0d}, {0x9, 0x4}, {0x80000001}, {0x4, 0x400}, {0x9, 0x3}, {0xa, 0xfffffff0}, {0x9, 0x4}, {0x4, 0x2}, {0x10, 0x59d}, {0x7, 0x1ff}, {0x4}], 0x8, 0xb}, {[{0xffffff11, 0x2}, {0x6, 0x2}, {0x902, 0x1}, {0xffffff00}, {0x9}, {0x1, 0x2}, {0xffff, 0x1}, {0x9, 0x3}, {0x4, 0x2}, {0x70c8}, {0x7, 0x3}], [{0x3b8a6dc3, 0x7}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x3}, {0x5, 0xffffffff}, {0x1ff, 0xff}, {0x3, 0x96e}, {0xffffffff, 0x400}, {}, {0x3, 0x934}, {0x5, 0x7}], 0xb, 0x9}, {[{0x20c, 0x2}, {0x72, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x5}, {0xffffbc3b, 0x1}, {0x7fffffff, 0x3}, {0x42, 0x2}, {0x8, 0x1}], [{0xe43}, {0xb, 0x8000}, {0x2, 0x5}, {0x3, 0xe9c0}, {0x5, 0x7f}, {0x9, 0x3}, {0x6, 0x40}, {0x11f, 0xffffffe9}, {0xc35a, 0xd16}, {0x6, 0x4}, {0x9, 0x18a}], 0x8, 0x3}, {[{0x7, 0x3}, {}, {0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x401, 0x2}, {0x6}, {0x9, 0x2}, {0x7c42, 0x3}, {0x40000000, 0x2}], [{0xdff, 0x4e}, {0x3, 0x7}, {0x1000, 0x1}, {0xfffffff8, 0x8001}, {0x9, 0xb34}, {0xfffffffa, 0xa}, {0xae9c, 0x7}, {0xe, 0x8}, {0x8, 0x7}, {0x6, 0x3}, {0x9, 0x92b}], 0xc, 0x7}, {[{0xfff}, {0x1, 0x2}, {0x2, 0x2}, {0xa640}, {0x0, 0x2}, {0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0x8}], [{0x1, 0x73}, {0x10000, 0x9}, {0xc, 0x3}, {0x8, 0xffffffff}, {0x7, 0x5}, {0x86, 0xf}, {0x3, 0x2fc3}, {0xf65, 0xa2f}, {0x15064f6, 0xede}, {0x8a2}, {0x2, 0x6}], 0x7}, {[{0x80000001}, {0x5, 0x2}, {0x687, 0x2}, {0x20000, 0x1}, {0xab50, 0x2}, {0x0, 0x3}, {0x7}, {}, {0x5, 0x1}, {0x5}, {0x7}], [{0x64d, 0x3}, {0x7, 0x7}, {0x10001, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xcba}, {0x40, 0x4}, {0x2, 0x4}, {0x2ca6, 0x9}, {0x80000000, 0xc9}, {0x6, 0x7}], 0x9, 0x3}, {[{0x9, 0x1}, {0xe35, 0x1}, {0xffffffab, 0x1}, {0x401, 0x3}, {0x4, 0x2}, {0xa}, {0xfffffeff, 0x1}, {0xc9, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x3, 0x1}], [{0xb6f2, 0x80000000}, {0x0, 0x9}, {0x65, 0x4}, {0x3, 0x982}, {0x5, 0x7f}, {0x7, 0x9}, {0x6, 0x4}, {0x3ff, 0x4}, {0x1, 0x7ff}, {0x7, 0xffff}, {0x3, 0x1}], 0x6, 0x1}, {[{0x6cd8867f, 0x1}, {0xb42}, {0x7fff}, {0x4, 0x2}, {0x65b, 0x1}, {0x61, 0x3}, {0x78a8}, {0x4, 0x3}, {0x8001, 0x2}, {0x3, 0x2}, {0x5, 0x3}], [{0x4, 0xff6}, {0x0, 0x3}, {0x4, 0xe8aa}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0xfffffffc, 0x3}, {0x15c, 0x80000000}, {0x9, 0x3}, {0x91, 0x80000001}, {0xfffffff6, 0xbd}], 0x0, 0x5}], 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xce0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000010000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000000000000000003f00"/28], 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000180)) write$apparmor_exec(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="d35cdd00a21e39d7ec9bfc1a5f3ee9187b6e99108cacd609094f8b4cfe33c5240ac65ae16afe7bb0fafd802fe81597e0957e90c951e591689dd46c95c17894f29bad6a23cb61f3e224e34f27f28c9124e34acd7ca1726046aa2d1caed2e507d51e75838e4b7f8d42f57b389839861611d1f0515510d8d69ad2fc"], 0x8) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 37.570237892s ago: executing program 6 (id=7532): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4060034) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000500)={0x20, 0x11, 0x1, "99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000480)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r3) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x6e20, @rand_addr=0x64010100}, 0x10) 36.329818175s ago: executing program 1 (id=7536): syz_open_dev$dri(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 36.143646771s ago: executing program 1 (id=7537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000028081c05594c5c3d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000080000000000800"/28], 0x50) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r2 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r2, 0x2def, 0xb80c, 0x4e, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 00000000000000003<'], 0x2d, 0xfffffffffffffff9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x3c, r6, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x8000, 0x8, 0x8, {{0x2e, 0x4, 0x1, 0x4, 0xb8, 0x64, 0x0, 0x4, 0x2f, 0x0, @broadcast, @empty, {[@generic={0x86, 0xd, "80af9a4dac73092f5b18bf"}, @lsrr={0x83, 0x7, 0xfc, [@remote]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0xe, "d6b873f4318fcdfb7fbe4382"}, {0x5, 0x5, "48b796"}, {0x2, 0x5, "27fbf7"}, {0x6, 0xb, "f0c5dfca3958c3f870"}]}, @timestamp_prespec={0x44, 0x2c, 0xb8, 0x3, 0x0, [{@multicast2, 0x9}, {@multicast1, 0x10000}, {@empty, 0x2bcd}, {@local}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x5f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb66}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@broadcast, 0x6}]}, @generic={0x82, 0xa, "48bb5b81fb7060dd"}, @noop, @ssrr={0x89, 0xf, 0x26, [@broadcast, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0xc1, 0x1ff, 0x8, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x20, 0x7800, 0x0, 0x6}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xdc, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004880}, 0x24000005) 35.118263398s ago: executing program 1 (id=7540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0xed, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x3, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x1, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x8, 0x90, 0x4, '\x00', 0x8}, {0x1, 0xaf, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0xd, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x6, '\x00', 0xa}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x1, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x80, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x101}, {}, {}, {}, {0xc0000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000019}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0xc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x7fff, 0x7, 0x7fff, 0x0, 0x2, 0x2, 0x6, 0x2, 0x9, 0x8, 0x5, 0xf7be, 0x3, 0xffffffff, 0x3, 0x8], 0xeeef0000, 0x84080}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000a0, 0x0, 0x6}]}) 34.368738031s ago: executing program 6 (id=7542): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000b, 0x50, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xd04750f2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r8 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00', @ANYRESHEX=r5, @ANYRES32=r7], 0x2c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000d4ca460434d8e562eacf9d784cb65b59b063484494f7e8b6b2f5060dd89c89edbf0ef57a0979f9"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x8, 0x40000105, 0x0, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x98001, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 33.649512149s ago: executing program 1 (id=7543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000180)='./bus\x00') syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) memfd_create(0x0, 0xb) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="00005200060005000100000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000800) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x70bd27, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357", @ANYBLOB], 0x44}}, 0x0) 32.414095766s ago: executing program 8 (id=7545): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'pimreg1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000de633e20720c130019440102030109021b0001000010000904950001c97bd8000905fd"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="93bf", 0x2}, {0x0}], 0x2}}], 0x1, 0x890) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001300)={{r0}, r7, 0xa, @unused=[0x5, 0x3, 0x98e, 0x7], @subvolid=0x4}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x92, 0x6, 0x2, 0x1, 0x0, 0xf}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x854}, 0x4000040) 31.968901553s ago: executing program 7 (id=7546): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000100000a000000000000000400040030db"], 0x1c}}, 0x0) 31.785509525s ago: executing program 7 (id=7547): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x116}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) close_range(r2, r2, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, 0x0) recvfrom(r5, &(0x7f0000000440)=""/225, 0xe1, 0x40000040, &(0x7f0000000200)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x14) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1002, 0x1, 0x8012, r10, 0x83000000) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f00000002c0)=0x800) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 30.856123187s ago: executing program 7 (id=7548): socket$kcm(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 30.678962958s ago: executing program 6 (id=7549): openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) epoll_create1(0x80000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x80000000008, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2c0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)='4Q', 0x2}, {&(0x7f0000000180)="001591210800", 0x6}, {&(0x7f0000000280)="276406000000f1", 0x7}], 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000400)={0x30, 0x800, 0xf0, 0x10, 0x7fff, 0x2, 0x18, 0x1, {0x5, 0x4}, {0x1f9, 0x3b4a, 0x1}, {0x7, 0x0, 0xfffffffa}, {0x3, 0xdb2}, 0x2, 0x40, 0x3, 0x9, 0x0, 0x88, 0x3, 0x7b9, 0x7, 0x4, 0xffff, 0x62, 0x3, 0x4, 0x0, 0xa}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f00000003c0)={&(0x7f00000002c0)=[r7, r8, 0x0, r9], &(0x7f0000000380)=[0x3, 0x100, 0x800, 0x4], 0xc983, 0x4, 0x4}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 30.371805134s ago: executing program 7 (id=7550): r0 = epoll_create1(0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002000}) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x20040005) 29.648450973s ago: executing program 6 (id=7551): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r7}, 0x38) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c005c63c0559bef62b29c5f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}}, 0x0) 29.572056045s ago: executing program 8 (id=7552): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f6000000000000225c17d", @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 29.075860921s ago: executing program 36 (id=7508): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r4, &(0x7f0000000080)=""/47, 0x2f) madvise(&(0x7f0000d0a000/0x3000)=nil, 0x3000, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0xfffffffffffffd8b, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r8 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r0, &(0x7f0000000100), 0x0) socket$inet(0x2, 0x2, 0x0) 29.005795391s ago: executing program 1 (id=7554): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) write(0xffffffffffffffff, &(0x7f0000000440)="9641a3", 0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bbbbbbbbbb00ffffffffffff86dd6455d759004800fffc01000000000000000000000000000020010000000000000000000000000289030005"], 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r5 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket(0x2, 0x3, 0xff) (rerun: 64) sendmmsg$inet(r6, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001580)=[{0x0, 0xe0}, {&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x2}}], 0x2, 0x488c4) (async) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000200)={r3, r2, 0x4}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x0) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs$pagemap(0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0x4, 0x6}) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 29.004329631s ago: executing program 7 (id=7555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r2, 0x711, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4040044) 28.951016116s ago: executing program 8 (id=7556): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000000000000000180085"], 0x50) 28.418264755s ago: executing program 7 (id=7557): socket$netlink(0x10, 0x3, 0x8000000004) socket$alg(0x26, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@in_dx={0x69, 0x20, {0x7f9, 0x5}}, @nested_create_vm={0x12d, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_load_code={0x12e, 0x6b, {0x7, "66baf80cb860e98987ef66bafc0cb8728d0000ef64448a6f00c421f9f52bb987080000b8fd000000ba000000000f300f0119260f23d642d9ffc4a30549db008f89d89b3366baf80cb818f67c8aef66bafc0ced"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x585, 0xc9, 0x80000000, 0xffffffffffff932b}}, @code={0xa, 0x59, {"0f01c50fc76600c4827959e36464f241a564670fc75d730fc7b050d825d0b968080000b808e144d7ba3f4037280f30c421fc537548b805000000b933ffffff0f01c1672ef30f2246"}}, @nested_load_code={0x12e, 0x73, {0x1, "8f0868eeaaf40000003ab805000000b9c50000000f01d90f515d003e2e0f01d1653e2666470f388216b9800000c00f3235000100000f30b9a4090000b80e970000ba000000000f300f20e035100000000f22e0dce5f3410fc77610"}}, @cpuid={0x64, 0x18, {0x1, 0x3}}, @code={0xa, 0x5e, {"420fc72966400f38805f0666baf80cb8ec9e3f85ef66bafc0cb000ee3e470f0766baf80cb8a8615083ef66bafc0cec66470fc77202c40295025b810f788a37bd00002e0f2210b9520300000f32"}}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x5}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x1, 0x4}}], 0x32d}) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000001700)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r1, 0x0, &(0x7f0000000000), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 28.305869921s ago: executing program 8 (id=7558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) (fail_nth: 4) 24.545464081s ago: executing program 8 (id=7559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback={0x4000000}, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x7b8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf3}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000000740)="7a82bc7ddf50bc4e52c7e0ad9e9d26745e8a4f7eddf7ae3040ae1558665e5a7ccfc6e3b21f4f2d7b3a560b078a10bd992a117f70518617edc90ff678adeb81683c0cdbce86431fe54c", 0x49}, {0x0}], 0x2}}], 0x2, 0x20008050) 7.079587251s ago: executing program 8 (id=7560): socket$kcm(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 37 (id=7554): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) write(0xffffffffffffffff, &(0x7f0000000440)="9641a3", 0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bbbbbbbbbb00ffffffffffff86dd6455d759004800fffc01000000000000000000000000000020010000000000000000000000000289030005"], 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r5 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket(0x2, 0x3, 0xff) (rerun: 64) sendmmsg$inet(r6, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001580)=[{0x0, 0xe0}, {&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x2}}], 0x2, 0x488c4) (async) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000200)={r3, r2, 0x4}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x0) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs$pagemap(0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0x4, 0x6}) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): vice found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2108.764922][T20945] usb 2-1: Using ep0 maxpacket: 16 [ 2108.773603][T20945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2108.785847][T20945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.804024][T20945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2108.845913][T20945] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2108.865192][T20945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.892634][ T6983] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2108.902929][T20945] usb 2-1: config 0 descriptor?? [ 2108.923803][ T6983] usb 9-1: Manufacturer: syz [ 2109.031573][T25918] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7070'. [ 2109.255451][ T6983] usb 9-1: config 0 descriptor?? [ 2109.463652][T20945] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0043/input/input158 [ 2109.605686][T20945] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2110.008242][T25943] fuse: Unknown parameter 'f0xffffffffffffffff' [ 2110.381316][T25956] misc userio: No port type given on /dev/userio [ 2110.429071][ T6983] usb 2-1: USB disconnect, device number 107 [ 2110.580387][T25964] netlink: zone id is out of range [ 2110.893552][T25964] netlink: set zone limit has 4 unknown bytes [ 2111.029226][ T6983] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2111.186520][ T6983] usb 2-1: Using ep0 maxpacket: 16 [ 2111.195295][ T6983] usb 2-1: config 0 has no interfaces? [ 2111.213859][ T6983] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2111.223896][ T6983] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2111.235376][ T6983] usb 2-1: Manufacturer: syz [ 2111.242167][ T6983] usb 2-1: config 0 descriptor?? [ 2112.154660][T20937] usb 9-1: USB disconnect, device number 63 [ 2112.683337][T26040] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 2114.167173][T20945] usb 2-1: USB disconnect, device number 108 [ 2114.460732][T26077] netlink: 'syz.3.7088': attribute type 1 has an invalid length. [ 2114.674982][T20945] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2114.804987][T20945] usb 2-1: device descriptor read/64, error -71 [ 2114.985127][T20937] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2115.067939][T20945] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2115.145050][T20937] usb 4-1: Using ep0 maxpacket: 16 [ 2115.152486][T20937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.163103][T20937] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 2115.178060][T20937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2115.188408][T20937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2115.196847][T20937] usb 4-1: SerialNumber: syz [ 2115.205042][T20945] usb 2-1: device descriptor read/64, error -71 [ 2115.211397][T20937] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 2115.224460][T20937] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 2115.231259][T20937] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 2115.297267][T26109] bridge0: entered allmulticast mode [ 2115.330055][T20945] usb usb2-port1: attempt power cycle [ 2115.588510][T20937] usb 4-1: USB disconnect, device number 7 [ 2115.715420][T20945] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2115.789690][T20945] usb 2-1: device descriptor read/8, error -71 [ 2115.830706][T26135] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 2115.843897][T26137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2115.890349][T26140] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2116.045369][T20945] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2116.094779][T20945] usb 2-1: device descriptor read/8, error -71 [ 2116.206266][T20945] usb usb2-port1: unable to enumerate USB device [ 2117.502601][T26189] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2117.522604][T26189] bond0: (slave lo): Error: Device type is different from other slaves [ 2117.546319][T26189] snd_aloop snd_aloop.0: control 2:1883:2954:syz1:64272 is already present [ 2117.936924][T26203] tipc: Enabling of bearer rejected, already enabled [ 2118.338072][T24037] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2118.353541][T26213] ptrace attach of "./syz-executor exec"[26217] was attempted by "./syz-executor exec"[26213] [ 2118.371466][T26213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7113'. [ 2118.500174][T24037] usb 4-1: Using ep0 maxpacket: 32 [ 2118.511670][T24037] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2118.521646][T24037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.539497][T24037] usb 4-1: config 0 descriptor?? [ 2118.565978][ T6983] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2118.611777][T26226] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7115'. [ 2118.679729][T26226] bridge1: port 1(erspan0) entered blocking state [ 2118.687301][T26226] bridge1: port 1(erspan0) entered disabled state [ 2118.694207][T26226] erspan0: entered allmulticast mode [ 2118.703691][T26226] erspan0: entered promiscuous mode [ 2118.761828][T24037] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2118.773443][ T6983] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.787826][T26226] vlan2: entered allmulticast mode [ 2118.793192][T26226] veth0_to_bond: entered allmulticast mode [ 2118.799905][T26226] bridge1: port 2(vlan2) entered blocking state [ 2118.807768][T26226] bridge1: port 2(vlan2) entered disabled state [ 2118.815418][ T6983] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2118.827722][T24037] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2118.842159][ T6983] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2118.861105][T24037] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2118.870966][T24037] usb 4-1: media controller created [ 2118.877990][ T6983] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2118.892900][T26226] vlan2: entered promiscuous mode [ 2118.901024][ T6983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2118.914287][T26226] veth0_to_bond: entered promiscuous mode [ 2118.924790][ T6983] usb 9-1: SerialNumber: syz [ 2118.956958][T24037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2119.006213][T24037] az6027: usb out operation failed. (-71) [ 2119.012468][T24037] az6027: usb out operation failed. (-71) [ 2119.018525][T24037] stb0899_attach: Driver disabled by Kconfig [ 2119.024704][T24037] az6027: no front-end attached [ 2119.024704][T24037] [ 2119.032788][T24037] az6027: usb out operation failed. (-71) [ 2119.042531][T24037] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2119.065507][T24037] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input159 [ 2119.091324][T24037] dvb-usb: schedule remote query interval to 400 msecs. [ 2119.110352][T24037] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2119.128643][T24037] usb 4-1: USB disconnect, device number 8 [ 2119.527975][ T6983] usb 9-1: USB disconnect, device number 64 [ 2119.603121][T24037] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2120.585753][ T6976] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2120.787474][ T6976] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2120.804892][ T6976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.826390][ T6976] usb 9-1: config 0 descriptor?? [ 2120.853862][T26325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7125'. [ 2120.916081][ T6976] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2120.943023][T26325] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2120.955594][T26325] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2121.146080][T26337] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 2121.278826][T26340] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7128'. [ 2121.857023][ T6976] usb 9-1: USB disconnect, device number 65 [ 2121.946673][T26360] FAULT_INJECTION: forcing a failure. [ 2121.946673][T26360] name failslab, interval 1, probability 0, space 0, times 0 [ 2122.004744][T26360] CPU: 0 UID: 0 PID: 26360 Comm: syz.1.7132 Not tainted syzkaller #0 PREEMPT(full) [ 2122.004767][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2122.004778][T26360] Call Trace: [ 2122.004784][T26360] [ 2122.004792][T26360] dump_stack_lvl+0x189/0x250 [ 2122.004831][T26360] ? __pfx____ratelimit+0x10/0x10 [ 2122.004861][T26360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2122.004889][T26360] ? __pfx__printk+0x10/0x10 [ 2122.004917][T26360] ? __pfx___might_resched+0x10/0x10 [ 2122.004940][T26360] ? fs_reclaim_acquire+0x7d/0x100 [ 2122.004966][T26360] should_fail_ex+0x414/0x560 [ 2122.005005][T26360] should_failslab+0xa8/0x100 [ 2122.005028][T26360] __kvmalloc_node_noprof+0x158/0x910 [ 2122.005062][T26360] ? xt_alloc_table_info+0x40/0xb0 [ 2122.005099][T26360] xt_alloc_table_info+0x40/0xb0 [ 2122.005127][T26360] do_ipt_set_ctl+0x881/0xcd0 [ 2122.005156][T26360] ? rcu_is_watching+0x15/0xb0 [ 2122.005183][T26360] ? trace_contention_end+0x39/0x120 [ 2122.005233][T26360] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2122.005283][T26360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2122.005328][T26360] ? __pfx_aa_sk_perm+0x10/0x10 [ 2122.005365][T26360] nf_setsockopt+0x26f/0x290 [ 2122.005395][T26360] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2122.005430][T26360] do_sock_setsockopt+0x17c/0x1b0 [ 2122.005459][T26360] __x64_sys_setsockopt+0x13f/0x1b0 [ 2122.005489][T26360] do_syscall_64+0xfa/0xfa0 [ 2122.005520][T26360] ? lockdep_hardirqs_on+0x9c/0x150 [ 2122.005551][T26360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.005572][T26360] ? clear_bhb_loop+0x60/0xb0 [ 2122.005599][T26360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.005621][T26360] RIP: 0033:0x7fdb13f8f749 [ 2122.005640][T26360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2122.005660][T26360] RSP: 002b:00007fdb14d95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2122.005685][T26360] RAX: ffffffffffffffda RBX: 00007fdb141e5fa0 RCX: 00007fdb13f8f749 [ 2122.005701][T26360] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2122.005715][T26360] RBP: 00007fdb14d95090 R08: 00000000000003d0 R09: 0000000000000000 [ 2122.005729][T26360] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 2122.005743][T26360] R13: 00007fdb141e6038 R14: 00007fdb141e5fa0 R15: 00007fdb1430fa28 [ 2122.005778][T26360] [ 2122.426051][T26366] bridge0: entered allmulticast mode [ 2122.432623][T26366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7133'. [ 2122.441723][T26366] bridge_slave_1: left allmulticast mode [ 2122.448334][T26366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.464405][T26366] bridge_slave_0: left allmulticast mode [ 2122.471113][T26366] bridge_slave_0: left promiscuous mode [ 2122.477448][T26366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.493856][T26370] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2122.533383][T26366] bridge0 (unregistering): left allmulticast mode [ 2122.572241][T26376] sctp: [Deprecated]: syz.8.7136 (pid 26376) Use of int in max_burst socket option deprecated. [ 2122.572241][T26376] Use struct sctp_assoc_value instead [ 2122.895278][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2122.895298][ T30] audit: type=1326 audit(1764234155.751:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.017119][ T30] audit: type=1326 audit(1764234155.751:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.041245][ T30] audit: type=1326 audit(1764234155.781:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.168895][ T30] audit: type=1326 audit(1764234155.781:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.197612][ T30] audit: type=1326 audit(1764234155.781:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.201267][T20945] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2123.220706][ T30] audit: type=1326 audit(1764234155.801:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.266242][T26400] Invalid logical block size (100663296) [ 2123.355570][ T30] audit: type=1326 audit(1764234155.801:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.396544][ T30] audit: type=1326 audit(1764234155.801:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.475032][ T30] audit: type=1326 audit(1764234155.801:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.484954][T20945] usb 9-1: Using ep0 maxpacket: 32 [ 2123.574714][T26394] vlan3: entered promiscuous mode [ 2123.588006][T26394] team0: entered promiscuous mode [ 2123.611093][ T30] audit: type=1326 audit(1764234155.801:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2123.651308][T26394] team_slave_0: entered promiscuous mode [ 2123.666102][T26394] team_slave_1: entered promiscuous mode [ 2123.845535][ T6976] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2123.882618][T20945] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2123.900525][T20945] usb 9-1: no configurations [ 2123.933349][T20945] usb 9-1: can't read configurations, error -22 [ 2124.004963][ T6976] usb 2-1: Using ep0 maxpacket: 16 [ 2124.047554][ T6976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2124.078698][ T6976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2124.143803][ T6976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2124.203452][ T6976] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2124.244977][ T6976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.276965][ T6976] usb 2-1: config 0 descriptor?? [ 2124.517727][ T6976] microsoft 0003:045E:07DA.0044: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2124.559679][ T6976] microsoft 0003:045E:07DA.0044: no inputs found [ 2124.593884][ T6976] microsoft 0003:045E:07DA.0044: could not initialize ff, continuing anyway [ 2124.709096][T24037] usb 2-1: USB disconnect, device number 113 [ 2124.804702][T26450] fido_id[26450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2124.900315][T26460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7148'. [ 2125.124280][T26484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7150'. [ 2125.180182][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7150'. [ 2125.193132][T26484] bond2 (unregistering): Released all slaves [ 2125.261817][T20945] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2125.425012][T20945] usb 9-1: Using ep0 maxpacket: 16 [ 2125.433596][T20945] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.465757][T20945] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2125.484644][T20945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.502150][T20945] usb 9-1: Product: syz [ 2125.509868][T20945] usb 9-1: Manufacturer: syz [ 2125.529550][T20945] usb 9-1: SerialNumber: syz [ 2125.559654][T20945] usb 9-1: config 0 descriptor?? [ 2125.571971][T20945] mcba_usb 9-1:0.0: Can't find endpoints [ 2125.795777][T26460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7148'. [ 2125.816873][T20945] usb 9-1: USB disconnect, device number 68 [ 2126.613097][T26587] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7157'. [ 2126.750241][T26592] ptrace attach of "./syz-executor exec"[26594] was attempted by "./syz-executor exec"[26592] [ 2126.771457][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7160'. [ 2126.974375][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7159'. [ 2128.138751][T26614] misc userio: The device must be registered before sending interrupts [ 2128.303591][T26619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7163'. [ 2129.052745][T26639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7167'. [ 2129.062291][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7167'. [ 2129.908191][T26653] ptrace attach of "./syz-executor exec"[26654] was attempted by "./syz-executor exec"[26653] [ 2129.920035][T26653] __nla_validate_parse: 3 callbacks suppressed [ 2129.920055][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7171'. [ 2129.963118][T26656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7172'. [ 2130.050990][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7172'. [ 2130.232619][T26658] bond2 (unregistering): Released all slaves [ 2130.581552][T26747] misc userio: The device must be registered before sending interrupts [ 2130.792043][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2130.792063][ T30] audit: type=1326 audit(1764234163.621:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.8.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303278f749 code=0x7ffc0000 [ 2130.823896][ T30] audit: type=1326 audit(1764234163.631:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.8.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303278f749 code=0x7ffc0000 [ 2131.433330][T26760] loop9: detected capacity change from 0 to 7 [ 2131.454448][T26760] Dev loop9: unable to read RDB block 7 [ 2131.472464][T26760] loop9: unable to read partition table [ 2131.485148][T26760] loop9: partition table beyond EOD, truncated [ 2131.533372][T26760] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2132.008373][T26774] misc userio: The device must be registered before sending interrupts [ 2134.356624][T26851] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7190'. [ 2134.805196][ T6983] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2135.085031][ T6983] usb 9-1: Using ep0 maxpacket: 32 [ 2135.138114][ T6983] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2135.219067][ T6983] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2135.245216][ T6983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.265113][ T6983] usb 9-1: Product: syz [ 2135.274563][ T6983] usb 9-1: Manufacturer: syz [ 2135.284750][ T6983] usb 9-1: SerialNumber: syz [ 2135.314604][ T6983] usb 9-1: config 0 descriptor?? [ 2136.352744][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7195'. [ 2136.650475][ T6983] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 2136.658118][T26904] bridge2: port 1(erspan0) entered blocking state [ 2136.666355][T26904] bridge2: port 1(erspan0) entered disabled state [ 2136.673234][ T6983] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 2136.705818][T26904] erspan0: entered allmulticast mode [ 2136.757021][T26904] erspan0: entered promiscuous mode [ 2136.903483][T26905] vlan2: entered allmulticast mode [ 2136.928860][T26905] veth0_to_bond: entered allmulticast mode [ 2136.936991][T26905] bridge2: port 2(vlan2) entered blocking state [ 2136.954024][T26905] bridge2: port 2(vlan2) entered disabled state [ 2136.978186][T26905] vlan2: entered promiscuous mode [ 2136.991666][T26905] veth0_to_bond: entered promiscuous mode [ 2136.996247][T26921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7198'. [ 2137.211518][T26931] sctp: [Deprecated]: syz.7.7200 (pid 26931) Use of int in max_burst socket option. [ 2137.211518][T26931] Use struct sctp_assoc_value instead [ 2137.611873][T20943] usb 9-1: USB disconnect, device number 69 [ 2137.703962][T26941] blktrace: Concurrent blktraces are not allowed on loop4 [ 2137.815771][T26941] dns_resolver: Unsupported content type (89) [ 2139.974960][T24037] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2140.224494][T24037] usb 2-1: Using ep0 maxpacket: 32 [ 2140.289774][T24037] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2140.396480][T24037] usb 2-1: config 0 has no interface number 0 [ 2140.452403][T24037] usb 2-1: config 0 interface 132 has no altsetting 0 [ 2140.495456][T24037] usb 2-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 2140.561661][T24037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.570614][T24037] usb 2-1: Product: syz [ 2140.575785][T24037] usb 2-1: Manufacturer: syz [ 2140.581715][T24037] usb 2-1: SerialNumber: syz [ 2140.590223][T24037] usb 2-1: config 0 descriptor?? [ 2140.955609][T24037] cdc_subset 2-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Belkin, eTEK, or compatible, ce:ac:e2:e4:e5:bd [ 2141.002283][T27034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2141.153054][T24037] usb 2-1: USB disconnect, device number 114 [ 2141.191108][T24037] cdc_subset 2-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Belkin, eTEK, or compatible [ 2141.969460][T27072] netlink: 'syz.8.7220': attribute type 1 has an invalid length. [ 2143.236805][T27108] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7227'. [ 2143.537889][T27133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2143.603337][T20934] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2143.614571][T20943] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 2143.646417][T27133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2143.731278][T20934] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2143.781492][T14769] wlan1: authenticated [ 2143.815737][T13227] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 2143.938500][T13227] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 2144.055015][ T36] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 2144.225483][ T36] wlan1: association with 08:02:11:00:00:00 timed out [ 2144.331307][T20943] usb 9-1: config 0 has an invalid interface number: 110 but max is 0 [ 2144.369351][T20943] usb 9-1: config 0 has no interface number 0 [ 2144.389827][T20943] usb 9-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2144.432764][T20943] usb 9-1: config 0 interface 110 has no altsetting 0 [ 2144.564646][T20943] usb 9-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 2144.583186][T20943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.603222][T20943] usb 9-1: Product: syz [ 2144.614547][T20943] usb 9-1: Manufacturer: syz [ 2144.624700][T20943] usb 9-1: SerialNumber: syz [ 2144.641532][T20943] usb 9-1: config 0 descriptor?? [ 2144.655277][T27114] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2144.802169][T27170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7231'. [ 2144.879164][T27108] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2144.986391][T20943] cdc_subset 9-1:0.110: probe with driver cdc_subset failed with error -22 [ 2144.996947][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7231'. [ 2145.004374][ T30] audit: type=1326 audit(1764234177.851:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.064425][ T30] audit: type=1326 audit(1764234177.851:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.096710][T27170] bond2 (unregistering): Released all slaves [ 2145.175558][ T30] audit: type=1326 audit(1764234177.881:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.212526][ T30] audit: type=1326 audit(1764234177.881:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.268684][T20945] usb 9-1: USB disconnect, device number 70 [ 2145.400008][ T30] audit: type=1326 audit(1764234177.881:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.701120][ T30] audit: type=1326 audit(1764234177.941:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.763470][ T30] audit: type=1326 audit(1764234177.941:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.824269][ T30] audit: type=1326 audit(1764234177.941:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.895180][ T30] audit: type=1326 audit(1764234178.001:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2145.995851][ T30] audit: type=1326 audit(1764234178.021:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb13f8f749 code=0x7ffc0000 [ 2146.050336][T27276] misc userio: No port type given on /dev/userio [ 2146.061575][T27275] misc userio: The device must be registered before sending interrupts [ 2146.339431][T27278] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7236'. [ 2148.100125][T27312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7241'. [ 2148.190706][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7241'. [ 2148.308269][T27312] bond1 (unregistering): Released all slaves [ 2148.559716][T27384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2148.830267][T27393] FAULT_INJECTION: forcing a failure. [ 2148.830267][T27393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2148.894956][T27393] CPU: 1 UID: 0 PID: 27393 Comm: syz.6.7247 Not tainted syzkaller #0 PREEMPT(full) [ 2148.894987][T27393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2148.895001][T27393] Call Trace: [ 2148.895011][T27393] [ 2148.895021][T27393] dump_stack_lvl+0x189/0x250 [ 2148.895057][T27393] ? __pfx____ratelimit+0x10/0x10 [ 2148.895088][T27393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2148.895116][T27393] ? __pfx__printk+0x10/0x10 [ 2148.895139][T27393] ? __might_fault+0xb0/0x130 [ 2148.895183][T27393] should_fail_ex+0x414/0x560 [ 2148.895222][T27393] _copy_from_user+0x2d/0xb0 [ 2148.895252][T27393] smc_setsockopt+0x3b8/0xab0 [ 2148.895292][T27393] ? __pfx_smc_setsockopt+0x10/0x10 [ 2148.895324][T27393] ? aa_sock_opt_perm+0xff/0x1b0 [ 2148.895366][T27393] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2148.895387][T27393] ? __pfx_smc_setsockopt+0x10/0x10 [ 2148.895421][T27393] do_sock_setsockopt+0x17c/0x1b0 [ 2148.895450][T27393] __x64_sys_setsockopt+0x13f/0x1b0 [ 2148.895478][T27393] do_syscall_64+0xfa/0xfa0 [ 2148.895508][T27393] ? lockdep_hardirqs_on+0x9c/0x150 [ 2148.895537][T27393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2148.895558][T27393] ? clear_bhb_loop+0x60/0xb0 [ 2148.895584][T27393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2148.895604][T27393] RIP: 0033:0x7f91c1d8f749 [ 2148.895623][T27393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2148.895642][T27393] RSP: 002b:00007f91c2c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2148.895666][T27393] RAX: ffffffffffffffda RBX: 00007f91c1fe5fa0 RCX: 00007f91c1d8f749 [ 2148.895683][T27393] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000004 [ 2148.895696][T27393] RBP: 00007f91c2c4a090 R08: 0000000000000004 R09: 0000000000000000 [ 2148.895710][T27393] R10: 0000200000001840 R11: 0000000000000246 R12: 0000000000000001 [ 2148.895724][T27393] R13: 00007f91c1fe6038 R14: 00007f91c1fe5fa0 R15: 00007f91c210fa28 [ 2148.895768][T27393] [ 2149.374179][T27415] tipc: Started in network mode [ 2149.390347][T27415] tipc: Node identity 2a7d52fd773c, cluster identity 4711 [ 2149.424258][T27415] tipc: Enabled bearer , priority 0 [ 2149.434887][T27424] syzkaller0: entered promiscuous mode [ 2149.440426][T27424] syzkaller0: entered allmulticast mode [ 2149.543428][T27424] tipc: Resetting bearer [ 2149.584338][T27410] tipc: Resetting bearer [ 2149.623883][T27439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7258'. [ 2149.674532][T27410] tipc: Disabling bearer [ 2149.924081][T27450] tipc: New replicast peer: 255.255.255.255 [ 2149.952734][T27450] tipc: Enabled bearer , priority 10 [ 2150.099363][T27462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7262'. [ 2151.172254][T27509] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7271'. [ 2151.183419][T27509] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7271'. [ 2151.358155][T27515] netlink: 360 bytes leftover after parsing attributes in process `syz.3.7273'. [ 2151.443284][T27520] netlink: 'syz.7.7274': attribute type 12 has an invalid length. [ 2151.489037][T27520] netlink: 'syz.7.7274': attribute type 29 has an invalid length. [ 2151.516910][T27520] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7274'. [ 2151.758425][T27531] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2151.887312][T27539] fuse: Bad value for 'user_id' [ 2151.892252][T27539] fuse: Bad value for 'user_id' [ 2151.965846][T27539] FAULT_INJECTION: forcing a failure. [ 2151.965846][T27539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2151.985320][T20945] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2152.025603][T27539] CPU: 1 UID: 0 PID: 27539 Comm: syz.7.7277 Not tainted syzkaller #0 PREEMPT(full) [ 2152.025633][T27539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2152.025647][T27539] Call Trace: [ 2152.025656][T27539] [ 2152.025666][T27539] dump_stack_lvl+0x189/0x250 [ 2152.025706][T27539] ? __pfx____ratelimit+0x10/0x10 [ 2152.025738][T27539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2152.025768][T27539] ? __pfx__printk+0x10/0x10 [ 2152.025791][T27539] ? __might_fault+0xb0/0x130 [ 2152.025834][T27539] should_fail_ex+0x414/0x560 [ 2152.025872][T27539] _copy_from_iter+0x1de/0x1790 [ 2152.025904][T27539] ? rcu_is_watching+0x15/0xb0 [ 2152.025933][T27539] ? kmalloc_reserve+0xbd/0x290 [ 2152.025954][T27539] ? __pfx__copy_from_iter+0x10/0x10 [ 2152.025981][T27539] ? __build_skb_around+0x262/0x3f0 [ 2152.026005][T27539] ? netlink_sendmsg+0x642/0xb30 [ 2152.026025][T27539] ? skb_put+0x11b/0x210 [ 2152.026049][T27539] netlink_sendmsg+0x6b2/0xb30 [ 2152.026081][T27539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2152.026108][T27539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2152.026142][T27539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2152.026163][T27539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2152.026186][T27539] __sock_sendmsg+0x21c/0x270 [ 2152.026228][T27539] ____sys_sendmsg+0x505/0x830 [ 2152.026259][T27539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2152.026293][T27539] ? import_iovec+0x74/0xa0 [ 2152.026324][T27539] ___sys_sendmsg+0x21f/0x2a0 [ 2152.026351][T27539] ? __pfx____sys_sendmsg+0x10/0x10 [ 2152.026411][T27539] ? __fget_files+0x2a/0x420 [ 2152.026431][T27539] ? __fget_files+0x3a0/0x420 [ 2152.026453][T27539] __x64_sys_sendmsg+0x19b/0x260 [ 2152.026473][T27539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2152.026498][T27539] ? __pfx_ksys_write+0x10/0x10 [ 2152.026523][T27539] ? do_syscall_64+0xbe/0xfa0 [ 2152.026549][T27539] do_syscall_64+0xfa/0xfa0 [ 2152.026570][T27539] ? lockdep_hardirqs_on+0x9c/0x150 [ 2152.026593][T27539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.026608][T27539] ? clear_bhb_loop+0x60/0xb0 [ 2152.026627][T27539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.026642][T27539] RIP: 0033:0x7fa47af8f749 [ 2152.026657][T27539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2152.026670][T27539] RSP: 002b:00007fa47be9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2152.026688][T27539] RAX: ffffffffffffffda RBX: 00007fa47b1e6090 RCX: 00007fa47af8f749 [ 2152.026700][T27539] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 2152.026710][T27539] RBP: 00007fa47be9b090 R08: 0000000000000000 R09: 0000000000000000 [ 2152.026720][T27539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2152.026729][T27539] R13: 00007fa47b1e6128 R14: 00007fa47b1e6090 R15: 00007fa47b30fa28 [ 2152.026753][T27539] [ 2152.379579][T27544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2152.444962][T20945] usb 4-1: device descriptor read/64, error -71 [ 2152.705281][T20943] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2152.814961][T20945] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2152.873421][T20943] usb 2-1: config 0 has no interfaces? [ 2152.895932][T20943] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2152.907993][T20943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.934539][T20943] usb 2-1: Product: syz [ 2152.952337][T20943] usb 2-1: Manufacturer: syz [ 2152.966598][T20945] usb 4-1: device descriptor read/64, error -71 [ 2152.977697][T20943] usb 2-1: SerialNumber: syz [ 2152.996728][T20943] usb 2-1: config 0 descriptor?? [ 2153.085388][T20945] usb usb4-port1: attempt power cycle [ 2153.228972][T27622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7287'. [ 2153.271955][T27549] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.350403][T27622] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode [ 2153.358857][T27622] macvtap1: entered promiscuous mode [ 2153.391231][T27622] mac80211_hwsim hwsim71 wlan1: left promiscuous mode [ 2153.436655][T20945] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2153.468131][T20945] usb 4-1: device descriptor read/8, error -71 [ 2153.514311][T20943] usb 2-1: USB disconnect, device number 115 [ 2153.724922][T20945] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2153.724922][T20934] usb 9-1: new low-speed USB device number 71 using dummy_hcd [ 2153.745630][T20945] usb 4-1: device descriptor read/8, error -71 [ 2153.857305][T20945] usb usb4-port1: unable to enumerate USB device [ 2153.897467][T20934] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2153.912767][T20934] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.934122][T20934] usb 9-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 2153.944030][T20934] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.956106][T20934] usb 9-1: config 0 descriptor?? [ 2154.404187][T20934] glorious 0003:258A:0036.0045: unbalanced collection at end of report description [ 2154.450876][T20934] glorious 0003:258A:0036.0045: probe with driver glorious failed with error -22 [ 2154.483119][T27665] dummy0: entered promiscuous mode [ 2154.524265][T27665] dummy0: left promiscuous mode [ 2154.616329][ T6983] usb 9-1: USB disconnect, device number 71 [ 2155.092743][T27697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7297'. [ 2155.402734][T27706] syzkaller0: entered promiscuous mode [ 2155.420103][T27706] syzkaller0: entered allmulticast mode [ 2155.899494][T27724] pimreg: entered allmulticast mode [ 2156.210520][T20945] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 2156.392619][T20945] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2156.522756][T20945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.668842][T20945] usb 4-1: Product: syz [ 2156.685245][T20945] usb 4-1: Manufacturer: syz [ 2156.700035][T20945] usb 4-1: SerialNumber: syz [ 2156.717207][T20945] usb 4-1: config 0 descriptor?? [ 2157.139362][T20945] airspy 4-1:0.0: Board ID: 00 [ 2157.191421][T20945] airspy 4-1:0.0: Firmware version: [ 2157.941304][T20945] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 2157.973357][T20945] airspy 4-1:0.0: Registered as swradio24 [ 2157.980781][T20945] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2158.004056][T20945] usb 4-1: USB disconnect, device number 13 [ 2158.457251][T27795] ptrace attach of "./syz-executor exec"[27796] was attempted by "./syz-executor exec"[27795] [ 2158.469524][T27795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7312'. [ 2158.662113][T27813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7315'. [ 2158.719726][T27838] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7315'. [ 2158.794931][ T6983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2158.811212][T27813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7315'. [ 2158.823931][T27813] bond2 (unregistering): Released all slaves [ 2158.949888][T27890] netlink: 'syz.1.7318': attribute type 12 has an invalid length. [ 2158.958534][T27890] netlink: 'syz.1.7318': attribute type 29 has an invalid length. [ 2158.966849][T27890] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7318'. [ 2158.978101][T27890] netlink: 'syz.1.7318': attribute type 2 has an invalid length. [ 2158.986989][T27890] netlink: 23 bytes leftover after parsing attributes in process `syz.1.7318'. [ 2158.988663][ T6983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.011106][ T6983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2159.022477][ T6983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2159.035935][ T6983] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 2159.046119][ T6983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.058394][ T6983] usb 4-1: config 0 descriptor?? [ 2159.305669][T27902] FAULT_INJECTION: forcing a failure. [ 2159.305669][T27902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2159.321638][T27902] CPU: 0 UID: 0 PID: 27902 Comm: syz.6.7321 Not tainted syzkaller #0 PREEMPT(full) [ 2159.321668][T27902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2159.321691][T27902] Call Trace: [ 2159.321699][T27902] [ 2159.321710][T27902] dump_stack_lvl+0x189/0x250 [ 2159.321746][T27902] ? __pfx____ratelimit+0x10/0x10 [ 2159.321775][T27902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2159.321802][T27902] ? __pfx__printk+0x10/0x10 [ 2159.321819][T27902] ? fs_reclaim_acquire+0x7d/0x100 [ 2159.321839][T27902] should_fail_ex+0x414/0x560 [ 2159.321881][T27902] prepare_alloc_pages+0x213/0x610 [ 2159.321909][T27902] __alloc_frozen_pages_noprof+0x123/0x370 [ 2159.321936][T27902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2159.321967][T27902] alloc_pages_bulk_noprof+0x560/0x710 [ 2159.321985][T27902] ? trace_kmalloc+0x1f/0xd0 [ 2159.322011][T27902] ? copy_splice_read+0x143/0xa50 [ 2159.322051][T27902] copy_splice_read+0x173/0xa50 [ 2159.322089][T27902] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2159.322120][T27902] ? __pfx_copy_splice_read+0x10/0x10 [ 2159.322141][T27902] ? look_up_lock_class+0x74/0x170 [ 2159.322184][T27902] ? file_end_write+0xd8/0x250 [ 2159.322206][T27902] ? direct_splice_actor+0x10c/0x160 [ 2159.322227][T27902] ? __pfx_copy_splice_read+0x10/0x10 [ 2159.322258][T27902] splice_direct_to_actor+0x4a9/0xcc0 [ 2159.322299][T27902] ? __pfx_direct_splice_actor+0x10/0x10 [ 2159.322319][T27902] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2159.322366][T27902] do_splice_direct+0x181/0x270 [ 2159.322388][T27902] ? __pfx_do_splice_direct+0x10/0x10 [ 2159.322421][T27902] ? common_file_perm+0x1b5/0x230 [ 2159.322448][T27902] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2159.322470][T27902] ? bpf_lsm_file_permission+0x9/0x20 [ 2159.322496][T27902] ? security_file_permission+0x75/0x290 [ 2159.322523][T27902] ? rw_verify_area+0x255/0x4d0 [ 2159.322558][T27902] do_sendfile+0x4da/0x7e0 [ 2159.322575][T27902] ? __pfx_vfs_write+0x10/0x10 [ 2159.322601][T27902] ? __pfx_do_sendfile+0x10/0x10 [ 2159.322623][T27902] ? __fget_files+0x3a0/0x420 [ 2159.322657][T27902] __se_sys_sendfile64+0x13e/0x190 [ 2159.322689][T27902] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2159.322715][T27902] ? do_syscall_64+0xbe/0xfa0 [ 2159.322740][T27902] do_syscall_64+0xfa/0xfa0 [ 2159.322761][T27902] ? lockdep_hardirqs_on+0x9c/0x150 [ 2159.322793][T27902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.322815][T27902] ? clear_bhb_loop+0x60/0xb0 [ 2159.322841][T27902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.322863][T27902] RIP: 0033:0x7f91c1d8f749 [ 2159.322879][T27902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2159.322893][T27902] RSP: 002b:00007f91c2c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2159.322910][T27902] RAX: ffffffffffffffda RBX: 00007f91c1fe5fa0 RCX: 00007f91c1d8f749 [ 2159.322923][T27902] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 2159.322938][T27902] RBP: 00007f91c2c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 2159.322953][T27902] R10: 0000004800000009 R11: 0000000000000246 R12: 0000000000000002 [ 2159.322968][T27902] R13: 00007f91c1fe6038 R14: 00007f91c1fe5fa0 R15: 00007f91c210fa28 [ 2159.323002][T27902] [ 2159.638681][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.690318][ T6983] itetech 0003:048D:8595.0046: item fetching failed at offset 3/7 [ 2159.692459][T27904] veth0_to_team: entered promiscuous mode [ 2159.700491][ T6983] itetech 0003:048D:8595.0046: probe with driver itetech failed with error -22 [ 2159.864490][ T6983] usb 4-1: USB disconnect, device number 14 [ 2159.965242][T20945] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2160.137538][T20945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.148019][T20945] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2160.157300][T20945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.169812][T20945] usb 2-1: config 0 descriptor?? [ 2160.180576][T20945] pwc: Askey VC010 type 2 USB webcam detected. [ 2160.457469][T27931] ptrace attach of "./syz-executor exec"[27932] was attempted by "./syz-executor exec"[27931] [ 2160.469270][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7324'. [ 2160.578996][T20945] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2160.787422][T20945] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2160.795697][T20945] pwc: recv_control_msg error -32 req 04 val 1000 [ 2160.803172][T20945] pwc: recv_control_msg error -32 req 04 val 1300 [ 2160.820597][T20945] pwc: recv_control_msg error -32 req 04 val 1400 [ 2160.828939][T20945] pwc: recv_control_msg error -32 req 02 val 2000 [ 2160.835082][ T6983] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2160.844060][T20945] pwc: recv_control_msg error -32 req 02 val 2100 [ 2160.866157][T20945] pwc: recv_control_msg error -32 req 04 val 1500 [ 2160.874116][T20945] pwc: recv_control_msg error -32 req 02 val 2500 [ 2160.995138][ T6983] usb 4-1: Using ep0 maxpacket: 8 [ 2161.015034][ T6983] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2161.034938][ T6983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.043021][ T6983] usb 4-1: Product: syz [ 2161.054969][ T6983] usb 4-1: Manufacturer: syz [ 2161.060307][ T6983] usb 4-1: SerialNumber: syz [ 2161.069499][ T6983] usb 4-1: config 0 descriptor?? [ 2161.123753][T27952] netlink: 'syz.8.7330': attribute type 5 has an invalid length. [ 2161.134354][T20945] pwc: recv_control_msg error -71 req 02 val 2600 [ 2161.145068][T20945] pwc: recv_control_msg error -71 req 02 val 2900 [ 2161.153660][T20945] pwc: recv_control_msg error -71 req 02 val 2800 [ 2161.161971][T20945] pwc: recv_control_msg error -71 req 04 val 1100 [ 2161.169995][T20945] pwc: recv_control_msg error -71 req 04 val 1200 [ 2161.184264][T20945] pwc: Registered as video103. [ 2161.189045][T27952] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 2161.201183][T20945] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input160 [ 2161.255104][T20945] usb 2-1: USB disconnect, device number 116 [ 2161.293560][ T6983] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2161.824919][T20934] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2161.898055][ T7282] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2161.928043][T26973] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2161.957229][T26973] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2161.985166][T20934] usb 9-1: Using ep0 maxpacket: 32 [ 2162.003341][T20934] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2162.016381][T20934] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2162.037170][T20934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.070203][T27997] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 2162.173369][T28001] ptrace attach of "./syz-executor exec"[28002] was attempted by "./syz-executor exec"[28001] [ 2162.187904][T28001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7336'. [ 2162.197255][T20934] usb 9-1: Product: syz [ 2162.247329][T20934] usb 9-1: Manufacturer: syz [ 2162.323179][T20934] usb 9-1: SerialNumber: syz [ 2162.349995][ T6983] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2162.427363][T20934] usb 9-1: config 0 descriptor?? [ 2162.442736][ T6983] usb 4-1: USB disconnect, device number 15 [ 2163.497121][T28054] ptrace attach of "./syz-executor exec"[28055] was attempted by "./syz-executor exec"[28054] [ 2163.510158][T28054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7347'. [ 2163.629176][T28061] FAULT_INJECTION: forcing a failure. [ 2163.629176][T28061] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.649985][T28061] CPU: 1 UID: 0 PID: 28061 Comm: syz.3.7348 Not tainted syzkaller #0 PREEMPT(full) [ 2163.650017][T28061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2163.650031][T28061] Call Trace: [ 2163.650040][T28061] [ 2163.650055][T28061] dump_stack_lvl+0x189/0x250 [ 2163.650090][T28061] ? __pfx____ratelimit+0x10/0x10 [ 2163.650121][T28061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2163.650151][T28061] ? __pfx__printk+0x10/0x10 [ 2163.650180][T28061] ? __pfx___might_resched+0x10/0x10 [ 2163.650211][T28061] should_fail_ex+0x414/0x560 [ 2163.650259][T28061] should_failslab+0xa8/0x100 [ 2163.650284][T28061] __kmalloc_noprof+0xcb/0x7f0 [ 2163.650315][T28061] ? kfree+0x4d/0x6d0 [ 2163.650340][T28061] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2163.650382][T28061] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2163.650419][T28061] ? tomoyo_domain+0xd9/0x130 [ 2163.650446][T28061] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2163.650475][T28061] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2163.650508][T28061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2163.650580][T28061] ? __fget_files+0x2a/0x420 [ 2163.650607][T28061] ? __fget_files+0x3a0/0x420 [ 2163.650626][T28061] ? __fget_files+0x2a/0x420 [ 2163.650652][T28061] security_file_ioctl+0xcb/0x2d0 [ 2163.650681][T28061] __se_sys_ioctl+0x47/0x170 [ 2163.650714][T28061] do_syscall_64+0xfa/0xfa0 [ 2163.650745][T28061] ? lockdep_hardirqs_on+0x9c/0x150 [ 2163.650777][T28061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.650799][T28061] ? clear_bhb_loop+0x60/0xb0 [ 2163.650825][T28061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.650846][T28061] RIP: 0033:0x7ffa8ef8f749 [ 2163.650866][T28061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.650886][T28061] RSP: 002b:00007ffa8feb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2163.650910][T28061] RAX: ffffffffffffffda RBX: 00007ffa8f1e5fa0 RCX: 00007ffa8ef8f749 [ 2163.650927][T28061] RDX: 0000200000000080 RSI: 0000000040085112 RDI: 0000000000000003 [ 2163.650941][T28061] RBP: 00007ffa8feb5090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.650954][T28061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.650967][T28061] R13: 00007ffa8f1e6038 R14: 00007ffa8f1e5fa0 R15: 00007ffa8f30fa28 [ 2163.651005][T28061] [ 2163.652481][T28061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2163.896812][T20934] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 2163.903966][T20934] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 2164.482916][T28078] netlink: 532 bytes leftover after parsing attributes in process `syz.6.7351'. [ 2164.547081][T24037] usb 9-1: USB disconnect, device number 72 [ 2164.765045][T20934] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2164.773805][T28098] syzkaller0: entered promiscuous mode [ 2164.779526][T28098] syzkaller0: entered allmulticast mode [ 2164.946113][T20934] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2164.962180][T20934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.980953][T20934] usb 4-1: Product: syz [ 2164.986607][T20934] usb 4-1: Manufacturer: syz [ 2164.991264][T20934] usb 4-1: SerialNumber: syz [ 2165.008388][T20934] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2165.027578][T24037] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2165.093602][T20945] hid (null): unknown global tag 0xc [ 2165.112692][T20945] hid (null): global environment stack underflow [ 2165.132733][T20945] hid (null): report_id 2415855846 is invalid [ 2165.152463][T20945] hid (null): unknown global tag 0xc [ 2165.163457][T20945] hid (null): invalid report_size -1124615906 [ 2165.171084][T20945] hid (null): unknown global tag 0xd [ 2165.171676][T28120] syzkaller0: entered promiscuous mode [ 2165.177771][T20945] hid (null): global environment stack underflow [ 2165.185195][T28120] syzkaller0: entered allmulticast mode [ 2165.189807][T20945] hid (null): unknown global tag 0xe [ 2165.200291][T20945] hid (null): unknown global tag 0xc [ 2165.211569][T20945] hid (null): unknown global tag 0xd [ 2165.231739][T20945] hid (null): unknown global tag 0xc [ 2165.237587][T28120] tipc: Enabled bearer , priority 0 [ 2165.240242][T20945] hid (null): global environment stack underflow [ 2165.252156][T20945] hid (null): unknown global tag 0xc [ 2165.260800][T20945] hid (null): unknown global tag 0xd [ 2165.269612][T20945] hid (null): global environment stack underflow [ 2165.282114][T20945] hid (null): nested delimiters [ 2165.288449][T20945] hid (null): invalid report_count 960157254 [ 2165.294687][T20945] hid (null): unknown global tag 0xe [ 2165.302320][T20945] hid (null): invalid report_size -1136775471 [ 2165.309365][T20945] hid (null): unknown global tag 0xe [ 2165.315406][T20945] hid (null): unknown global tag 0xd [ 2165.321045][T20945] hid (null): global environment stack underflow [ 2165.327612][T20945] hid (null): unknown global tag 0xc [ 2165.333149][T20945] hid (null): global environment stack underflow [ 2165.340384][T20945] hid (null): unknown global tag 0xe [ 2165.346150][T20945] hid (null): invalid report_size 41408 [ 2165.351790][T20945] hid (null): invalid report_count 13941 [ 2165.359625][T20945] hid (null): report_id 41273 is invalid [ 2165.366669][T28120] tipc: Resetting bearer [ 2165.368432][T20945] hid (null): unknown global tag 0xcf [ 2165.382564][T20945] hid (null): unknown global tag 0xd [ 2165.391555][T28119] tipc: Resetting bearer [ 2165.400378][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7358'. [ 2165.409770][T20945] hid (null): bogus close delimiter [ 2165.409807][T20945] hid (null): unknown global tag 0xc [ 2165.409866][T20945] hid (null): unknown global tag 0xd [ 2165.426915][T20945] hid (null): unknown global tag 0xa4 [ 2165.449758][T28119] tipc: Disabling bearer [ 2165.459014][T20945] hid (null): report_id 0 is invalid [ 2165.477395][T20945] hid (null): report_id 2057488900 is invalid [ 2165.499192][T20945] hid (null): invalid report_size -769267612 [ 2165.515453][T20945] hid-generic 0000:8001:0007.0047: unknown main item tag 0x2 [ 2165.523022][T20945] hid-generic 0000:8001:0007.0047: unknown global tag 0xc [ 2165.533560][T20945] hid-generic 0000:8001:0007.0047: item 0 2 1 12 parsing failed [ 2165.544412][T20945] hid-generic 0000:8001:0007.0047: probe with driver hid-generic failed with error -22 [ 2165.689905][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.701485][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.985859][T28162] misc userio: No port type given on /dev/userio [ 2165.993244][T28162] misc userio: The device must be registered before sending interrupts [ 2166.096141][T24037] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2166.120851][T24037] ath9k_htc: Failed to initialize the device [ 2166.161289][T24037] usb 4-1: ath9k_htc: USB layer deinitialized [ 2166.536043][T20934] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2166.714987][T20934] usb 2-1: Using ep0 maxpacket: 32 [ 2166.731955][T20934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2166.747404][T20934] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2166.760316][T20934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.788462][T20934] usb 2-1: Product: syz [ 2166.867542][T20934] usb 2-1: Manufacturer: syz [ 2166.965566][T20934] usb 2-1: SerialNumber: syz [ 2166.976963][T20934] usb 2-1: config 0 descriptor?? [ 2167.019425][T28176] fuse: Unknown parameter 'f0xffffffffffffffff' [ 2167.486347][T28164] erspan0: left allmulticast mode [ 2167.491465][T28164] erspan0: left promiscuous mode [ 2167.498935][T28164] bridge2: port 1(erspan0) entered disabled state [ 2167.572868][T28164] vlan2: entered allmulticast mode [ 2167.580498][T28164] veth0_to_bond: entered allmulticast mode [ 2167.593303][T20945] usb 4-1: USB disconnect, device number 16 [ 2168.148172][T28206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2168.348266][T20934] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 2168.372540][T20934] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 2168.713635][T28217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7369'. [ 2169.088251][T28222] program syz.7.7371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2169.377799][T20945] usb 2-1: USB disconnect, device number 117 [ 2169.756836][T28247] FAULT_INJECTION: forcing a failure. [ 2169.756836][T28247] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.809864][T28247] CPU: 0 UID: 0 PID: 28247 Comm: syz.8.7374 Not tainted syzkaller #0 PREEMPT(full) [ 2169.809892][T28247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2169.809902][T28247] Call Trace: [ 2169.809910][T28247] [ 2169.809917][T28247] dump_stack_lvl+0x189/0x250 [ 2169.809944][T28247] ? __pfx____ratelimit+0x10/0x10 [ 2169.809966][T28247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2169.809987][T28247] ? __pfx__printk+0x10/0x10 [ 2169.810007][T28247] ? __pfx___might_resched+0x10/0x10 [ 2169.810027][T28247] should_fail_ex+0x414/0x560 [ 2169.810055][T28247] should_failslab+0xa8/0x100 [ 2169.810073][T28247] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2169.810095][T28247] ? radix_tree_node_alloc+0x7e/0x3a0 [ 2169.810119][T28247] radix_tree_node_alloc+0x7e/0x3a0 [ 2169.810145][T28247] idr_get_free+0x2b3/0xa70 [ 2169.810174][T28247] idr_alloc_u32+0x159/0x2d0 [ 2169.810200][T28247] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2169.810231][T28247] u32_change+0x124c/0x26b0 [ 2169.810259][T28247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2169.810290][T28247] ? __pfx_u32_change+0x10/0x10 [ 2169.810319][T28247] ? lockdep_rtnl_is_held+0x26/0x40 [ 2169.810337][T28247] ? u32_lookup_ht+0x1b7/0x1d0 [ 2169.810360][T28247] tc_new_tfilter+0xdca/0x15b0 [ 2169.810400][T28247] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2169.810442][T28247] ? __pfx_tc_new_tfilter+0x10/0x10 [ 2169.810459][T28247] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2169.810483][T28247] ? __lock_acquire+0xab9/0xd20 [ 2169.810501][T28247] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2169.810526][T28247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2169.810563][T28247] netlink_rcv_skb+0x208/0x470 [ 2169.810577][T28247] ? __lock_acquire+0xab9/0xd20 [ 2169.810592][T28247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2169.810618][T28247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2169.810642][T28247] ? netlink_deliver_tap+0x2e/0x1b0 [ 2169.810668][T28247] netlink_unicast+0x82f/0x9e0 [ 2169.810698][T28247] ? __pfx_netlink_unicast+0x10/0x10 [ 2169.810723][T28247] ? netlink_sendmsg+0x642/0xb30 [ 2169.810738][T28247] ? skb_put+0x11b/0x210 [ 2169.810756][T28247] netlink_sendmsg+0x805/0xb30 [ 2169.810780][T28247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.810797][T28247] ? rcu_is_watching+0x15/0xb0 [ 2169.810814][T28247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2169.810840][T28247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2169.810855][T28247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.810872][T28247] __sock_sendmsg+0x21c/0x270 [ 2169.810896][T28247] ____sys_sendmsg+0x505/0x830 [ 2169.810918][T28247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2169.810942][T28247] ? import_iovec+0x74/0xa0 [ 2169.810966][T28247] ___sys_sendmsg+0x21f/0x2a0 [ 2169.810985][T28247] ? __pfx____sys_sendmsg+0x10/0x10 [ 2169.811029][T28247] ? __fget_files+0x2a/0x420 [ 2169.811043][T28247] ? __fget_files+0x3a0/0x420 [ 2169.811066][T28247] __x64_sys_sendmsg+0x19b/0x260 [ 2169.811085][T28247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2169.811110][T28247] ? __pfx_ksys_write+0x10/0x10 [ 2169.811135][T28247] ? do_syscall_64+0xbe/0xfa0 [ 2169.811162][T28247] do_syscall_64+0xfa/0xfa0 [ 2169.811184][T28247] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.811206][T28247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2169.811222][T28247] ? clear_bhb_loop+0x60/0xb0 [ 2169.811241][T28247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2169.811263][T28247] RIP: 0033:0x7f303278f749 [ 2169.811277][T28247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2169.811292][T28247] RSP: 002b:00007f30336c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2169.811309][T28247] RAX: ffffffffffffffda RBX: 00007f30329e6090 RCX: 00007f303278f749 [ 2169.811321][T28247] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 2169.811331][T28247] RBP: 00007f30336c6090 R08: 0000000000000000 R09: 0000000000000000 [ 2169.811341][T28247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.811351][T28247] R13: 00007f30329e6128 R14: 00007f30329e6090 R15: 00007f3032b0fa28 [ 2169.811376][T28247] [ 2171.806289][T28339] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7379'. [ 2172.125805][T20945] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2172.325995][T28362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7383'. [ 2172.417632][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7384'. [ 2172.495826][T20945] usb 9-1: Using ep0 maxpacket: 32 [ 2172.513539][T20945] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2172.571081][T20945] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2172.673084][T20945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.704948][T24037] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2172.714261][T20945] usb 9-1: Product: syz [ 2172.723664][T20945] usb 9-1: Manufacturer: syz [ 2172.740548][T20945] usb 9-1: SerialNumber: syz [ 2172.772287][T20945] usb 9-1: config 0 descriptor?? [ 2173.054912][T24037] usb 2-1: Using ep0 maxpacket: 32 [ 2173.073425][T24037] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2173.095373][T24037] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2173.123389][T24037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.140614][T24037] usb 2-1: Product: syz [ 2173.145146][T24037] usb 2-1: Manufacturer: syz [ 2173.149796][T24037] usb 2-1: SerialNumber: syz [ 2173.168344][T24037] usb 2-1: config 0 descriptor?? [ 2173.632835][T28364] bridge3: port 1(erspan0) entered blocking state [ 2173.673186][T28364] bridge3: port 1(erspan0) entered disabled state [ 2173.707499][T28364] erspan0: entered allmulticast mode [ 2173.721133][T28364] erspan0: entered promiscuous mode [ 2173.824563][T28364] vlan2: entered allmulticast mode [ 2173.859742][T28364] bridge3: port 2(vlan2) entered blocking state [ 2173.868757][T28364] bridge3: port 2(vlan2) entered disabled state [ 2173.911925][T28364] vlan2: entered promiscuous mode [ 2173.917497][T28364] veth0_to_bond: entered promiscuous mode [ 2174.225703][T20945] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 2174.262941][T20945] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 2174.406226][T24037] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 2174.451695][T24037] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 2175.244579][T28403] Cannot find set identified by id 4 to match [ 2175.362577][T24037] usb 9-1: USB disconnect, device number 73 [ 2175.909424][T20945] usb 2-1: USB disconnect, device number 118 [ 2175.926986][T24037] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2176.124908][T24037] usb 4-1: device descriptor read/64, error -71 [ 2176.176669][T28443] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7397'. [ 2176.385309][T24037] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2176.524949][T24037] usb 4-1: device descriptor read/64, error -71 [ 2176.635552][T24037] usb usb4-port1: attempt power cycle [ 2176.750726][T28459] netlink: 'syz.1.7402': attribute type 1 has an invalid length. [ 2176.817132][T28459] bond2: entered promiscuous mode [ 2176.822518][T28459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2176.994982][T24037] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2177.017765][T24037] usb 4-1: device descriptor read/8, error -71 [ 2177.181707][T28503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7406'. [ 2177.221484][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 2177.221505][ T30] audit: type=1326 audit(1764234210.071:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.6.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c1d8f749 code=0x7ffc0000 [ 2177.261873][T28532] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7406'. [ 2177.262039][ T30] audit: type=1326 audit(1764234210.071:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.6.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f91c1d8f749 code=0x7ffc0000 [ 2177.294093][T24037] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2177.301893][ T30] audit: type=1326 audit(1764234210.071:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.6.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c1d8f749 code=0x7ffc0000 [ 2177.313254][T28503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7406'. [ 2177.324341][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.325155][ T30] audit: type=1326 audit(1764234210.071:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.6.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c1d8f749 code=0x7ffc0000 [ 2177.363798][T24037] usb 4-1: device descriptor read/8, error -71 [ 2177.381462][ T30] audit: type=1326 audit(1764234210.071:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.6.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f91c1d8f749 code=0x7ffc0000 [ 2177.404009][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.425417][T28503] bond3 (unregistering): Released all slaves [ 2177.477218][T24037] usb usb4-port1: unable to enumerate USB device [ 2178.145098][T24037] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2178.317288][T24037] usb 9-1: config 95 has an invalid interface number: 16 but max is 0 [ 2178.330492][T24037] usb 9-1: config 95 has no interface number 0 [ 2178.357666][T24037] usb 9-1: config 95 interface 16 has no altsetting 0 [ 2178.381491][T28590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7409'. [ 2178.408809][T24037] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2178.432675][T28591] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7409'. [ 2178.458467][T24037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.467955][T24037] usb 9-1: Product: syz [ 2178.472189][T24037] usb 9-1: Manufacturer: syz [ 2178.477715][T24037] usb 9-1: SerialNumber: syz [ 2178.486699][T28596] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7409'. [ 2178.582266][T28596] bond2 (unregistering): Released all slaves [ 2179.113056][T28675] FAULT_INJECTION: forcing a failure. [ 2179.113056][T28675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2179.157452][T28675] CPU: 1 UID: 0 PID: 28675 Comm: syz.3.7413 Not tainted syzkaller #0 PREEMPT(full) [ 2179.157487][T28675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2179.157501][T28675] Call Trace: [ 2179.157509][T28675] [ 2179.157519][T28675] dump_stack_lvl+0x189/0x250 [ 2179.157554][T28675] ? __pfx____ratelimit+0x10/0x10 [ 2179.157584][T28675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2179.157614][T28675] ? __pfx__printk+0x10/0x10 [ 2179.157649][T28675] should_fail_ex+0x414/0x560 [ 2179.157688][T28675] _copy_from_user+0x2d/0xb0 [ 2179.157719][T28675] copy_from_sockptr_offset+0x66/0xa0 [ 2179.157748][T28675] do_ipt_set_ctl+0x8ae/0xcd0 [ 2179.157777][T28675] ? rcu_is_watching+0x15/0xb0 [ 2179.157803][T28675] ? trace_contention_end+0x39/0x120 [ 2179.157829][T28675] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2179.157877][T28675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2179.157921][T28675] ? __pfx_aa_sk_perm+0x10/0x10 [ 2179.157955][T28675] nf_setsockopt+0x26f/0x290 [ 2179.157985][T28675] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2179.158020][T28675] do_sock_setsockopt+0x17c/0x1b0 [ 2179.158049][T28675] __x64_sys_setsockopt+0x13f/0x1b0 [ 2179.158079][T28675] do_syscall_64+0xfa/0xfa0 [ 2179.158113][T28675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.158135][T28675] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2179.158157][T28675] ? clear_bhb_loop+0x60/0xb0 [ 2179.158184][T28675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.158205][T28675] RIP: 0033:0x7ffa8ef8f749 [ 2179.158226][T28675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.158246][T28675] RSP: 002b:00007ffa8feb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2179.158270][T28675] RAX: ffffffffffffffda RBX: 00007ffa8f1e5fa0 RCX: 00007ffa8ef8f749 [ 2179.158286][T28675] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2179.158300][T28675] RBP: 00007ffa8feb5090 R08: 00000000000003d0 R09: 0000000000000000 [ 2179.158315][T28675] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 2179.158330][T28675] R13: 00007ffa8f1e6038 R14: 00007ffa8f1e5fa0 R15: 00007ffa8f30fa28 [ 2179.158374][T28675] [ 2179.378802][ C1] vkms_vblank_simulate: vblank timer overrun [ 2179.423012][T20945] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 2179.647121][T20945] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2179.706754][T20945] usb 2-1: config 1 has no interface number 0 [ 2179.728102][T28690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2179.780475][T20945] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2179.811438][T20945] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 2179.823136][T20945] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 2179.836455][T20945] usb 2-1: Product: syz [ 2179.844091][T20945] usb 2-1: Manufacturer: syz [ 2179.855966][T20945] usb 2-1: SerialNumber: syz [ 2179.878842][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7415'. [ 2180.077157][T28701] [†’Ì: entered promiscuous mode [ 2180.637009][T28669] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2180.744503][T28669] netlink: 'syz.1.7411': attribute type 10 has an invalid length. [ 2180.832485][T28669] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2181.195277][T24037] usb 9-1: USB disconnect, device number 74 [ 2181.358271][ T3244] udevd[3244]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:95.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2181.534913][T11917] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 2181.556467][T28746] fuse: Unknown parameter 'rootmo00000040000' [ 2181.738330][T20945] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 2181.787319][T20945] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 2181.813368][T20945] usb 2-1: USB disconnect, device number 119 [ 2182.331220][T28784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2183.404920][T20945] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2183.568690][T20945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.591221][T20945] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2183.608538][T20945] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 2183.618449][T20945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.627416][T20945] usb 2-1: Product: syz [ 2183.632915][T20945] usb 2-1: Manufacturer: syz [ 2183.638397][T20945] usb 2-1: SerialNumber: syz [ 2183.656740][T20945] usb 2-1: config 0 descriptor?? [ 2183.889445][T24037] usb 2-1: USB disconnect, device number 120 [ 2184.472334][T28832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7439'. [ 2185.519027][T28851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7446'. [ 2185.828204][T28871] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.7452'. [ 2185.853013][T28871] openvswitch: netlink: Flow actions attr not present in new flow. [ 2185.991551][T28879] xt_ipcomp: unknown flags 1D [ 2186.014468][T28881] pimreg: left allmulticast mode [ 2186.792887][T28895] bond2: option arp_all_targets: invalid value (18446744073290121217) [ 2186.903307][T28895] bond2 (unregistering): Released all slaves [ 2188.085303][T20945] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 2188.262437][T20945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2188.282310][T20945] usb 4-1: not running at top speed; connect to a high speed hub [ 2188.315036][T20945] usb 4-1: config 3 has an invalid interface number: 146 but max is 0 [ 2188.344253][T20945] usb 4-1: config 3 has no interface number 0 [ 2188.363021][T20945] usb 4-1: config 3 interface 146 has no altsetting 0 [ 2188.378257][T20945] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 2188.412930][T20945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.448311][T20945] usb 4-1: Product: syz [ 2188.461105][T20945] usb 4-1: Manufacturer: syz [ 2188.469379][T20945] usb 4-1: SerialNumber: syz [ 2188.559232][T29031] blktrace: Concurrent blktraces are not allowed on loop4 [ 2188.609236][T29031] dns_resolver: Unsupported content type (89) [ 2188.702113][T29034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.837778][T29034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.940469][T20945] cdc_ether 4-1:3.146: More than one union descriptor, skipping ... [ 2188.978312][T20945] usb 4-1: bad CDC descriptors [ 2188.996731][T20945] usb 4-1: unsupported MDLM descriptors [ 2189.032411][T20945] usb 4-1: USB disconnect, device number 21 [ 2190.156261][ T30] audit: type=1326 audit(1764234223.011:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.230341][ T30] audit: type=1326 audit(1764234223.011:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.291363][ T30] audit: type=1326 audit(1764234223.011:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.351297][T29086] netlink: 1124 bytes leftover after parsing attributes in process `syz.3.7473'. [ 2190.405175][ T30] audit: type=1326 audit(1764234223.011:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.465164][T20944] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2190.495276][ T30] audit: type=1326 audit(1764234223.021:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.524359][ T30] audit: type=1326 audit(1764234223.041:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.559191][ T30] audit: type=1326 audit(1764234223.041:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.559283][T29089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2190.583654][ T30] audit: type=1326 audit(1764234223.041:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.630945][ T30] audit: type=1326 audit(1764234223.051:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.655165][ T30] audit: type=1326 audit(1764234223.051:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29066 comm="syz.3.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8ef8f749 code=0x7ffc0000 [ 2190.685011][T20944] usb 9-1: device descriptor read/64, error -71 [ 2190.720155][T29089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2190.835594][T29089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2190.850512][T29089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.944894][T20944] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2191.063645][T29102] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7480'. [ 2191.074904][T20944] usb 9-1: device descriptor read/64, error -71 [ 2191.185311][T20944] usb usb9-port1: attempt power cycle [ 2191.195286][T29104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7481'. [ 2191.525071][T20944] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2191.545674][T20944] usb 9-1: device descriptor read/8, error -71 [ 2191.784972][T20944] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 2191.836793][T20944] usb 9-1: device descriptor read/8, error -71 [ 2191.946287][T20944] usb usb9-port1: unable to enumerate USB device [ 2193.055435][T20944] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2193.205137][T20944] usb 4-1: Using ep0 maxpacket: 16 [ 2193.217961][T20944] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2193.227417][T20944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.238350][T20944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2193.258284][T20944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2193.272967][T20944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.282411][T20944] usb 4-1: Product: syz [ 2193.288140][T20944] usb 4-1: Manufacturer: syz [ 2193.292791][T20944] usb 4-1: SerialNumber: syz [ 2193.330648][T29141] xt_l2tp: v2 doesn't support IP mode [ 2193.716082][T20944] usb 4-1: 0:2 : does not exist [ 2193.750880][T29172] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2193.758857][T29172] team0: Device ipvlan2 is already an upper device of the team interface [ 2194.136399][T20944] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 2194.148625][ T6983] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 2194.210512][T20944] usb 4-1: USB disconnect, device number 22 [ 2194.328286][ T6983] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 2194.349961][ T6983] usb 9-1: config 0 has no interface number 0 [ 2194.356805][ T6983] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2194.368970][ T6983] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2194.382584][ T6983] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2194.397951][ T6983] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2194.409476][ T6983] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2194.418007][ T6983] usb 9-1: Product: syz [ 2194.422584][ T6983] usb 9-1: SerialNumber: syz [ 2194.436019][ T6983] usb 9-1: config 0 descriptor?? [ 2194.453200][ T6983] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 2194.464710][ T6983] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input161 [ 2194.741496][T29194] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2194.759607][T29194] kvm: pic: non byte read [ 2194.764720][T29194] kvm: pic: level sensitive irq not supported [ 2194.766720][T29194] kvm: pic: non byte read [ 2195.105292][T20944] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2195.179966][ C1] cm109_urb_ctl_callback: 19 callbacks suppressed [ 2195.179995][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2195.194943][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2195.202127][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2195.209467][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2195.220283][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2195.229220][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2195.236687][T24037] usb 9-1: USB disconnect, device number 79 [ 2195.244049][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2195.251045][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2195.259585][T20944] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2195.261286][T24037] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2195.286774][T20944] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 2195.321241][T20944] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 2195.345918][T20944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.366081][T20944] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2195.376505][T20944] usb 4-1: config 0 has no interface number 0 [ 2195.382639][T20944] usb 4-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2195.408639][T20944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2195.436270][T20944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.456001][T20944] usb 4-1: Product: syz [ 2195.460238][T20944] usb 4-1: Manufacturer: syz [ 2195.465724][T20944] usb 4-1: SerialNumber: syz [ 2195.487125][T20944] usb 4-1: config 0 descriptor?? [ 2195.788621][T20944] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2195.798261][T20944] usb 4-1: MIDIStreaming interface descriptor not found [ 2195.864973][T20945] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 2195.879361][T20944] usb 4-1: USB disconnect, device number 23 [ 2196.035423][T20945] usb 2-1: Invalid ep0 maxpacket: 32 [ 2196.185231][T20945] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 2196.357736][T20945] usb 2-1: Invalid ep0 maxpacket: 32 [ 2196.373174][T20945] usb usb2-port1: attempt power cycle [ 2196.448181][T29303] netlink: 'syz.3.7504': attribute type 3 has an invalid length. [ 2196.465880][T29303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7504'. [ 2196.478022][T29303] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2196.486167][T29303] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2196.520747][T29307] batman_adv: batadv0: Adding interface: vxlan0 [ 2196.527396][T29307] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2196.552656][ C1] vkms_vblank_simulate: vblank timer overrun [ 2196.559538][T29307] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 2196.731205][T20945] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 2196.797706][T20945] usb 2-1: Invalid ep0 maxpacket: 32 [ 2196.947718][T20945] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 2196.959315][T29333] xt_hashlimit: size too large, truncated to 1048576 [ 2196.986934][T20945] usb 2-1: Invalid ep0 maxpacket: 32 [ 2197.017237][T20945] usb usb2-port1: unable to enumerate USB device [ 2197.985200][ T6983] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 2198.220239][ T6983] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 2198.234247][ T6983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.255223][ T6983] usb 9-1: config 0 has no interface number 0 [ 2198.314107][ T6983] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2198.323822][ T6983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.337325][ T6983] usb 9-1: Product: syz [ 2198.359872][ T6983] usb 9-1: Manufacturer: syz [ 2198.364625][ T6983] usb 9-1: SerialNumber: syz [ 2198.388808][ T6983] usb 9-1: config 0 descriptor?? [ 2198.399524][ T6983] hub 9-1:0.31: bad descriptor, ignoring hub [ 2198.408562][ T6983] hub 9-1:0.31: probe with driver hub failed with error -5 [ 2198.459740][T29360] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7514'. [ 2198.493072][ T6983] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2198.511627][ T6983] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized! [ 2198.529885][ T6983] uvcvideo 9-1:0.31: Failed to create links for entity 6 [ 2198.549189][ T6983] uvcvideo 9-1:0.31: Failed to register entities (-22). [ 2198.682498][T29368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2198.721690][T29368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.905492][T20934] usb 9-1: USB disconnect, device number 80 [ 2199.340458][T29390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7516'. [ 2200.674978][T20945] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2200.784911][T20944] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2200.815126][T20945] usb 9-1: device descriptor read/64, error -71 [ 2200.957597][T20944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2201.002349][T20944] usb 2-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 2201.012343][T20944] usb 2-1: config 66 interface 0 has no altsetting 0 [ 2201.032789][T20944] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 2201.084139][T20944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.102776][T20945] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2201.305422][T20944] usb 2-1: Product: syz [ 2201.325830][T20944] usb 2-1: Manufacturer: syz [ 2201.330483][T20944] usb 2-1: SerialNumber: syz [ 2201.362850][T29446] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2201.454986][T20945] usb 9-1: device descriptor read/64, error -71 [ 2201.575070][T20945] usb usb9-port1: attempt power cycle [ 2202.030620][T20945] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2202.158803][T20945] usb 9-1: device descriptor read/8, error -71 [ 2202.435245][T20945] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2202.645363][T20945] usb 9-1: device descriptor read/8, error -71 [ 2202.765444][T20945] usb usb9-port1: unable to enumerate USB device [ 2203.839625][T20944] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 2203.880485][T20944] usb 2-1: USB disconnect, device number 125 [ 2204.095940][ T6983] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2204.262978][T29519] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2204.278497][ T6983] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.292488][T29519] bridge0: port 3(veth0_to_bridge) entered disabled state [ 2204.318995][T29519] veth0_to_bridge: entered allmulticast mode [ 2204.331818][ T6983] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2204.344546][T29519] veth0_to_bridge: entered promiscuous mode [ 2204.353615][ T6983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.359074][T29519] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2204.375750][T29519] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2204.383041][T29519] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 2204.435370][ T6983] usb 9-1: Product: syz [ 2204.439616][ T6983] usb 9-1: Manufacturer: syz [ 2204.444328][ T6983] usb 9-1: SerialNumber: syz [ 2205.524347][ T6983] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2205.576111][ T6983] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2205.595311][ T6983] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 2205.737679][ T6983] cdc_ncm 9-1:1.0: setting tx_max = 28 [ 2205.774435][ T6983] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2205.809461][ T6983] usb 9-1: USB disconnect, device number 85 [ 2205.827990][ T6983] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 2206.834965][ T6983] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2206.987811][ T6983] usb 9-1: Using ep0 maxpacket: 32 [ 2207.011575][ T6983] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 2207.024640][ T6983] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2207.034102][ T6983] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2207.043990][ T6983] usb 9-1: config 1 has no interface number 0 [ 2207.051366][ T6983] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2207.074926][ T6983] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 2207.089650][ T6983] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2207.137416][ T6983] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2207.168581][ T6983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.238745][T29584] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2207.301771][ T6983] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 2207.573351][T29585] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2207.648769][ T6983] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 2208.321328][ T6983] usb 9-1: USB disconnect, device number 86 [ 2208.409350][ T6983] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 2209.148188][T29655] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 2209.394986][ T6983] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2209.834194][ T6983] usb 9-1: Using ep0 maxpacket: 32 [ 2210.072649][ T6983] usb 9-1: config 0 has an invalid interface number: 149 but max is 0 [ 2210.089043][ T6983] usb 9-1: config 0 has no interface number 0 [ 2210.110560][ T6983] usb 9-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2210.145805][ T6983] usb 9-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2210.174933][ T6983] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 2210.185119][ T6983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.206624][ T6983] usb 9-1: Product: syz [ 2210.222170][ T6983] usb 9-1: Manufacturer: syz [ 2210.237635][ T6983] usb 9-1: SerialNumber: syz [ 2210.268857][ T6983] usb 9-1: config 0 descriptor?? [ 2210.529646][ T6983] usb 9-1: USB disconnect, device number 87 [ 2211.766727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.779573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.792279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.804895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.817494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.830090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.842726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.855345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.867924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.880509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2211.880829][T29706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7551'. [ 2213.136848][T29725] FAULT_INJECTION: forcing a failure. [ 2213.136848][T29725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2213.503933][T29725] CPU: 0 UID: 0 PID: 29725 Comm: syz.8.7558 Not tainted syzkaller #0 PREEMPT(full) [ 2213.503965][T29725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2213.503980][T29725] Call Trace: [ 2213.503990][T29725] [ 2213.504000][T29725] dump_stack_lvl+0x189/0x250 [ 2213.504037][T29725] ? __pfx____ratelimit+0x10/0x10 [ 2213.504081][T29725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2213.504115][T29725] ? __pfx__printk+0x10/0x10 [ 2213.504152][T29725] should_fail_ex+0x414/0x560 [ 2213.504192][T29725] _copy_to_user+0x31/0xb0 [ 2213.504224][T29725] simple_read_from_buffer+0xe1/0x170 [ 2213.504264][T29725] proc_fail_nth_read+0x1b3/0x220 [ 2213.504297][T29725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2213.504329][T29725] ? rw_verify_area+0x2a6/0x4d0 [ 2213.504359][T29725] ? __lock_acquire+0xab9/0xd20 [ 2213.504379][T29725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2213.504410][T29725] vfs_read+0x200/0xa30 [ 2213.504439][T29725] ? fdget_pos+0x247/0x320 [ 2213.504466][T29725] ? __pfx___mutex_lock+0x10/0x10 [ 2213.504501][T29725] ? __pfx_vfs_read+0x10/0x10 [ 2213.504533][T29725] ? __fget_files+0x2a/0x420 [ 2213.504560][T29725] ? __fget_files+0x3a0/0x420 [ 2213.504580][T29725] ? __fget_files+0x2a/0x420 [ 2213.504612][T29725] ksys_read+0x145/0x250 [ 2213.504646][T29725] ? __pfx_ksys_read+0x10/0x10 [ 2213.504682][T29725] ? do_syscall_64+0xbe/0xfa0 [ 2213.504719][T29725] do_syscall_64+0xfa/0xfa0 [ 2213.504750][T29725] ? lockdep_hardirqs_on+0x9c/0x150 [ 2213.504780][T29725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2213.504800][T29725] ? clear_bhb_loop+0x60/0xb0 [ 2213.504827][T29725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2213.504849][T29725] RIP: 0033:0x7f303278e15c [ 2213.504870][T29725] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2213.504890][T29725] RSP: 002b:00007f30336e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2213.504915][T29725] RAX: ffffffffffffffda RBX: 00007f30329e5fa0 RCX: 00007f303278e15c [ 2213.504932][T29725] RDX: 000000000000000f RSI: 00007f30336e70a0 RDI: 0000000000000004 [ 2213.504947][T29725] RBP: 00007f30336e7090 R08: 0000000000000000 R09: 0000000000000000 [ 2213.504961][T29725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2213.504975][T29725] R13: 00007f30329e6038 R14: 00007f30329e5fa0 R15: 00007f3032b0fa28 [ 2213.505012][T29725] [ 2216.248371][T29706] erspan0: left allmulticast mode [ 2216.293398][T29706] erspan0: left promiscuous mode [ 2216.334685][T29706] bridge2: port 1(erspan0) entered disabled state [ 2216.400740][T29735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2216.499565][T29735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2216.547932][T29735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2216.758771][T29735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2216.774956][ C1] net_ratelimit: 14183 callbacks suppressed [ 2216.774979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.775505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.775992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.776481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.776967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.777486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.777963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.778480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.778963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2216.779440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2217.398670][T29735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2221.610679][T29735] Bluetooth: hci2: command tx timeout [ 2221.785616][ C0] net_ratelimit: 9353 callbacks suppressed [ 2221.785641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2221.785803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2221.792542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2221.805161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2221.816616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2221.829071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2221.841173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2221.853097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2221.864745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2221.877157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2224.134572][T29735] Bluetooth: hci2: command tx timeout [ 2225.424816][ C0] sched: DL replenish lagged too much [ 2226.530558][T29735] Bluetooth: hci2: command tx timeout [ 2226.795375][ C1] net_ratelimit: 7395 callbacks suppressed [ 2226.795399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2226.796373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2226.802664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2226.814712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2226.826681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2226.838780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2226.850810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2226.862822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2226.874862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2226.886854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2227.540057][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.559707][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2228.851961][T29735] Bluetooth: hci2: command tx timeout [ 2231.805456][ C1] net_ratelimit: 7612 callbacks suppressed [ 2231.805480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2231.806252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2231.812796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2231.824738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2231.836832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2231.848876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2231.860879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2231.872947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2231.885023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2231.896982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2236.815254][ C1] net_ratelimit: 7488 callbacks suppressed [ 2236.815263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2236.815279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2236.816559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2236.822505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2236.834981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2236.846627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2236.858595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2236.870660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2236.882708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2236.894682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2241.825612][ C1] net_ratelimit: 7627 callbacks suppressed [ 2241.825620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2241.825634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2241.827103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2241.832849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2241.845078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2241.856949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2241.869178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2241.882083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2241.893424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2241.905148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2246.835307][ C1] net_ratelimit: 7894 callbacks suppressed [ 2246.835325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2246.835331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2246.836643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2246.842525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2246.854637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2246.866638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2246.878684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2246.890740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2246.902740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2246.914845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2251.845025][ C0] net_ratelimit: 7563 callbacks suppressed [ 2251.845049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2251.845357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2251.852385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2251.864312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2251.876487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2251.888371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2251.900690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2251.912615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2251.928240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2251.940122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2256.855228][ C1] net_ratelimit: 7539 callbacks suppressed [ 2256.855252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2256.855697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2256.862579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2256.874612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2256.886745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2256.898582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2256.910813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2256.922799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2256.935266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2256.947395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2261.865984][ C1] net_ratelimit: 7549 callbacks suppressed [ 2261.866008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2261.866337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2261.873256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2261.885338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2261.897406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2261.909464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2261.921512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2261.933498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2261.945596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2261.957644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2266.874916][ C0] net_ratelimit: 7557 callbacks suppressed [ 2266.874940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2266.874978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2266.882363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2266.894378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2266.906314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2266.918352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2266.930464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2266.942475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2266.954448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2266.966424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2271.884857][ C0] net_ratelimit: 7354 callbacks suppressed [ 2271.884881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2271.885391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2271.892288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2271.904196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2271.916320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2271.928678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2271.940368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2271.952283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2271.964392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2271.976296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2276.895318][ C1] net_ratelimit: 7594 callbacks suppressed [ 2276.895342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2276.895478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2276.902695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2276.914791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2276.927189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2276.938823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2276.950823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2276.962835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2276.975021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2276.986977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2281.905010][ C1] net_ratelimit: 7529 callbacks suppressed [ 2281.905033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2281.905990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2281.912222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2281.924400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2281.936356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2281.948489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2281.960356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2281.972512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2281.984384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2281.997435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2286.915447][ C1] net_ratelimit: 7422 callbacks suppressed [ 2286.915472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2286.915716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2286.922823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2286.934719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2286.946906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2286.958806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2286.970909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2286.982807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2286.995008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2287.006933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2291.512224][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2291.531419][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2291.925616][ C0] net_ratelimit: 7616 callbacks suppressed [ 2291.925640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2291.925809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2291.933870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2291.944992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2291.957270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2291.969046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2291.981245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2291.993267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2292.005321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2292.017229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2296.935144][ C1] net_ratelimit: 7494 callbacks suppressed [ 2296.935169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2296.935575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2296.942732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2296.954696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2296.966735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2296.978757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2296.990601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2297.002797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2297.014703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2297.026860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2301.945145][ C1] net_ratelimit: 7350 callbacks suppressed [ 2301.945168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2301.945193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2301.952459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2301.964665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2301.976528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2301.988828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2302.000680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2302.015332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2302.024988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2302.036904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2306.954851][ C0] net_ratelimit: 7396 callbacks suppressed [ 2306.954874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2306.955617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2306.962195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2306.974264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2306.986342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2306.998353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2307.010347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2307.022358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2307.034424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2307.046437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2311.964829][ C0] net_ratelimit: 7478 callbacks suppressed [ 2311.964852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2311.965706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2311.972061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2311.984256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2311.996088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2312.008421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2312.020199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2312.032318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2312.044276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2312.056521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2316.974922][ C0] net_ratelimit: 7579 callbacks suppressed [ 2316.974947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2316.975178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2316.982683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2316.994325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2317.006262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2317.018425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2317.030325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2317.042446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2317.054356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2317.066527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2321.274758][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2321.281789][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29332/1:b..l P38/1:b..l [ 2321.291544][ C1] rcu: (detected by 1, t=10503 jiffies, g=289273, q=7055 ncpus=2) [ 2321.299485][ C1] task:khugepaged state:R running task stack:26664 pid:38 tgid:38 ppid:2 task_flags:0x200040 flags:0x00080000 [ 2321.315056][ C1] Call Trace: [ 2321.318378][ C1] [ 2321.321341][ C1] __schedule+0x1798/0x4cc0 [ 2321.325914][ C1] ? __pfx___schedule+0x10/0x10 [ 2321.330819][ C1] ? psi_group_change+0xab8/0x1050 [ 2321.335989][ C1] preempt_schedule_notrace+0xd1/0x110 [ 2321.341495][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 2321.347617][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 2321.352867][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 2321.358811][ C1] ? __flush_work+0xd2/0xbc0 [ 2321.363452][ C1] rcu_is_watching+0x7f/0xb0 [ 2321.368095][ C1] lock_acquire+0x5f/0x360 [ 2321.372551][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 2321.378669][ C1] __flush_work+0xf3/0xbc0 [ 2321.383130][ C1] ? __flush_work+0xd2/0xbc0 [ 2321.387756][ C1] ? __queue_work+0x102/0xfb0 [ 2321.392474][ C1] ? __flush_work+0xd2/0xbc0 [ 2321.397123][ C1] ? __pfx___flush_work+0x10/0x10 [ 2321.402199][ C1] ? queue_work_on+0x1ed/0x270 [ 2321.407005][ C1] ? __pfx___might_resched+0x10/0x10 [ 2321.412325][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2321.417567][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 2321.422715][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2321.428645][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2321.435038][ C1] __lru_add_drain_all+0x56a/0x5e0 [ 2321.440193][ C1] khugepaged+0x197/0x16a0 [ 2321.444669][ C1] ? __pfx_khugepaged+0x10/0x10 [ 2321.449559][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2321.455670][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2321.461792][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2321.467730][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2321.472974][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2321.478925][ C1] ? __kthread_parkme+0x7b/0x200 [ 2321.483904][ C1] ? __kthread_parkme+0x1a1/0x200 [ 2321.488973][ C1] kthread+0x711/0x8a0 [ 2321.493089][ C1] ? __pfx_khugepaged+0x10/0x10 [ 2321.497974][ C1] ? __pfx_kthread+0x10/0x10 [ 2321.502613][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2321.507887][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2321.513140][ C1] ? __pfx_kthread+0x10/0x10 [ 2321.517864][ C1] ret_from_fork+0x4bc/0x870 [ 2321.522473][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2321.527594][ C1] ? __switch_to_asm+0x39/0x70 [ 2321.532358][ C1] ? __switch_to_asm+0x33/0x70 [ 2321.537150][ C1] ? __pfx_kthread+0x10/0x10 [ 2321.541751][ C1] ret_from_fork_asm+0x1a/0x30 [ 2321.546540][ C1] [ 2321.549567][ C1] task:syz.3.7508 state:R running task stack:24904 pid:29332 tgid:29321 ppid:13589 task_flags:0x400040 flags:0x00080003 [ 2321.563251][ C1] Call Trace: [ 2321.566542][ C1] [ 2321.569473][ C1] __schedule+0x1798/0x4cc0 [ 2321.574005][ C1] ? __pfx___schedule+0x10/0x10 [ 2321.578896][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 2321.584187][ C1] preempt_schedule_irq+0xb5/0x150 [ 2321.589301][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2321.595031][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2321.600840][ C1] irqentry_exit+0x6f/0x90 [ 2321.605259][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2321.611237][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 2321.617400][ C1] Code: 06 77 3c f6 90 0f 0b 90 90 90 eb c4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d a7 46 36 04 00 74 1e 83 3d aa 75 36 04 00 [ 2321.637006][ C1] RSP: 0018:ffffc9000d8676e0 EFLAGS: 00000246 [ 2321.643080][ C1] RAX: ffffffff845ef63d RBX: ffff888026231180 RCX: 0000000000080000 [ 2321.651053][ C1] RDX: ffffc90010e68000 RSI: 000000000007ffff RDI: 0000000000080000 [ 2321.659022][ C1] RBP: ffffffff845ef450 R08: ffff888026231067 R09: 1ffff11004c4620c [ 2321.667000][ C1] R10: dffffc0000000000 R11: ffffed1004c4620d R12: dffffc0000000000 [ 2321.674972][ C1] R13: ffffffff845ef450 R14: 0000000000000000 R15: 1ffff11004c46230 [ 2321.682969][ C1] ? af_alg_wmem_wakeup+0xb0/0x440 [ 2321.688090][ C1] ? af_alg_wmem_wakeup+0xb0/0x440 [ 2321.693205][ C1] ? af_alg_wmem_wakeup+0x29d/0x440 [ 2321.698413][ C1] af_alg_wmem_wakeup+0x2a2/0x440 [ 2321.703445][ C1] skcipher_recvmsg+0x115c/0x11d0 [ 2321.708476][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2321.713848][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2321.719059][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2321.724790][ C1] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2321.730172][ C1] ? skcipher_check_key+0x173/0x1e0 [ 2321.735377][ C1] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 2321.741278][ C1] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 2321.747182][ C1] sock_recvmsg_nosec+0x186/0x1c0 [ 2321.752227][ C1] ____sys_recvmsg+0x3aa/0x460 [ 2321.756999][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2321.762296][ C1] ? import_iovec+0x74/0xa0 [ 2321.766809][ C1] ___sys_recvmsg+0x1b5/0x510 [ 2321.771497][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 2321.776724][ C1] ? __might_fault+0xb0/0x130 [ 2321.781409][ C1] do_recvmmsg+0x307/0x770 [ 2321.785840][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 2321.790792][ C1] ? __pfx_do_futex+0x10/0x10 [ 2321.795490][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 2321.800521][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2321.806071][ C1] ? do_syscall_64+0xbe/0xfa0 [ 2321.810758][ C1] do_syscall_64+0xfa/0xfa0 [ 2321.815277][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2321.821344][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2321.826978][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2321.831661][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2321.837554][ C1] RIP: 0033:0x7ffa8ef8f749 [ 2321.841970][ C1] RSP: 002b:00007ffa8fe73038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2321.850381][ C1] RAX: ffffffffffffffda RBX: 00007ffa8f1e6180 RCX: 00007ffa8ef8f749 [ 2321.858354][ C1] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000007 [ 2321.866335][ C1] RBP: 00007ffa8f013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2321.874305][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2321.882276][ C1] R13: 00007ffa8f1e6218 R14: 00007ffa8f1e6180 R15: 00007ffa8f30fa28 [ 2321.890263][ C1] [ 2321.985451][ C0] net_ratelimit: 6733 callbacks suppressed [ 2321.985473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2321.986029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2321.992701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2322.005093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2322.017387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2322.029188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2322.040947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2322.054307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2322.065106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2322.077010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2326.994880][ C0] net_ratelimit: 7485 callbacks suppressed [ 2326.994903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2326.996419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2327.002433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2327.014206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2327.026694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2327.038479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2327.050642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2327.062603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0) [ 2327.074712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2327.086613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:cd:8c:b0:1a:cc, vlan:0)