last executing test programs: 55m19.989032063s ago: executing program 1 (id=29): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x7eacfa71abeb3756}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x40001, 0x0, [0xca9, 0x3, 0x2, 0xffffffffffff98c3, 0x5, 0x4, 0x7, 0x8]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55m19.292497969s ago: executing program 1 (id=33): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) 55m18.843876086s ago: executing program 1 (id=35): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x7, 0x2, 0x200, 0xa2, 0x1, 0x6, 0x8, 0x800}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0xac7}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 55m18.048836487s ago: executing program 1 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 55m17.60381438s ago: executing program 1 (id=37): r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r6 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) 55m16.073719276s ago: executing program 1 (id=41): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000340)='./file0\x00', 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x200, &(0x7f0000002800)=0x0) io_destroy(r1) r2 = epoll_create1(0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b57900000000000000000800010000000000"], 0x20}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0x12}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0x1, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000380)="8799bef58b1c4d7b1ebda07349d4c6d87276b50700f356c4edf9c4026e338a7350ffcc9a64b6b5a9b77e428d1f5279ead58b1c7c0a7364", 0x37, 0x4}]) 55m15.138290816s ago: executing program 32 (id=41): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000340)='./file0\x00', 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x200, &(0x7f0000002800)=0x0) io_destroy(r1) r2 = epoll_create1(0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b57900000000000000000800010000000000"], 0x20}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0x12}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0x1, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000380)="8799bef58b1c4d7b1ebda07349d4c6d87276b50700f356c4edf9c4026e338a7350ffcc9a64b6b5a9b77e428d1f5279ead58b1c7c0a7364", 0x37, 0x4}]) 35m34.74186728s ago: executing program 2 (id=2706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000180003801400008008000340000000020500064052000000140000001100"], 0xc8}}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) 35m32.731022147s ago: executing program 2 (id=2714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 35m32.211314429s ago: executing program 2 (id=2725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 35m31.005321087s ago: executing program 2 (id=2717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x48) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x5}]}, 0x18}}, 0xc000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x819ef, 0x5c2f460d, 0x1, 0x27fd, 0x2, 0x3, 0x40bb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 35m29.895264157s ago: executing program 2 (id=2720): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x80b) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES64=r3], 0x20) 35m29.813617873s ago: executing program 2 (id=2721): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$fuse(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26", 0x2f) accept4(r2, 0x0, 0x0, 0x80000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 35m28.869500627s ago: executing program 33 (id=2721): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$fuse(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26", 0x2f) accept4(r2, 0x0, 0x0, 0x80000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 31m25.501575351s ago: executing program 5 (id=3228): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x2}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="580000001400192340024b80040d8c560aff820fffff5bab003a0000002058000b4835ca945f010ebc000000000000008000f0fffeffe809005300fff5dd00000010400100030c100000000000224e0000d9af4c4ccf6c01", 0x58}], 0x1) 31m22.627803413s ago: executing program 5 (id=3236): r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="10200500c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r4, 0x1) 31m18.669353526s ago: executing program 5 (id=3244): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00004ad000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) read(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x2025, 0x7}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x200000005c831, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) 31m15.973962217s ago: executing program 5 (id=3250): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x2000, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00'}}]}}, 0x0, 0x0, &(0x7f0000000440)="38e3938fdf3305b2c4946e470376cb874c91844e18a4964abb57aa6470c07f6faf664c1384d0d0db92be9eceb7c4699364e93702db657ea309032c91bcadaf25df2ed4f4b02ea55fbf7ee4301a4f8518be6e161e1d30ff10d170a9ef540c00f992e5b251edb39ab994bd9377f81d004fbb332cb8da21ff82cd4c1e44d808f6a4a3288fe6317493cc2238d9") fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000080)=')%\x00', &(0x7f0000000180)='.\x00', r4) sendfile(r3, r3, 0x0, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0xe3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000040)={0x1, 0x28, 0x8, 0x1}) 31m14.525712417s ago: executing program 5 (id=3253): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 31m10.98703395s ago: executing program 5 (id=3269): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x5, 0x200b}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x51}]}}, "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"}}, 0xfce) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000079c0)={0x2020}, 0x2020) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {}, {}, {0x7, 0x0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @tail_call]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffe, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) waitid(0x0, r1, 0x0, 0xc1000004, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000180)='cpuset\x00') 30m55.547987866s ago: executing program 34 (id=3269): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x5, 0x200b}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x51}]}}, "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"}}, 0xfce) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000079c0)={0x2020}, 0x2020) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {}, {}, {0x7, 0x0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @tail_call]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffe, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) waitid(0x0, r1, 0x0, 0xc1000004, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000180)='cpuset\x00') 20.274266027s ago: executing program 7 (id=6344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) syz_usb_connect(0x4, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="846d8da59d13ab5c681ae92ec0bba21f9519f427d09c59da57233b39a7c2c8d1e52b87c33d567ff38885cecc18e810d6171aa4d22fe7774a66141382282ae7f52a6fda08c5efa2641c9ed77184369c908c5fcb80386f8514beb4b9782ad55f1bdf01eb81822afd661d1951b4dfbe23f6a370e12a6c01cf8fc8e14726daf3f163f2c162", @ANYRES8, @ANYRES16, @ANYRES64=r1], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x4, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x100006, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 18.417656221s ago: executing program 0 (id=6346): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501043) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 16.844131045s ago: executing program 7 (id=6350): socket$key(0xf, 0x3, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x9e1, 0x0, 0x0, 0x1, 0x2, 0x800}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xf63ca0d1cb10f77c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 16.843786709s ago: executing program 4 (id=6351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000045be2ec2ad6904884afc720be7df2d5473"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x80000000, 0x7, 0xffff]}, &(0x7f0000000240)=0x44) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000140)={0x2, {0x3, 0x2, 0x87c2, 0xc6}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000007060500000000000000000005000005050001000700000008000640000000050900020073797a31"], 0x30}, 0x1, 0x0, 0x0, 0x44011}, 0x10) 14.392487462s ago: executing program 4 (id=6355): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000d80)={0x3fffffff, 0x100, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4", 0x0, 0xffffffff, 0x40000, 0x5, 0x90}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a31000000002800048024000180090001006d6574610003000014000280080002400000000208000340000000160900020073790000140000001100010000000000000000000100000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) r7 = syz_open_dev$vcsn(&(0x7f0000000d00), 0xdd, 0x121800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000cc0)={0x2001}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000540)={0x1d2, [0x4, 0x7, 0x3, 0x58d6, 0xff, 0x4, 0xe98, 0xffff, 0x4371, 0xc14, 0x0, 0x1, 0xe, 0x8d26, 0xffff, 0x40, 0x3, 0x9, 0x7, 0x4, 0x10, 0x6, 0x101, 0xff, 0xf, 0x40, 0x3, 0x6, 0x9, 0x1, 0x2, 0xff, 0x6, 0x1000, 0xf, 0x1, 0x7f, 0x8, 0x13d8, 0x4, 0xc, 0x7, 0x8, 0x1, 0x7f, 0x5, 0x49, 0x6], 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 13.74882799s ago: executing program 0 (id=6366): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x4028af11, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000001340)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x6, 0x1, 0x20, @mcast2, @private1, 0x8000, 0x700, 0xba7d, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40040) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 13.510631476s ago: executing program 3 (id=6357): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0xe, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x110802, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0xb5315258, 0x2, @stepwise={0x1, 0xb69, 0x3, 0xf, 0x7, 0xe}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)}], 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) r5 = socket$inet6(0xa, 0x805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000001080)=0xfec) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r7, 0x9}}, 0x10) close(r6) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 12.426259665s ago: executing program 7 (id=6358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a000000020001", 0x7) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x11a, 0x23, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB]) 12.374632603s ago: executing program 4 (id=6359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000400)={0x81, 0x5, 0x7f, 0xffffffee, '\x00', '\x00', '\x00', 0x98f, 0x6, 0x9, 0x7, "3994f06af3aa8a684b8d09dcf50fe358"}) close(r3) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x8902, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "84307d1ae9d294ca"}}}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000240)=0xc, 0x4) 11.138623018s ago: executing program 3 (id=6360): syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "53ba09"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0, 0x2000000}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)={0x40000010}) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) unshare(0x6a040000) 10.675744685s ago: executing program 7 (id=6361): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r3, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) unshare(0x62040200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x41, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f3050000f99b355dcb6ab9ed"}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000019600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x50, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xf2, 0x45}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0xfffffffd, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 9.745380465s ago: executing program 6 (id=6362): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x25) 9.311146035s ago: executing program 0 (id=6363): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x40, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x82, 0xf4, 0xc8, 0x40, 0x545, 0x8080, 0x301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x0, 0x0, 0x20, 0xd, 0x19}}]}}]}}, 0x0) 9.1312766s ago: executing program 6 (id=6364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a000000020001", 0x7) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000380), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x11a, 0x23, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, 0x0, 0x8081) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB]) splice(r0, &(0x7f00000002c0)=0xff, r2, &(0x7f0000000300)=0x8, 0x8b, 0x0) 8.508779018s ago: executing program 4 (id=6365): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x400007, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0x30, r4, 0xfffff000) write$binfmt_register(r4, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '(', 0x3a, '', 0x3a, './file0'}, 0x28) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x1, 0x101, 0x60, r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc, &(0x7f00000004c0)=0xa, 0x0, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000140)) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0684113, &(0x7f0000000380)={0x1, 0xa, 0x0, 0x1003, 0x8000, 0x0, 0xffffffed, 0xb, 0x0, 0x0, 0x800001, 0x2}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000003640)={0x0, "45ee5b5df4bf409af30639042ad9234d746d4220894e9e34673882f53a403c50", 0x2, 0x1}) 7.77573027s ago: executing program 3 (id=6367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) gettid() r2 = socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$netlink(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r5, 0x1, 0x28, 0x0, &(0x7f0000000400)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 7.216995394s ago: executing program 7 (id=6368): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x1e, 0x1, 0x0) recvmmsg(r3, &(0x7f0000001240), 0x0, 0x0, 0x0) shutdown(r3, 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000640)=""/201, 0xc9, 0x0, 0x2, 0x2}}, 0x48) 7.115024525s ago: executing program 6 (id=6369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(0x0, 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r6, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @local}}, [0x9, 0x8, 0x0, 0x7fffffffffffffff, 0x1, 0xf, 0x838, 0x7, 0x9, 0x3ff, 0x5, 0x100000000, 0x2, 0x4, 0x2]}, &(0x7f0000000040)=0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x8, 0x2d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 7.033437222s ago: executing program 4 (id=6370): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000600), 0x0}, 0x20) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc1485544, &(0x7f00000001c0)=0x4e1) r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) write$UHID_DESTROY(r4, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x60500, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0xde4, 0x2) connect(0xffffffffffffffff, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) close(r6) 5.63619878s ago: executing program 6 (id=6371): inotify_init() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @local}}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, 0x0, 0x3) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x10}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) ioctl$UFFDIO_COPY(r7, 0xc028aa03, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x80}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) 4.864083781s ago: executing program 0 (id=6372): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x25) 4.616450682s ago: executing program 3 (id=6373): r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0x4}, {0x2, 0x8}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000800}, 0xc004090) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x20, 0x0, 0x0, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x3, 0x0, 0x65f7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@local, 0x1e, 0x1c, 0x14}]}, 0x100}}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) unshare(0x20000400) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000600)={[&(0x7f0000000440)='=\'@\x96\x00']}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x218101, 0x0) r10 = openat$full(0xffffff9c, &(0x7f0000000040), 0x408800, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xe265}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x48, 0xef8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf03b, 0x15}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xd8}}, 0x0) syz_open_pts(r10, 0x100) 4.166342266s ago: executing program 6 (id=6374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a000000020001", 0x7) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000380), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x11a, 0x23, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, 0x0, 0x8081) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB]) splice(r0, &(0x7f00000002c0)=0xff, r2, &(0x7f0000000300)=0x8, 0x8b, 0x0) 4.1196302s ago: executing program 3 (id=6375): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PORT_SELF={0x4}, @IFLA_MTU={0x8, 0x4, 0x13a}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x40}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 4.077159265s ago: executing program 7 (id=6376): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 3.944696142s ago: executing program 4 (id=6377): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x40, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x82, 0xf4, 0xc8, 0x40, 0x545, 0x8080, 0x301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x0, 0x0, 0x20, 0xd, 0x19}}]}}]}}, 0x0) 2.440282163s ago: executing program 0 (id=6378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb4b, 0x9, 0x18, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r4, 0x1ff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000000c0)="ab", 0xffe0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 291.926791ms ago: executing program 6 (id=6379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a000000020001", 0x7) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000380), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x11a, 0x23, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, 0x0, 0x8081) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB]) splice(r0, &(0x7f00000002c0)=0xff, r2, &(0x7f0000000300)=0x8, 0x8b, 0x0) 135.288289ms ago: executing program 3 (id=6380): socket(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0x2020) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) syz_io_uring_setup(0x83f, &(0x7f0000000180)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x2, 0x4, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x64, 0x0, 0x2, 0x29, 0x0, @loopback, @multicast1}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x406881, 0xa5) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x21b, 0x109880}) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 0 (id=6381): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x68) syz_open_dev$sndctrl(0x0, 0x0, 0x20201) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) sysinfo(0x0) kernel console output (not intermixed with test programs): at=1 ip=0xf707e539 code=0x7ffc0000 [ 3127.617037][ T30] audit: type=1326 audit(1756944608.691:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1646 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3129.116285][ C1] net_ratelimit: 10 callbacks suppressed [ 3129.116316][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3129.129237][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3129.276172][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3129.283264][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3129.529174][ T1706] netlink: 'syz.6.5896': attribute type 3 has an invalid length. [ 3129.537179][ T1706] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5896'. [ 3130.161063][ T1694] netlink: 'syz.0.5895': attribute type 21 has an invalid length. [ 3130.169527][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3130.169755][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3130.259253][ T1694] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5895'. [ 3130.294963][ T1710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3130.316186][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3130.323308][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3130.393683][ T1694] netlink: 'syz.0.5895': attribute type 4 has an invalid length. [ 3130.538632][ T1694] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5895'. [ 3130.831502][ T1697] batadv3: entered promiscuous mode [ 3130.876633][ T1697] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 3131.196211][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3134.316152][ C1] net_ratelimit: 11 callbacks suppressed [ 3134.316177][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3134.329160][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3134.476180][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3134.483348][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3135.356202][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3135.363477][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3135.516160][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3135.523654][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3136.396141][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3136.403387][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3139.516228][ C1] net_ratelimit: 10 callbacks suppressed [ 3139.516249][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3139.529306][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3139.676223][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3139.677075][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5910'. [ 3139.683375][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3140.556165][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3140.563663][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3140.607417][ T1789] usb usb8: usbfs: process 1789 (syz.0.5913) did not claim interface 0 before use [ 3140.620312][ T1789] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3140.716199][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3140.723506][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3141.596155][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3141.603409][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3143.681861][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.702843][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.716136][ C1] net_ratelimit: 11 callbacks suppressed [ 3144.716160][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3144.729854][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3144.876215][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3144.883432][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3145.756160][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3145.763398][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3145.916168][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3145.923311][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3146.021045][ T1839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5922'. [ 3146.458872][ T1844] netlink: 'syz.4.5923': attribute type 3 has an invalid length. [ 3146.467446][ T1844] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5923'. [ 3146.796175][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3146.803383][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3149.002759][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 3149.002776][ T30] audit: type=1326 audit(1756944632.091:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1857 comm="syz.0.5926" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa2539 code=0x0 [ 3149.916236][ C1] net_ratelimit: 10 callbacks suppressed [ 3149.916261][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3149.929401][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3150.076272][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3150.083579][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3150.190798][ T1873] tipc: Enabling of bearer rejected, already enabled [ 3150.540372][ T30] audit: type=1326 audit(1756944633.631:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3150.956375][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3150.963634][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3151.116194][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3151.123543][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3151.204257][ T30] audit: type=1326 audit(1756944633.631:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3151.306686][ T30] audit: type=1326 audit(1756944633.631:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3151.336655][ T30] audit: type=1326 audit(1756944633.631:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3151.470526][ T30] audit: type=1326 audit(1756944633.631:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3151.996163][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3152.003383][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3152.033502][ T30] audit: type=1326 audit(1756944633.631:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3152.271609][ T30] audit: type=1326 audit(1756944633.631:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3152.511079][ T1897] PKCS7: Unknown OID: [5] (bad) [ 3152.520236][ T1897] PKCS7: Only support pkcs7_signedData type [ 3152.530993][ T30] audit: type=1326 audit(1756944633.631:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3152.554392][ T30] audit: type=1326 audit(1756944633.631:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3155.116201][ C1] net_ratelimit: 10 callbacks suppressed [ 3155.116226][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3155.129454][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3155.276197][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3155.283379][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3156.156366][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3156.163712][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3156.316145][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3156.323350][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3156.766809][ T1915] sctp: [Deprecated]: syz.3.5934 (pid 1915) Use of int in maxseg socket option. [ 3156.766809][ T1915] Use struct sctp_assoc_value instead [ 3157.196176][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3157.203760][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3157.413231][ T1934] netlink: 'syz.7.5938': attribute type 21 has an invalid length. [ 3158.591433][ T1934] netlink: 'syz.7.5938': attribute type 6 has an invalid length. [ 3158.610339][ T1934] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5938'. [ 3160.095758][ T1950] netlink: 'syz.6.5941': attribute type 10 has an invalid length. [ 3160.150445][ T1950] team0: Port device dummy0 added [ 3160.316148][ C1] net_ratelimit: 10 callbacks suppressed [ 3160.316170][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3160.329488][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3160.476246][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3160.483448][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3161.356186][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3161.363813][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3161.516171][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3161.523591][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3161.976847][ T1960] binder: BINDER_SET_CONTEXT_MGR already set [ 3161.983141][ T1960] binder: 1959:1960 ioctl 4018620d 80004a80 returned -16 [ 3162.050081][ T1963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5943'. [ 3162.098748][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 3162.098773][ T30] audit: type=1400 audit(1756944645.151:3954): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A043AFA3D98F4CEB15D7D9D76F5145C571CE5 pid=1959 comm="syz.4.5943" [ 3162.127117][ C1] vkms_vblank_simulate: vblank timer overrun [ 3162.396181][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3162.403430][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3162.848283][T32380] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 3162.881106][T32380] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3163.747190][ T1983] fido_id[1983]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3165.516153][ C1] net_ratelimit: 10 callbacks suppressed [ 3165.516178][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3165.529104][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3165.676108][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3165.683208][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3166.556162][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3166.563527][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3166.716135][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3166.723405][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3167.606110][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3167.613462][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3170.433149][ T2036] netlink: 'syz.0.5957': attribute type 10 has an invalid length. [ 3170.716161][ C1] net_ratelimit: 10 callbacks suppressed [ 3170.716186][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3170.729036][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3170.876241][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3170.883352][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3171.756118][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3171.763345][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3171.916133][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3171.923257][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3172.796176][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3172.803513][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3175.926119][ C1] net_ratelimit: 10 callbacks suppressed [ 3175.926137][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3175.939117][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3176.076231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3176.083325][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3176.319528][ T2077] tipc: Enabled bearer , priority 0 [ 3176.608031][ T2075] syzkaller0: MTU too low for tipc bearer [ 3176.659319][ T2075] tipc: Disabling bearer [ 3176.701948][ T2088] program syz.0.5966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3176.966089][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3176.973451][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3177.116179][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3177.123395][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3177.657637][ T2096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5966'. [ 3178.006136][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3178.013351][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3181.116237][ C1] net_ratelimit: 10 callbacks suppressed [ 3181.116259][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3181.129226][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3181.276132][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3181.283268][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3182.156138][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3182.163443][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3182.316143][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3182.323246][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3182.740151][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3182.753790][ T2145] netlink: 'syz.6.5978': attribute type 3 has an invalid length. [ 3182.764512][ T2145] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5978'. [ 3182.806942][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3182.936323][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.005460][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.103713][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.122779][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.154275][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.163495][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.196158][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3183.203476][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3183.316015][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.396013][T32380] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 3183.428096][T32380] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.03 Device [syz1] on syz1 [ 3183.629585][ T2146] fido_id[2146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3186.316160][ C1] net_ratelimit: 10 callbacks suppressed [ 3186.316184][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3186.329001][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3186.413570][ T2183] netlink: 'syz.7.5985': attribute type 10 has an invalid length. [ 3186.430095][ T2183] team0: Device dummy0 failed to register rx_handler [ 3186.476157][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3186.483318][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3187.356285][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3187.363604][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3187.516106][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3187.523216][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3188.396160][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3188.403637][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3189.905029][ T2203] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3190.407483][ T2216] netlink: 'syz.0.5992': attribute type 21 has an invalid length. [ 3190.425845][T32371] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3190.682921][ T2216] netlink: 'syz.0.5992': attribute type 6 has an invalid length. [ 3190.724848][ T2216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5992'. [ 3190.751603][T32371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3190.764654][T32371] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3190.832157][T32371] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3190.841878][T32371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3191.196446][T32371] usb 5-1: Product: syz [ 3191.413440][T32371] usb 5-1: Manufacturer: syz [ 3191.428093][T32371] usb 5-1: SerialNumber: syz [ 3191.452097][T32371] usb 5-1: config 0 descriptor?? [ 3191.516177][ C1] net_ratelimit: 10 callbacks suppressed [ 3191.516199][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3191.529180][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3191.676139][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3191.683275][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3191.961742][ T2225] netlink: 'syz.3.5994': attribute type 3 has an invalid length. [ 3191.970317][ T2225] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5994'. [ 3192.556140][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3192.563661][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3192.716137][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3192.723290][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3193.289047][T32371] usb 5-1: USB disconnect, device number 110 [ 3193.596197][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3193.603382][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3193.946179][T32371] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 3194.783451][T32371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3194.957117][T32371] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3195.137239][T32371] usb 5-1: New USB device found, idVendor=1547, idProduct=0201, bcdDevice=11.64 [ 3195.167282][T32371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3195.175740][T32371] usb 5-1: Product: syz [ 3195.204876][T32371] usb 5-1: Manufacturer: syz [ 3195.253873][T32371] usb 5-1: SerialNumber: syz [ 3195.300988][T32371] usb 5-1: config 0 descriptor?? [ 3196.716134][ C1] net_ratelimit: 10 callbacks suppressed [ 3196.716158][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3196.729123][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3196.876132][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3196.883294][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3197.285371][T32371] usb 5-1: USB disconnect, device number 111 [ 3197.617631][ T2266] tipc: Enabling of bearer rejected, already enabled [ 3197.733146][ T2271] lo: entered promiscuous mode [ 3197.756210][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3197.763491][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3197.858436][ T2271] tunl0: entered promiscuous mode [ 3197.874957][ T2271] gre0: entered promiscuous mode [ 3197.916342][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3197.923954][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3198.116488][ T2274] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6004'. [ 3198.145611][ T2274] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6004'. [ 3198.209589][ T2271] gretap0: entered promiscuous mode [ 3198.256539][ T2271] erspan0: entered promiscuous mode [ 3198.269397][ T2271] ip_vti0: entered promiscuous mode [ 3198.294428][ T2271] ip6_vti0: entered promiscuous mode [ 3198.318215][ T2271] sit0: entered promiscuous mode [ 3198.331792][ T2271] ip6tnl0: entered promiscuous mode [ 3198.347772][ T2271] tipc: Resetting bearer [ 3198.366833][ T2271] ip6gre0: entered promiscuous mode [ 3198.796392][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3198.803696][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3198.823470][ T2271] syz_tun: entered promiscuous mode [ 3200.286973][ T2271] ip6gretap0: entered promiscuous mode [ 3200.314616][ T2271] vcan0: entered promiscuous mode [ 3200.336812][ T2271] bond0: entered promiscuous mode [ 3200.437590][ T2271] team0: entered promiscuous mode [ 3200.516611][ T2271] dummy0: entered promiscuous mode [ 3200.666118][ T2271] nlmon0: entered promiscuous mode [ 3200.805098][ T2271] veth1: entered promiscuous mode [ 3200.875525][ T2271] wg0: entered promiscuous mode [ 3200.922408][ T2271] wg1: entered promiscuous mode [ 3200.940347][ T2271] wg2: entered promiscuous mode [ 3200.953084][ T2271] veth0_to_bridge: entered promiscuous mode [ 3200.982359][ T2271] bridge_slave_0: entered promiscuous mode [ 3200.997572][ T2271] veth1_to_bridge: entered promiscuous mode [ 3201.041700][ T2271] bridge_slave_1: entered promiscuous mode [ 3201.105270][ T2271] veth0_to_bond: entered promiscuous mode [ 3201.220708][ T2271] bond_slave_0: entered promiscuous mode [ 3201.235561][ T2271] veth1_to_bond: entered promiscuous mode [ 3201.283224][ T2271] bond_slave_1: entered promiscuous mode [ 3201.313918][ T2271] veth0_to_team: entered promiscuous mode [ 3201.345364][ T2271] team_slave_0: entered promiscuous mode [ 3201.393844][ T2271] veth1_to_team: entered promiscuous mode [ 3201.410553][ T2271] team_slave_1: entered promiscuous mode [ 3201.436664][ T2271] veth0_to_batadv: entered promiscuous mode [ 3201.484637][ T2271] batadv_slave_0: entered promiscuous mode [ 3201.498492][ T2271] xfrm0: entered promiscuous mode [ 3201.595849][ T2271] veth0_to_hsr: entered promiscuous mode [ 3201.704057][ T2271] veth1_to_hsr: entered promiscuous mode [ 3201.916147][ C1] net_ratelimit: 10 callbacks suppressed [ 3201.916171][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3201.929161][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3201.933344][ T2271] hsr0: entered promiscuous mode [ 3202.008901][ T2271] veth1_virt_wifi: entered promiscuous mode [ 3202.076180][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3202.083621][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3202.101042][ T2271] veth0_virt_wifi: entered promiscuous mode [ 3202.115777][ T2271] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 3202.274600][ T2271] macvtap0: entered promiscuous mode [ 3202.297559][ T2271] macsec0: entered promiscuous mode [ 3202.317623][ T2271] geneve0: entered promiscuous mode [ 3202.333287][ T2271] geneve1: entered promiscuous mode [ 3202.344594][ T2271] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 3202.354363][ T2271] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 3202.368868][ T2271] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 3202.379920][ T2271] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 3202.395508][ T2271] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 3202.448564][ T2271] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 3202.464384][ T2271] vxlan0: entered promiscuous mode [ 3202.589951][ T2271] geneve2: entered promiscuous mode [ 3202.599086][ T2271] macvlan2: entered promiscuous mode [ 3202.607757][ T2271] veth2: entered promiscuous mode [ 3202.615464][ T2271] veth3: entered promiscuous mode [ 3202.628066][ T2271] mac80211_hwsim hwsim28 wlan2: entered promiscuous mode [ 3202.638141][ T2271] batadv1: entered promiscuous mode [ 3202.651656][ T2271] mac80211_hwsim hwsim34 wlan3: entered promiscuous mode [ 3202.662784][ T2271] sit1: entered promiscuous mode [ 3202.699773][ T2271] mac80211_hwsim hwsim36 wlan4: entered promiscuous mode [ 3202.708739][ T2271] veth0_to_hsr.3: entered promiscuous mode [ 3202.716787][ T2271] bond1: entered promiscuous mode [ 3202.724106][ T2271] veth4: entered promiscuous mode [ 3202.732929][ T2271] veth5: entered promiscuous mode [ 3202.739699][ T2271] vlan3: entered promiscuous mode [ 3202.745778][ T2271] bond2: entered promiscuous mode [ 3202.757553][ T2271] gretap1: entered promiscuous mode [ 3202.764691][ T2271] erspan1: entered promiscuous mode [ 3202.777124][ T2271] syztnl0: entered promiscuous mode [ 3202.783977][ T2271] vti0: entered promiscuous mode [ 3202.794727][ T2271] vxlan1: entered promiscuous mode [ 3202.804477][ T2271] bridge1: entered promiscuous mode [ 3202.817789][ T2271] bond3: entered promiscuous mode [ 3202.828116][ T2271] bond4: entered promiscuous mode [ 3202.834857][ T2271] geneve3: entered promiscuous mode [ 3202.843667][ T2271] dvmrp0: entered promiscuous mode [ 3202.853337][ T2271] bridge2: entered promiscuous mode [ 3202.861820][ T2271] gtp0: entered promiscuous mode [ 3202.957527][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3202.964792][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3202.985457][T32386] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3202.995019][T32386] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3203.021593][T32386] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3203.031240][T32386] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3203.046960][T32386] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3203.056104][T32386] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3203.073407][T32386] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3203.082549][T32386] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3203.116354][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3203.123590][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3203.831648][ T2319] netlink: 'syz.6.6012': attribute type 3 has an invalid length. [ 3203.840577][ T2319] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6012'. [ 3203.996308][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3204.003650][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3204.428779][ T2317] sctp: [Deprecated]: syz.4.6014 (pid 2317) Use of int in maxseg socket option. [ 3204.428779][ T2317] Use struct sctp_assoc_value instead [ 3205.806819][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.813318][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3206.446597][ T2323] veth0_vlan: left promiscuous mode [ 3206.455720][ T2323] veth0_vlan: entered promiscuous mode [ 3207.116317][ C1] net_ratelimit: 10 callbacks suppressed [ 3207.116342][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3207.129392][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3207.276079][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3207.283210][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3207.699032][ T2341] netlink: 'syz.6.6016': attribute type 21 has an invalid length. [ 3207.794931][ T2341] netlink: 'syz.6.6016': attribute type 6 has an invalid length. [ 3207.811889][ T2341] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6016'. [ 3207.974854][ T2350] netlink: 'syz.4.6018': attribute type 21 has an invalid length. [ 3208.156118][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3208.163320][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3208.316201][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3208.323356][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3209.196152][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3209.203721][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3209.616386][ T2350] netlink: 'syz.4.6018': attribute type 6 has an invalid length. [ 3209.646714][ T2350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6018'. [ 3210.516009][T32355] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 3211.331192][T32355] usb 4-1: Using ep0 maxpacket: 32 [ 3211.419678][T32355] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 3211.749206][T32355] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3211.796262][T32355] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3211.842071][T32355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3211.913211][T32355] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3212.007254][T32355] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3212.055007][T32355] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3212.092405][T32355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.132192][T32355] usb 4-1: config 0 descriptor?? [ 3212.316413][ C1] net_ratelimit: 10 callbacks suppressed [ 3212.316439][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3212.329642][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3212.486140][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3212.493327][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3213.356125][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3213.363492][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3213.516127][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3213.523312][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3214.171246][T32355] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3214.237240][T32355] usb 4-1: USB disconnect, device number 114 [ 3214.406148][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3214.413805][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3214.439157][T32355] usblp0: removed [ 3215.796148][T31552] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 3216.016010][T31552] usb 4-1: Using ep0 maxpacket: 8 [ 3216.076044][T31552] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 3216.126784][T31552] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3216.646298][T31552] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3216.695987][T31552] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3216.725361][T31552] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3216.766024][T31552] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3216.801222][T31552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3217.061044][T31552] usb 4-1: usb_control_msg returned -32 [ 3217.090998][T31552] usbtmc 4-1:16.0: can't read capabilities [ 3217.146370][T31552] usb 4-1: USB disconnect, device number 115 [ 3217.516172][ C1] net_ratelimit: 10 callbacks suppressed [ 3217.516195][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3217.529392][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3217.595591][ T2437] netdevsim netdevsim0: Direct firmware load for x failed with error -2 [ 3217.604524][ T2437] netdevsim netdevsim0: Falling back to sysfs fallback for: x [ 3217.676108][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3217.683306][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3218.554610][ T2468] tipc: Enabling of bearer rejected, already enabled [ 3218.563166][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3218.563410][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3218.716204][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3218.723412][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3218.994541][ T2474] netlink: 'syz.4.6035': attribute type 3 has an invalid length. [ 3219.004311][ T2474] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6035'. [ 3219.375494][ T2481] veth0_vlan: left promiscuous mode [ 3219.405920][ T2481] veth0_vlan: entered promiscuous mode [ 3219.596159][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3219.603372][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3219.614664][ T2473] netlink: 'syz.3.6034': attribute type 21 has an invalid length. [ 3219.805306][ T2473] netlink: 'syz.3.6034': attribute type 6 has an invalid length. [ 3219.973697][ T2473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6034'. [ 3221.120635][ T2490] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 3222.246520][ T5953] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 3222.449556][ T5953] usb 4-1: config 0 has no interfaces? [ 3222.462889][ T5953] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3222.519532][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3222.546141][ T5953] usb 4-1: Product: syz [ 3222.553322][ T5953] usb 4-1: Manufacturer: syz [ 3222.566874][ T5953] usb 4-1: SerialNumber: syz [ 3222.577254][ T5953] usb 4-1: config 0 descriptor?? [ 3222.722602][ C1] net_ratelimit: 10 callbacks suppressed [ 3222.722627][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3222.735749][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3222.869426][ T2502] pimreg: entered allmulticast mode [ 3222.876268][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3222.883319][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3222.929008][ T2502] dvmrp0: left allmulticast mode [ 3222.934904][ T2502] pimreg: left allmulticast mode [ 3223.606137][ T30] audit: type=1326 audit(1756944706.691:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3223.628183][ C1] vkms_vblank_simulate: vblank timer overrun [ 3223.701520][ T30] audit: type=1326 audit(1756944706.691:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3223.752893][ T30] audit: type=1326 audit(1756944706.691:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3223.775098][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3223.775215][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3223.863477][ T2535] binder: 2531:2535 unknown command 0 [ 3223.869305][ T2535] binder: 2531:2535 ioctl c0306201 80000480 returned -22 [ 3223.916138][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3223.923380][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3223.951240][ T30] audit: type=1326 audit(1756944706.691:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3223.991870][ T30] audit: type=1326 audit(1756944706.691:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3224.014266][ C1] vkms_vblank_simulate: vblank timer overrun [ 3224.050512][ T30] audit: type=1326 audit(1756944706.691:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3224.362074][ T2536] netlink: 'syz.4.6042': attribute type 21 has an invalid length. [ 3224.577561][ T30] audit: type=1326 audit(1756944706.691:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3224.796142][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3224.803341][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3224.923430][ T30] audit: type=1326 audit(1756944706.701:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3225.001960][ T2536] netlink: 'syz.4.6042': attribute type 6 has an invalid length. [ 3225.016172][ T30] audit: type=1326 audit(1756944706.701:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3225.049392][ T30] audit: type=1326 audit(1756944706.701:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2517 comm="syz.6.6041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3225.096120][ T2536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6042'. [ 3225.680418][T32380] usb 4-1: USB disconnect, device number 116 [ 3226.439375][ T2553] netlink: 'syz.0.6047': attribute type 3 has an invalid length. [ 3226.447504][ T2553] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6047'. [ 3227.007270][ T2563] tipc: Enabling of bearer rejected, already enabled [ 3227.916129][ C1] net_ratelimit: 10 callbacks suppressed [ 3227.916156][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3227.929503][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3228.076119][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3228.083267][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3228.956135][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3228.963403][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3229.116097][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3229.123251][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3229.367314][ T2588] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 3229.375015][ T2588] CPU: 1 UID: 0 PID: 2588 Comm: syz.0.6051 Not tainted syzkaller #0 PREEMPT(full) [ 3229.375043][ T2588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3229.375055][ T2588] Call Trace: [ 3229.375064][ T2588] [ 3229.375074][ T2588] dump_stack_lvl+0x189/0x250 [ 3229.375110][ T2588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3229.375142][ T2588] ? __pfx__printk+0x10/0x10 [ 3229.375178][ T2588] ? kernfs_path_from_node+0x2f/0x290 [ 3229.375203][ T2588] ? kernfs_path_from_node+0x250/0x290 [ 3229.375224][ T2588] ? kernfs_path_from_node+0x2f/0x290 [ 3229.375253][ T2588] sysfs_warn_dup+0x8e/0xa0 [ 3229.375276][ T2588] sysfs_do_create_link_sd+0xc0/0x110 [ 3229.375303][ T2588] device_add_class_symlinks+0x1cf/0x240 [ 3229.375332][ T2588] device_add+0x475/0xb50 [ 3229.375360][ T2588] wiphy_register+0x1ba6/0x28d0 [ 3229.375413][ T2588] ? __pfx_wiphy_register+0x10/0x10 [ 3229.375442][ T2588] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 3229.375477][ T2588] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 3229.375506][ T2588] ieee80211_register_hw+0x3425/0x4080 [ 3229.375552][ T2588] ? ieee80211_register_hw+0x13f1/0x4080 [ 3229.375587][ T2588] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 3229.375617][ T2588] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3229.375722][ T2588] ? __hrtimer_setup+0x187/0x210 [ 3229.375738][ T2588] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 3229.375764][ T2588] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 3229.375813][ T2588] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 3229.375833][ T2588] ? trace_kmalloc+0x1f/0xd0 [ 3229.375851][ T2588] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 3229.375872][ T2588] ? kstrndup+0xbf/0x160 [ 3229.375900][ T2588] hwsim_new_radio_nl+0xea4/0x1b10 [ 3229.375924][ T2588] ? __pfx___nla_validate_parse+0x10/0x10 [ 3229.375963][ T2588] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 3229.375994][ T2588] ? __nla_parse+0x40/0x60 [ 3229.376020][ T2588] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 3229.376048][ T2588] genl_family_rcv_msg_doit+0x215/0x300 [ 3229.376074][ T2588] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 3229.376106][ T2588] ? bpf_lsm_capable+0x9/0x20 [ 3229.376127][ T2588] ? security_capable+0x7e/0x2e0 [ 3229.376156][ T2588] genl_rcv_msg+0x60e/0x790 [ 3229.376182][ T2588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3229.376199][ T2588] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 3229.376234][ T2588] netlink_rcv_skb+0x208/0x470 [ 3229.376255][ T2588] ? __lock_acquire+0xab9/0xd20 [ 3229.376278][ T2588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3229.376297][ T2588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3229.376338][ T2588] ? down_read+0x1ad/0x2e0 [ 3229.376356][ T2588] genl_rcv+0x28/0x40 [ 3229.376372][ T2588] netlink_unicast+0x82c/0x9e0 [ 3229.376401][ T2588] ? __pfx_netlink_unicast+0x10/0x10 [ 3229.376419][ T2588] ? kasan_check_range+0x57/0x2c0 [ 3229.376442][ T2588] ? netlink_sendmsg+0x642/0xb30 [ 3229.376455][ T2588] ? skb_put+0x11b/0x210 [ 3229.376474][ T2588] netlink_sendmsg+0x805/0xb30 [ 3229.376498][ T2588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3229.376515][ T2588] ? __import_iovec+0x5d4/0x7f0 [ 3229.376530][ T2588] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3229.376547][ T2588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3229.376563][ T2588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3229.376578][ T2588] __sock_sendmsg+0x219/0x270 [ 3229.376602][ T2588] ____sys_sendmsg+0x505/0x830 [ 3229.376625][ T2588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3229.376666][ T2588] ___sys_sendmsg+0x21f/0x2a0 [ 3229.376685][ T2588] ? __pfx____sys_sendmsg+0x10/0x10 [ 3229.376701][ T2588] ? lockdep_hardirqs_on+0x9c/0x150 [ 3229.376757][ T2588] ? __fget_files+0x2a/0x420 [ 3229.376769][ T2588] ? __fget_files+0x3a0/0x420 [ 3229.376793][ T2588] __sys_sendmsg+0x164/0x220 [ 3229.376812][ T2588] ? __pfx___sys_sendmsg+0x10/0x10 [ 3229.376841][ T2588] ? __secure_computing+0xe2/0x2a0 [ 3229.376866][ T2588] __do_fast_syscall_32+0xb6/0x2b0 [ 3229.376882][ T2588] ? lockdep_hardirqs_on+0x9c/0x150 [ 3229.376909][ T2588] do_fast_syscall_32+0x34/0x80 [ 3229.376924][ T2588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3229.376943][ T2588] RIP: 0023:0xf7fa2539 [ 3229.376959][ T2588] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3229.376971][ T2588] RSP: 002b:00000000f547455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3229.376990][ T2588] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 3229.377001][ T2588] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 3229.377010][ T2588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3229.377019][ T2588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3229.377028][ T2588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3229.377053][ T2588] [ 3229.536462][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 3229.536482][ T30] audit: type=1326 audit(1756944712.451:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3229.536899][ C1] vkms_vblank_simulate: vblank timer overrun [ 3229.541957][ T30] audit: type=1326 audit(1756944712.451:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3229.996188][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3230.003509][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3230.535133][ T30] audit: type=1326 audit(1756944712.451:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3230.854953][ T30] audit: type=1326 audit(1756944712.461:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3230.877387][ C1] vkms_vblank_simulate: vblank timer overrun [ 3230.939530][ T30] audit: type=1326 audit(1756944712.461:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3230.963076][ T30] audit: type=1326 audit(1756944712.461:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3230.992647][ T30] audit: type=1326 audit(1756944712.461:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3231.094884][ T30] audit: type=1326 audit(1756944712.461:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3231.245792][ T30] audit: type=1326 audit(1756944712.461:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3231.268440][ T30] audit: type=1326 audit(1756944712.461:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2581 comm="syz.0.6051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3233.116244][ C1] net_ratelimit: 10 callbacks suppressed [ 3233.116284][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3233.129525][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3233.276428][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3233.283919][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3234.106705][ T2664] netlink: 'syz.3.6059': attribute type 3 has an invalid length. [ 3234.121400][ T2664] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6059'. [ 3234.156168][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3234.163424][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3234.316165][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3234.323368][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3234.744372][ T2669] vti0: entered promiscuous mode [ 3234.750242][ T2669] vti0: entered allmulticast mode [ 3235.196150][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3235.203391][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3236.000179][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 3236.000199][ T30] audit: type=1326 audit(1756944719.101:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2676 comm="syz.3.6063" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f38539 code=0x0 [ 3236.994941][ T2699] bridge3: entered promiscuous mode [ 3238.316086][ C1] net_ratelimit: 10 callbacks suppressed [ 3238.316103][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3238.329116][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3238.476145][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3238.483277][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3239.356107][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3239.363464][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3239.516072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3239.523281][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3240.396109][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3240.403521][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3242.041711][ T2743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3242.378154][ T2748] netlink: 'syz.3.6072': attribute type 10 has an invalid length. [ 3242.577537][ T2754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 3242.908418][ T2758] netlink: 'syz.6.6074': attribute type 3 has an invalid length. [ 3242.920447][ T2758] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6074'. [ 3243.516105][ C1] net_ratelimit: 10 callbacks suppressed [ 3243.516143][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3243.529231][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3243.630868][ T2773] netlink: 'syz.6.6076': attribute type 13 has an invalid length. [ 3243.639157][ T2773] netlink: 'syz.6.6076': attribute type 17 has an invalid length. [ 3243.654506][ T2773] lo: left promiscuous mode [ 3243.677983][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3243.685306][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3243.775278][ T2773] tunl0: left promiscuous mode [ 3243.783663][ T2773] gre0: left promiscuous mode [ 3243.802933][ T2773] gretap0: left promiscuous mode [ 3244.121378][ T2773] erspan0: left promiscuous mode [ 3244.556178][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3244.563543][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3244.599817][ T2773] ip_vti0: left promiscuous mode [ 3244.678251][ T2773] ip6_vti0: left promiscuous mode [ 3244.716503][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3244.723900][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3244.873623][ T2773] sit0: left promiscuous mode [ 3244.926745][ T2773] ip6tnl0: left promiscuous mode [ 3245.421711][ T2789] fuse: Unknown parameter 'user_i00000000000000000000' [ 3245.449400][ T2773] ip6gre0: left promiscuous mode [ 3245.465776][ T2773] syz_tun: left promiscuous mode [ 3245.476156][ T2789] fuse: Unknown parameter '' [ 3245.596157][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3245.603662][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3245.906166][ T2773] ip6gretap0: left promiscuous mode [ 3245.933515][ T2773] vcan0: left promiscuous mode [ 3245.944929][ T2773] bond0: left promiscuous mode [ 3245.952008][ T2773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3245.977875][ T2773] team0: left promiscuous mode [ 3245.994865][ T2773] 8021q: adding VLAN 0 to HW filter on device team0 [ 3246.761940][ T2773] dummy0: left promiscuous mode [ 3246.831755][ T2773] nlmon0: left promiscuous mode [ 3246.867765][ T2773] veth0: left promiscuous mode [ 3246.891905][ T2773] wg0: left promiscuous mode [ 3246.901174][ T2773] wg1: left promiscuous mode [ 3247.007246][ T2773] wg2: left promiscuous mode [ 3247.013190][ T2773] veth0_to_bridge: left promiscuous mode [ 3247.084046][ T2773] bridge_slave_0: left promiscuous mode [ 3247.120676][ T2773] veth1_to_bridge: left promiscuous mode [ 3247.174418][ T2773] bridge_slave_1: left promiscuous mode [ 3247.182806][ T2773] veth0_to_bond: left promiscuous mode [ 3247.196399][T31552] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 3247.226572][ T2773] bond_slave_0: left promiscuous mode [ 3247.232789][ T2773] veth1_to_bond: left promiscuous mode [ 3247.245565][ T2773] bond_slave_1: left promiscuous mode [ 3247.262844][ T2773] veth0_to_team: left promiscuous mode [ 3247.274447][ T2773] team_slave_0: left promiscuous mode [ 3247.300113][ T2773] veth1_to_team: left promiscuous mode [ 3247.325605][ T2773] team_slave_1: left promiscuous mode [ 3247.405148][T31552] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 3247.414078][T31552] usb 5-1: config 0 has no interface number 0 [ 3247.424329][ T2773] veth0_to_batadv: left promiscuous mode [ 3247.452070][ T2773] batadv_slave_0: left promiscuous mode [ 3247.465572][T31552] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 3247.478100][ T2773] xfrm0: left promiscuous mode [ 3247.537384][ T2773] veth1_to_hsr: left promiscuous mode [ 3247.554652][T31552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.568432][ T2773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3247.592683][T31552] usb 5-1: Product: syz [ 3247.602731][ T2773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3247.624108][ T2773] hsr0: left promiscuous mode [ 3247.645055][ T2773] veth1_virt_wifi: left promiscuous mode [ 3247.658360][ T2773] veth0_virt_wifi: left promiscuous mode [ 3247.682471][ T2773] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 3247.689655][T31552] usb 5-1: Manufacturer: syz [ 3247.696372][T31552] usb 5-1: SerialNumber: syz [ 3247.713297][T31552] usb 5-1: config 0 descriptor?? [ 3247.752895][ T2773] veth1_macvtap: left promiscuous mode [ 3247.796506][ T2773] veth0_macvtap: left promiscuous mode [ 3247.833551][ T2773] veth0_macvtap: entered promiscuous mode [ 3247.886572][ T2773] macvtap0: left promiscuous mode [ 3247.915515][ T2773] veth1_macvtap: entered promiscuous mode [ 3247.928944][ T2773] macsec0: left promiscuous mode [ 3247.940410][ T2773] geneve0: left promiscuous mode [ 3247.953360][ T2773] geneve1: left promiscuous mode [ 3247.987873][ T2773] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 3248.165781][ T2773] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 3248.211333][ T2773] netdevsim netdevsim6 netdevsim2: left promiscuous mode [ 3248.258736][ T2773] netdevsim netdevsim6 netdevsim3: left promiscuous mode [ 3248.360127][ T2773] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 3248.582393][ T2773] mac80211_hwsim hwsim24 wlan1: left promiscuous mode [ 3248.592458][ T2773] vxlan0: left promiscuous mode [ 3248.658014][ T2773] geneve2: left promiscuous mode [ 3248.683474][ T2773] veth0: entered promiscuous mode [ 3248.694509][ T2773] macvlan2: left promiscuous mode [ 3248.702053][ T2773] veth2: left promiscuous mode [ 3248.715156][ T2773] veth3: left promiscuous mode [ 3248.720258][ C1] net_ratelimit: 10 callbacks suppressed [ 3248.720281][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3248.720555][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3248.751184][ T2773] mac80211_hwsim hwsim28 wlan2: left promiscuous mode [ 3248.763652][ T2773] batadv1: left promiscuous mode [ 3248.775100][ T2773] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 3248.791493][ T2773] mac80211_hwsim hwsim34 wlan3: left promiscuous mode [ 3248.803790][ T2773] sit1: left promiscuous mode [ 3248.863259][ T2773] mac80211_hwsim hwsim36 wlan4: left promiscuous mode [ 3248.876361][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3248.883383][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3248.912962][ T2773] veth0_to_hsr.3: left promiscuous mode [ 3248.921920][ T2773] veth0_to_hsr: left promiscuous mode [ 3248.938831][ T2773] bond1: left promiscuous mode [ 3248.948688][ T2773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3248.958434][ T2773] veth4: left promiscuous mode [ 3248.975485][ T2773] veth5: left promiscuous mode [ 3248.991668][ T2773] vlan3: left promiscuous mode [ 3249.002604][ T2773] veth1: left promiscuous mode [ 3249.018780][ T2773] bond2: left promiscuous mode [ 3249.028790][ T2773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3249.041913][ T2773] gretap1: left promiscuous mode [ 3249.087211][ T2773] erspan1: left promiscuous mode [ 3249.126639][ T2773] syztnl0: left promiscuous mode [ 3249.141058][ T2773] vti0: left promiscuous mode [ 3249.151370][ T2773] vxlan1: left promiscuous mode [ 3249.159757][ T2773] bridge1: left promiscuous mode [ 3249.170119][ T2773] bond3: left promiscuous mode [ 3249.175670][ T2773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3249.184265][ T2773] bond4: left promiscuous mode [ 3249.189771][ T2773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3249.200240][ T2773] geneve3: left promiscuous mode [ 3249.207910][ T2773] dvmrp0: left promiscuous mode [ 3249.225233][ T2773] bridge2: left promiscuous mode [ 3249.241023][ T2773] gtp0: left promiscuous mode [ 3249.269793][ T2791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6079'. [ 3249.280506][ T2791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6079'. [ 3249.394208][ T2799] tipc: Enabled bearer , priority 10 [ 3249.566906][ T1100] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3249.631075][ T1100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3249.676914][ T1100] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3249.756503][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3249.764191][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3249.801458][ T1100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3249.819626][ T1100] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3249.856743][ T2829] netlink: 'syz.3.6083': attribute type 10 has an invalid length. [ 3249.907113][ T1100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3249.916598][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3249.916803][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3249.966908][ T2829] dummy0: entered promiscuous mode [ 3249.972390][ T2829] dummy0: entered allmulticast mode [ 3250.119263][ T2829] team0: Port device dummy0 added [ 3250.186724][ T1100] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3250.395192][ T1100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3250.796157][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3250.803839][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3251.869165][T32380] usb 5-1: USB disconnect, device number 112 [ 3252.889838][ T2859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6086'. [ 3253.916112][ C1] net_ratelimit: 10 callbacks suppressed [ 3253.916136][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3253.929030][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3254.076082][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3254.083539][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3254.546524][ T2878] input: syz0 as /devices/virtual/input/input78 [ 3254.956146][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3254.963653][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3255.126149][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3255.133655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3255.996134][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3256.003651][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3257.287978][ T2898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6094'. [ 3257.866127][ T2906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3257.875558][ T2906] 8021q: adding VLAN 0 to HW filter on device team0 [ 3259.116132][ C1] net_ratelimit: 11 callbacks suppressed [ 3259.116148][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3259.129463][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3259.276107][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3259.283513][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3259.317305][ T2924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6099'. [ 3260.156102][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3260.163401][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3260.316106][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3260.323356][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3261.206122][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3261.213360][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3261.591248][ T2945] netlink: 'syz.4.6100': attribute type 10 has an invalid length. [ 3261.819688][T31552] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 3261.875537][ T2946] netlink: 'syz.6.6101': attribute type 12 has an invalid length. [ 3261.884580][ T2946] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6101'. [ 3262.209670][T31552] usb 4-1: Using ep0 maxpacket: 8 [ 3262.270538][T31552] usb 4-1: config 4 has an invalid interface number: 156 but max is 0 [ 3262.279164][T31552] usb 4-1: config 4 has no interface number 0 [ 3262.285291][T31552] usb 4-1: config 4 interface 156 has no altsetting 0 [ 3262.518507][T31552] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 3262.528333][T31552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.546472][T31552] usb 4-1: Product: syz [ 3262.555281][T31552] usb 4-1: Manufacturer: syz [ 3262.581587][T31552] usb 4-1: SerialNumber: syz [ 3262.902189][T31552] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 3263.060109][T31552] usb 4-1: setting power ON [ 3263.336190][T31552] dvb-usb: bulk message failed: -22 (2/0) [ 3263.347864][T31552] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3263.377127][T31552] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware) [ 3263.397329][T31552] usb 4-1: media controller created [ 3263.425275][T31552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3263.687208][T31552] cxusb: set interface failed [ 3263.702255][T31552] dvb-usb: bulk message failed: -22 (1/0) [ 3263.712972][T31552] dvb-usb: bulk message failed: -22 (3/0) [ 3263.737942][T31552] usb 4-1: bluebird_gpio_write failed. [ 3263.759362][T31552] dvb-usb: bulk message failed: -22 (3/0) [ 3263.786691][T31552] usb 4-1: bluebird_gpio_write failed. [ 3263.823347][T31552] dvb-usb: bulk message failed: -22 (3/0) [ 3263.831740][T31552] usb 4-1: bluebird_gpio_write failed. [ 3263.850406][T31552] dvb-usb: bulk message failed: -22 (3/0) [ 3263.858256][T31552] usb 4-1: bluebird_gpio_write failed. [ 3263.882956][T31552] dvb-usb: bulk message failed: -22 (3/0) [ 3263.898302][T31552] usb 4-1: bluebird_gpio_write failed. [ 3263.913842][T31552] dvb-usb: bulk message failed: -22 (5/0) [ 3263.924286][T31552] zl10353_read_register: readreg error (reg=127, ret==-121) [ 3264.050442][ T5953] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 3264.136695][T31552] DVB: Unable to find symbol mt352_attach() [ 3264.142622][T31552] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' [ 3264.218534][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 3264.261705][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3264.277684][T31552] rc_core: IR keymap rc-dvico-portable not found [ 3264.294494][ T5953] usb 5-1: config 1 has an invalid interface number: 65 but max is 0 [ 3264.303486][ T5953] usb 5-1: config 1 has no interface number 0 [ 3264.315683][ T5953] usb 5-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30 [ 3264.316133][ C1] net_ratelimit: 10 callbacks suppressed [ 3264.316150][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3264.316175][T31552] Registered IR keymap rc-empty [ 3264.327809][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3264.354627][ T5953] usb 5-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 3264.425135][ T5953] usb 5-1: config 1 interface 65 has no altsetting 0 [ 3264.440343][ T5953] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 3264.451408][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3264.476103][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3264.483229][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3264.591893][T31552] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 3264.604687][ T5953] usb 5-1: Product: syz [ 3264.612910][ T5953] usb 5-1: Manufacturer: syz [ 3264.625814][ T5953] usb 5-1: SerialNumber: syz [ 3264.636775][T31552] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input79 [ 3264.665489][T31552] dvb-usb: schedule remote query interval to 100 msecs. [ 3264.697097][T31552] usb 4-1: setting power OFF [ 3264.703803][T31552] dvb-usb: bulk message failed: -22 (2/0) [ 3264.712196][T31552] dvb-usb: bulk message failed: -22 (3/0) [ 3264.719658][T31552] usb 4-1: bluebird_gpio_write failed. [ 3264.807758][ T2963] dvb-usb: bulk message failed: -22 (1/0) [ 3264.996846][ T2963] dvb-usb: bulk message failed: -22 (1/0) [ 3265.006636][T31552] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected. [ 3265.059009][T31552] usb 4-1: USB disconnect, device number 117 [ 3265.067662][ T2977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3265.077477][ T2977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3265.105097][ T2977] delete_channel: no stack [ 3265.196538][ T5953] kalmia 5-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 3265.288722][ T5953] kalmia 5-1:1.65: probe with driver kalmia failed with error -22 [ 3265.304526][ T2963] dvb-usb: bulk message failed: -22 (1/0) [ 3265.356102][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3265.363899][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3265.396205][ T5953] usb 5-1: USB disconnect, device number 113 [ 3265.516101][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3265.523399][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3265.865989][T31552] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected. [ 3266.096654][ T2986] batadv_slave_1: entered promiscuous mode [ 3266.396210][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3266.403663][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3266.569599][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.576352][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3268.675252][ T2986] batadv_slave_1: left promiscuous mode [ 3269.516211][ C1] net_ratelimit: 10 callbacks suppressed [ 3269.516228][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3269.529579][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3269.676120][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3269.683310][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3270.556102][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3270.563362][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3270.716088][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3270.723241][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3271.130654][ T3033] input: syz0 as /devices/virtual/input/input80 [ 3271.596147][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3271.603674][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3272.747801][ T3041] bridge_slave_1: left allmulticast mode [ 3273.933555][ T3050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6119'. [ 3274.716135][ C1] net_ratelimit: 11 callbacks suppressed [ 3274.716159][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3274.729113][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3274.876313][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3274.883556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3274.937570][T31552] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 3275.136101][T31552] usb 4-1: Using ep0 maxpacket: 8 [ 3275.145168][T31552] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3275.165526][T31552] usb 4-1: config 1 has an invalid interface number: 65 but max is 0 [ 3275.194209][T31552] usb 4-1: config 1 has no interface number 0 [ 3275.217337][T31552] usb 4-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30 [ 3275.291569][ T2963] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 3275.395934][T31552] usb 4-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 3275.455919][T31552] usb 4-1: config 1 interface 65 has no altsetting 0 [ 3275.512210][T31552] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 3275.532626][ T2963] usb 5-1: Using ep0 maxpacket: 32 [ 3275.577204][T31552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3275.625540][ T2963] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3275.644720][T31552] usb 4-1: Product: syz [ 3275.663107][T31552] usb 4-1: Manufacturer: syz [ 3275.676420][ T2963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3275.751917][ T3079] tipc: Enabling of bearer rejected, already enabled [ 3275.759891][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3275.767605][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3275.852943][T31552] usb 4-1: SerialNumber: syz [ 3275.877787][ T2963] usb 5-1: config 0 descriptor?? [ 3275.916169][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3275.923758][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3276.197829][ T3083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3276.207855][ T3083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3276.239964][ T3083] delete_channel: no stack [ 3276.325157][T31552] kalmia 4-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 3276.351900][T31552] kalmia 4-1:1.65: probe with driver kalmia failed with error -22 [ 3276.432298][ T2963] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3276.479858][ T2963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3276.494242][T31552] usb 4-1: USB disconnect, device number 118 [ 3276.568672][ T2963] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3276.607774][ T2963] usb 5-1: media controller created [ 3276.796740][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3276.803995][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3276.875442][ T2963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3279.216541][ T2963] az6027: usb out operation failed. (-110) [ 3279.243378][ T2963] az6027: usb out operation failed. (-32) [ 3279.255898][ T2963] stb0899_attach: Driver disabled by Kconfig [ 3279.315928][ T2963] az6027: no front-end attached [ 3279.315928][ T2963] [ 3279.376010][ T2963] az6027: usb out operation failed. (-32) [ 3279.381814][ T2963] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3279.506280][ T2963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input81 [ 3279.580798][ T2963] dvb-usb: schedule remote query interval to 400 msecs. [ 3279.662458][ T2963] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3279.916100][ C1] net_ratelimit: 10 callbacks suppressed [ 3279.916123][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3279.929329][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3280.041463][ T2963] usb 5-1: USB disconnect, device number 114 [ 3280.076094][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3280.083627][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3280.575477][ T2963] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3280.820245][ T3116] tipc: Resetting bearer [ 3280.932028][ T3116] veth0_macvtap: left allmulticast mode [ 3280.956348][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3280.963944][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3281.116118][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3281.120758][ T3116] team0: left allmulticast mode [ 3281.123430][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3281.148399][ T3116] dummy0: left allmulticast mode [ 3281.524321][ T3135] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6132'. [ 3281.996264][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3282.003659][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3282.204685][ T3139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6134'. [ 3284.014041][ T3152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3285.116393][ C1] net_ratelimit: 10 callbacks suppressed [ 3285.116410][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3285.129255][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3285.276109][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3285.283192][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3286.052091][ T3175] IPv6: NLM_F_CREATE should be specified when creating new route [ 3286.156202][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3286.163455][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3286.316054][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3286.323197][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3287.196245][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3287.203562][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3290.316194][ C1] net_ratelimit: 10 callbacks suppressed [ 3290.316217][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3290.329282][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3290.476060][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3290.483239][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3291.208012][ T3237] fuse: Unknown parameter 'user_i00000000000000000000' [ 3291.249407][ T3237] fuse: Unknown parameter '' [ 3291.356208][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3291.363548][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3291.516394][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3291.523582][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3292.396164][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3292.403465][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3292.928748][ T3256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3294.975447][ T3275] netlink: 'syz.7.6153': attribute type 4 has an invalid length. [ 3295.676112][ C1] net_ratelimit: 10 callbacks suppressed [ 3295.676136][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3295.689337][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3296.716104][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3296.723355][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3296.844894][ T3293] netlink: 'syz.7.6157': attribute type 3 has an invalid length. [ 3296.853244][ T3293] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6157'. [ 3297.756128][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3297.763278][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3298.097465][ T30] audit: type=1326 audit(1756944781.181:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3298.229680][ T30] audit: type=1326 audit(1756944781.181:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3298.671016][ T30] audit: type=1326 audit(1756944781.191:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3298.796143][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3298.803421][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3299.021234][ T30] audit: type=1326 audit(1756944781.191:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3299.104632][ T30] audit: type=1326 audit(1756944781.191:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3299.201730][ T30] audit: type=1326 audit(1756944781.191:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3299.277238][ T30] audit: type=1326 audit(1756944781.191:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3299.493548][ T30] audit: type=1326 audit(1756944781.191:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3299.545512][ T30] audit: type=1326 audit(1756944781.191:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3299.646351][ T30] audit: type=1326 audit(1756944781.191:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3303 comm="syz.6.6160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 3299.836097][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3299.843225][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3300.876073][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3300.883247][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3301.418397][ T3332] netlink: 'syz.3.6167': attribute type 12 has an invalid length. [ 3301.426738][ T3332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6167'. [ 3301.916144][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3301.923418][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3302.956042][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3302.963452][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3303.996077][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3304.003463][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3304.139963][ T3350] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 3305.036078][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3305.043258][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3305.072627][ T3362] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6172'. [ 3305.288901][ T3363] hsr0: entered promiscuous mode [ 3305.296567][ T3363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6173'. [ 3305.331589][ T3363] hsr_slave_0: left promiscuous mode [ 3305.368542][ T3363] hsr_slave_1: left promiscuous mode [ 3305.717471][ T3363] hsr0 (unregistering): left promiscuous mode [ 3306.086060][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3306.093196][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3307.116120][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3307.123275][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3307.826204][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 3307.826226][ T30] audit: type=1800 audit(1756944790.871:4061): pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6176" name="bus" dev="ramfs" ino=160021 res=0 errno=0 [ 3308.156385][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3308.163745][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3309.196039][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3309.203246][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3310.246478][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3310.253694][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3311.096114][ T3407] netlink: 'syz.4.6181': attribute type 12 has an invalid length. [ 3311.110939][ T3407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6181'. [ 3311.276186][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3311.283390][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3312.078799][ T3440] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6186'. [ 3312.091789][ T3440] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6186'. [ 3312.316106][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3312.323247][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3312.795786][ T30] audit: type=1326 audit(1756944795.871:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3312.872063][ T30] audit: type=1326 audit(1756944795.871:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3313.356085][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3313.363336][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3314.006044][ T30] audit: type=1326 audit(1756944795.871:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3314.058870][ T30] audit: type=1326 audit(1756944795.871:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3314.396030][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3314.403525][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3314.695612][ T3444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3314.842047][ T30] audit: type=1326 audit(1756944795.871:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3314.885565][ T30] audit: type=1326 audit(1756944795.871:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3314.909038][ T30] audit: type=1326 audit(1756944795.871:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3314.940930][ T30] audit: type=1326 audit(1756944795.881:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3314.975703][ T30] audit: type=1326 audit(1756944795.881:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3315.007517][ T30] audit: type=1326 audit(1756944795.881:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3315.088474][ T3458] netlink: 'syz.6.6189': attribute type 3 has an invalid length. [ 3315.097037][ T3458] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6189'. [ 3315.230377][ T30] audit: type=1326 audit(1756944795.881:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.0.6187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 3315.436078][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3315.443259][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3316.022744][ T3472] netlink: 'syz.4.6191': attribute type 3 has an invalid length. [ 3316.032254][ T3472] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6191'. [ 3316.108484][ T3474] netlink: 'syz.3.6192': attribute type 12 has an invalid length. [ 3316.120310][ T3474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6192'. [ 3316.476338][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3316.483655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3317.526072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3317.533176][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3317.755089][ T3482] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 3318.556083][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3318.563310][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3319.347108][ T3511] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6200'. [ 3319.596047][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3319.603233][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3320.636112][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3320.643515][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3321.676069][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3321.683109][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3322.499571][ T3538] netlink: 'syz.6.6205': attribute type 3 has an invalid length. [ 3322.507601][ T3538] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6205'. [ 3322.716096][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3322.723168][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3323.756133][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3323.763467][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3324.266713][ T2963] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 3324.446283][ T2963] usb 4-1: Using ep0 maxpacket: 32 [ 3324.513413][ T2963] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3324.537268][ T2963] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 3324.570157][ T3553] netlink: 'syz.7.6209': attribute type 3 has an invalid length. [ 3324.579402][ T2963] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 3324.588450][ T3553] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6209'. [ 3324.652539][ T2963] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 3324.760471][ T2963] usb 4-1: config 7 has no interface number 0 [ 3324.796071][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3324.803411][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3324.881543][ T2963] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 3325.001467][ T2963] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 3325.014161][ T2963] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 3325.025717][ T2963] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 3325.039269][ T2963] usb 4-1: config 7 interface 128 has no altsetting 0 [ 3325.077775][ T2963] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 3325.193818][ T2963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3325.276239][ T2963] usb 4-1: Product: syz [ 3325.280581][ T2963] usb 4-1: Manufacturer: syz [ 3325.285209][ T2963] usb 4-1: SerialNumber: syz [ 3325.329668][ T3540] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3325.701404][ T3558] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 3325.799048][ T2963] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3325.836080][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3325.968953][ T2963] usb 4-1: MIDIStreaming interface descriptor not found [ 3326.109656][ T2963] usb 4-1: USB disconnect, device number 119 [ 3326.499793][ T3561] udevd[3561]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3326.876049][ C1] net_ratelimit: 1 callbacks suppressed [ 3326.876072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3326.888800][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3327.677154][ T3570] tipc: Enabling of bearer rejected, already enabled [ 3327.898838][ T3584] delete_channel: no stack [ 3327.916129][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3327.923512][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3327.935973][T32380] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 3328.004169][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.010932][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.133566][T32380] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 3328.142170][T32380] usb 5-1: config 0 has no interface number 0 [ 3328.196280][T32380] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 3328.207059][T32380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3328.218573][T32380] usb 5-1: Product: syz [ 3328.241128][T32380] usb 5-1: Manufacturer: syz [ 3328.258767][T32380] usb 5-1: SerialNumber: syz [ 3328.299398][T32380] usb 5-1: config 0 descriptor?? [ 3328.956049][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3328.963349][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3329.996056][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3330.003384][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3330.064953][ T2963] usb 5-1: USB disconnect, device number 115 [ 3330.183958][ T3599] netlink: 'syz.0.6218': attribute type 12 has an invalid length. [ 3330.202727][ T3599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6218'. [ 3330.957652][ T3623] fuse: Bad value for 'fd' [ 3331.036074][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3331.043320][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3331.161083][ T3619] hsr0: entered promiscuous mode [ 3331.171328][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6221'. [ 3331.182919][ T3619] hsr_slave_0: left promiscuous mode [ 3331.193017][ T3619] hsr_slave_1: left promiscuous mode [ 3331.259017][ T3619] hsr0 (unregistering): left promiscuous mode [ 3332.076048][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3332.083465][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3333.116165][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3333.123453][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3334.156027][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3334.163136][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3334.315644][ T3637] block nbd0: Attempted send on invalid socket [ 3334.322192][ T3637] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3335.106566][ T3640] tipc: Enabling of bearer rejected, already enabled [ 3335.196115][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3335.203465][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3335.426228][ T5953] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 3335.827429][ T5953] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 3335.896774][ T5953] usb 4-1: config 0 has no interface number 0 [ 3335.923647][ T5953] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 3336.135968][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3336.144126][ T5953] usb 4-1: Product: syz [ 3336.183745][ T5953] usb 4-1: Manufacturer: syz [ 3336.195959][ T5953] usb 4-1: SerialNumber: syz [ 3336.214006][ T5953] usb 4-1: config 0 descriptor?? [ 3336.236052][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3336.243332][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3337.276079][ C1] net_ratelimit: 1 callbacks suppressed [ 3337.276102][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3337.289234][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3337.510318][T32380] usb 4-1: USB disconnect, device number 120 [ 3337.579784][ T3673] netlink: 'syz.3.6233': attribute type 12 has an invalid length. [ 3337.589449][ T3673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6233'. [ 3337.737147][ T3671] tipc: Enabling of bearer rejected, already enabled [ 3338.316117][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3338.323384][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3338.330495][T32380] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 3338.600159][T32380] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 3338.640040][T32380] usb 5-1: config 0 has no interface number 0 [ 3338.663665][T32380] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 3338.685912][T32380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3338.717631][T32380] usb 5-1: Product: syz [ 3338.721855][T32380] usb 5-1: Manufacturer: syz [ 3338.766859][T32380] usb 5-1: SerialNumber: syz [ 3339.356152][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3339.363296][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3339.426366][T32380] usb 5-1: config 0 descriptor?? [ 3339.486905][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 3339.486925][ T30] audit: type=1800 audit(1756944822.591:4187): pid=3688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6236" name="bus" dev="ramfs" ino=161908 res=0 errno=0 [ 3339.683029][ T5953] usb 5-1: USB disconnect, device number 116 [ 3340.109607][ T3698] netlink: 'syz.7.6234': attribute type 4 has an invalid length. [ 3340.204343][ T3699] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 3340.396144][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3340.403799][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3341.436182][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3341.443417][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3341.875997][ T2963] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 3342.162014][ T3719] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 3342.162014][ T3719] program syz.6.6239 not setting count and/or reply_len properly [ 3342.476182][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3342.483601][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3342.507178][ T2963] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3342.534344][ T2963] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3342.606328][ T2963] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3342.735024][ T2963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3342.950267][ T3707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3342.963786][ T2963] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3343.516070][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3343.523348][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3344.556068][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3344.563238][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3344.645675][ T3740] binfmt_misc: register: failed to install interpreter file ./file0 [ 3345.596063][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3345.603318][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3346.136669][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6249'. [ 3346.151616][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6249'. [ 3346.164007][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6249'. [ 3346.189416][T32380] usb 5-1: USB disconnect, device number 117 [ 3346.636086][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3346.643327][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3347.676072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3347.683472][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3348.534340][ T3772] netlink: 'syz.0.6252': attribute type 3 has an invalid length. [ 3348.588816][ T3772] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6252'. [ 3348.716050][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3348.723402][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3348.833737][ T3777] netlink: 'syz.7.6253': attribute type 12 has an invalid length. [ 3349.065346][ T3777] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6253'. [ 3349.171355][ T3782] netlink: 'syz.6.6254': attribute type 12 has an invalid length. [ 3349.180114][ T3782] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6254'. [ 3349.756249][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3349.763415][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3350.796067][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3350.803318][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3351.265203][ T3805] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6258'. [ 3351.836064][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3351.843329][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3352.254285][ T3808] tipc: Enabling of bearer rejected, already enabled [ 3352.876222][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3352.883580][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3353.916047][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3353.923316][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3354.450738][ T30] audit: type=1800 audit(1756944837.551:4188): pid=3834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6263" name="bus" dev="ramfs" ino=161575 res=0 errno=0 [ 3354.597672][ T3839] pim6reg: entered allmulticast mode [ 3354.956059][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3354.963096][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3355.996038][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3356.003277][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3357.036115][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3357.043350][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3357.163134][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6270'. [ 3357.648893][ T3866] netlink: 'syz.6.6271': attribute type 12 has an invalid length. [ 3357.657326][ T3866] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6271'. [ 3358.076022][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3358.083157][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3358.218883][ T3868] fuse: Bad value for 'fd' [ 3359.116135][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3359.123392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3359.176443][ T3872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6272'. [ 3360.156023][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3360.163103][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3360.556735][ T3887] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 3361.196040][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3361.203359][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3361.264600][ T3894] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6275'. [ 3362.236053][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3363.276059][ C1] net_ratelimit: 1 callbacks suppressed [ 3363.276092][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3363.289316][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3364.316086][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3364.323302][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3365.356086][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3365.363191][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3366.396050][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3366.403166][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3366.580208][ T3940] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 3366.580208][ T3940] program syz.3.6283 not setting count and/or reply_len properly [ 3367.436025][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3367.443265][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3368.476037][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3368.483223][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3368.961279][ T3958] delete_channel: no stack [ 3369.516041][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3369.523203][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3369.703917][ T3963] netlink: 'syz.3.6288': attribute type 13 has an invalid length. [ 3369.712256][ T3963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6288'. [ 3370.556116][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3370.563649][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3371.596053][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3371.603229][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3371.913534][ T3976] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6290'. [ 3372.646043][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3372.653155][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3373.686035][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3373.693196][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3374.659679][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'. [ 3374.669148][ T3999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6305'. [ 3374.716051][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3374.723231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3375.086183][T32380] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 3375.656204][T32380] usb 5-1: Using ep0 maxpacket: 32 [ 3375.743390][T32380] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 3375.756039][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3375.763196][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3375.777403][T32380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.812837][T32380] usb 5-1: Product: syz [ 3375.839876][T32380] usb 5-1: Manufacturer: syz [ 3375.859069][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6298'. [ 3375.891842][ T4009] netlink: 101 bytes leftover after parsing attributes in process `syz.3.6298'. [ 3375.966039][T32380] usb 5-1: SerialNumber: syz [ 3376.009052][T32380] usb 5-1: config 0 descriptor?? [ 3376.223542][ T4010] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3376.796098][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3376.803349][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3377.041802][T32380] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 3377.061341][ T4001] syzkaller0: entered promiscuous mode [ 3377.067414][ T4001] syzkaller0: entered allmulticast mode [ 3377.130179][T32380] eb 9a 47 80 9b f8 7a f0 [ 3377.169452][T32380] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 3377.293286][T32380] usb 5-1: USB disconnect, device number 118 [ 3377.836225][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3377.843454][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3378.127529][ T30] audit: type=1800 audit(1756944861.231:4189): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6299" name="bus" dev="ramfs" ino=163266 res=0 errno=0 [ 3378.223444][ T4030] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 3378.223444][ T4030] program syz.0.6300 not setting count and/or reply_len properly [ 3378.876160][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3378.883270][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3379.736854][ T2963] hid_parser_main: 73 callbacks suppressed [ 3379.736873][ T2963] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 3379.913420][ T2963] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3379.916207][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3379.930611][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3380.022382][ T4041] netlink: 'syz.4.6304': attribute type 13 has an invalid length. [ 3380.030631][ T4041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6304'. [ 3380.956143][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3380.963278][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3381.217969][ T4052] can: request_module (can-proto-4) failed. [ 3381.996170][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3382.003491][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3382.240871][ T4068] netlink: 'syz.7.6310': attribute type 1 has an invalid length. [ 3382.455225][ T4068] bond3: entered promiscuous mode [ 3382.460685][ T4068] bond3: entered allmulticast mode [ 3383.046233][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3383.053640][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3383.211875][ T4074] input: syz0 as /devices/virtual/input/input83 [ 3383.579817][ T4088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6313'. [ 3383.620509][ T4088] netlink: 101 bytes leftover after parsing attributes in process `syz.6.6313'. [ 3383.950815][T18019] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3384.009993][T18019] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3384.076237][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3384.083518][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3385.116234][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3385.123743][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3386.066235][ T5953] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3386.156250][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3386.164030][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3386.360585][ T5953] usb 5-1: config 0 has no interfaces? [ 3387.206126][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3387.213289][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3387.407118][ T5953] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3387.416724][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.425126][ T5953] usb 5-1: Product: syz [ 3387.536967][ T5953] usb 5-1: Manufacturer: syz [ 3387.736324][ T5953] usb 5-1: SerialNumber: syz [ 3387.787015][ T5953] usb 5-1: config 0 descriptor?? [ 3388.236156][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3388.243424][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3388.385553][ T4123] delete_channel: no stack [ 3388.570502][ T4124] lo: left allmulticast mode [ 3388.579471][ T4124] tunl0: left allmulticast mode [ 3388.589023][ T4124] gre0: left allmulticast mode [ 3388.595584][ T4124] gretap0: left allmulticast mode [ 3388.605589][ T4124] erspan0: left allmulticast mode [ 3388.614401][ T4124] ip_vti0: left allmulticast mode [ 3388.623616][ T4124] ip6_vti0: left allmulticast mode [ 3388.630771][ T4124] sit0: left allmulticast mode [ 3388.637325][ T4124] ip6tnl0: left allmulticast mode [ 3388.643440][ T4124] ip6gre0: left allmulticast mode [ 3388.651761][ T4124] ip6gretap0: left allmulticast mode [ 3388.660483][ T4124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3388.678248][ T4124] nlmon0: left allmulticast mode [ 3388.703887][ T4124] batadv0: left allmulticast mode [ 3388.725594][ T4124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3388.735532][ T4124] veth0: left allmulticast mode [ 3389.276212][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3389.283581][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3389.346774][ T4124] wg0: left allmulticast mode [ 3389.375059][ T4124] wg1: left allmulticast mode [ 3389.401719][ T4124] veth0_to_bridge: left allmulticast mode [ 3389.432064][ T4124] bridge_slave_0: left allmulticast mode [ 3389.440316][ T4124] veth1_to_bridge: left allmulticast mode [ 3389.446616][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.452974][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.472128][ T4124] bond_slave_0: left allmulticast mode [ 3389.481538][ T4124] veth1_to_bond: left allmulticast mode [ 3389.492802][ T4124] bond_slave_1: left allmulticast mode [ 3389.501862][ T4124] veth0_to_team: left allmulticast mode [ 3389.513412][ T4124] team_slave_0: left allmulticast mode [ 3389.522539][ T4124] veth1_to_team: left allmulticast mode [ 3389.533921][ T4124] team_slave_1: left allmulticast mode [ 3389.543046][ T4124] veth0_to_batadv: left allmulticast mode [ 3389.557231][ T4124] batadv_slave_0: left promiscuous mode [ 3389.563008][ T4124] batadv_slave_0: left allmulticast mode [ 3389.571223][ T4124] xfrm0: left allmulticast mode [ 3389.665119][ T4124] veth0_to_hsr: left allmulticast mode [ 3389.675249][ T4124] veth1_to_hsr: left allmulticast mode [ 3389.684871][ T4124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3389.704639][ T4124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3389.736100][ T4124] hsr0: left allmulticast mode [ 3389.741242][ T4124] hsr_slave_0: left allmulticast mode [ 3389.755951][ T4124] hsr_slave_1: left allmulticast mode [ 3389.789411][ T4124] veth1_virt_wifi: left allmulticast mode [ 3389.807794][ T4124] veth0_virt_wifi: left allmulticast mode [ 3389.817726][ T4124] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 3389.837966][ T4124] veth1_macvtap: left promiscuous mode [ 3389.861134][ T4124] veth1_macvtap: left allmulticast mode [ 3389.877451][ T4124] veth0_macvtap: left promiscuous mode [ 3389.897195][ T4124] veth0_macvtap: left allmulticast mode [ 3389.947695][ T4124] veth0_macvtap: entered promiscuous mode [ 3389.953823][ T4124] veth0_macvtap: entered allmulticast mode [ 3390.036869][ T4124] macvtap0: left allmulticast mode [ 3390.042159][ T4124] veth0_macvtap: left allmulticast mode [ 3390.080624][ T4124] veth1_macvtap: entered promiscuous mode [ 3390.100571][ T4124] veth1_macvtap: entered allmulticast mode [ 3390.116365][ T4124] macsec0: left allmulticast mode [ 3390.155510][ T4124] veth1_macvtap: left allmulticast mode [ 3390.164402][ T4124] geneve0: left allmulticast mode [ 3390.183531][ T4124] geneve1: left allmulticast mode [ 3390.192293][ T4124] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 3390.202497][ T4124] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 3390.211059][ T4124] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 3390.219693][ T4124] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 3390.241107][ T4124] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 3390.258741][ T4124] bridge1: left allmulticast mode [ 3390.285181][ T4124] hsr1: left allmulticast mode [ 3390.316172][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3390.323662][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3390.417902][ T4124] bridge2: left allmulticast mode [ 3390.499510][ T4124] gre1: left allmulticast mode [ 3390.672483][ T4124] bridge3: left allmulticast mode [ 3390.685263][ T4124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3390.963511][ T4124] veth3: left promiscuous mode [ 3390.988304][ T4124] gretap1: left allmulticast mode [ 3391.168970][ T4124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3391.193325][ T4124] geneve3: left promiscuous mode [ 3391.224147][ T4124] geneve3: left allmulticast mode [ 3391.356266][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3391.364025][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3392.396049][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3392.403347][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3392.812054][ T4124] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 3392.831482][ T4124] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 3392.843041][ T4124] bridge0: left allmulticast mode [ 3392.850797][ T4124] vlan0: left promiscuous mode [ 3392.858801][ T4124] bridge0: left promiscuous mode [ 3392.964511][ T4124] vti0: left promiscuous mode [ 3392.974195][ T4124] vti0: left allmulticast mode [ 3393.187373][ T5953] usb 5-1: USB disconnect, device number 119 [ 3393.374964][ T2633] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3393.384314][ T2633] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3393.420494][ T2633] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3393.436036][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3393.443191][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3393.536128][ T2633] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3393.633837][ T2633] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3393.822782][ T4156] netlink: 'syz.7.6324': attribute type 3 has an invalid length. [ 3393.852800][ T2633] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3393.863705][ T4156] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6324'. [ 3393.886026][ T4153] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x33424752, 11, 0, 5, 1) [ 3393.921684][T26477] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 3393.968124][T26477] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 3394.016970][T26477] bond4: (slave veth9): making interface the new active one [ 3394.364416][T26477] bond4: active interface up! [ 3394.475995][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3394.483209][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3394.723116][T13643] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3394.766555][T13643] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3394.790160][T32380] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3394.976115][T32380] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3395.516249][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3395.523488][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3395.677262][T32380] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3395.931538][ T4169] input: syz0 as /devices/virtual/input/input84 [ 3396.556032][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3396.563318][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3396.781785][ T4172] tipc: Enabling of bearer rejected, already enabled [ 3397.128047][ T4184] wireguard1: entered promiscuous mode [ 3397.154577][ T4184] wireguard1: entered allmulticast mode [ 3397.370314][ T4191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6330'. [ 3397.454678][ T4192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6338'. [ 3397.464151][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6338'. [ 3397.596129][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3397.603380][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3398.636078][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3398.643339][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3399.356058][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3399.626109][ T5953] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 3399.676064][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3399.683190][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3399.796041][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 3399.813031][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3399.846992][ T5953] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3399.935948][ T5953] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3400.009976][ T5953] usb 4-1: config 1 interface 0 has no altsetting 0 [ 3400.257521][ T4214] netlink: 6 bytes leftover after parsing attributes in process `syz.6.6332'. [ 3400.566972][ T5953] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3400.716044][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3400.723263][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3400.725885][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3400.889282][ T5953] usb 4-1: Product: syz [ 3400.893845][ T5953] usb 4-1: Manufacturer: syz [ 3401.320127][ T5953] usb 4-1: SerialNumber: syz [ 3401.756051][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3401.763241][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3402.796038][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3402.803319][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3403.037518][ T4243] netlink: 'syz.6.6340': attribute type 3 has an invalid length. [ 3403.047854][ T4243] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6340'. [ 3403.392094][ T5953] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 3403.836028][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3403.843167][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3404.331835][ T5953] usb 4-1: USB disconnect, device number 121 [ 3404.602005][ T4256] veth0_to_hsr: entered promiscuous mode [ 3404.609675][ T4256] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 3404.876053][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3404.883446][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3405.916062][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3405.923479][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3406.848574][ T4272] hsr0: entered promiscuous mode [ 3406.855206][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6346'. [ 3406.950095][ T4272] hsr_slave_0: left promiscuous mode [ 3406.956041][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3406.963413][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3407.689589][ T4279] block device autoloading is deprecated and will be removed. [ 3407.714691][ T4279] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 3407.772626][ T4272] hsr0 (unregistering): left promiscuous mode [ 3407.998202][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3408.007197][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3408.014385][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3409.036026][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3409.043365][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3409.479803][ T4301] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6353'. [ 3409.850928][ T4305] netlink: 'syz.6.6354': attribute type 12 has an invalid length. [ 3409.860228][ T4305] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6354'. [ 3410.076037][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3410.083237][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3410.946332][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6355'. [ 3411.116076][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3411.123300][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3411.697883][ T4321] bridge0: port 1(netdevsim0) entered blocking state [ 3411.705215][ T4321] bridge0: port 1(netdevsim0) entered disabled state [ 3411.715176][ T4321] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 3412.156052][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3412.163341][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3413.196031][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3413.203171][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3414.236015][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3414.243430][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3414.400680][T32380] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 3414.435495][T32380] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3415.276037][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3415.283357][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3416.316348][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3416.323592][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3416.493480][ T4353] tipc: Enabling of bearer rejected, already enabled [ 3417.138438][ T4369] netlink: 'syz.3.6367': attribute type 12 has an invalid length. [ 3417.146795][ T4369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6367'. [ 3417.356080][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3417.363241][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3418.396024][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3418.403187][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3419.435992][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3419.443223][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3419.613257][ T4390] netlink: 'syz.6.6371': attribute type 1 has an invalid length. [ 3419.856378][ T4390] bond5: entered promiscuous mode [ 3419.876035][ T4390] bond5: entered allmulticast mode [ 3420.282487][ T4400] vlan0: left allmulticast mode [ 3420.287673][ T4400] bond4: left allmulticast mode [ 3420.476034][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3420.483178][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3420.980971][ T4413] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 3421.305241][ T4422] tipc: Enabling of bearer rejected, already enabled [ 3421.515987][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3421.523141][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3421.773456][ T30] audit: type=1800 audit(1756944904.861:4190): pid=4417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6376" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 3421.897479][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6376'. [ 3422.056024][ T2963] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 3422.354500][ T2963] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 3422.372557][ T2963] usb 5-1: config 0 has no interface number 0 [ 3422.393806][ T2963] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 3422.519335][ T2963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3422.556053][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3422.563233][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3422.815038][ T2963] usb 5-1: Product: syz [ 3422.827424][ T2963] usb 5-1: Manufacturer: syz [ 3422.841468][ T2963] usb 5-1: SerialNumber: syz [ 3422.858776][ T2963] usb 5-1: config 0 descriptor?? [ 3423.596008][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3423.603153][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3424.636499][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3424.644272][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3425.676027][ C1] net_ratelimit: 2 callbacks suppressed [ 3425.676043][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3425.688940][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3425.737024][ T3110] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 3425.743209][ T3110] CPU: 1 UID: 0 PID: 3110 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 3425.752858][ T3110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3425.763026][ T3110] Workqueue: events_unbound cfg80211_wiphy_work [ 3425.769307][ T3110] RIP: 0010:mac80211_hwsim_link_info_changed+0x460/0xd80 [ 3425.776602][ T3110] Code: c6 48 8b 7c 24 18 48 8b 5c 24 38 74 0a e8 38 c4 24 fb 48 8b 7c 24 18 48 8b 0f 89 ce 4c 89 e0 48 c1 e8 20 74 5a 4c 89 e0 31 d2 <48> f7 f6 eb 57 e8 c6 52 c1 fa 48 8b 5c 24 18 48 8d 7b 10 e8 f8 3d [ 3425.796497][ T3110] RSP: 0018:ffffc90015ccf800 EFLAGS: 00010246 [ 3425.802746][ T3110] RAX: 00063dee9d2e7f4c RBX: ffff888075577048 RCX: 0000000000000000 [ 3425.810719][ T3110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888075577040 [ 3425.818809][ T3110] RBP: ffffc90015ccf900 R08: ffffffff8fa39637 R09: 1ffffffff1f472c6 [ 3425.826871][ T3110] R10: dffffc0000000000 R11: ffffffff8167ba50 R12: 00063dee9d2e7f4c [ 3425.834854][ T3110] R13: ffff888075576fc8 R14: dffffc0000000000 R15: 0000000000000200 [ 3425.842827][ T3110] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 3425.851837][ T3110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3425.858421][ T3110] CR2: 00000000800cb018 CR3: 000000007ed04000 CR4: 00000000003526f0 [ 3425.866450][ T3110] Call Trace: [ 3425.869770][ T3110] [ 3425.872712][ T3110] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 3425.879628][ T3110] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 3425.886689][ T3110] drv_link_info_changed+0x51b/0x870 [ 3425.892013][ T3110] ieee80211_offchannel_return+0x375/0x500 [ 3425.897920][ T3110] ? __pfx_mac80211_hwsim_sw_scan_complete+0x10/0x10 [ 3425.904612][ T3110] __ieee80211_scan_completed+0x74f/0xb40 [ 3425.910336][ T3110] cfg80211_wiphy_work+0x2bb/0x470 [ 3425.915452][ T3110] ? process_scheduled_works+0x9ef/0x17b0 [ 3425.921256][ T3110] process_scheduled_works+0xae1/0x17b0 [ 3425.926818][ T3110] ? __pfx_process_scheduled_works+0x10/0x10 [ 3425.932898][ T3110] worker_thread+0x8a0/0xda0 [ 3425.937499][ T3110] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3425.943848][ T3110] ? __kthread_parkme+0x7b/0x200 [ 3425.948923][ T3110] kthread+0x70e/0x8a0 [ 3425.953104][ T3110] ? __pfx_worker_thread+0x10/0x10 [ 3425.958395][ T3110] ? __pfx_kthread+0x10/0x10 [ 3425.963076][ T3110] ? _raw_spin_unlock_irq+0x23/0x50 [ 3425.968278][ T3110] ? lockdep_hardirqs_on+0x9c/0x150 [ 3425.973487][ T3110] ? __pfx_kthread+0x10/0x10 [ 3425.978076][ T3110] ret_from_fork+0x3fc/0x770 [ 3425.982671][ T3110] ? __pfx_ret_from_fork+0x10/0x10 [ 3425.987785][ T3110] ? __switch_to_asm+0x39/0x70 [ 3425.992751][ T3110] ? __switch_to_asm+0x33/0x70 [ 3425.997691][ T3110] ? __pfx_kthread+0x10/0x10 [ 3426.002286][ T3110] ret_from_fork_asm+0x1a/0x30 [ 3426.007242][ T3110] [ 3426.010293][ T3110] Modules linked in: [ 3426.016210][ T3110] ---[ end trace 0000000000000000 ]--- [ 3426.035948][ T3110] RIP: 0010:mac80211_hwsim_link_info_changed+0x460/0xd80 [ 3426.042076][ T4012] usb 5-1: USB disconnect, device number 120 [ 3426.049978][ T3110] Code: c6 48 8b 7c 24 18 48 8b 5c 24 38 74 0a e8 38 c4 24 fb 48 8b 7c 24 18 48 8b 0f 89 ce 4c 89 e0 48 c1 e8 20 74 5a 4c 89 e0 31 d2 <48> f7 f6 eb 57 e8 c6 52 c1 fa 48 8b 5c 24 18 48 8d 7b 10 e8 f8 3d [ 3426.085937][ T3110] RSP: 0018:ffffc90015ccf800 EFLAGS: 00010246 [ 3426.092435][ T3110] RAX: 00063dee9d2e7f4c RBX: ffff888075577048 RCX: 0000000000000000 [ 3426.100808][ T3110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888075577040 [ 3426.109683][ T3110] RBP: ffffc90015ccf900 R08: ffffffff8fa39637 R09: 1ffffffff1f472c6 [ 3426.117901][ T3110] R10: dffffc0000000000 R11: ffffffff8167ba50 R12: 00063dee9d2e7f4c [ 3426.126301][ T3110] R13: ffff888075576fc8 R14: dffffc0000000000 R15: 0000000000000200 [ 3426.134476][ T3110] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 3426.143723][ T3110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3426.150362][ T3110] CR2: 00000000f594071c CR3: 0000000035d52000 CR4: 00000000003526f0 [ 3426.159677][ T3110] Kernel panic - not syncing: Fatal exception [ 3426.166293][ T3110] Kernel Offset: disabled [ 3426.170638][ T3110] Rebooting in 86400 seconds..