last executing test programs: 15.921700876s ago: executing program 4 (id=5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xa, 0x0, 0xf8, 0x3, 0x5, 0x52, 0xaf, 0xfb, 0x6, 0x1, 0xda, 0xc, 0x1, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) recvmmsg(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x160, 0x0) close(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c01000016008502000000000000000000000000000000000000000000000001e000000200"/64, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045"], 0x11c}}, 0x20000080) 15.378395635s ago: executing program 4 (id=11): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) unshare(0x2040400) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000002000040"]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x2) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f00000002c0)={{0x3, 0x200, 0x400, 0x6, 0x9, 0x6}, 0x393, [0x401, 0x4, 0x1, 0xf37d, 0x80000001, 0x89, 0x6, 0x1, 0x80000000, 0x7, 0x8, 0xfffffffd, 0xfffffff7, 0x6, 0x8aad, 0x10, 0x9, 0xda, 0x4, 0x4, 0x227, 0xb, 0x3, 0x8, 0x6, 0x7ff, 0xe94f, 0xff28, 0x3, 0x4c, 0x0, 0x0, 0x20, 0x7, 0x80, 0x4, 0xf4, 0xd, 0xfff, 0x9, 0x80, 0x45, 0x725, 0xffc, 0x6, 0x6, 0x2, 0xf, 0xe5e3, 0x40, 0x9, 0x58, 0x8000000, 0x3, 0x5, 0x10001, 0x4, 0xffffffff, 0x6bef, 0x1, 0x4b, 0xffffffff, 0x1, 0x6, 0x7, 0x3, 0x8, 0x2, 0x401, 0xac, 0x8, 0x3, 0x9, 0x8000, 0x5, 0x7, 0x81, 0xfb5a, 0x9, 0x8, 0x5, 0x6, 0x7, 0x1, 0x1, 0xfffff9a7, 0xfffffff8, 0x9, 0x1, 0x5, 0x520, 0x3ff, 0x6, 0x8, 0x6c0, 0x10001, 0x7ff, 0x8, 0x4, 0x2, 0x10, 0x9, 0x3, 0x7fffffff, 0x6, 0x7, 0xfb0a, 0x1b, 0x2, 0x0, 0x3, 0xff, 0x5, 0x7, 0x1, 0x7, 0xffffffe2, 0x6, 0x0, 0xff, 0x2, 0xfdb, 0x5, 0x7, 0xb, 0x10000, 0xe2, 0xc0000000, 0xe, 0x4, 0xfffffffc, 0x3, 0xef, 0x7fff, 0x101, 0x4, 0xffffff01, 0x5, 0x27b, 0x7f, 0xb3f, 0x5, 0xd0000000, 0x6, 0x6, 0x7, 0x8, 0xfffffffc, 0x3, 0xd4, 0x200, 0x1, 0x7ff, 0x0, 0x0, 0x80, 0x6040, 0x2, 0x1, 0xc, 0x28a, 0x4, 0x2, 0x8, 0x400, 0x7, 0xfffffffd, 0xfffffffb, 0x1000, 0x4, 0x9, 0x9, 0x9, 0x401, 0x4, 0x6, 0x3ff, 0x9, 0xf7, 0x227c, 0x0, 0xffffff1a, 0x6, 0x0, 0x101d2e2b, 0x565, 0x4, 0x5, 0x6, 0x1, 0xff, 0x0, 0x5, 0x4, 0x0, 0x3, 0x9, 0x9, 0x7, 0xf, 0x1, 0x5, 0x5, 0xffffff51, 0x8, 0x7fff, 0x3, 0xdbf, 0x7fffffff, 0x4, 0x8, 0x2bf771c5, 0x0, 0x148, 0x8e, 0x2, 0x8, 0x1, 0x1, 0x6, 0x5, 0x1, 0x1, 0x5, 0x3, 0x2, 0x6, 0x2, 0x8, 0x8, 0x8000000, 0x100, 0x2, 0x1, 0x0, 0x6, 0x2, 0xbc6, 0x6, 0x0, 0x8, 0xd3, 0x4, 0x1, 0x3, 0x61, 0xa5, 0x7, 0x1, 0x4, 0x6, 0xdf1, 0xd38, 0xf, 0x29b6, 0x2, 0x5, 0x7, 0x7, 0x10001, 0x0, 0x4, 0x5, 0x81, 0x1, 0x595, 0x1, 0xedaa, 0x5, 0x7, 0x2, 0x9, 0x1, 0x4, 0x4, 0x5, 0x8e0, 0x0, 0x1, 0x5, 0x1, 0xf6ac, 0xc17, 0x3, 0xee, 0x96, 0x4, 0x2, 0x3, 0x3, 0x1, 0x4, 0x0, 0x4, 0x800, 0xfff, 0x3, 0x7, 0x400, 0x2, 0x6, 0x8, 0x0, 0x80, 0x400, 0x55e, 0x5, 0x8, 0x7f, 0x6e, 0x2, 0x1, 0x1, 0x8, 0x2, 0xfffff286, 0x40, 0x3, 0x9, 0x4, 0x5, 0x8, 0x8e, 0x7, 0x5, 0x4, 0x7, 0x10, 0x1, 0x4, 0xa6, 0x1, 0x9, 0x9, 0xffff8001, 0x1, 0x7937, 0xa30e, 0x6, 0x80000000, 0xfffffff9, 0x837, 0x8001, 0x4, 0x4, 0x7fff, 0x7, 0x6, 0x0, 0x3, 0x40, 0x100, 0x0, 0x9bd5, 0x0, 0x1, 0x7, 0x4, 0x9, 0x8, 0xff, 0x800, 0x9, 0x47, 0xfa84, 0xf5, 0xffffc294, 0x1, 0x401, 0x7, 0x3ff, 0x0, 0x0, 0x1, 0x8, 0x8, 0xff, 0x1, 0xffffffc0, 0x9, 0x10594e52, 0xe, 0x0, 0x0, 0x5, 0x3, 0x80, 0x0, 0x80000000, 0x3, 0x2, 0x2, 0x3, 0x80000000, 0x1, 0x0, 0x5, 0x81b, 0x5, 0x5, 0x8, 0x3, 0x3, 0x6151, 0x9, 0x4f2197e8, 0xffff, 0xce, 0x1, 0x2, 0xe83, 0xc35a, 0x65, 0x0, 0x6, 0x2d980000, 0x30, 0x7, 0x7f, 0x2, 0x0, 0x8, 0x2, 0x3, 0xc, 0x7, 0x8, 0x6, 0xffffff2a, 0x8, 0x5, 0x200, 0x81, 0x400, 0xfffffe00, 0x1, 0xfffffff7, 0x8, 0x1, 0x7, 0x400, 0xfffffffb, 0x50cf, 0xfff, 0x0, 0x8, 0x0, 0x3, 0x401, 0x10000, 0xff, 0x400, 0x0, 0x3, 0x2, 0x9, 0x7fff, 0x79, 0xf73, 0xa66, 0x4, 0x4, 0x172d, 0x1bc, 0x6, 0x6, 0x3, 0xfffffff7, 0xfff, 0xffff8001, 0x3ff, 0xa4, 0x5, 0x526, 0xf, 0x5, 0x5, 0x8, 0x6, 0xec, 0xfffffff7, 0x10000, 0x9, 0x7, 0x9, 0x7, 0x9, 0x6, 0x4, 0xaa61, 0x7ff, 0x3, 0x7, 0x80000000, 0xfffffffe, 0x2, 0x651, 0xee, 0x7ff, 0x8, 0x9, 0x5, 0x6061, 0x7, 0x1, 0x8, 0x9, 0x8, 0x8, 0x2, 0x7ff, 0x0, 0x8, 0x7589, 0x40000, 0x7ff, 0xffffffc0, 0x7, 0x7fff, 0x3, 0xa, 0x7, 0xc13, 0xf65, 0x8001, 0x8, 0x6, 0x0, 0x7fff, 0x6, 0x5bb, 0x9, 0x1, 0x6, 0x5, 0x2, 0x8001, 0x2, 0x8000, 0xc1a, 0x7, 0x5, 0x5, 0x80000000, 0x42, 0x0, 0x9, 0x9, 0x8, 0x4, 0x7, 0x0, 0x3, 0x6, 0x9, 0x5c, 0x2, 0x9, 0x2, 0xb1e, 0xfffffff7, 0x8000, 0x0, 0x61, 0xea, 0x6, 0x9, 0x3, 0x29, 0x400, 0x9, 0xe4, 0x100, 0x100, 0xb, 0xb388, 0x4, 0x3a65446d, 0xffff, 0x6, 0x1, 0xd8, 0x5, 0x5, 0x1, 0x7, 0x800, 0x5, 0x2, 0x2df4, 0x7ff, 0x1, 0x6, 0x401, 0x11, 0x7, 0x2, 0x7, 0x800, 0x2, 0x100, 0x1, 0x4, 0x9, 0x8, 0x10, 0x4, 0x2b38, 0xffffffff, 0x10001, 0xb, 0x1ff, 0x8, 0x4, 0x9, 0x5, 0x9, 0x3, 0x8, 0x42c, 0x60c, 0x3, 0xf, 0xc0000, 0x0, 0x3, 0x8, 0xa2, 0x7f, 0x2, 0x800, 0x8, 0x4, 0x1, 0x6, 0x1, 0x4, 0x7, 0x2, 0x753e, 0x80, 0x80, 0x7, 0xb234, 0x1, 0x7, 0x1000, 0x40, 0x4, 0xc3, 0x1ff, 0x81, 0x800, 0x401, 0x6, 0x8, 0x3, 0x8, 0x8, 0x0, 0x6, 0x9, 0x3, 0x2, 0x3, 0x5, 0x8, 0x7, 0x9, 0x9, 0x0, 0xc047, 0xfffffff9, 0x5, 0x9, 0x1, 0x2, 0x81, 0x47e, 0x80000001, 0x100, 0x3, 0x5bf, 0x2e, 0x9, 0x7ce, 0x7ff, 0xffff9864, 0x4, 0xc93, 0x3c, 0x3, 0x8, 0x6, 0x8000, 0x2, 0x9, 0xff, 0x2, 0x81, 0xff, 0xffffffff, 0xe1, 0x81, 0x6, 0x6, 0x80000000, 0x7ff, 0x3, 0xc141, 0xf6c, 0x5380, 0xc, 0xfffffbff, 0x3, 0xda, 0xd, 0x3, 0x27f, 0x400, 0xdb, 0x8, 0x0, 0x1, 0x6, 0x6, 0x9d, 0x1, 0x1, 0x1, 0x8, 0x6, 0x7, 0x4, 0x2, 0x7fffffff, 0x6, 0x6, 0x1, 0x0, 0xb, 0x7, 0x2, 0x4, 0xef, 0x1, 0x4, 0x5, 0x354, 0x2, 0x4, 0x3, 0x28, 0x9, 0x7, 0x4, 0x7, 0x3, 0x0, 0x24000000, 0x200, 0x20000000, 0x9, 0x10000, 0x1, 0x4, 0xffff, 0x10, 0x2, 0x5, 0x0, 0x80, 0x7, 0x401, 0x5, 0xaa02, 0x1ff, 0xd, 0x9, 0x10001, 0x6, 0x2, 0x80000001, 0x10, 0xfff, 0xb, 0x800, 0x3, 0x6, 0x16, 0x1ff, 0x0, 0x400, 0x81, 0x9, 0x9, 0x8, 0x5, 0x6, 0xf5, 0x9, 0x9, 0x4, 0xffff, 0x6, 0x9, 0xfffffffd, 0xd1, 0x6, 0x1, 0x0, 0x0, 0x80, 0x8b, 0x9, 0x6, 0xd, 0x2, 0xaa3, 0x4c2, 0x4, 0x9, 0xbf, 0x4c65716a, 0x1ff, 0xe, 0xff, 0x200, 0x4, 0x0, 0x80, 0x7, 0x1, 0x6, 0x10, 0x7fffffff, 0x0, 0x3, 0x0, 0x6, 0x8, 0x88, 0xfaf, 0x8, 0x80, 0x5f13, 0x4, 0x9934, 0x1, 0x7345, 0x3, 0x5, 0x16, 0x7, 0xb, 0x0, 0x5, 0x5b70, 0x81, 0x7, 0xfc25, 0x81, 0x5364, 0x38000, 0x1, 0x3, 0x97, 0x81, 0x1, 0x6c6a, 0xbe2, 0x10001, 0x3, 0x6, 0x1, 0x2, 0xca0d, 0x0, 0x0, 0x10, 0x98, 0x45, 0x5, 0x8, 0x2, 0x6d2, 0x8000, 0x0, 0x5, 0x1, 0x66ef, 0x1, 0x2, 0x6cd, 0x1, 0x0, 0xc3e4, 0xe561fca2, 0x1, 0xfff, 0xada, 0x8, 0x7, 0x9, 0x9, 0x3, 0x4, 0xd9, 0x7, 0x2ce1, 0x401, 0x3, 0xc, 0x7, 0x3, 0x2, 0x3ff, 0x7, 0x7fffffff, 0x1, 0x80, 0x401, 0xa, 0x1, 0x0, 0x10001, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x450, 0x80, 0x2, 0xa, 0x5, 0x4, 0x0, 0x10000, 0x3, 0x6, 0x7, 0xff, 0x80, 0x401, 0xb, 0x6, 0x9, 0x80000001, 0xd, 0x4, 0x7, 0xffff4ea9, 0x3, 0xf846, 0x3, 0x7ff, 0x80000001, 0x9, 0x1, 0xcf, 0x4, 0x8, 0x2, 0x7, 0x2, 0xfffffff8, 0x7, 0xffffffad, 0xb0, 0x2, 0x2, 0xd3, 0xfffff001, 0x80, 0x8, 0xf, 0x8, 0x81, 0x4, 0x0, 0x7, 0xfff, 0x0, 0x9, 0x1, 0x80, 0x4, 0x2, 0x0, 0x8, 0x1, 0x3, 0x8, 0x65, 0x9, 0x1c0ca567, 0x4, 0xf4, 0x7, 0x7, 0xfff, 0x4, 0x8, 0xffff, 0x3, 0x7fff, 0x8001, 0x4, 0x81, 0x2, 0x5, 0x1, 0x10000, 0x2, 0x4, 0x196, 0x6, 0x1, 0x2, 0x5, 0x3, 0x1000, 0x6]}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getchain={0x6c, 0x66, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xfff1, 0x3}, {0xf, 0xb}}, [{0x8, 0xb, 0x9911}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7c47}, {0x8, 0xb, 0x668}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xd}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0xa, 0x201, 0x0, 0xf0ff, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 11.96862569s ago: executing program 4 (id=19): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000840)={0x18, &(0x7f00000006c0)={0x40, 0x21, 0xc3, {0xc3, 0xd, "3203d1c657120e00ad5d854e6c08565a915a451cd3d9a9c0cbd847e324315f51c273653fb3ebb3873a863bf2a14e20b6343419ad295cdd141d8ef1b73812aaaf8c1a3872287fce62dbc270e6d2c24bc910de657e572e02dba0bfbd39e9a485b0dbdbf91fc9fe8d02ea2c2b7eca466ab22fd64c8e9250a0113e42a3cf6dc1f3653497bc6c768116af6fbbc7f7acb25eeca1a6faab4ddd6345636220456331e1653b0664466d4c52216636744beaf5c32475e0d00a03b31844526211b93749706ea1"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}, &(0x7f00000005c0)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x1, 0x0, 0xf800, [0xc0cf, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x5ea, 0xf0f, 0x2, [0xff000f]}, @generic={0xe, 0x10, 0x1, "617a8bca3370b78564294f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x6, 0x5, 0x5, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x5a8e, 0xf, 0x9, [0xcf, 0x30, 0xf, 0x0, 0x6f, 0x7]}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x2, 0xd, 0x5, "b8a21cc4", "9362c638"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x6, 0x0, 0x4, 0xd, 0x8}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000880)={0x0, 0x17, 0xb1, "96b0a735f4be7d04a5d3394e19238f0c9b84ca01b3efdc8a329d5771d4fc4cf04d29b554d4571ce966f2633f3b00860e3e8237953aa6f426a3e344441f6abf4123672a209a8ef9bfc2bff0638ddc2f880775a9ce06beb0f20b86fe9870f0a12258e72af7d57557b8d6afefd1b1bb092cbf6ea09adba6f419528372ef5541453db9d8d22b54af2648e57d0bea9d52cce1f02fbda80f6fb1f34389b59ccf64764da6040f99338f599ec4de985054d5f1444f"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x5c}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x10, 0x2}}, &(0x7f0000000a40)={0x40, 0x7, 0x2}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x1c}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "1832"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000b40)={0x40, 0x13, 0x6}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "50ee"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x46}}) syz_usb_control_io$lan78xx(r2, &(0x7f0000000180)={0xc, &(0x7f0000000100)={0x0, 0x11, 0x30, {0x30, 0xb, "f7a3933044333b632b50c480514e6c87b7a65defa7362bc76456e7ec78339c485c9a106b6fe325f328cef824f1c0"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000400)={0x0, 0x17, 0xd2, "e6ebc61820fbc756230f6e548d1a9f56fd6492e147bee79f33982f049a6bee154b1747bc2f4bdded5cbb8dd85f6506bad6c860fc3407887abd036a414f5e4abeaa964175b2b0767bdc252fcce1298f0615a1def708d1cb37b0aa1511d481c3e70e9ff5a96a32a13754c30f16d0f264cee1ff96e0963d14a424a6908ab3ad14b509768cd8f83eaeb4cccb0d0939f4db3060421078204f4862a8cb771691e33c3520f90b2bf26e6d4f27cdac589f43f33f895e131f79431bfdf62b3f2307cafaf0dfae59c9766b2e195c45eb52c3e1e631bebf"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "1e4ebb1211635ee14bc39d3be0f1c202e5386ee8b1d8a752a424cc9c443fbbef9d4db161fca91075918117b4276c99"}}) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe}, 0x1, 0x0, 0x0, 0x24040004}, 0x24000000) r4 = landlock_create_ruleset(&(0x7f0000000d80)={0x1220, 0x1}, 0x18, 0x2) landlock_restrict_self(r4, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) rmdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) rmdir(&(0x7f00000000c0)='./file0\x00') r6 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r7, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.493230857s ago: executing program 4 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91", 0x30, 0x404c801, 0x0, 0x0) 11.405415489s ago: executing program 2 (id=22): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) mmap(&(0x7f000046d000/0x1000)=nil, 0x1000, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x3, 0x4}, &(0x7f0000000100)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x8, 0x0, &(0x7f00000000c0)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002500)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x63) 10.315445172s ago: executing program 32 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91", 0x30, 0x404c801, 0x0, 0x0) 9.10180989s ago: executing program 2 (id=29): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b", 0x3f, 0x404c801, 0x0, 0x0) 6.434990075s ago: executing program 1 (id=32): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, 0x0) r1 = userfaultfd(0x80801) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x1000000d}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) dup(r8) r9 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x80006efa, 0x20000, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r7, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) read$FUSE(r0, &(0x7f0000000fc0)={0x2020}, 0x2020) sendto$packet(0xffffffffffffffff, &(0x7f0000000700)="0900000000ffaabe0008000086dd61cd1c2926789593206169a522cde0b0851106b2e8dfadc0f7ecf4a5fec1da97e266365456577b", 0x35, 0x0, &(0x7f0000000000)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) 6.405543309s ago: executing program 2 (id=33): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x402141, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2986, 0x80000004000000, 0xc], 0x80a0000, 0x2010d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000006c0), 0x613ac89a467199, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7800, 0x80, 0xecb6, 0x7fff, {{0x6, 0x4, 0x1, 0x1f, 0x18, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x4, 0x3b, 0x1, 0xf}]}}}}}) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r7, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0xf05, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x800000000200004, 0xfffffffffffffffc, 0x2, 0x3, 0x7], 0x80a0000, 0x40654}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.662803991s ago: executing program 3 (id=34): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYBLOB="0198000000000000200012800800010067726500", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000308010200000000000000000500000a0c0004805b000140fffffff7050003003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002940)=@newtfilter={0x7c, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x52, 0x4, 0xffff}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_vlan={0x30, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x80000002, "4000fd8b00b1400000000067cf0000009800", 0xffffffffffffffff}) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) 4.556228539s ago: executing program 3 (id=35): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) openat$full(0xffffff9c, &(0x7f0000000180), 0x49c000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r9, r9, 0x0, 0xfffe80) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r10, 0x0, 0x0, 0x378e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 4.467336755s ago: executing program 2 (id=37): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xb0}}, 0x8004) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x4}}], 0x10}}], 0x2, 0x4000000) 4.308454831s ago: executing program 1 (id=38): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x2, 0xffffffff, 0x913b, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@multicast2, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200)}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000007d68c5ee17688a2003c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xa8) r3 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@remote, @loopback={0x40000000}, @mcast1, 0x200, 0x40, 0x4, 0x100, 0x6, 0x4003f, r4}) 4.021025777s ago: executing program 2 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x7c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RATE64={0x0, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r9 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x600801) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/mnt\x00') socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@private2, @mcast1, @mcast1, 0x395e, 0x0, 0x9, 0x0, 0x0, 0xa0022, r6}) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000000d240f0100000000000000000006240700000009057ffffd74000f000905820200020000030905030240"], 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x40, 0x0, 0x5, 0xb, 0x1c, "fee8a2a89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0200000000004f8100000000bcc20000000000000000192100", "f4bd000000801900efe4c9dc00000000000000000000000000000000000a00", [0x0, 0x8002000000000001]}}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) 2.796238298s ago: executing program 0 (id=40): socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x28008844}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0x9}, 0x0) r3 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) epoll_create1(0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0), 0x111, 0x5}}, 0x5b) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) 1.926572903s ago: executing program 1 (id=41): mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000018105a0000000000a6800000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x110}, 0x10}, 0x94) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8, &(0x7f0000000240)=[{}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000180)=0x3bad2d4b) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) 1.642789687s ago: executing program 1 (id=42): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty=0xfeffffff}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) 1.381285978s ago: executing program 0 (id=43): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x3000000, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0x42, 0x4, 0x2bc, 0xffffffff, 0xc0, 0x154, 0x154, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x9c, 0xc0, 0x0, {0x88000000}, [@common=@addrtype={{0x2c}, {0x10, 0x64c, 0xfffffffd}}]}, @REJECT={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xff000000, 0xffffffff, 'wlan1\x00', 'vcan0\x00', {0xff}, {}, 0x41c173e8dedfc97d, 0x1, 0x28}, 0x0, 0x70, 0x94, 0x0, {0x122}}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@rand_addr=0x64010100, @empty, 0x0, 0xffffffff, 'xfrm0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x32, 0x2, 0x67}, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x0, 0x4, 0x0, 0x1], 0x2, 0x1}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318) 1.336450802s ago: executing program 1 (id=44): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYBLOB="0198000000000000200012800800010067726500", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000308010200000000000000000500000a0c0004805b000140fffffff7050003003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002940)=@newtfilter={0x7c, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x52, 0x4, 0xffff}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_vlan={0x30, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x80000002, "4000fd8b00b1400000000067cf0000009800", 0xffffffffffffffff}) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) 1.299380329s ago: executing program 0 (id=45): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x2b) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x300, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) 1.109410515s ago: executing program 0 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {r3, r4+60000000}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 987.400149ms ago: executing program 3 (id=47): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b000100"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 834.074396ms ago: executing program 3 (id=48): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0xfffffff5, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 749.249775ms ago: executing program 0 (id=49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000b80), 0xb41, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x34324142, 0x6, 0x0, [{0x0, 0xc}], 0x0, 0xfd, 0x0, 0x2, 0x6}}) r2 = fanotify_init(0x200, 0x0) writev(r2, &(0x7f0000000380), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xc3, 0xff, 0xfffff00c}, {0x6, 0x80, 0x0, 0x1}]}, 0x8) sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x1, 0x2}]}}}}}}}, 0x0) 686.387235ms ago: executing program 3 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000b80), 0xb41, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x34324142, 0x6, 0x0, [{0x0, 0xc}], 0x0, 0xfd, 0x0, 0x2, 0x6}}) r2 = fanotify_init(0x200, 0x0) writev(r2, &(0x7f0000000380), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xc3, 0xff, 0xfffff00c}, {0x6, 0x80, 0x0, 0x1}]}, 0x8) sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x1, 0x2}]}}}}}}}, 0x0) 306.067823ms ago: executing program 2 (id=51): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 168.46315ms ago: executing program 1 (id=52): r0 = userfaultfd(0x801) r1 = epoll_create(0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)={0x90000005}) 69.487712ms ago: executing program 0 (id=53): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x1f, 0x88, 0x1}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x1f, 0x88, 0x1}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) 0s ago: executing program 3 (id=54): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) fsopen(&(0x7f0000000400)='ceph\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@getae={0xe8, 0x1f, 0x1, 0x70bd2b, 0x25dfdbfc, {{@in=@private=0xa010100, 0x4d4, 0x2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, 0x3506}, [@policy={0xa8, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, 0x4e23, 0x0, 0x4e20, 0x5, 0x0, 0x0, 0x80, 0x5c}, {0x6, 0x315b, 0x2, 0x0, 0xa3d, 0x4, 0x4cdd, 0xedd}, {0x8, 0x1f0, 0x1, 0x3}, 0x60, 0x0, 0x1, 0x1, 0x1}}]}, 0xe8}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r4, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 83.743053][ T5817] cgroup: Unknown subsys name 'net' [ 83.894393][ T5817] cgroup: Unknown subsys name 'cpuset' [ 83.903751][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.674783][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.828955][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.839936][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.848103][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.849512][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.856635][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.863268][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.877912][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.886901][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.889899][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.901342][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.910305][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.918778][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.926920][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.935097][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.943173][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.961571][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.977074][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.985423][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.995671][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.003705][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.073197][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.088348][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.096944][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.105093][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.120620][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.673758][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.783048][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.913368][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.015674][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.023704][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.031720][ T5844] bridge_slave_0: entered allmulticast mode [ 91.040090][ T5844] bridge_slave_0: entered promiscuous mode [ 91.058351][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.107345][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.115199][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.122584][ T5844] bridge_slave_1: entered allmulticast mode [ 91.130835][ T5844] bridge_slave_1: entered promiscuous mode [ 91.216322][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.223721][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.231015][ T5841] bridge_slave_0: entered allmulticast mode [ 91.238422][ T5841] bridge_slave_0: entered promiscuous mode [ 91.246361][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 91.283050][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.290773][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.298031][ T5841] bridge_slave_1: entered allmulticast mode [ 91.305733][ T5841] bridge_slave_1: entered promiscuous mode [ 91.323111][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.385363][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.444299][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.503400][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.514855][ T5844] team0: Port device team_slave_0 added [ 91.521128][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.528614][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.536008][ T5843] bridge_slave_0: entered allmulticast mode [ 91.544058][ T5843] bridge_slave_0: entered promiscuous mode [ 91.586283][ T5844] team0: Port device team_slave_1 added [ 91.596498][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.604099][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.611546][ T5843] bridge_slave_1: entered allmulticast mode [ 91.618888][ T5843] bridge_slave_1: entered promiscuous mode [ 91.625865][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.633479][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.640774][ T5842] bridge_slave_0: entered allmulticast mode [ 91.648129][ T5842] bridge_slave_0: entered promiscuous mode [ 91.702109][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.710579][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.717812][ T5842] bridge_slave_1: entered allmulticast mode [ 91.725554][ T5842] bridge_slave_1: entered promiscuous mode [ 91.748181][ T5841] team0: Port device team_slave_0 added [ 91.788589][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.829068][ T5841] team0: Port device team_slave_1 added [ 91.836555][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.843964][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.874577][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.889294][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.910786][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.917981][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.925945][ T5846] bridge_slave_0: entered allmulticast mode [ 91.932609][ T5836] Bluetooth: hci2: command tx timeout [ 91.934804][ T5846] bridge_slave_0: entered promiscuous mode [ 91.960641][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.967636][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.996180][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.010537][ T5834] Bluetooth: hci1: command tx timeout [ 92.016906][ T5836] Bluetooth: hci0: command tx timeout [ 92.043041][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.055876][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.066021][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.073803][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.081094][ T5846] bridge_slave_1: entered allmulticast mode [ 92.088964][ T5846] bridge_slave_1: entered promiscuous mode [ 92.095170][ T5836] Bluetooth: hci3: command tx timeout [ 92.170032][ T5836] Bluetooth: hci4: command tx timeout [ 92.210183][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.217291][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.243550][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.262316][ T5844] hsr_slave_0: entered promiscuous mode [ 92.269515][ T5844] hsr_slave_1: entered promiscuous mode [ 92.282359][ T5843] team0: Port device team_slave_0 added [ 92.326201][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.339673][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.350593][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.357577][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.384537][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.398274][ T5843] team0: Port device team_slave_1 added [ 92.434569][ T5842] team0: Port device team_slave_0 added [ 92.527536][ T5842] team0: Port device team_slave_1 added [ 92.555366][ T5846] team0: Port device team_slave_0 added [ 92.564238][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.572600][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.599310][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.621003][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.628019][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.655537][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.694572][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.702130][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.729346][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.748985][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.756466][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.782620][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.795638][ T5846] team0: Port device team_slave_1 added [ 92.912226][ T5841] hsr_slave_0: entered promiscuous mode [ 92.918937][ T5841] hsr_slave_1: entered promiscuous mode [ 92.925595][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.931470][ T5841] Cannot create hsr debugfs directory [ 92.937836][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.944975][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.971465][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.013969][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.021226][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.047616][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.169374][ T5842] hsr_slave_0: entered promiscuous mode [ 93.176528][ T5842] hsr_slave_1: entered promiscuous mode [ 93.183530][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 93.189290][ T5842] Cannot create hsr debugfs directory [ 93.200935][ T5843] hsr_slave_0: entered promiscuous mode [ 93.207757][ T5843] hsr_slave_1: entered promiscuous mode [ 93.215207][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 93.221039][ T5843] Cannot create hsr debugfs directory [ 93.308193][ T5846] hsr_slave_0: entered promiscuous mode [ 93.315551][ T5846] hsr_slave_1: entered promiscuous mode [ 93.322986][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 93.328766][ T5846] Cannot create hsr debugfs directory [ 93.670778][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.684659][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.733307][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.783117][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.898982][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.915586][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.945292][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.956047][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.010626][ T5836] Bluetooth: hci2: command tx timeout [ 94.048611][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.062069][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.090304][ T5836] Bluetooth: hci0: command tx timeout [ 94.095796][ T5836] Bluetooth: hci1: command tx timeout [ 94.101349][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.137390][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.170735][ T5836] Bluetooth: hci3: command tx timeout [ 94.214262][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.226358][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.250101][ T5836] Bluetooth: hci4: command tx timeout [ 94.256829][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.267935][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.300237][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.370588][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.387934][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.399128][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.423542][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.469718][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.519077][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.526459][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.553762][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.560987][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.587296][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.663122][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.678725][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.685984][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.703919][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.734605][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.741835][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.805274][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.825375][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.857549][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.864751][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.898184][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.905407][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.961784][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.981126][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.006378][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.023206][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.030619][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.047352][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.054588][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.099212][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.134814][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.142025][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.181508][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.199160][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.206396][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.274951][ T5844] veth0_vlan: entered promiscuous mode [ 95.315671][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.336430][ T5844] veth1_vlan: entered promiscuous mode [ 95.382853][ T5841] veth0_vlan: entered promiscuous mode [ 95.428180][ T5841] veth1_vlan: entered promiscuous mode [ 95.446723][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.474052][ T5844] veth0_macvtap: entered promiscuous mode [ 95.486036][ T5844] veth1_macvtap: entered promiscuous mode [ 95.534716][ T5846] veth0_vlan: entered promiscuous mode [ 95.580444][ T5846] veth1_vlan: entered promiscuous mode [ 95.593627][ T5841] veth0_macvtap: entered promiscuous mode [ 95.607396][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.638192][ T5841] veth1_macvtap: entered promiscuous mode [ 95.647105][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.677094][ T3555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.686951][ T3555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.714907][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.729460][ T3555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.738778][ T3555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.774837][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.790384][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.815685][ T5843] veth0_vlan: entered promiscuous mode [ 95.846414][ T3555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.896823][ T3555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.906431][ T3555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.926052][ T5843] veth1_vlan: entered promiscuous mode [ 95.935036][ T5846] veth0_macvtap: entered promiscuous mode [ 95.947909][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.958466][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.969243][ T3555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.995049][ T5846] veth1_macvtap: entered promiscuous mode [ 96.063599][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.077445][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.093516][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.100882][ T5836] Bluetooth: hci2: command tx timeout [ 96.133958][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.154209][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.171342][ T5836] Bluetooth: hci1: command tx timeout [ 96.171354][ T5834] Bluetooth: hci0: command tx timeout [ 96.196891][ T5842] veth0_vlan: entered promiscuous mode [ 96.217368][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.226379][ T5843] veth0_macvtap: entered promiscuous mode [ 96.249218][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.257127][ T5834] Bluetooth: hci3: command tx timeout [ 96.295593][ T5842] veth1_vlan: entered promiscuous mode [ 96.303720][ T5843] veth1_macvtap: entered promiscuous mode [ 96.326120][ T3569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.335540][ T5834] Bluetooth: hci4: command tx timeout [ 96.353722][ T3569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.373823][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.381968][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.414184][ T3569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.424025][ T3569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.476872][ T5842] veth0_macvtap: entered promiscuous mode [ 96.507598][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.527600][ T5842] veth1_macvtap: entered promiscuous mode [ 96.547057][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.622694][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.638996][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.652566][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.666525][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.675611][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.686454][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.725008][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.749187][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.761839][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.779302][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.824530][ T3569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.849332][ T3569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.879942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 96.890921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.951557][ T3569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.002642][ T3569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.219295][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.249492][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.298734][ T24] cfg80211: failed to load regulatory.db [ 97.350644][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.382851][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.491643][ T5936] syz.3.4 (5936): drop_caches: 0 [ 97.532478][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.018011][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.046422][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.060687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.172111][ T5834] Bluetooth: hci2: command tx timeout [ 98.225109][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.237105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.251520][ T5834] Bluetooth: hci0: command tx timeout [ 98.257595][ T5834] Bluetooth: hci1: command tx timeout [ 98.341764][ T5834] Bluetooth: hci3: command tx timeout [ 98.410424][ T5834] Bluetooth: hci4: command tx timeout [ 98.620327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.560775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.566905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.577473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 100.586509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.751585][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.858577][ T5968] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12'. [ 100.883509][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 100.981503][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 100.994339][ T5832] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 101.007589][ T5832] usb 5-1: config 0 has no interface number 0 [ 101.059465][ T5832] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 101.156849][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.198479][ T5832] usb 5-1: Product: syz [ 101.220236][ T5832] usb 5-1: Manufacturer: syz [ 101.240083][ T5832] usb 5-1: SerialNumber: syz [ 101.330236][ T5832] usb 5-1: config 0 descriptor?? [ 101.362746][ T5832] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 101.395438][ T5832] pctv452e: pctv452e_power_ctrl: 1 [ 101.395438][ T5832] [ 101.416917][ T5832] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 101.416917][ T5832] [ 101.478838][ T5832] dvb-usb: bulk message failed: -22 (5/0) [ 101.515881][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.563435][ T5832] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 101.598779][ T5832] usb 5-1: media controller created [ 101.636829][ T5832] dvb-usb: bulk message failed: -22 (8/0) [ 101.678093][ T5832] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 101.693932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.740184][ T5832] dvb-usb: MAC address reading failed. [ 101.879667][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.992390][ T5977] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 102.079158][ T5832] DVB: Unable to find symbol stb0899_attach() [ 102.089042][ T5832] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 102.161359][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.221281][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.260067][ T5832] rc_core: IR keymap rc-tt-1500 not found [ 102.287803][ T5832] Registered IR keymap rc-empty [ 102.320314][ T5832] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 102.323516][ T5897] usb 1-1: config 0 has no interfaces? [ 102.347217][ T5832] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 102.348307][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 102.381098][ T5832] dvb-usb: schedule remote query interval to 100 msecs. [ 102.387700][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.388107][ T5832] pctv452e: pctv452e_power_ctrl: 0 [ 102.388107][ T5832] [ 102.396411][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 102.422536][ T5897] usb 1-1: Product: syz [ 102.427182][ T5897] usb 1-1: Manufacturer: syz [ 102.433137][ T5897] usb 1-1: SerialNumber: syz [ 102.437376][ T5832] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 102.438291][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.458935][ T10] usb 4-1: can't read configurations, error -61 [ 102.467357][ T5897] usb 1-1: config 0 descriptor?? [ 102.496224][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 102.525449][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 102.640930][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.700695][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 102.700745][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 102.759227][ T5975] batadv0: entered promiscuous mode [ 102.759420][ T5975] vlan2: entered promiscuous mode [ 102.850074][ T5919] dvb-usb: bulk message failed: -22 (4/0) [ 102.855999][ T5919] dvb-usb: error -22 while querying for an remote control event. [ 102.914387][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 102.929298][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.937424][ T10] usb 4-1: can't read configurations, error -61 [ 102.944970][ T10] usb usb4-port1: attempt power cycle [ 102.960323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.032759][ T5919] dvb-usb: bulk message failed: -22 (4/0) [ 103.044040][ T5919] dvb-usb: error -22 while querying for an remote control event. [ 103.083466][ T5919] usb 1-1: USB disconnect, device number 2 [ 103.169950][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 103.176492][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 103.349977][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.351379][ T5918] dvb-usb: bulk message failed: -22 (4/0) [ 103.364491][ T89] usb 5-1: USB disconnect, device number 2 [ 103.417832][ T5918] dvb-usb: error -22 while querying for an remote control event. [ 103.430728][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 103.459080][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 103.470060][ T10] usb 4-1: can't read configurations, error -61 [ 103.621022][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.635530][ T89] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 103.650601][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 103.658492][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 103.666381][ T10] usb 4-1: can't read configurations, error -61 [ 103.687050][ T10] usb usb4-port1: unable to enumerate USB device [ 104.352654][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.595257][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.896229][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.295809][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.178285][ T37] bridge_slave_1: left allmulticast mode [ 106.178591][ T37] bridge_slave_1: left promiscuous mode [ 106.179418][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.229448][ T37] bridge_slave_0: left allmulticast mode [ 106.229479][ T37] bridge_slave_0: left promiscuous mode [ 106.229721][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.526111][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.792445][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.911931][ T5897] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 106.927854][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.566682][ T5897] usb 4-1: config 0 descriptor?? [ 108.173202][ T5897] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 108.361085][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.375079][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.388545][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.407478][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.417984][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.950794][ T5897] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 109.037095][ T5897] usb 4-1: USB disconnect, device number 6 [ 109.223291][ T981] IPVS: starting estimator thread 0... [ 109.232484][ T6039] netlink: 100 bytes leftover after parsing attributes in process `syz.0.31'. [ 109.356905][ T6042] IPVS: using max 27 ests per chain, 64800 per kthread [ 110.058112][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34'. [ 110.159118][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 110.260576][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.399100][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.549759][ T5836] Bluetooth: hci0: command tx timeout [ 110.584976][ T37] bond0 (unregistering): Released all slaves [ 111.412599][ T6077] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 111.791645][ T30] audit: type=1804 audit(1763895366.809:2): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.35" name="/newroot/8/file1" dev="fuse" ino=1 res=1 errno=0 [ 111.903338][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 112.601171][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.655075][ T5836] Bluetooth: hci0: command tx timeout [ 112.756957][ T37] hsr_slave_0: left promiscuous mode [ 112.784906][ T37] hsr_slave_1: left promiscuous mode [ 112.793543][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.806931][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.829575][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.859729][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.960033][ T5889] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 113.052565][ T37] veth1_macvtap: left promiscuous mode [ 113.074740][ T37] veth0_macvtap: left promiscuous mode [ 113.121912][ T37] veth1_vlan: left promiscuous mode [ 113.130115][ T37] veth0_vlan: left promiscuous mode [ 113.132607][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 113.226454][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 113.307367][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 113.345313][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 113.448459][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 113.516886][ T5889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.527142][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.561574][ T5889] usb 3-1: SerialNumber: syz [ 113.592919][ T6087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.605325][ T6087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.760899][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 114.308867][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.44'. [ 114.364538][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 114.587768][ T37] team0 (unregistering): Port device team_slave_1 removed [ 114.613604][ T6118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.47'. [ 114.638195][ T37] team0 (unregistering): Port device team_slave_0 removed [ 114.732027][ T5836] Bluetooth: hci0: command tx timeout [ 115.174159][ T5897] usb 3-1: USB disconnect, device number 2 [ 115.672400][ C1] ------------[ cut here ]------------ [ 115.678209][ C1] WARNING: CPU: 1 PID: 3569 at net/mptcp/subflow.c:1520 subflow_data_ready+0x4b8/0x7e0 [ 115.688017][ C1] Modules linked in: [ 115.692172][ C1] CPU: 1 UID: 0 PID: 3569 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 115.701865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.712022][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 115.717866][ C1] RIP: 0010:subflow_data_ready+0x4b8/0x7e0 [ 115.723790][ C1] Code: 0f 0b 90 90 e9 bc fc ff ff e8 f4 02 8d f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 d9 02 8d f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 115.731270][ T6037] chnl_net:caif_netlink_parms(): no params data found [ 115.744151][ C1] RSP: 0018:ffffc90000a08100 EFLAGS: 00010246 [ 115.757162][ C1] RAX: ffffffff8b3300e7 RBX: ffff888068e08d80 RCX: ffff888030ecdac0 [ 115.765223][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.773520][ C1] RBP: 0000000000000000 R08: ffff888062e315bf R09: 1ffff1100c5c62b7 [ 115.781660][ C1] R10: dffffc0000000000 R11: ffffed100c5c62b8 R12: 0000000000000000 [ 115.789716][ C1] R13: dffffc0000000000 R14: ffff888062e30c80 R15: 0000000000000000 [ 115.797919][ C1] FS: 0000000000000000(0000) GS:ffff888126239000(0000) knlGS:0000000000000000 [ 115.806957][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.813644][ C1] CR2: 0000000031123ffc CR3: 0000000025010000 CR4: 00000000003526f0 [ 115.821909][ C1] Call Trace: [ 115.825331][ C1] [ 115.828310][ C1] tcp_data_queue+0x201e/0x64a0 [ 115.833326][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 115.838802][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 115.843537][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 115.849445][ C1] tcp_rcv_established+0x1335/0x2670 [ 115.854899][ C1] ? __lock_acquire+0xab9/0xd20 [ 115.859851][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 115.865578][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 115.870399][ C1] tcp_v6_rcv+0x2247/0x2ae0 [ 115.874957][ C1] ? raw6_local_deliver+0x15d/0xad0 [ 115.880289][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 115.885224][ C1] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 115.890213][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 115.895113][ C1] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 115.900970][ C1] ip6_input_finish+0x191/0x370 [ 115.905877][ C1] NF_HOOK+0x30c/0x3a0 [ 115.910038][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 115.915472][ C1] ? NF_HOOK+0x9a/0x3a0 [ 115.919922][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 115.924816][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 115.930573][ C1] ip6_input+0x16a/0x270 [ 115.935058][ C1] ? ip6_input+0x23/0x270 [ 115.939676][ C1] NF_HOOK+0x30c/0x3a0 [ 115.943843][ C1] ? skb_orphan+0xaf/0xd0 [ 115.948228][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 115.953555][ C1] ? NF_HOOK+0x9a/0x3a0 [ 115.957780][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 115.963165][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 115.968550][ C1] __netif_receive_skb+0xd3/0x380 [ 115.973795][ C1] ? process_backlog+0x2d5/0x14f0 [ 115.979276][ C1] process_backlog+0x60e/0x14f0 [ 115.985850][ C1] ? __pfx_process_backlog+0x10/0x10 [ 115.991809][ C1] ? rcu_core+0x1339/0x1770 [ 115.997089][ C1] __napi_poll+0xc7/0x360 [ 116.001761][ C1] ? skb_defer_free_flush+0x229/0x250 [ 116.007684][ C1] net_rx_action+0x5f7/0xdf0 [ 116.012482][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 116.018184][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 116.024659][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 116.030050][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 116.035457][ C1] handle_softirqs+0x286/0x870 [ 116.040359][ C1] ? do_softirq+0xec/0x180 [ 116.044904][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 116.050391][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.055777][ C1] do_softirq+0xec/0x180 [ 116.060125][ C1] [ 116.063098][ C1] [ 116.066069][ C1] ? __pfx_do_softirq+0x10/0x10 [ 116.071742][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 116.077175][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 116.082487][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 116.088303][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.090163][ T6145] xt_TCPMSS: Only works on TCP SYN packets [ 116.093520][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.104802][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.110269][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 116.115424][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.120657][ C1] ? ip6t_do_table+0x1db/0x1560 [ 116.125568][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 116.130776][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.136232][ C1] ? ip6t_do_table+0x1376/0x1560 [ 116.141364][ C1] ? __lock_acquire+0xab9/0xd20 [ 116.143898][ T6145] fuse: Unknown parameter '00000000000000000000003' [ 116.146275][ C1] ? ip6_output+0x340/0x550 [ 116.157477][ C1] ? ip6_finish_output2+0xd4c/0x1480 [ 116.162936][ C1] ip6_finish_output2+0xf70/0x1480 [ 116.168243][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 116.174230][ C1] ? ip6_mtu+0x7d/0x490 [ 116.178645][ C1] ? ip6_mtu+0x38c/0x490 [ 116.183172][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 116.188741][ C1] ? ip6_output+0x126/0x550 [ 116.193452][ C1] ip6_output+0x340/0x550 [ 116.197874][ C1] ip6_xmit+0x11b5/0x1970 [ 116.202626][ C1] ? ip6_xmit+0x291/0x1970 [ 116.207112][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 116.211936][ C1] ? inet6_csk_xmit+0x1d4/0x780 [ 116.216856][ C1] inet6_csk_xmit+0x4db/0x780 [ 116.221771][ C1] ? inet6_csk_xmit+0x1d4/0x780 [ 116.227248][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 116.232897][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 116.238713][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 116.244691][ C1] __tcp_transmit_skb+0x2092/0x3aa0 [ 116.250282][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 116.256195][ C1] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 116.262855][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 116.268511][ C1] tcp_write_xmit+0x16e8/0x6940 [ 116.273664][ C1] __tcp_push_pending_frames+0x97/0x360 [ 116.279297][ C1] __tcp_close+0x617/0xfe0 [ 116.283829][ C1] tcp_close+0x28/0x110 [ 116.288247][ C1] inet_release+0x144/0x190 [ 116.292991][ C1] sock_release+0x85/0x150 [ 116.297676][ C1] rds_tcp_accept_one+0x71a/0x930 [ 116.302948][ C1] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 116.308913][ C1] rds_tcp_accept_worker+0x3e/0xa0 [ 116.314159][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 116.319963][ C1] process_scheduled_works+0xae1/0x17b0 [ 116.325622][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 116.331820][ C1] worker_thread+0x8a0/0xda0 [ 116.336637][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 116.343262][ C1] ? __kthread_parkme+0x7b/0x200 [ 116.348268][ C1] kthread+0x711/0x8a0 [ 116.352835][ C1] ? __pfx_worker_thread+0x10/0x10 [ 116.358182][ C1] ? __pfx_kthread+0x10/0x10 [ 116.362903][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.368199][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.373515][ C1] ? __pfx_kthread+0x10/0x10 [ 116.378167][ C1] ret_from_fork+0x4bc/0x870 [ 116.382879][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 116.388109][ C1] ? __switch_to_asm+0x39/0x70 [ 116.392997][ C1] ? __switch_to_asm+0x33/0x70 [ 116.397907][ C1] ? __pfx_kthread+0x10/0x10 [ 116.402649][ C1] ret_from_fork_asm+0x1a/0x30 [ 116.407484][ C1] [ 116.410596][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.417922][ C1] CPU: 1 UID: 0 PID: 3569 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 116.427524][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.437662][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 116.443442][ C1] Call Trace: [ 116.446759][ C1] [ 116.449642][ C1] dump_stack_lvl+0x99/0x250 [ 116.454289][ C1] ? __asan_memcpy+0x40/0x70 [ 116.458938][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.464308][ C1] ? __pfx__printk+0x10/0x10 [ 116.469150][ C1] vpanic+0x237/0x6d0 [ 116.473277][ C1] ? __pfx_vpanic+0x10/0x10 [ 116.477945][ C1] panic+0xb9/0xc0 [ 116.481720][ C1] ? __pfx_panic+0x10/0x10 [ 116.486308][ C1] __warn+0x31b/0x4b0 [ 116.490434][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 116.495687][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 116.500934][ C1] report_bug+0x2be/0x4f0 [ 116.505332][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 116.510571][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 116.515797][ C1] ? subflow_data_ready+0x4ba/0x7e0 [ 116.521189][ C1] handle_bug+0x84/0x160 [ 116.525542][ C1] exc_invalid_op+0x1a/0x50 [ 116.530149][ C1] asm_exc_invalid_op+0x1a/0x20 [ 116.535011][ C1] RIP: 0010:subflow_data_ready+0x4b8/0x7e0 [ 116.540926][ C1] Code: 0f 0b 90 90 e9 bc fc ff ff e8 f4 02 8d f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 d9 02 8d f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 116.560811][ C1] RSP: 0018:ffffc90000a08100 EFLAGS: 00010246 [ 116.566900][ C1] RAX: ffffffff8b3300e7 RBX: ffff888068e08d80 RCX: ffff888030ecdac0 [ 116.574974][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.582966][ C1] RBP: 0000000000000000 R08: ffff888062e315bf R09: 1ffff1100c5c62b7 [ 116.591498][ C1] R10: dffffc0000000000 R11: ffffed100c5c62b8 R12: 0000000000000000 [ 116.599498][ C1] R13: dffffc0000000000 R14: ffff888062e30c80 R15: 0000000000000000 [ 116.607602][ C1] ? subflow_data_ready+0x4b7/0x7e0 [ 116.612847][ C1] tcp_data_queue+0x201e/0x64a0 [ 116.617755][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 116.622989][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 116.627711][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 116.633572][ C1] tcp_rcv_established+0x1335/0x2670 [ 116.638909][ C1] ? __lock_acquire+0xab9/0xd20 [ 116.643842][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 116.649614][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 116.654343][ C1] tcp_v6_rcv+0x2247/0x2ae0 [ 116.659044][ C1] ? raw6_local_deliver+0x15d/0xad0 [ 116.664400][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 116.669325][ C1] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 116.674138][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 116.679024][ C1] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 116.684716][ C1] ip6_input_finish+0x191/0x370 [ 116.689684][ C1] NF_HOOK+0x30c/0x3a0 [ 116.693779][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 116.699373][ C1] ? NF_HOOK+0x9a/0x3a0 [ 116.703586][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 116.708280][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 116.713796][ C1] ip6_input+0x16a/0x270 [ 116.718080][ C1] ? ip6_input+0x23/0x270 [ 116.722515][ C1] NF_HOOK+0x30c/0x3a0 [ 116.726689][ C1] ? skb_orphan+0xaf/0xd0 [ 116.731040][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 116.736434][ C1] ? NF_HOOK+0x9a/0x3a0 [ 116.740696][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 116.745370][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 116.750602][ C1] __netif_receive_skb+0xd3/0x380 [ 116.755661][ C1] ? process_backlog+0x2d5/0x14f0 [ 116.760800][ C1] process_backlog+0x60e/0x14f0 [ 116.765693][ C1] ? __pfx_process_backlog+0x10/0x10 [ 116.771006][ C1] ? rcu_core+0x1339/0x1770 [ 116.775721][ C1] __napi_poll+0xc7/0x360 [ 116.780219][ C1] ? skb_defer_free_flush+0x229/0x250 [ 116.785707][ C1] net_rx_action+0x5f7/0xdf0 [ 116.790530][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 116.795769][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 116.802146][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 116.807649][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 116.813063][ C1] handle_softirqs+0x286/0x870 [ 116.817894][ C1] ? do_softirq+0xec/0x180 [ 116.822545][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 116.827999][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.833353][ C1] do_softirq+0xec/0x180 [ 116.837710][ C1] [ 116.840660][ C1] [ 116.843605][ C1] ? __pfx_do_softirq+0x10/0x10 [ 116.848573][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 116.854079][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 116.859407][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 116.865402][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.870639][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.875776][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.880908][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 116.886229][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.891491][ C1] ? ip6t_do_table+0x1db/0x1560 [ 116.896393][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 116.901557][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.907085][ C1] ? ip6t_do_table+0x1376/0x1560 [ 116.912150][ C1] ? __lock_acquire+0xab9/0xd20 [ 116.917051][ C1] ? ip6_output+0x340/0x550 [ 116.921580][ C1] ? ip6_finish_output2+0xd4c/0x1480 [ 116.926895][ C1] ip6_finish_output2+0xf70/0x1480 [ 116.932138][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 116.937757][ C1] ? ip6_mtu+0x7d/0x490 [ 116.941950][ C1] ? ip6_mtu+0x38c/0x490 [ 116.946241][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 116.951464][ C1] ? ip6_output+0x126/0x550 [ 116.955992][ C1] ip6_output+0x340/0x550 [ 116.960470][ C1] ip6_xmit+0x11b5/0x1970 [ 116.964828][ C1] ? ip6_xmit+0x291/0x1970 [ 116.969267][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 116.974256][ C1] ? inet6_csk_xmit+0x1d4/0x780 [ 116.979338][ C1] inet6_csk_xmit+0x4db/0x780 [ 116.984239][ C1] ? inet6_csk_xmit+0x1d4/0x780 [ 116.989296][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 116.994546][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 116.999546][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 117.004793][ C1] __tcp_transmit_skb+0x2092/0x3aa0 [ 117.010057][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 117.015680][ C1] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 117.022317][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 117.027891][ C1] tcp_write_xmit+0x16e8/0x6940 [ 117.032908][ C1] __tcp_push_pending_frames+0x97/0x360 [ 117.038588][ C1] __tcp_close+0x617/0xfe0 [ 117.043148][ C1] tcp_close+0x28/0x110 [ 117.047717][ C1] inet_release+0x144/0x190 [ 117.052300][ C1] sock_release+0x85/0x150 [ 117.056767][ C1] rds_tcp_accept_one+0x71a/0x930 [ 117.062556][ C1] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 117.068161][ C1] rds_tcp_accept_worker+0x3e/0xa0 [ 117.073331][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 117.079385][ C1] process_scheduled_works+0xae1/0x17b0 [ 117.085095][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.091314][ C1] worker_thread+0x8a0/0xda0 [ 117.095929][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 117.102479][ C1] ? __kthread_parkme+0x7b/0x200 [ 117.107638][ C1] kthread+0x711/0x8a0 [ 117.111754][ C1] ? __pfx_worker_thread+0x10/0x10 [ 117.117169][ C1] ? __pfx_kthread+0x10/0x10 [ 117.122252][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.127524][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.132866][ C1] ? __pfx_kthread+0x10/0x10 [ 117.137513][ C1] ret_from_fork+0x4bc/0x870 [ 117.142223][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 117.147442][ C1] ? __switch_to_asm+0x39/0x70 [ 117.152387][ C1] ? __switch_to_asm+0x33/0x70 [ 117.157159][ C1] ? __pfx_kthread+0x10/0x10 [ 117.161775][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.166571][ C1] [ 117.169910][ C1] Kernel Offset: disabled [ 117.174244][ C1] Rebooting in 86400 seconds..