last executing test programs: 14m27.300688543s ago: executing program 32 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r8, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r8}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x19) writev(r10, &(0x7f0000000380)=[{&(0x7f0000002400)='u', 0x1}, {0x0}], 0x2) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce000000000000000000", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf83", 0x6b}], 0x2}, 0x8010) 14m25.773333987s ago: executing program 2 (id=876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000003000000fe03200001000700080007000000000003000000ffffff7f0200000000040000800900"], 0x79) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x2b, 0xa, 0x7) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) unshare(0x80) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x40000}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x6c}}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0000000000ff"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) timer_settime(r5, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000244100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000) 14m21.779758938s ago: executing program 2 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xedd, 0x2, 0x38414761, 0x0, 0x2, [{0x1cd5, 0xa64a}, {0xffff, 0x2}, {0xdff, 0x5580}, {0x24, 0x1}, {0x5, 0x101}, {0xe0, 0x3}, {0x80000000, 0x6}, {0x9, 0x6}], 0x0, 0xf, 0x6, 0x1, 0x1}}) r2 = socket(0x10, 0x80002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x4, 0x0, 0x9e}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'wg2\x00', {0x8001}, 0x6}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) creat(&(0x7f0000000000)='./file0\x00', 0x11) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7bc", 0x3}, {0x0, 0x100000}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994dca676f0c028a6038ff9dd69292b25dbfcfb4e8d447dacb65f81c84f7227e36398ed90ff16107fe10d8243355406f4a2da2aaee7699c89ff633bda5faaadadd7436f964ad0f591b686200d81e3462f65d23bfe9c601678741edf68b6f5f6b0e619c3ead176aea11e716374356b50fe3cc19839bc8ce18564c04e48adb847ae3df86a0fa09271cf05ae6076a91bf0", 0xf2}, {0x0}], 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x1000) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000030000005c0001802c0404001400010002000000e0000002000000000000000014000200020000006401010400000000000000000d0001007564703a73797a32000000001c000280080001001100000008000300820000000800020000100000"], 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r9, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 14m16.742343402s ago: executing program 2 (id=884): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800, 0x5900) r2 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r2, r6, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r8) close_range(r7, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a320000000044000400200001"], 0x6c}, 0x1, 0x0, 0x0, 0x4014}, 0x44040) 14m13.457134264s ago: executing program 2 (id=887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r7 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000\"N000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x2, 0xfffffffe, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x4, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x1, 0xc3, 0x7f, 0x1, 0x0, 0x4, 0xfff, 0x8, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x3, 0x100000000, 0xee8000000000000, 0x0, 0x5, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x3, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0xffffffffffffffff, 0x100000001, 0x0, 0x0, 0x52d4, 0x0, 0x0, 0x401, 0xb4f, 0xffffffff, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0x20000000000, 0xd87, 0x0, 0x44, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x800000000002, 0x5f9cd92, 0x8000200, 0x6, 0x5, 0xd, 0x0, 0x0, 0xbb, 0x6, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x4, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x556a766c, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) memfd_create(&(0x7f00000000c0)='=\x00', 0x2) 14m10.490801577s ago: executing program 2 (id=891): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) write$ppp(r3, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4b5, 0x0, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 14m6.985341725s ago: executing program 2 (id=895): syz_clone3(&(0x7f00000005c0)={0x200000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f00000001c0)={0x0, 0xe1d8, 0x8000, 0x2, 0x144}, 0x0, 0x0, &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() socket(0x2b, 0x1, 0x1) r2 = userfaultfd(0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x8}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0xffffffff800000a9, 0x39d, 0x4, 0x5c281ca0, 0x9, 0x0, 0x0, 0x100, 0x7}}, 0x50) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902120001000000000904000000ff045e15"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x83c0550b, &(0x7f0000000400)=0x1) 14m1.415673097s ago: executing program 33 (id=885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r5, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000000140)=""/247, 0xf7) 13m55.594564992s ago: executing program 5 (id=907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xd, 0x820d, 0x203, 0x200, r4}, &(0x7f0000000100)=0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff8000) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x5}]}, 0x10) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="120101026e694b109911039000d7010203010902290001fb0780020904000000ffd36b0505240600000000d1000200400000000000000000"], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) 13m53.52304656s ago: executing program 5 (id=909): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 13m53.172980742s ago: executing program 5 (id=910): socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x9, 0x8, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) getpgrp(0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x18, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d10, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x132, 0x40001002, 0xffffffffffffffff, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 13m51.386989211s ago: executing program 34 (id=895): syz_clone3(&(0x7f00000005c0)={0x200000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f00000001c0)={0x0, 0xe1d8, 0x8000, 0x2, 0x144}, 0x0, 0x0, &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() socket(0x2b, 0x1, 0x1) r2 = userfaultfd(0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x8}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0xffffffff800000a9, 0x39d, 0x4, 0x5c281ca0, 0x9, 0x0, 0x0, 0x100, 0x7}}, 0x50) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902120001000000000904000000ff045e15"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x83c0550b, &(0x7f0000000400)=0x1) 13m49.765600636s ago: executing program 5 (id=914): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103000100092100000088224e510905810300"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x0, 0x8, 0x9a}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, 0x0, 0x0) 13m45.104167886s ago: executing program 5 (id=919): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xa, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0x80000d, 0xffffffff, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x11, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x109, 0x1, 0x3, 0x3, 0xbc43, 0x48c93690, 0x43, 0x103], [0x6, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x4, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0xfffffffd, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x8006, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x11ffff, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x53, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x10001, 0x2, 0x5, 0x7ffffffe, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xf40, 0x3a, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000a00)={{&(0x7f00000001c0)=[{0x4, 0x4, 0x5, {0x3, 0x1000}, 0x7ff, 0xc, 0x7fffffff}, {0xa, 0x10001, 0x3, {0x4, 0x1000}, 0x3, 0x6, 0x98a}], 0x2, 0x40, 0xf, 0x3}, {&(0x7f0000000240)=[{0x5, 0x200}, {0x100000001, 0x7}, {0x10001, 0xffffffff}, {0x37a, 0x1}, {0xa, 0x7}, {0x7, 0x7}], 0x6, 0x10, 0x0, 0x1}, {&(0x7f00000002c0), 0x0, 0x8, 0x7, 0xffffffffffffffff}, {&(0x7f0000000300)=[{0x1, 0x3, 0xe, 0x2, 0x2}, {0x5, 0x7, 0x4, 0x9, 0x5}, {0x7f, 0x6, 0x6, 0x4, 0xbd3}, {0x80000001, 0x8, 0x27, 0xffffffffffffff01, 0x6}, {0xffffffff, 0x5ab, 0x6, 0x400, 0x3}], 0x5, 0x28, 0x44, 0x1}, {&(0x7f00000009c0), 0x0, 0x8, 0x8, 0x9}}) 13m42.899599996s ago: executing program 5 (id=922): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000340)=ANY=[@ANYRES64=r2], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x498042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060108000000000000000007000003050001000700e6a0"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f000067b000/0x2000)=nil, 0xffffffffffffcfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 13m27.788127703s ago: executing program 35 (id=922): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000340)=ANY=[@ANYRES64=r2], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x498042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060108000000000000000007000003050001000700e6a0"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f000067b000/0x2000)=nil, 0xffffffffffffcfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 9m11.442718485s ago: executing program 0 (id=1377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000140)=""/247, 0xf7) 9m9.111883924s ago: executing program 0 (id=1381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xedd, 0x2, 0x38414761, 0x0, 0x2, [{0x1cd5, 0xa64a}, {0xffff, 0x2}, {0xdff, 0x5580}, {0x24, 0x1}, {0x5, 0x101}, {0xe0, 0x3}, {0x80000000, 0x6}, {0x9, 0x6}], 0x0, 0xf, 0x6, 0x1, 0x1}}) r2 = socket(0x10, 0x80002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x4, 0x0, 0x9e}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'wg2\x00', {0x8001}, 0x6}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) creat(&(0x7f0000000000)='./file0\x00', 0x11) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7bc", 0x3}, {0x0, 0x100000}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994dca676f0c028a6038ff9dd69292b25dbfcfb4e8d447dacb65f81c84f7227e36398ed90ff16107fe10d8243355406f4a2da2aaee7699c89ff633bda5faaadadd7436f964ad0f591b686200d81e3462f65d23bfe9c601678741edf68b6f5f6b0e619c3ead176aea11e716374356b50fe3cc19839bc8ce18564c04e48adb847ae3df86a0fa09271cf05ae6076a91bf0", 0xf2}, {0x0}], 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x1000) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000030000005c0001802c0404001400010002000000e0000002000000000000000014000200020000006401010400000000000000000d0001007564703a73797a32000000001c000280080001001100000008000300820000000800020000100000"], 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r9, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 9m5.955476095s ago: executing program 0 (id=1389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r5, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000000140)=""/247, 0xf7) 9m4.040243812s ago: executing program 0 (id=1394): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) msgget$private(0x0, 0x4a0) 9m1.477904909s ago: executing program 0 (id=1396): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 8m58.925590542s ago: executing program 0 (id=1402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r3, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000140)=""/247, 0xf7) 8m43.899147916s ago: executing program 36 (id=1402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r3, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000140)=""/247, 0xf7) 7m50.701803727s ago: executing program 3 (id=1534): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x38}}, 0x400c8a4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000003c000/0x4000)=nil, 0x4000}, 0x1}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x10280, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r4, 0x6) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FIBMAP(r4, 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 7m49.951745091s ago: executing program 3 (id=1536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14004400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x40480d0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000500000000000000000000ff020000000000220000000000000001e80031"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000003c0)={0x60, 0x1, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x3f}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000dc}, 0x4840) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd2(0x43, 0x100002) r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r7) 7m47.582873324s ago: executing program 3 (id=1540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64], 0xe3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m45.987081836s ago: executing program 3 (id=1543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0xc2d, 0x4, 0x4, 0x0, 0xad28, {}, {0x3, 0x1, 0xf6, 0x1, 0x4, 0x7, "f7d99555"}, 0x7f, 0x4, {}, 0x4, 0x0, 0xffffffffffffffff}) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0x7}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) shutdown(r4, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xfffffffffffffffd, 0x98001) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x49240, 0x0) read$FUSE(r3, &(0x7f0000004900)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 7m43.777476954s ago: executing program 3 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x40084) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xe, 0xfff1}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000) 7m40.110971889s ago: executing program 3 (id=1554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r2, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r3 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000140)=""/247, 0xf7) 7m24.847221471s ago: executing program 37 (id=1554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r2, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r3 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000140)=""/247, 0xf7) 6m30.009434633s ago: executing program 1 (id=1658): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) symlink(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x34}, 0x18) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$packet(0x11, 0x3, 0x300) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) read(r2, &(0x7f00000001c0)=""/77, 0x4d) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000580)={0x2, 0xfc}, 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r4 = epoll_create(0x5) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x101000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0xa}) unshare(0x26020480) 6m28.403417038s ago: executing program 1 (id=1662): write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x8, "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", 0x6, 0x3, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1}}}, 0x128) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r6, 0x4c01) r7 = dup(r6) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000b40)={0x14, &(0x7f0000000a00)={0x20, 0x5, 0xd4, {0xd4, 0x23, "2d7713a4bf648568780a22112dcce0b9d955121ade51f15f308233a4436840fee9c6d07203f51c672cbfeac50a075ea4495a08d12a98d909bb4d7a31414fc8e7d2896c4df09f494f453c0d6774b1884f4511e339d55e50cf402e7713e0d32480c0833f4cb74bd2db353565e9f4ce3fb2a663c825e3136200e7813bb30ee1f4173f102db93c0d721ae12d69029d649b4fbdef0f73c84ff89f1a466942775923de6f3b875ea1228f5ac4e9832189bd01f723e5969dd92062b1b6dc7d8f360e669d56b6d0f7afe72e47b16db9092c09c9c1ed69"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000b80)={0x40, 0x3, 0xd8, "02400ed622f73b6916ef4de61b38377fba4e7ab098bc6134d93b9b6d17ba4603e5f2ded6f45820bdefcb0092f9c0fa78579921197f5d73b58314b16ddc342c64f791e35eee4efc6e8c311d0fd4d091f4a4dd685d3c8c83f9f2e37801e0871bc2319cd8c33f7a6bf61b8fcbae7c3487b50205a355931620131d8f6c0bbb122dcdc8c570b608902077bbfbe7a7d4cfa49a0f871cc67d3135a1ad70709c160d68fb2f43390b719c987dbe55c5cab71052434c9644c6fec765a896e3c8a9a4c902f00adbd3034ce8b162e07354410cac9f39e433c265c8f1dfc2"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000d00)={0x20, 0x80, 0x1c, {0x1ff, 0xfff, 0xfd9e, 0x8000, 0x7, 0x8, 0x7, 0x7, 0x0, 0x6, 0x3, 0x400}}, &(0x7f0000000d40)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000d80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000dc0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000e00)={0x20, 0x89, 0x2, 0x1}}) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x9, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x34}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e20, @in=@local}}]}, 0x10c}}, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r10, 0x0, 0x2000fb) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000040)) 6m26.139611614s ago: executing program 1 (id=1664): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r1, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r3, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000140)=""/247, 0xf7) 6m25.121686174s ago: executing program 1 (id=1666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') readv(r7, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) unshare(0x6020400) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x29, r8}, 0x10) read$FUSE(r7, &(0x7f0000001400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x9, 0x3, [0x2], [0x810003, 0xfffffffe, 0x200000], [0x5, 0x20, 0x80, 0x46], [0x8ac2]}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 6m22.596627499s ago: executing program 1 (id=1671): socket(0xb, 0x3, 0x6fde) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000007780)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000200)="0f01c8c4031d4974a13c3167f341e30526440f23fe0f07f2aff3daa434b15e991a8f6878c0983e465f374f4a0fc768b9c422b2f54107", 0x36}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x2, 0x30000}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) socket(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getqdisc={0x28, 0x26, 0x400, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0x5}, {0x7, 0xfff3}, {0x7, 0x4}}, [{0x4}]}, 0x28}}, 0x240080c8) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) 6m21.386210074s ago: executing program 1 (id=1674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x2b2080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat$cgroup(r2, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r4, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/574], 0x310) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) 6m6.293076873s ago: executing program 38 (id=1674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x2b2080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat$cgroup(r2, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r4, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/574], 0x310) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) 8.603464523s ago: executing program 6 (id=2498): r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x400) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000740)={&(0x7f00000006c0)=[{0xe1ab, 0xa000, 0x4, &(0x7f0000000180)="524ebece"}, {0x3, 0x1c00, 0x0, 0x0}], 0x2}) 8.389211727s ago: executing program 6 (id=2499): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000000300)=@newtaction={0x4f8, 0x30, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{0xc0, 0x1, [@m_ipt={0xbc, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x6d, 0x6, "665a54c10e174721821548c885090c858ae224f1eaee9663a2646617fbfd94c646e32a6449fd19d6f5ffea6553b4bc2389d97deb8baafdb486e1c4335a81fac97b6bcb01ade3fdfe8a526b0476ed19fe140aa00dfb908f7ad383069bd88cd018997015a176cec5544d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x424, 0x1, [@m_ipt={0x420, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x3f5, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x4f8}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 8.278143436s ago: executing program 7 (id=2500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a3000000000280004"], 0xd8}}, 0x8090) 8.117838928s ago: executing program 6 (id=2501): msgsnd(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) 8.083657966s ago: executing program 8 (id=2502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r5, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000000140)=""/247, 0xf7) 7.876716327s ago: executing program 7 (id=2503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r5, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000000140)=""/247, 0xf7) 7.014399918s ago: executing program 6 (id=2504): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x50, &(0x7f0000000080)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 6.640417647s ago: executing program 6 (id=2505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xedd, 0x2, 0x38414761, 0x0, 0x2, [{0x1cd5, 0xa64a}, {0xffff, 0x2}, {0xdff, 0x5580}, {0x24, 0x1}, {0x5, 0x101}, {0xe0, 0x3}, {0x80000000, 0x6}, {0x9, 0x6}], 0x0, 0xf, 0x6, 0x1, 0x1}}) r2 = socket(0x10, 0x80002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x4, 0x0, 0x9e}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) creat(&(0x7f0000000000)='./file0\x00', 0x11) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7bc", 0x3}, {0x0, 0x100000}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994dca676f0c028a6038ff9dd69292b25dbfcfb4e8d447dacb65f81c84f7227e36398ed90ff16107fe10d8243355406f4a2da2aaee7699c89ff633bda5faaadadd7436f964ad0f591b686200d81e3462f65d23bfe9c601678741edf68b6f5f6b0e619c3ead176aea11e716374356b50fe3cc19839bc8ce18564c04e48adb847ae3df86a0fa09271cf05ae6076a91bf0", 0xf2}, {0x0}], 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x1000) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000030000005c0001802c0404001400010002000000e0000002000000000000000014000200020000006401010400000000000000000d0001007564703a73797a32000000001c000280080001001100000008000300820000000800020000100000"], 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r9, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 5.527896425s ago: executing program 8 (id=2510): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.330437155s ago: executing program 9 (id=2513): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "8ff57934ea79b45b"}}}}}, 0x0) 5.188018967s ago: executing program 9 (id=2514): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r5, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000000140)=""/247, 0xf7) 5.105447998s ago: executing program 8 (id=2515): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) 4.785906745s ago: executing program 8 (id=2516): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r3, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16=r2], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.768785642s ago: executing program 7 (id=2517): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000003740)=[{&(0x7f0000000200)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000056b2eb5e7a36b0c53434729350ffbcf2c5f3b31eb65a3699c5bf15e9791979fa48", 0x6c}, {&(0x7f0000001a40)="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", 0xcdb}, {&(0x7f0000000340)="327cf14851c08389daa722d82150ffaaccf208e5dc950f26e715f25036644667ed63c66ca1416afa2f1694a8c16aa60b5b25483ef37b8eb0b580c6f050ddb35c77b46bb0d7bd6d0298d7c4e34fc303461509957a1bae88b16193cc3e6d8ffc7f1a7f75cfcda2ad0bd537b00393acd47e0b3edf7151f7e5b7a223239044d7e0b73a40a9e84a8052396198654087ec190a297cb2c976626bceb36f263acc7b117e692d3b403b71d52c5a3066ef9d27b7fbadc0e66d943802fced4d33bacb2da2b248c70aa77699e45e", 0xc8}, {&(0x7f00000002c0)="a37d58a88d6d2538c5e11db645e1af0a93681a0a4739a0cb7b2afc54b4f8ef72e8e7aad4b35c3b27f382c0bf91f0c62beb9ce599d1f507b7da615ea48fc0cd36b3b1df09a0089b3e9d6fa20241c5e0a23c85aaed817d92df342fdaa4", 0x5c}, {&(0x7f0000002740)="08b0f48f0c9cac8a3b3c15bbf49b3783b8d585b4ed8bcf91116634e67500d1ae82651726bdfb5489ea8eb9ecb8855e7d44cdca8a4e16692280d2495373351c7ae531df3e5879dc16cf6ba23e4475d7c3977bba3d0370d55cd3ff5d4f32729dc7b360b56ab0968716f8df04c41ef266c8909e5c3e9d4e85f958764133e8dd044998d03f3eb0bc46f904425e1c3304e6c1719d2734f1adbd1c33e1d058468ed915256ff4ad58836aefa095cf96eee9a4e5ea50d9a80ae4ba5c12776628dea113351c025fb3d8c7f9c38df6e9b7309db6525f7ad75e89e8db833aa4fa5d6145e90522837c4407a3232abfa7eacf9d65ee", 0xef}], 0x5}, 0x1800) 4.392577965s ago: executing program 7 (id=2518): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x80000000, 0x7, 0x2, {0xa, @sliced={0x1, [0x5, 0x1, 0x7, 0x6, 0x7, 0x3, 0x5, 0x800, 0xfffa, 0x1, 0x9, 0x6, 0x0, 0x101, 0xe7, 0x40, 0x3, 0xfff, 0x4000, 0x7, 0x101, 0x3, 0x1, 0xfffa, 0x9, 0x2, 0x8, 0x6, 0x401, 0xb, 0x1, 0x9, 0x7, 0xd82, 0x5, 0x6, 0x1, 0x7, 0xb2, 0x1, 0xd, 0x7, 0xf, 0x101, 0x1, 0x200, 0x4]}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@overlay={0x1, 0xa, 0x4, 0x2000, 0x1, {0x0, 0xea60}, {0x2, 0x1, 0x1, 0x4, 0x8, 0x1, "16a683cf"}, 0x7fe, 0x3, {}, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0], 0xb8}}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffff000000002200"/100], 0xb8}}, 0x8000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000708000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="b890000f20d82626f30fc7b0e2a3360fc72f66b9800000c00f326635e000010045000f001ed2c6360f785ef266f30f2c0f0f20e06635000002000f22e00f01361f13", 0x42}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 3.261706374s ago: executing program 6 (id=2519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)}], 0x1}}], 0x1, 0x20008050) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2, 0x0, 0x1000}, {"896cbcd6704ed77ba7a25f358c66b3954fa0324783a3cca612994fe1f0e0ca5de802a65573c02fecee58b655449ad38f969bcec93b2eb056acb68255587ccc71e454de9271357fc442620c700671ebd70e61356424ec5833732ecea1ff1ea71e31dd2b232c0149f21127f12e455a2a23044339152eb913009df16f7a"}}}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r5, &(0x7f0000003100)={0x2020}, 0x2020) unshare(0x24000200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 2.860282341s ago: executing program 9 (id=2521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r5, 0x4000000007, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000580)=""/190) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x13, "e69e1327eff5e56540f76461154e667bb2ef706760b8d0239e8678aa199b5e1081"}}) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) read(r8, &(0x7f0000000140)=""/247, 0xf7) 2.540759455s ago: executing program 8 (id=2522): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r8, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) 2.035882495s ago: executing program 4 (id=2523): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 1.434473711s ago: executing program 7 (id=2524): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa0402, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="1243", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005040), 0x2, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000005080)={0x6, 0x29, 0xa, 0x11, 0x7, 0xfffffffc, 0x4, 0x44}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0xfffffffffffffeb8) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c"}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000140)=0xfffffffd) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x4, 0x20}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) read$hiddev(r7, &(0x7f00000000c0)=""/6, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) 942.060551ms ago: executing program 4 (id=2525): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) sendto(r0, 0x0, 0x0, 0x13b1b5f7f8034f52, &(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) 754.279114ms ago: executing program 4 (id=2526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x51}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20048841) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0) 455.057507ms ago: executing program 4 (id=2527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x0) 317.296655ms ago: executing program 9 (id=2528): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4000) 275.320983ms ago: executing program 8 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xedd, 0x2, 0x38414761, 0x0, 0x2, [{0x1cd5, 0xa64a}, {0xffff, 0x2}, {0xdff, 0x5580}, {0x24, 0x1}, {0x5, 0x101}, {0xe0, 0x3}, {0x80000000, 0x6}, {0x9, 0x6}], 0x0, 0xf, 0x6, 0x1, 0x1}}) r2 = socket(0x10, 0x80002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x4, 0x0, 0x9e}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) creat(&(0x7f0000000000)='./file0\x00', 0x11) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7bc", 0x3}, {0x0, 0x100000}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994dca676f0c028a6038ff9dd69292b25dbfcfb4e8d447dacb65f81c84f7227e36398ed90ff16107fe10d8243355406f4a2da2aaee7699c89ff633bda5faaadadd7436f964ad0f591b686200d81e3462f65d23bfe9c601678741edf68b6f5f6b0e619c3ead176aea11e716374356b50fe3cc19839bc8ce18564c04e48adb847ae3df86a0fa09271cf05ae6076a91bf0", 0xf2}, {0x0}], 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x1000) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000030000005c0001802c0404001400010002000000e0000002000000000000000014000200020000006401010400000000000000000d0001007564703a73797a32000000001c000280080001001100000008000300820000000800020000100000"], 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r9, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 149.365426ms ago: executing program 4 (id=2530): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x51) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 116.337371ms ago: executing program 9 (id=2531): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031600590214000000002f1eafbcf706e1050000008847000f1102ee1680ca82973d2bd4b8", 0x26}], 0x1}, 0x0) 97.033323ms ago: executing program 7 (id=2532): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x80000000, 0x7, 0x2, {0xa, @sliced={0x1, [0x5, 0x1, 0x7, 0x6, 0x7, 0x3, 0x5, 0x800, 0xfffa, 0x1, 0x9, 0x6, 0x0, 0x101, 0xe7, 0x40, 0x3, 0xfff, 0x4000, 0x7, 0x101, 0x3, 0x1, 0xfffa, 0x9, 0x2, 0x8, 0x6, 0x401, 0xb, 0x1, 0x9, 0x7, 0xd82, 0x5, 0x6, 0x1, 0x7, 0xb2, 0x1, 0xd, 0x7, 0xf, 0x101, 0x1, 0x200, 0x4]}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@overlay={0x1, 0xa, 0x4, 0x2000, 0x1, {0x0, 0xea60}, {0x2, 0x1, 0x1, 0x4, 0x8, 0x1, "16a683cf"}, 0x7fe, 0x3, {}, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0], 0xb8}}, 0x4004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffff000000002200"/100], 0xb8}}, 0x8000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000708000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="b890000f20d82626f30fc7b0e2a3360fc72f66b9800000c00f326635e000010045000f001ed2c6360f785ef266f30f2c0f0f20e06635000002000f22e00f01361f13", 0x42}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 725.782µs ago: executing program 4 (id=2533): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write(r0, &(0x7f0000000fc0), 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0x8, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x400, 0x3ff}, {0x2, 0x8}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x4, 0x0, 0x5}}}) 0s ago: executing program 9 (id=2534): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x1, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0x2, 0x2, 0x6}}, 0xfffffe00}) ppoll(&(0x7f00000003c0)=[{r0, 0x2091}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.230976][ T8868] net_ratelimit: 30 callbacks suppressed [ 1175.231000][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1175.275776][ T8469] usb 9-1: Product: syz [ 1175.290819][ T8469] usb 9-1: Manufacturer: syz [ 1175.310141][ T8469] usb 9-1: SerialNumber: syz [ 1175.341195][ T8469] usb 9-1: config 0 descriptor?? [ 1175.380080][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1175.406047][ T8469] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 027 [ 1175.502482][ T8860] bond2: (slave bridge2): failed to get link speed/duplex [ 1175.640549][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1175.800103][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1175.943236][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1176.121195][ T8860] bond2: (slave bridge2): failed to get link speed/duplex [ 1176.251302][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1176.370110][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1176.386290][T17055] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1176.436487][T17056] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1176.523212][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1177.315185][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.333182][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.353194][ T8469] (null): failure setting delay to 10us [ 1177.399560][ T8469] i2c-tiny-usb 9-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1177.516634][ T8469] usb 9-1: USB disconnect, device number 27 [ 1178.479528][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1926'. [ 1178.575522][T17082] team0: left allmulticast mode [ 1178.582144][T17082] team_slave_0: left allmulticast mode [ 1178.603289][T17082] team_slave_1: left allmulticast mode [ 1178.622476][T17085] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1926'. [ 1179.304300][ T809] IPVS: starting estimator thread 0... [ 1179.440150][T17090] IPVS: using max 26 ests per chain, 62400 per kthread [ 1179.837462][T17096] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1180.250372][ T8873] net_ratelimit: 21 callbacks suppressed [ 1180.250399][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1180.410367][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1180.550193][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1180.700121][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1180.831289][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1180.981927][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1181.110105][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1181.260925][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1181.400558][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1181.540693][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1181.695318][T17111] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1181.855753][T17116] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1182.611917][T17135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.654749][T17135] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1182.750383][ T29] audit: type=1326 audit(1779764613.261:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.4.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d6499ce59 code=0x0 [ 1185.299194][ T8868] net_ratelimit: 32 callbacks suppressed [ 1185.299211][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1185.484141][ T8860] bond2: (slave bridge2): failed to get link speed/duplex [ 1185.650125][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1185.758474][T17158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1185.785593][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1185.872415][T17161] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1185.944306][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1186.080237][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1186.210186][ T8860] bond2: (slave bridge2): failed to get link speed/duplex [ 1186.410243][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1186.575313][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1186.720180][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1187.098696][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1944'. [ 1187.492887][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1944'. [ 1190.300532][ T8866] net_ratelimit: 28 callbacks suppressed [ 1190.300556][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1190.494544][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1190.630077][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1190.699005][T17232] blktrace: Concurrent blktraces are not allowed on loop4 [ 1190.786397][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1190.991266][ T8860] bond2: (slave bridge2): failed to get link speed/duplex [ 1191.144308][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1191.310379][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1191.420074][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1191.540273][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1191.612013][T17249] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1191.664033][T17249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1191.824130][T17249] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1191.869602][T17249] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1952'. [ 1193.771072][ T29] audit: type=1800 audit(1779764624.281:2337): pid=17263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1953" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=74154 res=0 errno=0 [ 1194.642307][T17276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.708421][T17276] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1194.867354][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1958'. [ 1194.936548][T17281] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1958'. [ 1194.986801][T17282] netlink: 'syz.7.1958': attribute type 10 has an invalid length. [ 1195.025081][T17282] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1958'. [ 1195.171317][T17282] dummy0: entered promiscuous mode [ 1195.380116][ T8869] net_ratelimit: 25 callbacks suppressed [ 1195.380134][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1195.631735][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1195.762885][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1195.890146][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1196.040755][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1196.161481][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1196.300129][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1196.431005][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1196.580359][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1196.711050][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1198.164491][T17318] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1199.950123][T11848] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1200.137718][T11848] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1200.178554][T11848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.221122][T11848] usb 9-1: config 0 descriptor?? [ 1200.453724][ T8868] net_ratelimit: 31 callbacks suppressed [ 1200.453748][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1200.495471][T11848] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1200.592319][T17342] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1971'. [ 1200.620297][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1200.761978][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1200.862264][T17346] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1971'. [ 1200.921387][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.040572][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.176072][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.254999][T11848] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1201.262294][T11848] [drm] Initialized udl on minor 2 [ 1201.311818][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.440238][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.582803][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.628602][T11848] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1201.730211][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.825427][T11848] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1201.941958][T11848] usb 9-1: USB disconnect, device number 28 [ 1201.977098][ T8466] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1202.620384][T17358] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1975'. [ 1205.255697][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 1205.493154][ T8869] net_ratelimit: 31 callbacks suppressed [ 1205.493178][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1205.671852][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1205.840186][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1206.000081][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1206.135386][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1206.292891][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1206.460132][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1206.590700][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1206.700098][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1206.820158][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1207.454580][T17410] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1208.686881][T17426] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.1987'. [ 1208.797004][T17426] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1210.583321][ T8869] net_ratelimit: 32 callbacks suppressed [ 1210.583338][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1210.763909][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1210.960182][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.113418][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.430453][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.550189][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.710958][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.850104][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.980340][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1212.042034][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 1212.341579][ T8466] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1212.403383][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1212.520212][ T8466] usb 5-1: Using ep0 maxpacket: 16 [ 1212.541614][ T8466] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1212.560898][ T8466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.582284][ T8466] usb 5-1: Product: syz [ 1212.597605][ T8466] usb 5-1: Manufacturer: syz [ 1212.633374][ T8466] usb 5-1: SerialNumber: syz [ 1212.649313][ T8466] usb 5-1: config 0 descriptor?? [ 1212.885804][ T8466] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 1212.923365][ T8466] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1212.963383][ T8466] usb 5-1: USB disconnect, device number 31 [ 1214.200253][T11848] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 1214.382005][T11848] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1214.415839][T17492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1214.418473][T11848] usb 5-1: config 0 has no interface number 0 [ 1214.505724][T11848] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1214.515060][T17493] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1214.594317][T11848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1214.644371][T11848] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1214.679299][T11848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1214.733839][T11848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1214.791869][T11848] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1214.871751][T11848] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1214.917783][T11848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.975439][T11848] usb 5-1: config 0 descriptor?? [ 1215.001337][T17484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1215.050750][T17484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1215.114859][T11848] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1215.328646][T17479] ldusb 5-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1215.425848][T17484] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1999'. [ 1215.735814][T17497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.798960][T17497] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1216.090157][ T13] net_ratelimit: 27 callbacks suppressed [ 1216.090240][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1216.245567][ T809] usb 5-1: USB disconnect, device number 32 [ 1216.317278][ T809] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1216.452514][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1216.641491][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1216.780245][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1216.921266][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1216.944259][T17506] KVM: debugfs: duplicate directory 17506-5 [ 1216.986885][ T29] audit: type=1326 audit(1779764647.501:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1217.050153][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1217.084138][ T29] audit: type=1326 audit(1779764647.501:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1217.160162][ T29] audit: type=1326 audit(1779764647.561:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1217.207792][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1217.330379][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1217.395446][ T29] audit: type=1326 audit(1779764647.561:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1217.471584][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1217.622915][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1217.703251][ T29] audit: type=1326 audit(1779764647.561:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1217.818014][ T29] audit: type=1326 audit(1779764647.561:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1217.956617][ T29] audit: type=1326 audit(1779764647.561:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1218.118836][ T29] audit: type=1326 audit(1779764647.561:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1218.267195][ T29] audit: type=1326 audit(1779764647.561:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1218.349887][ T29] audit: type=1326 audit(1779764647.561:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.8.2005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1218.433634][T17515] fuse: Bad value for 'fd' [ 1218.710196][T11848] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 1218.884123][T11848] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1218.918662][T11848] usb 9-1: config 0 has no interface number 0 [ 1218.958654][T11848] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1219.050835][T11848] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1219.110203][T11848] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1219.166490][T11848] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1219.222521][T11848] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1219.265887][T11848] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1219.304895][ T5761] IPVS: starting estimator thread 0... [ 1219.337533][T11848] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1219.379619][T11848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.429688][T11848] usb 9-1: config 0 descriptor?? [ 1219.465080][T17515] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1219.493409][T17538] IPVS: using max 28 ests per chain, 67200 per kthread [ 1219.516451][T17515] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1219.573622][T11848] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1220.015631][T17523] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2007'. [ 1220.433762][ T8469] usb 9-1: USB disconnect, device number 29 [ 1220.477919][ T8469] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1221.101348][ T8870] net_ratelimit: 23 callbacks suppressed [ 1221.101378][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1221.260461][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1221.402724][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1221.530255][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1221.670308][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1221.820186][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1222.011922][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1222.598391][T17574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.700080][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1222.707420][ T5761] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 1222.735202][T17581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1222.848972][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1222.902655][T17581] netlink: 'syz.9.2017': attribute type 10 has an invalid length. [ 1222.914206][ T5761] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1222.920303][ T8469] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1222.951244][ T5761] usb 5-1: config 0 has no interface number 0 [ 1222.998848][ T5761] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1223.143772][T17581] team0 (unregistering): Port device team_slave_0 removed [ 1223.154094][ T8469] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1223.188900][ T8469] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.198255][ T5761] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1223.241097][ T8469] usb 9-1: Product: syz [ 1223.258004][ T8469] usb 9-1: Manufacturer: syz [ 1223.278929][ T8469] usb 9-1: SerialNumber: syz [ 1223.346573][ T8469] usb 9-1: config 0 descriptor?? [ 1223.379251][ T5761] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1223.406091][ T8469] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 030 [ 1223.427039][T17581] team0 (unregistering): Port device team_slave_1 removed [ 1223.502637][ T5761] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1223.540156][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1223.567860][ T5761] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1223.607810][ T5761] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1223.686549][ T5761] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1223.734399][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.748327][T17587] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1223.774380][ T5761] usb 5-1: config 0 descriptor?? [ 1223.789901][T17573] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1223.803679][T17573] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1223.829503][T17589] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1223.837324][ T5761] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1224.043058][T17569] ldusb 5-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1224.124477][T17572] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1224.514172][ T5761] usb 5-1: USB disconnect, device number 33 [ 1224.576573][ T5761] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1225.091432][ T8469] (null): failure setting delay to 10us [ 1225.111297][ T8469] i2c-tiny-usb 9-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1225.168531][ T8469] usb 9-1: USB disconnect, device number 30 [ 1225.202899][T17596] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1225.236946][T17597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1225.603362][T17601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2020'. [ 1225.739527][T17603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1226.904374][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2025'. [ 1227.049660][T17604] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2020'. [ 1227.058779][ T8868] net_ratelimit: 12 callbacks suppressed [ 1227.058801][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1227.163211][T17619] ip6erspan0: entered allmulticast mode [ 1227.200311][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1227.285789][T17615] fuse: Bad value for 'fd' [ 1227.340076][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1227.461788][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1227.610134][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1227.750116][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1227.900178][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1228.030592][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1228.091138][T17634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.191246][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1228.320124][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1229.482436][T17645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1229.514023][T17645] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1229.554984][T17645] loop9: detected capacity change from 0 to 524287936 [ 1230.346646][T17656] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1230.398810][T17656] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 1231.733137][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2035'. [ 1231.915494][T17668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.007840][T17667] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2035'. [ 1232.080376][ T8874] net_ratelimit: 32 callbacks suppressed [ 1232.080403][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1232.106483][T17668] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2035'. [ 1232.250110][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1232.380072][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1232.500125][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1232.652862][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1232.806938][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1232.950115][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1233.061806][T17677] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1233.082257][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1233.221409][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1233.380180][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1234.480144][ T8469] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 1234.579447][T17696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.612082][T17696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.726464][T17696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.764997][T17696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.795537][T17696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1234.808588][T17696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1234.879811][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.887218][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.938651][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.946000][ T8874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.807242][ T8469] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1236.819648][ T8469] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1236.857982][ T8469] usb 5-1: can't read configurations, error -71 [ 1237.171389][ T13] net_ratelimit: 29 callbacks suppressed [ 1237.171408][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1237.310225][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1237.440193][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1237.581116][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1237.721024][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1237.858181][T17721] fuse: Bad value for 'fd' [ 1237.860463][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1237.990141][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.110892][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.230118][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.351026][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.370823][T17727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2048'. [ 1238.753248][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.759594][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.635241][T17736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1239.663752][T17736] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1240.498478][T17740] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1241.894965][T17756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.281299][ T8868] net_ratelimit: 32 callbacks suppressed [ 1242.281318][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1242.430162][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1242.580827][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1242.722648][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1242.862765][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1243.000052][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1243.141348][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1243.270224][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1243.402418][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1243.530203][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1245.378282][T17797] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2062'. [ 1245.468157][T17798] netlink: 'syz.7.2061': attribute type 2 has an invalid length. [ 1245.628940][T17798] netlink: 'syz.7.2061': attribute type 2 has an invalid length. [ 1245.653460][T17787] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1245.677676][T17787] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1245.770142][T17787] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1245.795891][T17787] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1245.855576][T17787] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1245.881929][T17787] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1245.932586][T17787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1245.963168][T17787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1245.984564][T17787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1246.005163][T17787] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1246.312747][T17806] gretap0: entered promiscuous mode [ 1246.342853][T17806] vlan3: entered promiscuous mode [ 1246.522204][T17807] fuse: Bad value for 'fd' [ 1246.770330][T17814] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1247.230108][ T5638] Bluetooth: hci6: command 0x0406 tx timeout [ 1247.395376][ T8866] net_ratelimit: 28 callbacks suppressed [ 1247.395402][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1247.724114][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1247.803166][ T5638] Bluetooth: hci7: command 0x0406 tx timeout [ 1247.889642][ T5638] Bluetooth: hci8: command 0x0406 tx timeout [ 1247.959690][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1247.967359][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 1248.030078][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 1248.121481][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1248.270246][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1248.380222][T17826] binder: 17823:17826 ioctl 4018620d 0 returned -22 [ 1248.410051][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1248.448172][T17826] binder: 17823:17826 ioctl c0306201 0 returned -14 [ 1248.580154][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1248.732550][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1248.743368][T17826] syz.4.2068 (17826): drop_caches: 2 [ 1248.870075][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1249.021394][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 1249.021421][ T29] audit: type=1326 audit(1779764679.531:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.060309][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1249.179072][T17832] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1249.205193][ T29] audit: type=1326 audit(1779764679.531:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.307890][T17839] netlink: 'syz.9.2070': attribute type 4 has an invalid length. [ 1249.345489][T17833] netlink: 'syz.9.2070': attribute type 4 has an invalid length. [ 1249.349848][ T29] audit: type=1326 audit(1779764679.531:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.430746][ T5638] Bluetooth: hci6: command 0x0406 tx timeout [ 1249.470355][ T29] audit: type=1326 audit(1779764679.531:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.510550][ T29] audit: type=1326 audit(1779764679.531:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.547080][ T29] audit: type=1326 audit(1779764679.541:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.571802][ T29] audit: type=1326 audit(1779764679.571:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.752898][ T29] audit: type=1326 audit(1779764679.571:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1249.880598][ T5638] Bluetooth: hci7: command 0x0406 tx timeout [ 1249.950250][ T5638] Bluetooth: hci8: command 0x0406 tx timeout [ 1249.985864][ T29] audit: type=1326 audit(1779764679.571:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1250.030485][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 1250.110248][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 1250.121127][ T29] audit: type=1326 audit(1779764679.571:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.9.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22a99ce59 code=0x7ffc0000 [ 1250.897240][T17849] fuse: Bad value for 'fd' [ 1251.686064][T17861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.723108][T17861] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1251.823699][T17859] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1252.250036][ T8456] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1252.421396][ T8870] net_ratelimit: 25 callbacks suppressed [ 1252.421416][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1252.448152][ T8456] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1252.465697][ T8456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.475525][ T8456] usb 10-1: Product: syz [ 1252.481387][ T8456] usb 10-1: Manufacturer: syz [ 1252.487131][ T8456] usb 10-1: SerialNumber: syz [ 1252.503687][ T8456] usb 10-1: config 0 descriptor?? [ 1252.514428][ T8456] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 021 [ 1252.570154][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1252.720098][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1252.840094][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1252.960426][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1253.082637][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1253.200136][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1253.320720][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1253.440124][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1253.506239][T17875] pimreg3: entered allmulticast mode [ 1253.563364][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1254.087128][ T8456] (null): failure setting delay to 10us [ 1254.137108][ T8456] i2c-tiny-usb 10-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1254.274574][ T8456] usb 10-1: USB disconnect, device number 21 [ 1255.725662][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.733342][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.221607][T17897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.359730][T17897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.816497][T17897] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1256.895967][ T8868] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.915372][ T8866] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.952610][ T8866] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.987714][ T8866] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.480906][ T8870] net_ratelimit: 18 callbacks suppressed [ 1257.480925][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1257.666561][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1257.830328][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1257.907914][T17920] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2084'. [ 1257.977213][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1257.977236][ T29] audit: type=1800 audit(1779764688.491:2425): pid=17921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2084" name="bus" dev="tmpfs" ino=1300 res=0 errno=0 [ 1258.260675][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.390073][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.540178][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.680859][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.821103][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.961022][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1259.112187][T17933] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1259.886703][T17946] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1262.150457][T17968] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1262.591716][ T8870] net_ratelimit: 30 callbacks suppressed [ 1262.591738][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1262.820226][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1262.985621][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1263.160175][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1263.290318][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1263.306334][T17981] syzkaller0: entered promiscuous mode [ 1263.313305][T17981] syzkaller0: entered allmulticast mode [ 1263.343378][T17981] tipc: Started in network mode [ 1263.357360][T17981] tipc: Node identity 8e88ba79916c, cluster identity 4711 [ 1263.378140][T17981] tipc: Enabled bearer , priority 0 [ 1263.420178][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1263.507977][T17989] netlink: 45 bytes leftover after parsing attributes in process `syz.7.2100'. [ 1263.551273][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1263.569748][ T29] audit: type=1326 audit(1779764694.081:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17983 comm="syz.7.2100" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcba6d9ce59 code=0x0 [ 1263.709340][T17995] Cannot find add_set index 4 as target [ 1263.780470][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1264.158641][T17981] tipc: Resetting bearer [ 1264.369286][T17981] tipc: Disabling bearer [ 1264.560463][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1264.681095][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1264.907514][T18019] netlink: 51 bytes leftover after parsing attributes in process `syz.9.2106'. [ 1265.038345][T18014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1266.942467][T18044] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1267.701290][ T13] net_ratelimit: 25 callbacks suppressed [ 1267.701309][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1267.890726][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.030624][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.171017][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.320426][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.364175][ T8459] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1268.451017][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.520926][ T8459] usb 9-1: Using ep0 maxpacket: 8 [ 1268.548308][ T8459] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 1268.581619][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.607486][ T8459] usb 9-1: config 0 has no interface number 0 [ 1268.639508][ T8459] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1268.675984][ T8459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.714376][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.761983][ T8459] usb 9-1: config 0 descriptor?? [ 1268.863123][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.918120][ T8459] viperboard 9-1:0.143: version 0.00 found at bus 009 address 031 [ 1268.987723][ T8459] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1269.002771][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1269.026466][ T8459] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1269.129413][ T8459] usb 9-1: USB disconnect, device number 31 [ 1270.620038][ T8459] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 1270.805310][ T8459] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1270.841767][ T8459] usb 9-1: config 0 has no interface number 0 [ 1270.873365][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1270.924912][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1270.960672][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1271.007511][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1271.070378][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1271.118455][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1271.177195][ T8459] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1271.196135][ T8459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.224368][ T8459] usb 9-1: config 0 descriptor?? [ 1271.250331][T18084] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1271.259394][T18084] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1271.296081][ T8459] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1271.441429][T18089] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1271.532458][T18084] ldusb 9-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1271.656447][T18084] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2117'. [ 1272.669216][ T8469] usb 9-1: USB disconnect, device number 32 [ 1272.736020][ T8469] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1272.953330][ T8866] net_ratelimit: 23 callbacks suppressed [ 1272.953357][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.146234][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.290126][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.438612][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.600343][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.729885][T18110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.750231][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.793104][T18113] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1273.892958][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.929026][T18112] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1274.043690][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1274.710099][ T8469] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1274.905390][ T8469] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1274.948548][ T8469] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.990132][ T8469] usb 10-1: Product: syz [ 1275.018175][ T8469] usb 10-1: Manufacturer: syz [ 1275.043232][ T8469] usb 10-1: SerialNumber: syz [ 1275.085999][ T8469] usb 10-1: config 0 descriptor?? [ 1275.130349][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1275.343487][ T8469] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1275.446160][T18131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.525450][T18131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.625125][T18131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.824419][T18141] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2128'. [ 1275.882984][T18131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.943965][T18131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.007929][T18131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1276.083016][T18131] veth1_vlan: left promiscuous mode [ 1276.108856][T18131] veth0_vlan: left promiscuous mode [ 1276.143093][T18131] veth0_vlan: entered promiscuous mode [ 1276.184251][T18131] veth1_vlan: entered promiscuous mode [ 1276.229849][T18131] veth1_macvtap: left promiscuous mode [ 1276.243325][T18131] veth0_macvtap: left promiscuous mode [ 1276.274249][T18131] veth0_macvtap: entered promiscuous mode [ 1276.289901][T18131] veth1_macvtap: entered promiscuous mode [ 1276.337288][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1276.362896][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1276.387954][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1276.409096][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1276.430583][T18131] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1277.657115][ T8868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.664291][ T8868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.675268][ T8868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.682515][ T8868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.733540][ T8869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.757461][ T8869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.785997][ T8869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.823915][ T8869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.960117][ T8868] net_ratelimit: 1 callbacks suppressed [ 1277.960140][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.100312][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.251991][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.265316][T18153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.392344][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.503835][T18158] random: crng reseeded on system resumption [ 1278.552032][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.683686][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.762149][ T8469] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1278.804894][ T8469] usb 10-1: USB disconnect, device number 22 [ 1278.820176][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.004798][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.141816][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.340209][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1282.720642][ T8468] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 1282.759520][T18205] netlink: 'syz.9.2141': attribute type 4 has an invalid length. [ 1282.892087][ T8468] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1282.926092][ T8468] usb 5-1: config 0 has no interface number 0 [ 1282.940185][ T8468] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1282.954264][ T8468] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1283.022341][ T8873] net_ratelimit: 30 callbacks suppressed [ 1283.022359][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.119630][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2142'. [ 1283.160102][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.184910][ T8468] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1283.201803][ T8468] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1283.228333][T18210] lo: Caught tx_queue_len zero misconfig [ 1283.240391][ T8468] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1283.252327][ T8468] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1283.269863][T18210] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1283.269863][T18210] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1283.301512][T11848] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1283.309262][ T8468] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1283.318815][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.376868][ T8468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.485004][ T8468] usb 5-1: config 0 descriptor?? [ 1283.500142][T11848] usb 10-1: Using ep0 maxpacket: 16 [ 1283.508343][T18194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1283.522285][T11848] usb 10-1: config 0 has no interfaces? [ 1283.546393][T11848] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1283.558352][T18194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1283.612517][T11848] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1283.621537][ T8468] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1283.655181][T11848] usb 10-1: Manufacturer: syz [ 1283.695072][T11848] usb 10-1: config 0 descriptor?? [ 1283.827982][T18194] ldusb 5-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1283.970753][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1284.034643][T18194] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2139'. [ 1285.430082][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1286.860330][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1286.970022][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1287.122651][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1287.260067][ T5761] usb 5-1: USB disconnect, device number 36 [ 1287.283321][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1287.346211][ T5761] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1287.443985][T11848] usb 10-1: USB disconnect, device number 23 [ 1287.472011][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1287.990826][ T5761] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 1288.072594][ T8869] net_ratelimit: 4 callbacks suppressed [ 1288.072610][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.206145][ T5761] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1288.220363][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.251201][ T5761] usb 5-1: config 0 has no interface number 0 [ 1288.276330][ T5761] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1288.323728][ T5761] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1288.348623][T18226] fuse: Bad value for 'rootmode' [ 1288.353810][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.394785][ T5761] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1288.418679][ T5761] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1288.461088][ T5761] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1288.474776][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.539676][ T5761] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1288.632331][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.697096][ T5761] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1288.761307][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.821396][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.837913][ T5761] usb 5-1: config 0 descriptor?? [ 1288.921287][T18240] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1288.971293][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.987786][T18240] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1289.085639][ T5761] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1289.120333][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.270853][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.309037][T18240] ldusb 5-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1289.410231][ T8868] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.442082][T18244] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2148'. [ 1290.098094][ T5761] usb 5-1: USB disconnect, device number 37 [ 1290.150872][ T5761] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1291.113446][T18279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.160112][ T8866] net_ratelimit: 24 callbacks suppressed [ 1293.160131][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.341414][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.491592][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.640131][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.791765][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.910069][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.161892][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.371060][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.491011][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.605816][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.675763][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2161'. [ 1294.722906][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2161'. [ 1295.944671][T18327] netlink: 'syz.8.2163': attribute type 5 has an invalid length. [ 1295.988199][T18327] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2163'. [ 1296.401255][T18338] binder: 18328:18338 ioctl 4018620d 0 returned -22 [ 1296.434196][T18338] binder: 18328:18338 ioctl c0306201 0 returned -14 [ 1296.686895][ T29] audit: type=1800 audit(1779764727.201:2427): pid=18332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2165" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=81589 res=0 errno=0 [ 1297.143142][T18338] syz.9.2164 (18338): drop_caches: 2 [ 1298.271693][T18358] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1298.280172][ T8874] net_ratelimit: 24 callbacks suppressed [ 1298.280194][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.460814][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.580124][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.620065][ T8459] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1298.691698][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.801159][ T8459] usb 5-1: Using ep0 maxpacket: 32 [ 1298.820132][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.823452][ T8459] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1298.867074][ T8459] usb 5-1: config 0 has no interface number 0 [ 1298.894717][ T8459] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1298.922282][ T8459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.962037][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.976658][ T8459] usb 5-1: Product: syz [ 1298.987239][ T8459] usb 5-1: Manufacturer: syz [ 1299.009979][ T8459] usb 5-1: SerialNumber: syz [ 1299.026545][ T8459] usb 5-1: config 0 descriptor?? [ 1299.045332][ T8459] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1299.074149][ T8459] usb 5-1: selecting invalid altsetting 1 [ 1299.081109][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1299.108527][ T8459] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1299.162290][ T8459] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1299.198961][T18363] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1299.227715][ T8459] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1299.236738][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1299.290736][ T8459] usb 5-1: media controller created [ 1299.371395][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1299.505168][ T8459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1299.640556][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1300.193746][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.200785][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.227878][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2171'. [ 1300.360270][T18358] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1300.421492][ T8459] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1300.455079][ T8459] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1300.468718][T18376] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1300.495144][ T8459] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1301.021323][ T8459] usb 5-1: USB disconnect, device number 38 [ 1301.822436][T18391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.267776][T18392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2174'. [ 1302.278774][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 1302.849213][T18398] netlink: 212356 bytes leftover after parsing attributes in process `syz.8.2177'. [ 1302.984257][T18398] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1303.340226][ T8866] net_ratelimit: 31 callbacks suppressed [ 1303.340252][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1303.470035][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1303.612278][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1303.741596][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1303.850070][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1303.970090][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.147730][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.306298][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.502154][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.640119][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.735411][T18413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.753232][T18413] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1305.619518][T18422] netlink: 'syz.6.2182': attribute type 10 has an invalid length. [ 1308.019142][T18452] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2187'. [ 1308.384273][ T8870] net_ratelimit: 24 callbacks suppressed [ 1308.384291][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1308.592037][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1308.750518][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1308.890324][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1308.930586][T18460] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.2188'. [ 1308.995926][T18460] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1309.040388][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.192025][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.333322][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.470941][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.612238][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.737773][T18465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2189'. [ 1310.745799][T18480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.612662][ T29] audit: type=1326 audit(1779764742.121:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1311.741837][ T29] audit: type=1326 audit(1779764742.151:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1311.791745][ T29] audit: type=1326 audit(1779764742.151:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1311.885576][ T29] audit: type=1326 audit(1779764742.151:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1311.959868][T18500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 1312.051467][ T29] audit: type=1326 audit(1779764742.161:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1312.157774][ T29] audit: type=1326 audit(1779764742.161:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1312.299361][ T29] audit: type=1326 audit(1779764742.161:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1312.416163][ T29] audit: type=1326 audit(1779764742.161:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1312.508519][ T29] audit: type=1326 audit(1779764742.161:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1312.608954][ T29] audit: type=1326 audit(1779764742.161:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.8.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8832b9ce59 code=0x7ffc0000 [ 1313.461495][ T8873] net_ratelimit: 32 callbacks suppressed [ 1313.461514][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1313.610069][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1313.750462][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1313.856236][T18514] xt_TCPMSS: Only works on TCP SYN packets [ 1313.885774][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1313.947726][T18516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1313.980593][T18516] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1314.020747][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1314.167223][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1314.522689][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1314.740660][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1314.935997][T18523] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1315.024059][T18523] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 1315.140701][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1315.270340][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1316.090517][T18535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.189442][T18539] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1318.107004][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2208'. [ 1318.197503][T18555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.264094][T18555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.284070][T18555] bond0 (unregistering): Released all slaves [ 1318.485289][ T8874] net_ratelimit: 7 callbacks suppressed [ 1318.485305][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1318.663109][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1318.800689][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1318.931523][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.030723][ T8459] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1319.070560][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.220181][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.245920][ T8459] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1319.278511][ T8459] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.329072][ T8459] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1319.370013][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.388345][ T8459] usb 9-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1319.440041][ T8459] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.508663][ T8459] usb 9-1: Product: syz [ 1319.530139][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.540347][ T8459] usb 9-1: Manufacturer: syz [ 1319.561338][ T8459] usb 9-1: SerialNumber: syz [ 1319.660467][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.790259][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.852733][ T8459] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1319.942427][ T8459] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1319.977382][T18585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1320.023484][T18585] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1320.471587][ T8459] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1320.544403][ T8459] usb 9-1: USB disconnect, device number 33 [ 1320.678996][T11262] udevd[11262]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.791991][T18591] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1320.887501][T18592] fuse: Bad value for 'fd' [ 1320.948808][T18596] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 1321.161313][ T8459] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1321.347963][ T8459] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1321.409779][ T8459] usb 5-1: config 0 has no interface number 0 [ 1321.446432][ T8459] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1321.539507][ T8459] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1321.569428][ T8459] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1321.618324][ T8459] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1321.695245][ T8459] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1321.784597][ T8459] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1321.852274][ T8459] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1321.889741][ T8459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.966264][ T8459] usb 5-1: config 0 descriptor?? [ 1322.036265][T18592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1322.099325][T18592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1322.140499][ T8459] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1322.258055][T18612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.302473][T18612] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1322.394046][T18592] ldusb 5-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1322.946239][T18594] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2218'. [ 1323.340342][T11848] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1323.520116][T11848] usb 10-1: Using ep0 maxpacket: 16 [ 1323.549531][T11848] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1323.588305][T11848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.624608][T11848] usb 10-1: Product: syz [ 1323.645943][T11848] usb 10-1: Manufacturer: syz [ 1323.674865][T11848] usb 10-1: SerialNumber: syz [ 1323.725303][T11848] usb 10-1: config 0 descriptor?? [ 1324.050915][ T8874] net_ratelimit: 9 callbacks suppressed [ 1324.050960][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1324.160876][T11848] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1324.259187][T11848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1324.299723][T11848] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1324.348027][T11848] usb 10-1: media controller created [ 1324.369808][T18616] dtv5100: wlen = 6d, aborting. [ 1324.418149][ T5761] usb 5-1: USB disconnect, device number 39 [ 1324.427536][T11848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1324.471688][ T5761] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1324.521154][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1324.542038][T11848] zl10353_read_register: readreg error (reg=127, ret==0) [ 1324.569065][T11848] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1324.649735][T11848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1324.683543][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1324.727074][T11848] usb 10-1: USB disconnect, device number 24 [ 1324.840240][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1324.970091][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1324.998535][T11848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1325.090852][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1325.210284][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1325.240052][ T8459] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1325.331311][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1325.416247][ T8459] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1325.430032][ T8459] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.443425][ T8459] usb 9-1: Product: syz [ 1325.456363][ T8459] usb 9-1: Manufacturer: syz [ 1325.465912][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1325.475911][ T8459] usb 9-1: SerialNumber: syz [ 1325.491516][ T8459] usb 9-1: config 0 descriptor?? [ 1325.501676][ T8459] hub 9-1:0.0: bad descriptor, ignoring hub [ 1325.508165][ T8459] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1325.590042][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1325.705885][ T8459] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1325.744832][ T8459] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1325.771209][ T8459] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1325.781359][ T8459] usb 9-1: media controller created [ 1325.827578][ T8459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1326.007417][ T8459] DVB: Unable to find symbol dib7000p_attach() [ 1326.021833][ T8459] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1326.170892][ T8459] rc_core: IR keymap rc-dib0700-rc5 not found [ 1326.193951][ T8459] Registered IR keymap rc-empty [ 1326.211878][ T8459] dvb-usb: could not initialize remote control. [ 1326.226841][ T8459] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1326.264189][ T8459] usb 9-1: USB disconnect, device number 34 [ 1326.588496][T18654] binder: 18644:18654 ioctl 4018620d 0 returned -22 [ 1327.848102][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2230'. [ 1328.092749][ T8459] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1328.265576][T18672] blktrace: Concurrent blktraces are not allowed on loop4 [ 1328.586745][T18674] fuse: Bad value for 'fd' [ 1328.880094][ T8459] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 1329.065251][ T8459] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1329.088463][ T8459] usb 9-1: config 0 has no interface number 0 [ 1329.119033][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1329.160029][ T8873] net_ratelimit: 28 callbacks suppressed [ 1329.160060][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1329.177441][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1329.225067][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1329.273698][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1329.320088][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1329.335802][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1329.388187][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1329.444151][ T8459] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1329.460169][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1329.497858][ T8459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.544980][ T8459] usb 9-1: config 0 descriptor?? [ 1329.561347][T18674] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1329.574593][T18674] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1329.600004][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1329.613082][ T8459] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1329.731980][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1329.821894][T18674] ldusb 9-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1329.870834][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1329.943790][T18674] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2233'. [ 1330.161795][T18687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.239097][T18687] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1330.381691][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1330.463030][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-1) [ 1330.490501][ T8466] usb 9-1: USB disconnect, device number 35 [ 1330.588370][ T8466] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1330.811571][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1331.080102][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1331.320030][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1332.101593][T18707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.130990][T18707] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1332.926196][T18716] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1333.065774][T18716] netlink: 'syz.4.2239': attribute type 10 has an invalid length. [ 1333.408560][T18716] team0 (unregistering): Port device team_slave_0 removed [ 1333.508267][T18716] team0 (unregistering): Port device team_slave_1 removed [ 1334.069154][T18731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.108293][T18731] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1334.211841][ T8866] net_ratelimit: 14 callbacks suppressed [ 1334.211859][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1334.672665][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1334.911374][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1334.964339][T18737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1335.220421][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1335.440820][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1335.457761][ T5638] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1335.600171][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1335.730047][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1335.859820][T18744] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1335.872342][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1336.031702][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1336.190323][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1336.773127][T18748] fuse: Bad value for 'fd' [ 1337.060362][ T8459] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 1337.257263][ T8459] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1337.286097][ T8459] usb 9-1: config 0 has no interface number 0 [ 1337.308770][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1337.377022][T18764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1337.387463][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1337.484743][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1337.539674][T18765] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1337.583191][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1337.648527][ T8459] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1337.691913][ T8459] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1337.769455][ T8459] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1337.831521][ T8459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.899672][ T8459] usb 9-1: config 0 descriptor?? [ 1337.925814][T18748] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1337.956901][T18748] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1338.028180][ T8459] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1338.239102][T18748] ldusb 9-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1338.347034][T18749] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2247'. [ 1339.102405][T18774] fuse: Bad value for 'fd' [ 1339.217084][T11848] usb 9-1: USB disconnect, device number 36 [ 1339.273780][T11848] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1339.360216][ T8466] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1339.390052][ T8869] net_ratelimit: 15 callbacks suppressed [ 1339.390076][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1339.546451][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1339.556640][ T8466] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1339.568297][ T8466] usb 5-1: config 0 has no interface number 0 [ 1339.592470][ T8466] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1339.623778][ T8466] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1339.670149][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1339.684682][ T8466] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1339.712295][ T8466] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1339.744297][ T8466] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1339.767970][ T8466] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1339.793637][ T8466] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1339.810051][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1339.823040][ T8466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.862002][ T8466] usb 5-1: config 0 descriptor?? [ 1339.879181][T18774] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1339.888573][T18774] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1339.919401][ T8466] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1339.940071][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1340.070048][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1340.144666][T18774] ldusb 5-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1340.203103][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1340.239338][T18775] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2253'. [ 1340.593206][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1340.798783][T18789] pimreg3: entered allmulticast mode [ 1340.894263][T18790] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2255'. [ 1340.907581][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1341.081985][T11848] usb 5-1: USB disconnect, device number 40 [ 1341.180191][ T8466] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1341.196641][T11848] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1341.315276][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1341.391806][ T8466] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1341.450821][ T8466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.535753][ T8466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.611055][ T8466] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1341.666439][ T8466] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1341.691500][ T8466] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1341.726048][ T8466] usb 10-1: Manufacturer: syz [ 1341.759849][ T8466] usb 10-1: config 0 descriptor?? [ 1342.082410][T18805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.114176][T18805] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1343.395352][T11848] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1343.572460][T11848] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.646854][T11848] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1343.680817][T11848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1343.721334][T18806] netlink: 'syz.9.2257': attribute type 33 has an invalid length. [ 1343.754140][T18806] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2257'. [ 1343.782361][T11848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1343.794096][T11848] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1343.819106][T11848] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1343.854551][T11848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1343.888886][T11848] usb 9-1: Product: syz [ 1343.910378][T11848] usb 9-1: Manufacturer: syz [ 1343.930403][T11848] usb 9-1: SerialNumber: syz [ 1343.957786][T11848] usb 9-1: config 0 descriptor?? [ 1344.373965][ T8466] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 1344.413537][T18824] netlink: 'syz.6.2263': attribute type 2 has an invalid length. [ 1344.446896][T11848] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1344.462859][ T8466] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1344.483856][T11848] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1344.502233][ T8874] net_ratelimit: 20 callbacks suppressed [ 1344.502253][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1344.521146][T18824] netlink: 'syz.6.2263': attribute type 2 has an invalid length. [ 1344.711478][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1344.776630][T11848] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1344.804493][T11848] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1344.840200][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1344.946405][T11848] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1345.014384][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1345.037691][T11848] usb 9-1: USB disconnect, device number 37 [ 1345.152327][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1345.247519][T18827] fuse: Bad value for 'fd' [ 1345.280402][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1345.400171][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1345.542541][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1345.550118][ T809] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1345.680831][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1345.760308][ T809] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1345.798547][ T809] usb 5-1: config 0 has no interface number 0 [ 1345.813364][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1345.835052][ T809] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1345.875877][ T809] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1345.917866][ T809] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1345.969485][ T809] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1346.021233][ T809] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1346.078618][ T809] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1346.150250][ T809] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1346.179138][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.207193][ T809] usb 5-1: config 0 descriptor?? [ 1346.227335][T18827] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1346.247452][T18827] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1346.267784][ T809] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1346.477604][T18842] fuse: Bad value for 'fd' [ 1346.605541][T18827] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2264'. [ 1346.734285][ T809] usb 9-1: new low-speed USB device number 38 using dummy_hcd [ 1346.916958][T11848] usb 5-1: USB disconnect, device number 41 [ 1346.932251][ T809] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1346.969257][ T8456] usb 10-1: USB disconnect, device number 25 [ 1346.982268][ T809] usb 9-1: config 0 has no interface number 0 [ 1347.009614][T11848] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 1347.084436][ T809] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.175026][ T809] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1347.247183][ T809] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1347.291064][ T809] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1347.347083][ T809] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1347.413664][ T809] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1347.476678][ T809] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1347.507330][ T809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.546321][ T809] usb 9-1: config 0 descriptor?? [ 1347.588378][T18842] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1347.668774][T18842] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1347.756948][ T809] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1347.953288][T18842] ldusb 9-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1348.025109][T18843] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2270'. [ 1348.115278][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1348.115298][ T29] audit: type=1326 audit(1779764778.631:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.188795][T18865] netlink: 'syz.4.2274': attribute type 4 has an invalid length. [ 1348.215357][ T29] audit: type=1326 audit(1779764778.631:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.329432][ T29] audit: type=1326 audit(1779764778.671:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.452305][ T29] audit: type=1326 audit(1779764778.671:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.550685][ T29] audit: type=1326 audit(1779764778.681:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.575779][ T29] audit: type=1326 audit(1779764778.681:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.607418][ T29] audit: type=1326 audit(1779764778.681:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.660413][T11848] usb 9-1: USB disconnect, device number 38 [ 1348.721361][T11848] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1348.848444][ T29] audit: type=1326 audit(1779764778.681:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1348.929297][ T29] audit: type=1326 audit(1779764778.681:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1349.061388][ T29] audit: type=1326 audit(1779764778.681:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.4.2274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6499ce59 code=0x7ffc0000 [ 1349.580140][ T13] net_ratelimit: 20 callbacks suppressed [ 1349.580164][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1349.770923][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1349.910080][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1350.033087][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1350.180141][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1350.310255][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1350.454317][ T5638] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1350.470173][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1350.600944][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1350.760343][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1350.922252][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1351.074692][T18896] fuse: Bad value for 'fd' [ 1351.161691][T18901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1351.196577][T18901] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1351.350391][T11848] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1351.532491][T11848] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1351.590251][T11848] usb 5-1: config 0 has no interface number 0 [ 1351.617454][T11848] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1351.674259][T11848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1351.717721][T11848] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1351.792547][T11848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1351.872235][T11848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1351.922693][T11848] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1351.985135][T11848] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1352.041451][T11848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.143946][T11848] usb 5-1: config 0 descriptor?? [ 1352.167394][T18896] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1352.258885][T18896] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1352.320493][T11848] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1352.534355][T18896] ldusb 5-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1352.642505][T18899] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2283'. [ 1353.189331][ T8466] usb 5-1: USB disconnect, device number 42 [ 1353.252626][ T8466] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1353.808019][T18930] netlink: 'syz.6.2292': attribute type 32 has an invalid length. [ 1354.097004][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2293'. [ 1354.672007][ T8870] net_ratelimit: 25 callbacks suppressed [ 1354.672031][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1354.857953][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1355.025390][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1355.161242][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1355.321798][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1355.471446][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1355.640124][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1355.803531][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1355.950293][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1356.090301][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1356.447675][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1356.466016][T18957] usb usb7: usbfs: process 18957 (syz.4.2297) did not claim interface 0 before use [ 1356.500056][T18957] usb usb7: selecting invalid altsetting 8 [ 1356.745301][T18954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.651950][T18984] usb usb7: usbfs: process 18984 (syz.6.2306) did not claim interface 0 before use [ 1359.667757][T19002] xt_CONNSECMARK: invalid mode: 0 [ 1359.700141][ T8873] net_ratelimit: 30 callbacks suppressed [ 1359.700164][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1359.880713][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1360.001250][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1360.130137][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1360.283132][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1360.413260][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1360.580050][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1360.700349][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1360.848188][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1361.030049][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1361.637088][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.643657][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.993879][T19037] netlink: 'syz.6.2321': attribute type 4 has an invalid length. [ 1362.689943][T19044] fuse: Bad value for 'fd' [ 1362.866467][T19045] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2323'. [ 1363.868729][T19062] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2326'. [ 1363.887749][T19062] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2326'. [ 1364.078318][T19063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.293088][T19063] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2326'. [ 1364.781001][ T8866] net_ratelimit: 21 callbacks suppressed [ 1364.781026][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1364.900054][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1365.030063][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1365.160637][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1365.270085][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1365.356339][T19062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.413369][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1365.581532][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1365.755798][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1365.911017][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1366.104759][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1367.898747][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2341'. [ 1367.916666][ T8469] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1368.101915][ T8469] usb 5-1: Using ep0 maxpacket: 8 [ 1368.128673][T19113] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1368.152800][ T8469] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1368.173775][ T8469] usb 5-1: config 0 has no interface number 0 [ 1368.189786][T19113] bond0 (unregistering): Released all slaves [ 1368.205378][ T8469] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1368.238046][ T8469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.295197][ T8469] usb 5-1: config 0 descriptor?? [ 1368.442665][ T8469] viperboard 5-1:0.143: version 0.00 found at bus 005 address 043 [ 1368.525778][ T8469] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1368.584074][ T8469] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1368.797579][ T8469] usb 5-1: USB disconnect, device number 43 [ 1368.997407][T19127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1369.792271][ T8866] net_ratelimit: 29 callbacks suppressed [ 1369.792289][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1369.901237][T19140] netlink: 'syz.6.2351': attribute type 8 has an invalid length. [ 1369.943229][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1370.070059][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1370.125619][T19144] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19144 comm: syz.4.2349) [ 1370.191237][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1370.199341][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1370.199379][ T29] audit: type=1800 audit(1779764800.711:2512): pid=19144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2349" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=74154 res=0 errno=0 [ 1370.411884][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1370.488796][T19160] netlink: 'syz.8.2355': attribute type 10 has an invalid length. [ 1370.539429][T19160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.604485][T19160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.611766][T19160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.715350][T19160] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1370.780220][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1371.050456][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1371.139243][T19167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1371.655273][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1371.684972][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1371.755222][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1371.806282][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1371.848313][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1371.924789][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1371.966325][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1372.036604][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1372.075044][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 1372.200540][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1372.323920][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1372.461626][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1372.630164][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.842508][T15645] net_ratelimit: 20 callbacks suppressed [ 1374.842533][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1375.001167][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1375.161877][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1375.315986][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1375.452378][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1375.590176][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1375.730609][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1375.871994][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1376.020500][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1376.160115][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1376.443251][T19243] __nla_validate_parse: 38 callbacks suppressed [ 1376.446900][T19243] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2378'. [ 1376.565594][T19249] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2378'. [ 1377.784995][T19264] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2378'. [ 1378.179384][T19266] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2385'. [ 1378.679655][T19278] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19278 comm: syz.9.2387) [ 1378.717495][ T29] audit: type=1800 audit(1779764809.231:2513): pid=19278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2387" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=89149 res=0 errno=0 [ 1378.790361][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.885126][T19243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1378.996053][T19284] fuse: Bad value for 'fd' [ 1379.920009][ T8874] net_ratelimit: 28 callbacks suppressed [ 1379.920034][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1380.151508][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1380.300447][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1380.444661][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1380.581313][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1380.721324][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1380.850001][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1380.970194][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1381.100113][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1381.220200][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1381.535146][ T29] audit: type=1400 audit(1779764812.051:2514): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1384.172915][T19362] fuse: Bad value for 'fd' [ 1384.460042][ T8456] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 1384.504594][T19369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1384.514085][T19369] IPv6: NLM_F_CREATE should be set when creating new route [ 1384.521475][T19369] IPv6: NLM_F_CREATE should be set when creating new route [ 1384.630233][ T8456] usb 5-1: device descriptor read/64, error -71 [ 1384.870129][ T8456] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 1384.991186][ T8870] net_ratelimit: 32 callbacks suppressed [ 1384.991204][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1385.030093][ T8456] usb 5-1: device descriptor read/64, error -71 [ 1385.130319][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1385.152954][ T8456] usb usb5-port1: attempt power cycle [ 1385.270149][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1385.380306][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1385.500238][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1385.521203][ T8456] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 1385.566727][ T8456] usb 5-1: device descriptor read/8, error -71 [ 1385.605163][T19407] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2433'. [ 1385.640039][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1385.785837][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1385.822960][ T8456] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 1385.879378][ T8456] usb 5-1: device descriptor read/8, error -71 [ 1385.950199][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1386.033207][ T8456] usb usb5-port1: unable to enumerate USB device [ 1386.070034][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1386.241168][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1386.437959][T19414] bond1: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 1386.453511][T19414] bond1 (unregistering): Released all slaves [ 1386.710763][T19419] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19419 comm: syz.7.2436) [ 1386.750541][ T29] audit: type=1800 audit(1779764817.251:2515): pid=19419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2436" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=90127 res=0 errno=0 [ 1386.963864][T19424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1387.025975][T19424] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1387.580086][ T8468] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1387.729535][T19436] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1387.774901][ T8468] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1387.825705][ T8468] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.886283][T19437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.938204][ T8468] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1387.995545][ T8468] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1388.053302][ T8468] usb 9-1: Manufacturer: syz [ 1388.106602][ T8468] usb 9-1: config 0 descriptor?? [ 1388.179796][ T8468] igorplugusb 9-1:0.0: incorrect number of endpoints [ 1388.407908][ T8468] usb 9-1: USB disconnect, device number 39 [ 1389.909286][T19462] fuse: Bad value for 'fd' [ 1390.090123][T15645] net_ratelimit: 21 callbacks suppressed [ 1390.090139][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1390.147391][T19474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2452'. [ 1390.240316][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1390.371028][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1390.516494][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1390.670293][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1390.811415][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1390.951814][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1391.090173][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1391.240340][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1391.360213][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1393.147461][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2464'. [ 1393.694620][T19530] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1395.182118][ T8866] net_ratelimit: 31 callbacks suppressed [ 1395.182138][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1395.343546][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1395.490997][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1395.620323][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1395.770111][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1395.821446][T19554] fuse: Bad value for 'fd' [ 1395.913023][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1396.060188][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1396.100371][ T809] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 1396.184725][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1396.295871][ T809] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1396.320048][ T809] usb 10-1: config 0 has no interface number 0 [ 1396.330134][ T8870] bond2: (slave bridge2): failed to get link speed/duplex [ 1396.365166][ T809] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1396.429620][ T809] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1396.461989][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1396.472482][ T809] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1396.550777][ T809] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1396.630234][ T809] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1396.694167][ T809] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1396.806343][ T809] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1396.894517][ T809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.991712][ T809] usb 10-1: config 0 descriptor?? [ 1397.028475][T19554] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1397.067616][T19554] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1397.134821][ T809] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1397.335357][T19554] ldusb 10-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1397.441964][T19556] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2474'. [ 1397.979554][ T8466] usb 10-1: USB disconnect, device number 26 [ 1398.065938][ T8466] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1398.232249][T19572] fuse: Bad value for 'fd' [ 1398.886026][T19583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1398.952095][T19588] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1400.281576][ T8869] net_ratelimit: 21 callbacks suppressed [ 1400.281601][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1400.460112][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1400.581371][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1400.730490][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1400.880090][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1401.020578][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1401.152977][ T8874] bond2: (slave bridge2): failed to get link speed/duplex [ 1401.293011][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1401.413214][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1401.550263][ T8869] bond2: (slave bridge2): failed to get link speed/duplex [ 1401.609152][T19616] fuse: Bad value for 'fd' [ 1401.860117][ T8468] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 1402.046615][ T8468] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1402.083036][ T8468] usb 10-1: config 0 has no interface number 0 [ 1402.117714][ T8468] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1402.174754][ T8468] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1402.254128][ T8468] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1402.304023][ T8468] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1402.351309][ T8468] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1402.399711][ T8468] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1402.452732][ T8468] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1402.480026][ T8468] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.538222][ T8468] usb 10-1: config 0 descriptor?? [ 1402.569681][T19616] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1402.594696][T19616] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1402.649748][ T8468] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1402.865759][T19616] ldusb 10-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1402.986325][T19618] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2489'. [ 1403.932603][ T8459] usb 10-1: USB disconnect, device number 27 [ 1404.001970][ T8459] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1404.602006][T19642] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2494'. [ 1405.215206][T19650] fuse: Bad value for 'fd' [ 1405.393141][ T8866] net_ratelimit: 26 callbacks suppressed [ 1405.393158][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1405.481252][ T8459] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 1405.540271][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1405.652577][ T8459] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1405.671610][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1405.682127][ T8459] usb 10-1: config 0 has no interface number 0 [ 1405.709636][ T8459] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1405.745452][ T8459] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1405.796082][ T8459] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1405.814686][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1405.851581][ T8459] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1405.905574][ T8459] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1405.943309][ T8459] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1405.981365][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1406.020226][ T8459] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1406.059573][ T8459] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.090112][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1406.116843][ T8459] usb 10-1: config 0 descriptor?? [ 1406.144027][T19650] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1406.152910][T19650] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1406.193718][ T8459] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1406.211304][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1406.361054][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1406.462060][T19650] ldusb 10-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 1406.481030][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1406.526990][T19671] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2497'. [ 1406.632305][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1407.067159][ T8466] usb 10-1: USB disconnect, device number 28 [ 1407.097751][ T8466] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1407.308297][T19678] fuse: Bad value for 'fd' [ 1407.807860][T19682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1407.841856][T19682] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1410.410174][ T8866] net_ratelimit: 29 callbacks suppressed [ 1410.410192][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1410.573282][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1410.690106][T19727] xt_hashlimit: size too large, truncated to 1048576 [ 1410.720268][ T8866] bond2: (slave bridge2): failed to get link speed/duplex [ 1410.860385][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1411.010945][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1411.171259][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1411.351759][ T8873] bond2: (slave bridge2): failed to get link speed/duplex [ 1411.556305][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1411.703828][T15645] bond2: (slave bridge2): failed to get link speed/duplex [ 1411.837928][T19743] xt_hashlimit: size too large, truncated to 1048576 [ 1411.890076][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1413.001399][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1413.049788][T19756] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 1413.081539][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1413.641871][T19762] fuse: Bad value for 'fd' [ 1413.766868][T19777] ================================================================== [ 1413.774995][T19777] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1413.783703][T19777] Write of size 1440 at addr ffffc90005e74a80 by task vivid-000-vid-c/19777 [ 1413.792392][T19777] [ 1413.794759][T19777] CPU: 1 UID: 0 PID: 19777 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1413.794783][T19777] Tainted: [L]=SOFTLOCKUP [ 1413.794789][T19777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1413.794803][T19777] Call Trace: [ 1413.794814][T19777] [ 1413.794820][T19777] dump_stack_lvl+0xe8/0x150 [ 1413.794841][T19777] print_address_description+0x55/0x1e0 [ 1413.794858][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1413.794880][T19777] print_report+0x58/0x70 [ 1413.794894][T19777] kasan_report+0x117/0x150 [ 1413.794919][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1413.794942][T19777] kasan_check_range+0x264/0x2c0 [ 1413.794966][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1413.794986][T19777] __asan_memcpy+0x40/0x70 [ 1413.795006][T19777] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1413.795055][T19777] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 1413.795136][T19777] ? ktime_get+0x45/0x220 [ 1413.795160][T19777] ? vivid_thread_vid_cap_tick+0xdb1/0x5fd0 [ 1413.795187][T19777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1413.795252][T19777] ? lockdep_hardirqs_on+0x7a/0x110 [ 1413.795268][T19777] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1413.795287][T19777] ? vivid_thread_vid_cap+0x491/0x1190 [ 1413.795311][T19777] vivid_thread_vid_cap+0x909/0x1190 [ 1413.795326][T19777] ? __lock_acquire+0x6b5/0x2cf0 [ 1413.795353][T19777] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1413.795373][T19777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1413.795396][T19777] ? __kthread_parkme+0x7a/0x1f0 [ 1413.795417][T19777] kthread+0x389/0x470 [ 1413.795437][T19777] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1413.795452][T19777] ? __pfx_kthread+0x10/0x10 [ 1413.795472][T19777] ret_from_fork+0x514/0xb70 [ 1413.795490][T19777] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.795505][T19777] ? __switch_to+0xc79/0x1410 [ 1413.795528][T19777] ? __pfx_kthread+0x10/0x10 [ 1413.795548][T19777] ret_from_fork_asm+0x1a/0x30 [ 1413.795575][T19777] [ 1413.795581][T19777] [ 1413.986639][T19777] The buggy address belongs to a 4-page vmalloc region starting at 0xffffc90005e71000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1413.999941][T19777] The buggy address belongs to the physical page: [ 1414.006386][T19777] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5a177 [ 1414.016451][T19777] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1414.023604][T19777] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1414.032194][T19777] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1414.040782][T19777] page dumped because: kasan: bad access detected [ 1414.047222][T19777] page_owner tracks the page as allocated [ 1414.052935][T19777] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 19776, tgid 19773 (syz.9.2534), ts 1413744743301, free_ts 1413319201131 [ 1414.072905][T19777] post_alloc_hook+0x22d/0x280 [ 1414.077686][T19777] get_page_from_freelist+0x24ba/0x2540 [ 1414.083244][T19777] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1414.089061][T19777] alloc_pages_mpol+0x235/0x490 [ 1414.093917][T19777] alloc_pages_noprof+0xac/0x2a0 [ 1414.098865][T19777] __vmalloc_node_range_noprof+0x7a7/0x1750 [ 1414.104770][T19777] vmalloc_user_noprof+0xad/0xe0 [ 1414.109720][T19777] vb2_vmalloc_alloc+0xef/0x360 [ 1414.114583][T19777] __vb2_queue_alloc+0x9c5/0x15a0 [ 1414.119629][T19777] vb2_core_reqbufs+0xc1f/0x1410 [ 1414.124571][T19777] __vb2_init_fileio+0x318/0xff0 [ 1414.129517][T19777] vb2_core_poll+0x4c1/0x840 [ 1414.134117][T19777] vb2_fop_poll+0x193/0x310 [ 1414.138628][T19777] v4l2_poll+0x147/0x2c0 [ 1414.142962][T19777] do_sys_poll+0x96c/0x10e0 [ 1414.147500][T19777] __se_sys_ppoll+0x209/0x2b0 [ 1414.152183][T19777] page last free pid 19739 tgid 19736 stack trace: [ 1414.158682][T19777] free_unref_folios+0xcec/0x1480 [ 1414.163718][T19777] folios_put_refs+0x9ff/0xb40 [ 1414.168492][T19777] truncate_inode_pages_range+0x3dd/0xe30 [ 1414.174216][T19777] blkdev_flush_mapping+0x109/0x2f0 [ 1414.179479][T19777] bdev_release+0x417/0x650 [ 1414.183994][T19777] blkdev_release+0x15/0x20 [ 1414.188548][T19777] __fput+0x44f/0xa60 [ 1414.192564][T19777] task_work_run+0x1d9/0x270 [ 1414.197167][T19777] do_exit+0x70f/0x22c0 [ 1414.201326][T19777] do_group_exit+0x21b/0x2d0 [ 1414.205924][T19777] get_signal+0x1284/0x1330 [ 1414.210430][T19777] arch_do_signal_or_restart+0xbc/0x840 [ 1414.216016][T19777] exit_to_user_mode_loop+0x8c/0x4d0 [ 1414.221313][T19777] do_syscall_64+0x33e/0x560 [ 1414.225977][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.231883][T19777] [ 1414.234213][T19777] Memory state around the buggy address: [ 1414.239843][T19777] ffffc90005e74f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1414.247941][T19777] ffffc90005e74f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1414.256007][T19777] >ffffc90005e75000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1414.264072][T19777] ^ [ 1414.268138][T19777] ffffc90005e75080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1414.276202][T19777] ffffc90005e75100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1414.284266][T19777] ================================================================== [ 1414.548966][T19777] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1414.556251][T19777] CPU: 1 UID: 0 PID: 19777 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.567654][T19777] Tainted: [L]=SOFTLOCKUP [ 1414.571982][T19777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1414.582043][T19777] Call Trace: [ 1414.585328][T19777] [ 1414.588264][T19777] vpanic+0x56c/0xa60 [ 1414.592261][T19777] ? __pfx_vpanic+0x10/0x10 [ 1414.596772][T19777] ? lockdep_hardirqs_on+0x7a/0x110 [ 1414.601993][T19777] panic+0xc5/0xd0 [ 1414.605728][T19777] ? __pfx_panic+0x10/0x10 [ 1414.610155][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1414.615800][T19777] ? __pfx_panic+0x10/0x10 [ 1414.620228][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1414.625876][T19777] check_panic_on_warn+0x89/0xb0 [ 1414.630828][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1414.636475][T19777] end_report+0x73/0x170 [ 1414.640737][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1414.646379][T19777] kasan_report+0x128/0x150 [ 1414.650899][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1414.656545][T19777] kasan_check_range+0x264/0x2c0 [ 1414.661520][T19777] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1414.667205][T19777] __asan_memcpy+0x40/0x70 [ 1414.671641][T19777] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1414.677151][T19777] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 1414.683005][T19777] ? ktime_get+0x45/0x220 [ 1414.687354][T19777] ? vivid_thread_vid_cap_tick+0xdb1/0x5fd0 [ 1414.693269][T19777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1414.699095][T19777] ? lockdep_hardirqs_on+0x7a/0x110 [ 1414.704308][T19777] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1414.710478][T19777] ? vivid_thread_vid_cap+0x491/0x1190 [ 1414.715960][T19777] vivid_thread_vid_cap+0x909/0x1190 [ 1414.721258][T19777] ? __lock_acquire+0x6b5/0x2cf0 [ 1414.726307][T19777] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1414.732045][T19777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1414.737869][T19777] ? __kthread_parkme+0x7a/0x1f0 [ 1414.742819][T19777] kthread+0x389/0x470 [ 1414.746903][T19777] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1414.752634][T19777] ? __pfx_kthread+0x10/0x10 [ 1414.757238][T19777] ret_from_fork+0x514/0xb70 [ 1414.761843][T19777] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.766969][T19777] ? __switch_to+0xc79/0x1410 [ 1414.771664][T19777] ? __pfx_kthread+0x10/0x10 [ 1414.776265][T19777] ret_from_fork_asm+0x1a/0x30 [ 1414.781045][T19777] [ 1414.784827][T19777] Kernel Offset: disabled [ 1414.789165][T19777] Rebooting in 86400 seconds..