last executing test programs: 15.323553255s ago: executing program 4 (id=41): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) socket(0x400000000010, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000180)=0x1) write$binfmt_elf32(r2, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4e, 0x12, 0xa4, 0x40, 0x52b, 0x1803, 0xff4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x20, 0x0, 0x92, [{{0x9, 0x4, 0xad, 0x0, 0x0, 0xe4, 0x4a, 0x57}}]}}]}}, 0x0) 14.267584155s ago: executing program 1 (id=43): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, 0xffffffffffffffff, 0xdd0bb000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x42, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f00002b4000/0x1000)=nil, 0x1, 0x0, 0x0, 0x2, 0x92, 0x0, 0x1a}) 13.171964451s ago: executing program 2 (id=44): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x62fe5fbe6441e434, @remote, @local, {[], {{0x4e22, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="6fb2", 0x2}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 11.25793994s ago: executing program 2 (id=46): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x17, 0x2, {0x3, 0x400}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}]}, 0x58}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmmsg$inet(r9, &(0x7f0000001a80)=[{{&(0x7f0000000400)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000580)="e2", 0x1}], 0x1}}, {{&(0x7f0000001080)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001280)=[{&(0x7f00000010c0)="d0", 0x1}], 0x1}}], 0x2, 0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x5, 0x5}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x854, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x57}}, @filter_kind_options=@f_cgroup={{0xb}, {0x81c, 0x2, [@TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x7, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x73b, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0xa5b2, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x5, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x5, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x3, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x3, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0xa900, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6106, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x80, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x3, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0xd3fb, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x7, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x7fff, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80100001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0xe1, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x80000081, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x0, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0x8, 0x4, 0x3ff, 0x1000, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_RATE64={0x65, 0x8, 0x6}]}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7fd877140006001e0089e9", 0xe, 0x40000, &(0x7f0000000080)={0xc9, 0x86dd, r10, 0x1, 0x0, 0x6, @local}, 0x14) 11.175035197s ago: executing program 1 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$kcm(0x2b, 0x1, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) listen(r5, 0x8) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 10.493476407s ago: executing program 4 (id=49): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xfffffdfb) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) 10.311466439s ago: executing program 2 (id=50): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000) r4 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) keyctl$revoke(0x3, r4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x9, 0xf9, 0x1, 0x1, 0x1, 0x3, 0x6, 0x3, 0x8, 0x6f, 0x7, 0x0, 0x1, 0x1, 0xc, 0x2}}) mq_open(0x0, 0x42, 0x0, 0x0) 10.264148797s ago: executing program 0 (id=51): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket(0xb, 0x3, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 8.710563477s ago: executing program 1 (id=52): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8.558442414s ago: executing program 3 (id=53): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002160, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 8.501753637s ago: executing program 2 (id=54): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x100a}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3}, 0x1801}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000001700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) 8.307749324s ago: executing program 4 (id=55): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x1b4, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0xc1, 0x1, {{'sha256\x00'}, 0x3c8, "3ba7455bf6ba995a773e1ff16737dda38b18b4d6f6ce41090000008bdc51055eaac0ef49cd6d29f30289cb48997dd726aa0f0a9649e86c679a829e5d6e7dd49b20018000000000000000c43271fcb9f7cb888bff11c2ad1d6a690478f2241a27c1f6a3a627bc014b8b3b24e48f2657d774cd30dc9a334444f7"}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x1000000}, 0xc) close(0xffffffffffffffff) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x10000008) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.378332719s ago: executing program 4 (id=56): shutdown(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000440)) syz_open_dev$I2C(&(0x7f0000000080), 0x8001, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040840) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xe7ac4000) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x45, &(0x7f0000caaffb), &(0x7f00000001c0)=0xc) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="80fd4717a707", 0x6}], 0x1, 0x807, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x80000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20800) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0xcb, 0x8, &(0x7f0000000040)={0x9c, "a8fd4950f88fdde3d44c1a23a8d7eda40800ff0f000000000000040232352ed770"}}) 6.21488277s ago: executing program 2 (id=57): open$dir(0x0, 0x80082, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 5.84625456s ago: executing program 0 (id=58): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') read$char_usb(r0, &(0x7f00000003c0)=""/164, 0xa4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000091) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f374"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.782473758s ago: executing program 3 (id=59): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x228, 0x0, 0x0, [{0x806, 0x5, 0xb, 0x2, '#,UK\x80j\x9bO\x8e,-'}, {0x2, 0x5, 0x1d8, 0x0, 'group\x1fidWtv\xf1@M\x13V\xb82\'\x1a\x00t\xae\x18&\xf8\x97\xbe4\xd5P\a\xf4I{\xea\xbf\x8c#\xad\xb9|\xd6\x01\x92a\xd5{\xde`U\xedxt\xd8\xdb\xeeS\xda\x81\xde\x83\xbf)\x8f,R_Hxj]&\xe7\x15\xfa\x02\x91\xa4\xa5\x971\n=\xc6%\xce{\xda\xd5\xd8\xf3\rTr\x8b\x95\xcc>\xaad\xb6\x9d\x13\x11<\xfb[\xd8\x01yG\xd4vt\x00\x02\xaej\x06\x12j&\x05\xb6W\x9b\xa7~2\'\xf2\xca\\\x94Q\"\xda\xfb\x1c\xba\xf7\xbc\v-\xbe[\x84\xfc\xbf*\xc4\x96\x93\xaaL^\xcf\xd6\xb3\\\xcd\x86\'\"fJ\x00j\xf3{\x02\xad\x14\xe2\xc6&\xe9\x18Y\xe8\fNO{\bV\x19\xdb<\x1f\x0e\x19\t\xe8\xed\xc7\xf6=\xa1\xe6Hj\xc2\x80@\to@|\xf9\xeb\x9b\xf4,\fl\x028\x9b\xe7\x05\x90\xb2\xe8N\x9cQ\x81\xf4r \xdd\xb4\xdaT\v\xcb\xbc\xa4\x88%\xb6~@\x1fkov\x9fr[\xca\xd8\x06)\x95\"ll\xd1\x9e\x8b\xf6]\x83b\xeatH \x04~G\xe5t\xe6\xfa\x81@\x8cB\xd6r\xdf\xf1\xd0\xb6Y1\xa2^#\xf6t\x93?\xa8S\x05\xb6J[\x9dJ~\xa4(t(\x80\x85\xc0\x00$\x16\xa0\xbc\xe7V\xc1\xc1\x17\xaeZ\xad\xdf,\xba\xd0\x11\xda\xe3c\x965\x0f\t5Z?\b\xaf\xc5\xc3M\x1e\x1bu\xf3\x06$\' u\xb9\x8f\xa9U\x8c\xd4\xe4\x02\x04\xa6\x83\x16\xea\x1ap<,\xd0\x00\xc7CP!\xe9$y\xde\xa4\x81q\xb6\x89%\xc4\xf9K\xc7&Z3\x84\\Q\xc7\xceo8\xe9\xaa\x89\xc5\x03\xde\xcdn\x7fl\x90\x1b\xec5\x12p&m\x8d\xd1\xce\x86$\xady\xe7-\xf2Q\xf2\x1e?\x8e\x83\xb9s\xea\x04j\xa8o\xe0L\xce5b\x94\x9d\x8b\xeaB\xe5\xb7\x02\x8b\xbd\xd9\x9cd\x13\xf5X\x0e\xda}*\xa0\\\x8d\xd5'}]}, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 5.484299652s ago: executing program 0 (id=60): socket$nl_generic(0x10, 0x3, 0x10) ioprio_get$pid(0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) unshare(0x400) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x2c}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x2, 0x2, 0x806}) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5.164404755s ago: executing program 0 (id=61): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) 5.067203154s ago: executing program 3 (id=62): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.709758253s ago: executing program 3 (id=63): r0 = socket(0x29, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x7acb, &(0x7f00000001c0)={0x0, 0x5112, 0x800, 0x1, 0x10e}, &(0x7f0000000240), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000003c0)=0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r4, &(0x7f0000000180)={0xd2, 0x20, 0x0, 0x20, 0x6}, 0x1c) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 4.495231414s ago: executing program 1 (id=64): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [@ringbuf_output], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 4.128437655s ago: executing program 4 (id=65): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) pselect6(0x40, &(0x7f0000000340)={0x9, 0x9, 0xa, 0x1, 0x200, 0x8, 0x9, 0x8001}, &(0x7f0000000380)={0x5, 0xd1b7, 0xfffffffffffff801, 0x2, 0x7fffffff, 0x7fff, 0x3, 0x4}, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) gettid() ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) 2.820122333s ago: executing program 2 (id=66): openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x6, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0xfffffffe, r4, r5, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) 2.490041045s ago: executing program 3 (id=67): pipe(&(0x7f0000000180)) pipe(&(0x7f0000000100)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x40}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x6000, @fd_index=0xa, 0x3, 0xf7e0, 0xfecc, 0xa, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.386514269s ago: executing program 1 (id=68): syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x804abd, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000400)={0x9771, 0xe8de, 0x0, 'queue1\x00', 0xfffffffb}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mknod$loop(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x400, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x0, 0x48480060, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) 2.370931712s ago: executing program 0 (id=69): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='westwood\x00', 0x9) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000000c0)=0xffff, 0x4) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000040)=0x6) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x3000, 0xfe, &(0x7f00000059c0)="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"}], 0x1}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="8800726f75705f6964", @ANYRESDEC=0x0]) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.424285921s ago: executing program 4 (id=70): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x1370, 0x0, 0x0, &(0x7f00000005c0)) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x2}) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000580)={&(0x7f0000000540)=[{0x7, 0x2000, 0x0, 0x0}, {0x8, 0x1c5799b50f2ef601, 0x0, 0x0}], 0x2}) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='0t', 0x2, 0x4}]) 424.114341ms ago: executing program 1 (id=71): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x120000) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000ee96b583ab"], 0x1c}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x700, 0x0}}], 0x7, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000340)={0x0, 0x3, 0x1, [0x8000, 0x0, 0x6, 0x9, 0x5], [0x9, 0x4, 0x7fffffff, 0x5, 0x9, 0x8, 0x7fffffffffffffff, 0x8, 0x95, 0x7fffffffffffffff, 0x0, 0x3, 0x2, 0x0, 0x8, 0x4, 0x100000001, 0x3, 0x7, 0x7, 0x6, 0x7f, 0x0, 0x7fffffffffffffff, 0x3, 0xad, 0x200, 0x8000000000000000, 0x0, 0xffffffffffffffa3, 0x6, 0x200, 0x7fff, 0x7, 0x1, 0x0, 0x8, 0x2d, 0x658, 0x2, 0x8, 0x6, 0x7, 0x0, 0x100000001, 0x8000000000000000, 0x1c000000000, 0x6, 0x7e9ef2f3, 0x6d, 0x6, 0x9, 0x6, 0x5, 0x8c, 0x6, 0x80000000, 0xfffffffffffffffa, 0x4, 0x6, 0x0, 0x7, 0x80000000, 0x80000001, 0x96af, 0x7, 0x902, 0x0, 0x2, 0x1e, 0x8, 0x5, 0xee, 0x4, 0x1084, 0x8, 0x90d, 0x3, 0x0, 0x5, 0x7fffffff, 0x7, 0x50f32258, 0x0, 0x9d2, 0x2b, 0xff, 0x4, 0x9, 0x8, 0x7, 0x10001, 0x1, 0x10000000000, 0xc74, 0x5, 0x0, 0x2, 0x15de, 0x4, 0x0, 0x34a, 0x88, 0x0, 0x40, 0xe7a0, 0x100, 0x1, 0x80, 0xfffffffffffffffc, 0x3, 0x8, 0xfffffffffffffffe, 0x6, 0xffffffffffffff6d, 0x4, 0x3, 0xffffffffffffff7f, 0xffffffff, 0xc, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000780)={{r2}, 0x0, 0x2, @unused=[0x3ff, 0x7, 0x4, 0x800], @devid=r4}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 162.069129ms ago: executing program 0 (id=72): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) fsopen(&(0x7f00000000c0)='minix\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x90000) 0s ago: executing program 3 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x4, 0x7, 0x0, 0x2}}}}}, 0x36) syz_pidfd_open(0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000280)={0x0, 0x1700, "cf5d57702c411447a5e47004fed0505cfb3f55467780fbb9", {0x7, 0x8}, 0x7}) syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) sendmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x34000, 0x24005805) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 68.940022][ T5834] cgroup: Unknown subsys name 'net' [ 69.067496][ T5834] cgroup: Unknown subsys name 'cpuset' [ 69.076949][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.507454][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.368430][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.374880][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.790571][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.817692][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.839067][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.846570][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.855140][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.862956][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.871890][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.879799][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.907418][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.915188][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.045384][ T5167] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.054634][ T5167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.063788][ T5167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.073744][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.081640][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.093371][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.093754][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.102384][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.116375][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.124826][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.165928][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.178670][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.197038][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.211579][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.219724][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.606250][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 73.803591][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 73.927053][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.944652][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.952007][ T5850] bridge_slave_0: entered allmulticast mode [ 73.962337][ T5850] bridge_slave_0: entered promiscuous mode [ 74.003410][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 74.017449][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.025060][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.032237][ T5850] bridge_slave_1: entered allmulticast mode [ 74.040048][ T5850] bridge_slave_1: entered promiscuous mode [ 74.060680][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 74.137871][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 74.185120][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.198162][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.309888][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.317711][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.327077][ T5852] bridge_slave_0: entered allmulticast mode [ 74.334515][ T5852] bridge_slave_0: entered promiscuous mode [ 74.342099][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.349548][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.357455][ T5852] bridge_slave_1: entered allmulticast mode [ 74.364724][ T5852] bridge_slave_1: entered promiscuous mode [ 74.399083][ T5850] team0: Port device team_slave_0 added [ 74.451851][ T5850] team0: Port device team_slave_1 added [ 74.483272][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.492593][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.500437][ T5859] bridge_slave_0: entered allmulticast mode [ 74.508716][ T5859] bridge_slave_0: entered promiscuous mode [ 74.552038][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.561350][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.569432][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.576729][ T5861] bridge_slave_0: entered allmulticast mode [ 74.584428][ T5861] bridge_slave_0: entered promiscuous mode [ 74.593437][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.600708][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.607943][ T5861] bridge_slave_1: entered allmulticast mode [ 74.615726][ T5861] bridge_slave_1: entered promiscuous mode [ 74.623016][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.630857][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.638215][ T5859] bridge_slave_1: entered allmulticast mode [ 74.645998][ T5859] bridge_slave_1: entered promiscuous mode [ 74.663495][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.670608][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.696624][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.711136][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.718162][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.744134][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.757183][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.853027][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.867152][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.876757][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.883831][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.891422][ T5862] bridge_slave_0: entered allmulticast mode [ 74.898958][ T5862] bridge_slave_0: entered promiscuous mode [ 74.907814][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.915128][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.922265][ T5862] bridge_slave_1: entered allmulticast mode [ 74.930448][ T5862] bridge_slave_1: entered promiscuous mode [ 74.950573][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.964926][ T5849] Bluetooth: hci1: command tx timeout [ 74.970641][ T5849] Bluetooth: hci0: command tx timeout [ 75.012194][ T5852] team0: Port device team_slave_0 added [ 75.022490][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.073845][ T5852] team0: Port device team_slave_1 added [ 75.100432][ T5850] hsr_slave_0: entered promiscuous mode [ 75.109301][ T5850] hsr_slave_1: entered promiscuous mode [ 75.119148][ T5859] team0: Port device team_slave_0 added [ 75.128790][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.178829][ T5859] team0: Port device team_slave_1 added [ 75.187637][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.204815][ T5849] Bluetooth: hci2: command tx timeout [ 75.204821][ T51] Bluetooth: hci3: command tx timeout [ 75.235961][ T5861] team0: Port device team_slave_0 added [ 75.284795][ T51] Bluetooth: hci4: command tx timeout [ 75.303144][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.310540][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.337831][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.351187][ T5861] team0: Port device team_slave_1 added [ 75.380500][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.387607][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.414136][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.428773][ T5862] team0: Port device team_slave_0 added [ 75.439524][ T5862] team0: Port device team_slave_1 added [ 75.446766][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.453717][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.480262][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.518037][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.525135][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.551608][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.563740][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.571092][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.597159][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.653475][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.660943][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.687146][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.709591][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.717160][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.743340][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.756203][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.763175][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.789291][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.869235][ T5861] hsr_slave_0: entered promiscuous mode [ 75.875807][ T5861] hsr_slave_1: entered promiscuous mode [ 75.881940][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.889754][ T5861] Cannot create hsr debugfs directory [ 75.923082][ T5852] hsr_slave_0: entered promiscuous mode [ 75.931515][ T5852] hsr_slave_1: entered promiscuous mode [ 75.937979][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.945785][ T5852] Cannot create hsr debugfs directory [ 76.051735][ T5859] hsr_slave_0: entered promiscuous mode [ 76.059062][ T5859] hsr_slave_1: entered promiscuous mode [ 76.066575][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.074673][ T5859] Cannot create hsr debugfs directory [ 76.135455][ T5862] hsr_slave_0: entered promiscuous mode [ 76.142518][ T5862] hsr_slave_1: entered promiscuous mode [ 76.148880][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.156984][ T5862] Cannot create hsr debugfs directory [ 76.540465][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.579921][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.619001][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.654613][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.711323][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.727555][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.741147][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.765422][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.813480][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.826584][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.842099][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.852380][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.982010][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.013089][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.023716][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.039403][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.046769][ T51] Bluetooth: hci1: command tx timeout [ 77.046815][ T5849] Bluetooth: hci0: command tx timeout [ 77.141599][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.193610][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.209950][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.219999][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.253506][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.280933][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.288440][ T5849] Bluetooth: hci3: command tx timeout [ 77.293131][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.293884][ T5849] Bluetooth: hci2: command tx timeout [ 77.350288][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.357726][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.366123][ T5849] Bluetooth: hci4: command tx timeout [ 77.387331][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.416193][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.423340][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.432850][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.440134][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.450746][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.457897][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.471851][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.591458][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.615057][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.632669][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.639956][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.680928][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.688067][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.737962][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.809694][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.823815][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.861973][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.869110][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.879427][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.886589][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.922655][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.007266][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.027026][ T5850] veth0_vlan: entered promiscuous mode [ 78.053456][ T5850] veth1_vlan: entered promiscuous mode [ 78.097558][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.143469][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.173226][ T5850] veth0_macvtap: entered promiscuous mode [ 78.186954][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.194169][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.209324][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.216523][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.236281][ T5850] veth1_macvtap: entered promiscuous mode [ 78.252132][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.325203][ T5862] veth0_vlan: entered promiscuous mode [ 78.372271][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.386804][ T5852] veth0_vlan: entered promiscuous mode [ 78.410817][ T5861] veth0_vlan: entered promiscuous mode [ 78.417790][ T5862] veth1_vlan: entered promiscuous mode [ 78.432485][ T5852] veth1_vlan: entered promiscuous mode [ 78.440660][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.470436][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.481096][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.492750][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.503452][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.527592][ T5861] veth1_vlan: entered promiscuous mode [ 78.598332][ T5861] veth0_macvtap: entered promiscuous mode [ 78.630900][ T5862] veth0_macvtap: entered promiscuous mode [ 78.661443][ T5861] veth1_macvtap: entered promiscuous mode [ 78.678889][ T5862] veth1_macvtap: entered promiscuous mode [ 78.739898][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.755122][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.785363][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.793389][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.808718][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.825958][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.841113][ T5852] veth0_macvtap: entered promiscuous mode [ 78.853234][ T5852] veth1_macvtap: entered promiscuous mode [ 78.861999][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.870902][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.880628][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.894249][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.937996][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.960400][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.969460][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.987835][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.001521][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.011237][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.020139][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.037127][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.089021][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.128131][ T51] Bluetooth: hci0: command tx timeout [ 79.135118][ T5849] Bluetooth: hci1: command tx timeout [ 79.151970][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.162735][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.174977][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.186422][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.195264][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.238580][ T5859] veth0_vlan: entered promiscuous mode [ 79.321283][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.338482][ T5859] veth1_vlan: entered promiscuous mode [ 79.352427][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.367620][ T51] Bluetooth: hci3: command tx timeout [ 79.373240][ T5849] Bluetooth: hci2: command tx timeout [ 79.444259][ T5849] Bluetooth: hci4: command tx timeout [ 79.459773][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.494002][ T5859] veth0_macvtap: entered promiscuous mode [ 79.494600][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.539919][ T5859] veth1_macvtap: entered promiscuous mode [ 79.561254][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.572846][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.583636][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.594620][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.603359][ T5859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.613370][ T5859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.622308][ T5859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.644549][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.781272][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.805547][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.897131][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.910542][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.005283][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.038130][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.396019][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.454198][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.577248][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.628200][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.724425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.177937][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 81.204156][ T5849] Bluetooth: hci1: command tx timeout [ 81.209637][ T5849] Bluetooth: hci0: command tx timeout [ 81.294740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.344578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.359687][ T5947] hsr_slave_0: left promiscuous mode [ 81.450765][ T51] Bluetooth: hci2: command tx timeout [ 81.450776][ T5849] Bluetooth: hci3: command tx timeout [ 81.462988][ T5947] hsr_slave_1: left promiscuous mode [ 81.528434][ T51] Bluetooth: hci4: command tx timeout [ 82.494794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.537272][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.720472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.730577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.806525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.044496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 83.250138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.297220][ T5967] sctp: failed to load transform for md5: -2 [ 83.306408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.788017][ T30] audit: type=1326 audit(1752073634.086:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.118175][ T30] audit: type=1326 audit(1752073634.086:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.234170][ T30] audit: type=1326 audit(1752073634.086:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.277186][ T30] audit: type=1326 audit(1752073634.086:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.314443][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.363245][ T30] audit: type=1326 audit(1752073634.086:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.394702][ T30] audit: type=1326 audit(1752073634.086:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.421254][ T30] audit: type=1326 audit(1752073634.626:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.443507][ T30] audit: type=1326 audit(1752073634.626:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 84.544378][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.602070][ T5913] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.837615][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.882576][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.899411][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.053968][ T5987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.185944][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 85.319704][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.563998][ T30] audit: type=1326 audit(1752073635.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 85.802697][ T30] audit: type=1326 audit(1752073635.936:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 86.607378][ T5954] usb 1-1: USB disconnect, device number 2 [ 86.791179][ T9] cfg80211: failed to load regulatory.db [ 87.691087][ T6018] bridge_slave_0: left allmulticast mode [ 87.699839][ T6018] bridge_slave_0: left promiscuous mode [ 87.708846][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.836849][ T6018] bridge_slave_1: left allmulticast mode [ 87.845573][ T6018] bridge_slave_1: left promiscuous mode [ 87.857030][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.404492][ T6018] bond0: (slave bond_slave_0): Releasing backup interface [ 88.445059][ T6018] bond0: (slave bond_slave_1): Releasing backup interface [ 88.685554][ T6018] team0: Port device team_slave_0 removed [ 88.777482][ T6018] team0: Port device team_slave_1 removed [ 88.810895][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.849147][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.862199][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.871414][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.147641][ T6047] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 93.105066][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.414175][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 93.434880][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.446986][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.473441][ T5913] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 93.483966][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.493623][ T5913] usb 3-1: Product: syz [ 93.498368][ T5913] usb 3-1: Manufacturer: syz [ 93.503636][ T5913] usb 3-1: SerialNumber: syz [ 93.519132][ T5913] usb 3-1: config 0 descriptor?? [ 95.617490][ T5914] usb 3-1: USB disconnect, device number 2 [ 96.467752][ T6093] usb usb8: usbfs: process 6093 (syz.2.30) did not claim interface 0 before use [ 96.477498][ T6093] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.131677][ T6045] syz.1.20 (6045): drop_caches: 1 [ 98.465719][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 98.465730][ T30] audit: type=1326 audit(1752073648.896:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 98.534486][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.573047][ T30] audit: type=1326 audit(1752073648.926:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 98.664393][ T30] audit: type=1326 audit(1752073648.926:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 98.686364][ T30] audit: type=1326 audit(1752073648.956:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 98.714573][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 98.725613][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.779861][ T30] audit: type=1326 audit(1752073648.996:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 98.788046][ T10] usb 1-1: config 0 descriptor?? [ 98.904303][ T30] audit: type=1326 audit(1752073648.996:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 98.930694][ T30] audit: type=1326 audit(1752073649.026:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 99.075957][ T30] audit: type=1326 audit(1752073649.026:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 100.041864][ T30] audit: type=1326 audit(1752073649.026:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 100.114353][ T30] audit: type=1326 audit(1752073649.026:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 100.616386][ T10] ath6kl: Failed to read usb control message: -71 [ 100.622925][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 100.704922][ T10] ath6kl: Unable to recv target info: -71 [ 100.914789][ T10] ath6kl: Failed to init ath6kl core: -71 [ 100.921114][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 100.985255][ T10] usb 1-1: USB disconnect, device number 3 [ 101.265424][ T6157] syz.3.39: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.346625][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.3.39 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 101.346652][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.346670][ T6157] Call Trace: [ 101.346683][ T6157] [ 101.346692][ T6157] dump_stack_lvl+0x189/0x250 [ 101.346726][ T6157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.346748][ T6157] ? __pfx__printk+0x10/0x10 [ 101.346771][ T6157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 101.346795][ T6157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 101.346820][ T6157] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 101.346846][ T6157] warn_alloc+0x214/0x310 [ 101.346870][ T6157] ? stack_depot_save_flags+0x429/0x900 [ 101.346900][ T6157] ? __pfx_warn_alloc+0x10/0x10 [ 101.346926][ T6157] ? kasan_save_track+0x4f/0x80 [ 101.346946][ T6157] ? xskq_create+0x56/0x170 [ 101.346969][ T6157] ? xsk_init_queue+0xb0/0x110 [ 101.346990][ T6157] ? xsk_setsockopt+0x43f/0x710 [ 101.347011][ T6157] ? do_sock_setsockopt+0x25a/0x3e0 [ 101.347032][ T6157] ? __ia32_sys_setsockopt+0x18b/0x220 [ 101.347052][ T6157] ? __do_fast_syscall_32+0xb6/0x2b0 [ 101.347069][ T6157] ? do_fast_syscall_32+0x34/0x80 [ 101.347094][ T6157] __vmalloc_node_range_noprof+0x125/0x12f0 [ 101.347143][ T6157] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.347170][ T6157] ? __kasan_kmalloc+0x93/0xb0 [ 101.347190][ T6157] vmalloc_user_noprof+0xad/0xf0 [ 101.347218][ T6157] ? xskq_create+0xbf/0x170 [ 101.347237][ T6157] xskq_create+0xbf/0x170 [ 101.347260][ T6157] xsk_init_queue+0xb0/0x110 [ 101.347282][ T6157] xsk_setsockopt+0x43f/0x710 [ 101.347303][ T6157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.347321][ T6157] ? __lock_acquire+0xab9/0xd20 [ 101.347341][ T6157] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 101.347361][ T6157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.347379][ T6157] do_sock_setsockopt+0x25a/0x3e0 [ 101.347397][ T6157] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 101.347411][ T6157] ? __fget_files+0x2a/0x420 [ 101.347432][ T6157] ? __fget_files+0x3a0/0x420 [ 101.347448][ T6157] ? __fget_files+0x2a/0x420 [ 101.347472][ T6157] __ia32_sys_setsockopt+0x18b/0x220 [ 101.347493][ T6157] __do_fast_syscall_32+0xb6/0x2b0 [ 101.347512][ T6157] do_fast_syscall_32+0x34/0x80 [ 101.347525][ T6157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.347541][ T6157] RIP: 0023:0xf70ee539 [ 101.347559][ T6157] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 101.347570][ T6157] RSP: 002b:00000000f50bd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 101.347587][ T6157] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 101.347596][ T6157] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 101.347605][ T6157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.347613][ T6157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.347621][ T6157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.347641][ T6157] [ 101.347658][ T6157] Mem-Info: [ 101.664188][ T6157] active_anon:8716 inactive_anon:0 isolated_anon:0 [ 101.664188][ T6157] active_file:3841 inactive_file:3207 isolated_file:0 [ 101.664188][ T6157] unevictable:768 dirty:1095 writeback:261 [ 101.664188][ T6157] slab_reclaimable:9992 slab_unreclaimable:97069 [ 101.664188][ T6157] mapped:33525 shmem:4232 pagetables:1096 [ 101.664188][ T6157] sec_pagetables:0 bounce:0 [ 101.664188][ T6157] kernel_misc_reclaimable:0 [ 101.664188][ T6157] free:1364793 free_pcp:15010 free_cma:0 [ 101.721140][ T6157] Node 0 active_anon:34964kB inactive_anon:0kB active_file:15364kB inactive_file:12688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134100kB dirty:4380kB writeback:1044kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11836kB pagetables:4240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.754961][ T6157] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.805919][ T6157] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.926449][ T6157] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 101.999389][ T6157] Node 0 DMA32 free:1557648kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26916kB inactive_anon:0kB active_file:15364kB inactive_file:11420kB unevictable:1536kB writepending:4392kB present:3129332kB managed:2558408kB mlocked:0kB bounce:0kB free_pcp:41544kB local_pcp:20184kB free_cma:0kB [ 102.400233][ T6157] lowmem_reserve[]: 0 0 1 1 1 [ 103.110057][ T6157] Node 0 Normal free:168kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80kB inactive_anon:0kB active_file:0kB inactive_file:1268kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:48kB free_cma:0kB [ 103.295779][ T6157] lowmem_reserve[]: 0 0 0 0 0 [ 103.319138][ T6157] Node 1 Normal free:3887572kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25856kB local_pcp:14720kB free_cma:0kB [ 103.810580][ T6157] lowmem_reserve[]: 0 0 0 0 0 [ 103.815679][ T6157] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.931105][ T6157] Node 0 DMA32: 389*4kB (UME) 382*8kB (M) 282*16kB (ME) 276*32kB (UM) 155*64kB (UME) 99*128kB (UME) 64*256kB (M) 33*512kB (UME) 18*1024kB (ME) 17*2048kB (UME) 350*4096kB (M) = 1560676kB [ 104.044367][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.128066][ T6157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.324979][ T6157] Node 1 Normal: 231*4kB (UME) 69*8kB (UME) 43*16kB (UME) 85*32kB (UME) 21*64kB (UME) 5*128kB (UM) 4*256kB (UM) 2*512kB (M) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887828kB [ 104.387379][ T6157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.416216][ T6157] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.445442][ T6157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.463252][ T5913] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 104.479928][ T6157] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.538613][ T5913] usb 5-1: config 0 has no interface number 0 [ 104.647659][ T5913] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 104.715206][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.734581][ T5913] usb 5-1: Product: syz [ 104.777655][ T5913] usb 5-1: Manufacturer: syz [ 104.789464][ T5913] usb 5-1: SerialNumber: syz [ 104.965681][ T6157] 5532 total pagecache pages [ 104.970439][ T6157] 2 pages in swap cache [ 105.000783][ T6157] Free swap = 124816kB [ 105.015458][ T5913] usb 5-1: config 0 descriptor?? [ 105.575406][ T6157] Total swap = 124996kB [ 105.590444][ T6163] syz.0.40 (6163): drop_caches: 2 [ 105.596546][ T6157] 2097051 pages RAM [ 105.600833][ T6157] 0 pages HighMem/MovableOnly [ 105.627081][ T6157] 425407 pages reserved [ 105.693232][ T6157] 0 pages cma reserved [ 106.890234][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 106.959813][ T5913] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 106.980386][ T5913] gspca_sunplus: reg_r err -71 [ 107.003194][ T5913] sunplus 5-1:0.173: probe with driver sunplus failed with error -71 [ 107.064848][ T5913] usb 5-1: USB disconnect, device number 2 [ 107.094579][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.284600][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 107.320614][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.353624][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.449308][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.464380][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.483389][ T6210] usb usb8: usbfs: process 6210 (syz.4.49) did not claim interface 0 before use [ 107.492953][ T6210] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.654165][ T10] usb 4-1: Product: syz [ 107.666977][ T10] usb 4-1: Manufacturer: syz [ 107.676090][ T10] usb 4-1: SerialNumber: syz [ 107.930416][ T10] usb 4-1: 0:2 : does not exist [ 107.992511][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 108.298583][ T10] usb 4-1: USB disconnect, device number 2 [ 108.892815][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.389343][ T6227] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[6227] [ 109.431871][ T6227] vlan0: entered promiscuous mode [ 109.438387][ T6227] bridge0: entered promiscuous mode [ 109.738287][ T6229] usb usb8: usbfs: process 6229 (syz.2.54) did not claim interface 0 before use [ 109.748053][ T6229] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.108835][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 110.176945][ T6235] raw_sendmsg: syz.4.55 forgot to set AF_INET. Fix it! [ 111.544174][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.712394][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 111.746808][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.775032][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 111.793592][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.826872][ T9] usb 5-1: config 0 descriptor?? [ 112.001143][ T6248] mmap: syz.3.59 (6248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.252785][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.275418][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.313993][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.368677][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.388966][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.423751][ T9] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 112.716798][ T9] usb 5-1: USB disconnect, device number 3 [ 113.337251][ T6269] process 'syz.3.63' launched './file2' with NULL argv: empty string added [ 115.305223][ T6284] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 115.311856][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.394797][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 115.443236][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 115.459461][ T6284] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 115.465991][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.531076][ T6288] bridge_slave_0: left allmulticast mode [ 115.544181][ T6289] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 115.550797][ T6289] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.562738][ T6288] bridge_slave_0: left promiscuous mode [ 115.574345][ T5913] vhci_hcd: vhci_device speed not set [ 115.605520][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 115.663163][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.696369][ T6297] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 115.702985][ T6297] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.715660][ T6288] bridge_slave_1: left allmulticast mode [ 115.721312][ T6288] bridge_slave_1: left promiscuous mode [ 115.746614][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.857616][ T6289] vhci_hcd vhci_hcd.0: Device attached [ 115.875061][ T6288] bond0: (slave bond_slave_0): Releasing backup interface [ 115.895505][ T6284] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 115.902118][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.910790][ T5913] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 115.962352][ T6288] bond0: (slave bond_slave_1): Releasing backup interface [ 115.994201][ T5914] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 116.034461][ T6297] vhci_hcd vhci_hcd.0: Device attached [ 116.040495][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 116.073605][ T6288] team0: Port device team_slave_0 removed [ 116.080257][ T6300] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 116.086895][ T6300] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 116.167119][ T5914] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 116.189630][ T6288] team0: Port device team_slave_1 removed [ 116.197858][ T5914] usb 1-1: config 0 has no interface number 0 [ 116.215222][ T6300] vhci_hcd vhci_hcd.0: Device attached [ 116.219433][ T6305] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.229517][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.229562][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.257985][ T5914] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 116.276201][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.294192][ T5914] usb 1-1: Product: syz [ 116.307318][ T5914] usb 1-1: Manufacturer: syz [ 116.313934][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.319958][ T5914] usb 1-1: SerialNumber: syz [ 116.348097][ T6284] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19) [ 116.354708][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.365833][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.379705][ T5914] usb 1-1: config 0 descriptor?? [ 116.451350][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 116.532643][ T6297] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(26) [ 116.539281][ T6297] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.616696][ T5914] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 116.682570][ T5914] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 116.759381][ T6297] vhci_hcd vhci_hcd.0: Device attached [ 116.813142][ T6291] fuse: Bad value for 'user_id' [ 116.818236][ T6291] fuse: Bad value for 'user_id' [ 116.830611][ T5914] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 116.873826][ T6306] vhci_hcd: connection closed [ 116.876624][ T6294] vhci_hcd: connection closed [ 116.883027][ T6292] vhci_hcd: connection closed [ 116.890071][ T6303] vhci_hcd: connection closed [ 116.899374][ T6301] vhci_hcd: connection closed [ 116.904222][ T6298] vhci_hcd: connection closed [ 116.904279][ T6285] vhci_hcd: connection reset by peer [ 116.918962][ T6310] vhci_hcd: connection closed [ 116.920195][ T13] vhci_hcd: stop threads [ 116.955217][ T5914] usb 1-1: media controller created [ 116.968864][ T13] vhci_hcd: release socket [ 116.983957][ T13] vhci_hcd: disconnect device [ 116.996045][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.011558][ T13] vhci_hcd: stop threads [ 117.100530][ T13] vhci_hcd: release socket [ 117.141919][ T13] vhci_hcd: disconnect device [ 117.195324][ T5949] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 117.216712][ T13] vhci_hcd: stop threads [ 117.306894][ T13] vhci_hcd: release socket [ 117.327526][ T13] vhci_hcd: disconnect device [ 117.341074][ T13] vhci_hcd: stop threads [ 117.347377][ T13] vhci_hcd: release socket [ 117.360055][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.424347][ T5949] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 117.443901][ T13] vhci_hcd: disconnect device [ 117.461913][ T5949] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 117.462238][ T13] vhci_hcd: stop threads [ 117.504112][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.521696][ T13] vhci_hcd: release socket [ 117.540970][ T13] vhci_hcd: disconnect device [ 117.563445][ T13] vhci_hcd: stop threads [ 117.576545][ T13] vhci_hcd: release socket [ 117.591923][ T13] vhci_hcd: disconnect device [ 117.606338][ T13] vhci_hcd: stop threads [ 117.612967][ T5949] usb 5-1: config 0 descriptor?? [ 117.618251][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.618605][ T13] vhci_hcd: release socket [ 117.652912][ T5949] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 117.667271][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 117.679568][ T5914] DVB: Unable to find symbol dib7000p_attach() [ 117.713766][ T5914] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 117.713821][ T13] vhci_hcd: disconnect device [ 117.786383][ T13] vhci_hcd: stop threads [ 117.803758][ T13] vhci_hcd: release socket [ 117.806653][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 117.812442][ T13] vhci_hcd: disconnect device [ 117.833267][ T5914] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 117.863271][ T6313] ------------[ cut here ]------------ [ 117.869008][ T6313] usb 1-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 117.879112][ T5949] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 117.886353][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 117.892694][ T5914] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 117.902022][ T5949] usb 5-1: media controller created [ 117.911984][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 117.922074][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.932174][ T5914] usb 1-1: media controller created [ 117.940401][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.949734][ T6313] WARNING: CPU: 0 PID: 6313 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 117.959525][ T6313] Modules linked in: [ 117.964896][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.4.70 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 117.978044][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.988320][ T6313] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 117.993993][ T6313] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 3d 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 74 f2 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 118.014773][ T6313] RSP: 0018:ffffc9001e36f690 EFLAGS: 00010246 [ 118.020888][ T6313] RAX: be56a925ea183100 RBX: ffff88802963bf00 RCX: 0000000000080000 [ 118.028971][ T6313] RDX: ffffc90010783000 RSI: 0000000000004fad RDI: 0000000000004fae [ 118.037009][ T6313] RBP: 1ffff110284d9b9c R08: 0000000000000003 R09: 0000000000000004 [ 118.045156][ T6313] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff8881426cdce0 [ 118.053158][ T6313] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff888075ec68a0 [ 118.055576][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.061244][ T6313] FS: 0000000000000000(0000) GS:ffff888125c1b000(0063) knlGS:00000000f5044b40 [ 118.079931][ T6313] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 118.084179][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 118.086582][ T6313] CR2: 000000000c314897 CR3: 0000000075bcc000 CR4: 00000000003526f0 [ 118.094572][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.100398][ T6313] Call Trace: [ 118.112056][ T6313] [ 118.115061][ T6313] usb_start_wait_urb+0x114/0x4c0 [ 118.115968][ T5949] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 118.120111][ T6313] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 118.120155][ T6313] usb_control_msg+0x232/0x3e0 [ 118.128911][ T43] pvrusb2: ********** [ 118.132783][ T6313] dib0700_i2c_xfer+0xba7/0xf70 [ 118.132829][ T6313] __i2c_transfer+0x871/0x2170 [ 118.151188][ T6313] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.156417][ T6313] ? __pfx___i2c_transfer+0x10/0x10 [ 118.161611][ T6313] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 118.167093][ T6313] ? i2c_transfer+0x120/0x3a0 [ 118.172517][ T6313] i2c_transfer+0x25b/0x3a0 [ 118.178109][ T6313] ? __pfx_i2c_transfer+0x10/0x10 [ 118.183165][ T6313] ? _copy_from_user+0x94/0xb0 [ 118.187974][ T6313] i2cdev_ioctl_rdwr+0x460/0x740 [ 118.192936][ T6313] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 118.198123][ T6313] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 118.203753][ T6313] ? __fget_files+0x3a0/0x420 [ 118.208466][ T6313] ? __fget_files+0x2a/0x420 [ 118.213055][ T6313] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 118.218621][ T6313] __ia32_compat_sys_ioctl+0x540/0x840 [ 118.224152][ T6313] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 118.230139][ T6313] ? __se_sys_futex_time32+0x360/0x3e0 [ 118.235716][ T6313] ? rcu_is_watching+0x15/0xb0 [ 118.240479][ T6313] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 118.247254][ T6313] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.252470][ T6313] __do_fast_syscall_32+0xb6/0x2b0 [ 118.257669][ T6313] do_fast_syscall_32+0x34/0x80 [ 118.262547][ T6313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.268954][ T6313] RIP: 0023:0xf7f67539 [ 118.273805][ T6313] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 118.294140][ T6313] RSP: 002b:00000000f504455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 118.302583][ T6313] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000707 [ 118.310696][ T6313] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.318782][ T6313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.326813][ T6313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.334809][ T6313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.342874][ T6313] [ 118.345940][ T6313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.353217][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.4.70 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 118.364999][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.375136][ T6313] Call Trace: [ 118.378408][ T6313] [ 118.381321][ T6313] dump_stack_lvl+0x99/0x250 [ 118.385902][ T6313] ? __asan_memcpy+0x40/0x70 [ 118.390473][ T6313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.395655][ T6313] ? __pfx__printk+0x10/0x10 [ 118.400241][ T6313] panic+0x2db/0x790 [ 118.404133][ T6313] ? __pfx_panic+0x10/0x10 [ 118.408578][ T6313] __warn+0x31b/0x4b0 [ 118.412541][ T6313] ? usb_submit_urb+0x115d/0x1890 [ 118.417554][ T6313] ? usb_submit_urb+0x115d/0x1890 [ 118.422561][ T6313] report_bug+0x2be/0x4f0 [ 118.426877][ T6313] ? usb_submit_urb+0x115d/0x1890 [ 118.431887][ T6313] ? usb_submit_urb+0x115d/0x1890 [ 118.436900][ T6313] ? usb_submit_urb+0x115f/0x1890 [ 118.441907][ T6313] handle_bug+0x84/0x160 [ 118.446139][ T6313] exc_invalid_op+0x1a/0x50 [ 118.450628][ T6313] asm_exc_invalid_op+0x1a/0x20 [ 118.455460][ T6313] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 118.461078][ T6313] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 3d 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 74 f2 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 118.480676][ T6313] RSP: 0018:ffffc9001e36f690 EFLAGS: 00010246 [ 118.486730][ T6313] RAX: be56a925ea183100 RBX: ffff88802963bf00 RCX: 0000000000080000 [ 118.494692][ T6313] RDX: ffffc90010783000 RSI: 0000000000004fad RDI: 0000000000004fae [ 118.502648][ T6313] RBP: 1ffff110284d9b9c R08: 0000000000000003 R09: 0000000000000004 [ 118.510605][ T6313] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff8881426cdce0 [ 118.518565][ T6313] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff888075ec68a0 [ 118.526537][ T6313] usb_start_wait_urb+0x114/0x4c0 [ 118.531553][ T6313] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 118.537091][ T6313] usb_control_msg+0x232/0x3e0 [ 118.541841][ T6313] dib0700_i2c_xfer+0xba7/0xf70 [ 118.546685][ T6313] __i2c_transfer+0x871/0x2170 [ 118.551441][ T6313] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.556646][ T6313] ? __pfx___i2c_transfer+0x10/0x10 [ 118.561833][ T6313] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 118.567191][ T6313] ? i2c_transfer+0x120/0x3a0 [ 118.571856][ T6313] i2c_transfer+0x25b/0x3a0 [ 118.576349][ T6313] ? __pfx_i2c_transfer+0x10/0x10 [ 118.581369][ T6313] ? _copy_from_user+0x94/0xb0 [ 118.586123][ T6313] i2cdev_ioctl_rdwr+0x460/0x740 [ 118.591066][ T6313] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 118.596169][ T6313] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 118.601789][ T6313] ? __fget_files+0x3a0/0x420 [ 118.606451][ T6313] ? __fget_files+0x2a/0x420 [ 118.611030][ T6313] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 118.616564][ T6313] __ia32_compat_sys_ioctl+0x540/0x840 [ 118.622011][ T6313] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 118.628010][ T6313] ? __se_sys_futex_time32+0x360/0x3e0 [ 118.633465][ T6313] ? rcu_is_watching+0x15/0xb0 [ 118.638217][ T6313] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 118.644801][ T6313] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.649993][ T6313] __do_fast_syscall_32+0xb6/0x2b0 [ 118.655101][ T6313] do_fast_syscall_32+0x34/0x80 [ 118.659950][ T6313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.666260][ T6313] RIP: 0023:0xf7f67539 [ 118.670314][ T6313] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 118.689911][ T6313] RSP: 002b:00000000f504455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 118.698312][ T6313] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000707 [ 118.706267][ T6313] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.714233][ T6313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.722194][ T6313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.730149][ T6313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.738117][ T6313] [ 118.741367][ T6313] Kernel Offset: disabled [ 118.745679][ T6313] Rebooting in 86400 seconds..