last executing test programs: 27m51.773269416s ago: executing program 32 (id=587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x6, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000ecffffffffffff", 0x41}, {&(0x7f0000000e80)="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", 0x10f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e1", 0x2c}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8", 0xa0}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x145}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c4782", 0xb1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fe", 0xd7}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f8) getsockopt(0xffffffffffffffff, 0x1, 0x8001, &(0x7f00000000c0)=""/226, &(0x7f0000000040)=0xe2) sendfile(r3, r3, 0x0, 0x200000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r6, 0x0, 0x0) 27m23.243992595s ago: executing program 33 (id=751): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9, 0x4, 0x9, '\x00', 'syz0\x00', {0x2}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x11}, 0xff0000ff, 0xffffff00, 'bond0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x84, 0x3, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xfffc, 0x1, 0x5, 'syz0\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (fail_nth: 1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) socket$kcm(0x11, 0x3, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) 18m8.259158687s ago: executing program 34 (id=2872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240501801400018008000100e000000108008005000100000000000000"], 0x38}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000540)=@get={0x1, 0x0, 0x7}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) 18m7.275720841s ago: executing program 35 (id=2875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd26, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3c, 0x2, [@TCA_MATCHALL_ACT={0x38, 0x2, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES64=r8, @ANYRESHEX=0x0, @ANYRES16], 0xfffffffffffffe17) close(r8) r9 = syz_usb_connect$uac1(0x6, 0x9c, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xdf, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x2, 0x40, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x13}, [@selector_unit={0x9, 0x24, 0x5, 0x1, 0x6, "773ab48c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x8, 0x7, 0x5, 0x3}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1e, 0x6, 0x6, {0x7, 0x25, 0x1, 0xc, 0x36, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8000, 0x8, 0x26, 0x81}, @as_header={0x7, 0x24, 0x1, 0x80, 0x1, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x2, 0xd, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7, 0x1, 0xc0, 0xff, 0x7}, 0x3a, &(0x7f0000000180)={0x5, 0xf, 0x3a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0xac, 0x81, 0x7b, 0x4, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xb4, 0x0, 0x9, [0xffff30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "360415aace69fd44ff78e759631c9243"}]}, 0x1, [{0x99, &(0x7f0000000380)=ANY=[@ANYBLOB="99037192f1a216256646b3e4257fd76bf320f88431dc81fcf1ca79a70b92e2c3797eacc7e55f6ea7879e2c2f8a166c732bcd05c5e6989d77fd20c88aa6184101bd269c31f19252f98b3fa2ca2be28c8c23aeb4b39a42de3b6e1dfbc7062b0800a916594b0837409f12b88418c402e591fe856be7a63f2472fad50342d7dd37b1e05a47b02feca2b6ae4b1271d93d14f7f95c0e1818a8ad9d679be5514dbd085051f499f6d7"]}]}) syz_usb_ep_write(r9, 0x40, 0x30, &(0x7f0000000340)="e84de1035e54bb82f788c7258bd13adc4e29e540d4da39e3911d74048c8af99c299c5adc6cf98f739220f09aca2c7322") recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x8) lseek(r10, 0x289e0cb5, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="120110018e2f6b2037210100e50c010a030109021b001e030bc0020904ab6c013c3a0c03090501"], 0x0) 18m5.767779058s ago: executing program 36 (id=2879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x1003}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x4010, r6, 0x8ad5d000) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x122127000, &(0x7f0000000000), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x4e) 18m5.634624434s ago: executing program 37 (id=2880): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x900, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x6, 0x800, 0xc, 0x4, 0xfffffffffffffffc, 0x47, 0x0, 0x2d7}, {0x0, 0x2000, 0x400025, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0xfffffffd, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fcntl$getown(r3, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000000)={0x60000018}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r1, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000080)=[{r8, 0x210}], 0x1, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 18m4.453641924s ago: executing program 38 (id=2881): socket(0xa, 0x5, 0x0) r0 = socket(0x15, 0x4, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000081000/0x1000)=nil, 0x1000, 0x1, 0x50010, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x54, r4, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xfffffffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x80000000}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/protocols\x00') read$fb(r7, &(0x7f0000000000)=""/186, 0xba) lseek(r7, 0x2000000000010002, 0x1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 16m42.963797225s ago: executing program 39 (id=2892): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, r1, 0x2, 0x0, &(0x7f0000000380)=[{0x8000000, 0x4000000000000e8}, {0xfffffffffffffffb, 0xffffffffffffffff}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000000180)="04", 0x1, 0x31a}) r2 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000280)=0x800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 16m37.45853718s ago: executing program 40 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000030c0)={'bond0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x7, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000300)='GPL\x00', 0x40800, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x0, 0x5, 0x10001}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x0, 0x1, 0x0, 0x1}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000100017c0000040065800c00018006000600800a00001000028000634bea7b6067d97174f692442cfb7588f76a805c86890a28c1a6878fa96c07bd6f3163504972967577524d061b0f1c1180a800c120df662c06040ad296e203d8b767171c0f2ed5a922ada73200"/128], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x44010) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca90102030109021200"], 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, 0x0, 0x8000) socket$kcm(0x10, 0x2, 0x0) 13m59.308035191s ago: executing program 41 (id=2896): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x6f, 0x0, 0xa, 0x0, 0xe99b, 0x53d, 0xfffff7ff}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x100000000, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r6, 0x3b8d, &(0x7f0000000000)={0x20, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r9}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r10 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r10, 0x7, 0xffffffffffffffff, 0x0) 12m39.370731095s ago: executing program 7 (id=3015): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) utime(&(0x7f00000024c0)='.\x00', 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r2, 0x2, 0x810, r0, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) 12m39.08360065s ago: executing program 7 (id=3017): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12m29.006938093s ago: executing program 42 (id=3009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) poll(0x0, 0x0, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="35030200000000002c00128009000100626f6e64000000001c00028008001c0000000000080005007f0100000800030008001b6efd832d2d43239a8cd6887e2d035a0000"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="57bebdc10e4ff6ddb3a4d05c027db2e2", 0x10) getsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000480)=""/142) 12m28.885476869s ago: executing program 43 (id=3008): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3ca4b") syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 12m25.993668338s ago: executing program 44 (id=3013): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40004) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000580)={0x18, 0x7ffffffe, 0x0, 0x0, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) r7 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50) fcntl$setsig(r7, 0xa, 0x35) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, 0x0, 0x2}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) 12m23.980484866s ago: executing program 45 (id=3016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002129333ba5000000000000000ab839a9000000004a05bedeff7204ba9dea000000050800000500156f349ca2"], 0x24}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x7, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4f}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}}, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x11061a, 0x4) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x3, 0x203}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 12m23.867673022s ago: executing program 46 (id=3017): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m27.167921911s ago: executing program 47 (id=3067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600000807", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x1, [0x0, 0x36, 0x10000, 0x2624, 0xf], [0x9, 0xd, 0x1, 0xfffffffffffffffb, 0x378000000, 0x8, 0x401, 0x0, 0x5, 0x1, 0x0, 0x6, 0x7, 0x9, 0x8fc, 0x3, 0x56, 0x4e, 0x0, 0xe6ee, 0x1, 0x2ab5, 0xa, 0x1, 0x8, 0x35, 0xb9, 0x5, 0x7, 0xb0, 0x8001, 0x6, 0x4, 0x8, 0xa8, 0x0, 0xffffffffffffffff, 0x4, 0xff8, 0x8, 0x0, 0xf1, 0xe, 0x7fffffffffffffff, 0xa, 0x6, 0x6, 0x1ae, 0x0, 0xfffffffffffffff7, 0x8, 0x100000001, 0x3, 0x400, 0x3ff, 0x0, 0xcfc, 0x6, 0x2, 0x1, 0x6, 0x40, 0x2, 0xdb34, 0x3, 0x5, 0x4, 0x809f, 0x5, 0x6, 0x5, 0x9, 0x401, 0x8, 0x80000000, 0x6e, 0x40, 0x0, 0x9a, 0x8000, 0x9, 0x2, 0x81, 0x941, 0x8000000000000000, 0x8da3, 0x7fff, 0x1000, 0x9, 0x5c, 0x3, 0xf, 0x3, 0x7, 0x7fff, 0xfffffffffffffff8, 0x3, 0x4, 0x401, 0x4, 0x3, 0x5, 0x4, 0xfffffffffffffffa, 0x2, 0x100000000, 0x9, 0x5, 0x8, 0x1, 0x9, 0x1, 0x8, 0x80, 0x1, 0x1, 0x0, 0x8, 0x7, 0x5, 0x1f1cda72]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000800)={r3, 0x3, 0x0, [0x3, 0xa, 0xa, 0x9, 0xc], [0x3, 0x7, 0x7, 0x5, 0x650a, 0x3, 0x3800000000000000, 0x3, 0x7a, 0xfff, 0x80000000, 0x0, 0x3, 0x0, 0x1, 0xd, 0xfffffffffffffeff, 0x5, 0x3e, 0x3, 0x100, 0x6, 0x1000, 0x1, 0xb, 0xa, 0x8, 0x0, 0x2, 0x7a5301bb, 0x213, 0x9, 0x7, 0x200, 0xfffffffffffffffe, 0x400, 0x7fffffffffffffff, 0x1000, 0x7, 0xe4f4, 0x40, 0x6, 0x5, 0x0, 0x1, 0x6, 0x4, 0x8000000000000000, 0x621, 0xc96, 0x2, 0x1, 0xb5c, 0x4, 0x3, 0xf07, 0x4, 0x9, 0x100000001, 0x3, 0x2, 0x25be, 0x9, 0xded, 0x6, 0x4, 0x9, 0x3, 0x0, 0x8, 0x100, 0x5, 0x2, 0x4, 0x53, 0xfffffffffffffc01, 0x8000000000000000, 0x0, 0xc9c5, 0x7, 0x6b, 0x80, 0x4, 0x4e75, 0xffffffffffffffff, 0x3, 0x100, 0x9, 0x0, 0xffffffffffff94df, 0x1000, 0x2, 0x1, 0xa4c, 0x9, 0x6, 0x9, 0x4, 0x80000000, 0x1, 0x0, 0x1, 0xfff, 0xfffffffffffffff8, 0xbb, 0xf, 0xf80, 0x6c, 0x5, 0x6, 0x5, 0x8, 0xbc, 0x1, 0x8, 0x8001, 0x8000000000000001, 0x2, 0x9, 0x3, 0xc]}) 9m26.397963871s ago: executing program 48 (id=3068): r0 = memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00)\xfa\xe8\xa5Z\x11\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x91\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) mmap(&(0x7f0000336000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, r0, 0x9be02000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0028000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m16.238953816s ago: executing program 4 (id=3225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0xf, 0x1, 0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="020028bd7000fbdbdf250e0000004c000380060007004e240000080001000200000014000600fc003e4eef0eefa51de57d00000000000000000000000000011400020062617461647630000000000000000000060004000400000008000300005d1f918000028008000700ffff00000c000380080001000200000008000500000000004400038008000100ec4423c308000300030000000800030001000000060004000100000008000100010000000800030000000000060007004e23000008000500ac1e000108000600a4090000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008887}, 0x800) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) 3m14.229330921s ago: executing program 4 (id=3227): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x40, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0x10, {0x7, 0x25, 0x1, 0xc, 0x72}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xf9, 0x80, {0x7, 0x25, 0x1, 0x4, 0x0, 0x1ff}}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) socketpair(0x3, 0x5, 0xd, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x40000002) 3m11.033473462s ago: executing program 4 (id=3232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x5) 3m9.317258035s ago: executing program 4 (id=3235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x40400) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004800), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000004840)=ANY=[@ANYBLOB="18000000000000000800"/24]) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b700"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000300)={{r0, &(0x7f0000000040)='/(@%%\x00', 0x42400, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x8]}, {0x4, 0x22c7, 0x1, 0x999}}, 0x7fffffff, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x91}, 0x2, &(0x7f00000002c0)=[{0x1, 0x67c, &(0x7f0000000140)='\x00', &(0x7f0000000180)="af4605250dfae40c5337e20f1d0fc21e4d3770b0c5d4edcd0d36e664d5b4518040026c790760c69e3259c26a4c8ac6217770473a5069d5cf964df90059e155cd36be1f1841622b7700f62d194160cdd9f0781a499b7b58e14aea202e5ae3725057ad6c4c6e4cd71e374e799d0d43e9632dccec30a6449bdb7ef80823be5bfa52995a98e5b3a678998c3d7c30d31267e659dfa47a9992455b89c18ffeb7729de55dd03263b1f47a5a1f3e47e8", 0xac, 0x20}, {0x1, 0x5, &(0x7f0000000240)='($^[\x00', &(0x7f0000000280)="cbc5452eb7db6da6627468f6d5c8e9f7c8cbd3664582b75bf2ecc0ff2aa8f3d6baa2", 0x22, 0x32}]}) r4 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) io_setup(0x2, &(0x7f0000000a00)=0x0) unshare(0x20000080) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008081}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x48800) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x40, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="0206020002000000020000000dda"], 0x10}}, 0x0) io_submit(r5, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x8, 0x4, r0, 0x0, 0x0, 0xfffffffc}]) 3m4.991772845s ago: executing program 4 (id=3240): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdef}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 3m4.62729575s ago: executing program 4 (id=3242): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) epoll_create1(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0xb051}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/86, 0x56}, {0x0}], 0x2, &(0x7f0000001780)=""/22, 0x16}, 0x81}, {{&(0x7f0000000340)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x2, &(0x7f00000003c0)=""/119, 0x77}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/189, 0xbd}, {&(0x7f0000000f80)=""/102, 0x66}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f0000000c40)=""/218, 0xda}, {&(0x7f0000000d40)=""/108, 0x6c}], 0x9, &(0x7f0000000e80)=""/43, 0x2b}, 0x5}, {{&(0x7f0000000ec0)=@caif=@rfm, 0x80, &(0x7f0000001080)=[{&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/204, 0xcc}], 0x4}, 0x100}, {{&(0x7f00000010c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001140)=""/71, 0x47}, {&(0x7f00000011c0)=""/119, 0x77}, {0x0}], 0x3}, 0x80}], 0x6, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "7580485a402bf08bb0a89c3f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02", "e0d6370ae4bef1c38d2d97385a7d432a", {"5afb05b0120ec4dd832c0cf27c7c4c03", "b8e4daaa6228da2e49b8081579ab3712"}}}}}, 0x86) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYRES8=r4], 0x50) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) r6 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x80) fstat(r6, &(0x7f00000002c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "a0ab"}, 0x0, 0x0}) 2m49.435106592s ago: executing program 49 (id=3242): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) epoll_create1(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0xb051}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/86, 0x56}, {0x0}], 0x2, &(0x7f0000001780)=""/22, 0x16}, 0x81}, {{&(0x7f0000000340)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x2, &(0x7f00000003c0)=""/119, 0x77}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/189, 0xbd}, {&(0x7f0000000f80)=""/102, 0x66}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f0000000c40)=""/218, 0xda}, {&(0x7f0000000d40)=""/108, 0x6c}], 0x9, &(0x7f0000000e80)=""/43, 0x2b}, 0x5}, {{&(0x7f0000000ec0)=@caif=@rfm, 0x80, &(0x7f0000001080)=[{&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/204, 0xcc}], 0x4}, 0x100}, {{&(0x7f00000010c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001140)=""/71, 0x47}, {&(0x7f00000011c0)=""/119, 0x77}, {0x0}], 0x3}, 0x80}], 0x6, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "7580485a402bf08bb0a89c3f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02", "e0d6370ae4bef1c38d2d97385a7d432a", {"5afb05b0120ec4dd832c0cf27c7c4c03", "b8e4daaa6228da2e49b8081579ab3712"}}}}}, 0x86) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYRES8=r4], 0x50) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) r6 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x80) fstat(r6, &(0x7f00000002c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "a0ab"}, 0x0, 0x0}) 2m48.818808816s ago: executing program 9 (id=3261): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x46140, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc8, 0x8}}}, 0x7) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x7f}]}, 0x140}}, 0x844) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$kcm(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa}}, 0x26) 2m44.564749252s ago: executing program 5 (id=3265): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m43.711923556s ago: executing program 5 (id=3266): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000040000000317cdd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) r2 = socket$inet(0x2b, 0x801, 0x0) listen(r2, 0xffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x400c4) fsopen(&(0x7f00000000c0)='gfs2\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x4407, 0x8, 0x3, 0x28b}, &(0x7f00000001c0), &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4000) 2m40.387605039s ago: executing program 5 (id=3269): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000020000009b2d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000000000000001f0000000000000000fcffffff0000"], 0x50) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) (async) r3 = epoll_create(0x3) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180), 0x0) (async) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000011c0)}, 0xfffffffd}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001740)=""/197, 0xc5}], 0x2}}], 0x3, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000020605000000000000000000000000001200030062692f6d61703a69702c6d616300000005000400000000000900020073797a300000000030000780180002800a000240000000000000000000000000000000010c0001800800014000001c02080006400000000005000500020000000500010006000000"], 0x7c}}, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0200000004000000990500000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000089ee03013d6f88335860a9f61853b98801e6a52d69c458c6e81616713ea607fed25931ec0c6bc7766d33685841cfe3d22882fea85a6f9424e8f5d4f29e9fcc3c763bb37f25a03ba745839d35222c417f25dbd24ee30ecf95fe11baaacc4d7e2b70a816e49e492340c930cbee2534944f9f51947bad4cf1b98f4215f2090170ea05d3830f57513262a826b2ff18"], 0x48) (async) listen(0xffffffffffffffff, 0x7fff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000280)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m40.2178954s ago: executing program 9 (id=3270): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x1986ec, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socket(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000eafe96d08ef2b4946e72f656a62b000000791048007b0a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m37.425401316s ago: executing program 9 (id=3273): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000100001042cbd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c00128009000100766c616e0000003a0c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00\t'], 0x58}, 0x1, 0x0, 0x0, 0xc861}, 0x40008c0) 2m36.715323423s ago: executing program 5 (id=3274): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdef}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 2m36.437134507s ago: executing program 5 (id=3276): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_disconnect(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'veth1\x00', {0x1}, 0x1}) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000023c0)={0x0, 'veth1_macvtap\x00', {0x1}, 0x109}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060101"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYBLOB="915100f98385090a56bcd30426042803280d275e772a716ba1af503bbcbe91239cc5e74c1d9984036d683ea866d67e5d8b5f7bf633441d11883d9ec54b545ead8960cdf557a36ef609ad436221609236f33a410f5e0f505aea6ab42dcff010510809192bc0699ef6e56051da017612df0f6e8709f4f1888cf083ef0e86323593c8b1904613cb56786c77dfe7ed7dcd721568201be34863daa8c8b7eeb37030df400a39aecae2647a1d60088a950f6ef41ff5a28bc80b7ca4c3820cd52e1873c92aa171017033fec1bbc5af9ed849ec706e117654"]) 2m32.183122492s ago: executing program 9 (id=3281): socket$inet_udplite(0x2, 0x2, 0x88) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r4, &(0x7f0000004440)=""/4096, 0x1000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000180)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/219, 0xdb}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000007c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/83, 0x53}], 0x7, &(0x7f0000000940)=""/96, 0x60}, 0x1}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000a40)=""/244, 0xf4}, {&(0x7f0000000b40)=""/108, 0x6c}, {&(0x7f0000000bc0)=""/230, 0xe6}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000000d80)=""/90, 0x5a}], 0x7, &(0x7f0000000e80)=""/78, 0x4e}, 0x4}, {{&(0x7f0000000f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000f80)=""/177, 0xb1}, {&(0x7f0000001040)=""/146, 0x92}], 0x2, &(0x7f0000001200)=""/193, 0xc1}, 0x80000000}, {{&(0x7f0000001100)=@nfc_llcp, 0x80, &(0x7f0000002540)=[{&(0x7f0000001300)=""/116, 0x74}, {&(0x7f0000001380)=""/88, 0x58}, {&(0x7f0000001400)=""/253, 0xfd}, {&(0x7f0000001180)=""/30, 0x1e}], 0x4}, 0x9}], 0x4, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0b26814fbf2a0af3c2afada3bc719f06208520437142a458fd2e578e0634d4254d37f59ab707dd6b", @ANYBLOB="010829bd7000fbdbdf25140000"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) syz_usb_connect(0x4, 0x9a2, &(0x7f0000000100)=ANY=[], 0x0) (async) r5 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={0x0}) r6 = syz_open_dev$sg(0x0, 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000114000/0x1000)=nil) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r3}) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r7, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) 2m31.871990146s ago: executing program 5 (id=3283): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0xd34) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000020200001900000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000e0040100004c86b8b1f25c1517f45e4d60043d652ea42d878547b846c16ee1f39c3a3c968fb56e7fecef7b8ea00918b172caab582c387b1351d473777f"], 0x48}}, 0x40000) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64], 0x10}, 0x20040002) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 2m31.48353648s ago: executing program 9 (id=3284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x311000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000140)={r2, 0x3}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40200898}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000ffff2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000480)=@e={0xff, 0xa, 0xb, 0x42, @SEQ_NOTEON=@note=0x34, 0x10, 0xb, 0xab}) 2m31.436919476s ago: executing program 1 (id=3285): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdef}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 2m31.110892343s ago: executing program 1 (id=3287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x6}, &(0x7f0000000500)=0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x5, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xbb}}], 0x18}}], 0x1, 0x20004000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000540)=0x4) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000240)={0xf, 0x10, 0x6, 0xfffffeff, 0x80000000}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000005180)={0x2020}, 0x2020) 2m30.78262089s ago: executing program 1 (id=3289): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m27.956357529s ago: executing program 9 (id=3290): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4044004) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000240)="e293592c218e243f5ff864038995451940dc7f59", 0x14) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x80000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000280)={0x1, "87022476e56bd7b2da6de8b0984de637807daf493da1e03bc0d34e5297cb004e"}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 2m27.027565069s ago: executing program 6 (id=3291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) file_getattr(r2, 0x0, &(0x7f0000000040), 0x64, 0x1000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000400)=[r4], 0x0, 0x0, 0x0, 0x0, 0x2fd}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000440)=0xffff, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0d, &(0x7f0000000040)) 2m23.483323192s ago: executing program 6 (id=3292): setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000180)=0x66d, 0x4) r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca030", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5defb", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000080)={0x8, &(0x7f00000001c0)=[{0x2f, '\x00', @buffer={"cf532a383206310eba918d42547ee0d43d366733bf300f17d4210da8143345b4", 0x20}, 0x3}, {0x3e, '\x00', @data=0x9, 0x2a0}, {0x24, '\x00', @buffer={"25c626641b076cc307937d8796cb207364b1320583193a8910fd3e4c38a48a66", 0x20}, 0x1}, {0x6, '\x00', @data=0x7, 0x2}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6}) 2m22.632887466s ago: executing program 1 (id=3293): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x12, 0x3a, 0xe, 0xa, 0x7, 0x5, 0x1, 0x8010000, 0xe755a3d832dace16}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="010000000802000001000080001b0000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000006084030000c3070400d2a8c4ed"], 0x48}, 0x1, 0x0, 0x0, 0x6028050}, 0x40800) (async, rerun: 64) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000070601080000000000000000000000000900020073797a30000000000800064000000b2d0900020073797a30000000000900020073797a3200000000080006400000010105000100070000000802064000000be2"], 0x58}}, 0x0) (async, rerun: 64) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d28d99f73071535534b2ce744440aa8cdc5aab34c689a95423df70dd6d743273b8f4edfe04c818640a2009a7501acdffa95b58c89e4ff78d363773d65dcd089b0a2faec1608bcb51f78a088acfb5776c00b86c304bb3a298fe0386425971a0e3014c853966b4a5f22b59736eabc5e77d720840b916215f16789e493bc97796e68318f84983461913d8f41e1622569e39875bb2f3f58c5e42d5a4604588509954415a7665a8ea11fe3666500ff2a5a562a153bed774fddb9d54f0e411917b3e95c48c4234bd21a02058d", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x11}], 0x3, 0x0, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0xc0c8}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r11 = socket(0x1, 0x803, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r14], 0x5c}}, 0x40) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 2m20.936543681s ago: executing program 1 (id=3294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000004"], &(0x7f0000000080)=0x2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r8 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 2m19.182462818s ago: executing program 6 (id=3295): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000006000000c10c0000a801000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000006000000c10c0000a801000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"], 0x50) (async) 2m18.92155536s ago: executing program 6 (id=3296): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdef}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 2m18.69727842s ago: executing program 6 (id=3297): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000002280)=ANY=[@ANYBLOB="401004000000aceb7a"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) accept4(r2, 0x0, 0x0, 0x800) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) 2m18.164134547s ago: executing program 1 (id=3298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) 2m16.506536963s ago: executing program 50 (id=3283): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0xd34) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000020200001900000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000e0040100004c86b8b1f25c1517f45e4d60043d652ea42d878547b846c16ee1f39c3a3c968fb56e7fecef7b8ea00918b172caab582c387b1351d473777f"], 0x48}}, 0x40000) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64], 0x10}, 0x20040002) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 2m15.339189087s ago: executing program 6 (id=3300): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) listen(0xffffffffffffffff, 0x3ff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_csum={0x4c, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7, 0x6, 0x6, 0x4}, 0x26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x96ba7a0e16f57e63, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x992d, 0x400, 0xffffffff, 0x3b9}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r6, 0x3516, 0xa00100, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x400c0}, [@IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) mmap(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r12, 0x9100}], 0x1, 0x0, 0x0, 0x0) write$apparmor_current(r12, &(0x7f0000000140)=@profile={'permprofile ', '\x00'}, 0xd) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1}, 0xc0) 2m12.493095469s ago: executing program 51 (id=3290): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4044004) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000240)="e293592c218e243f5ff864038995451940dc7f59", 0x14) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x80000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000280)={0x1, "87022476e56bd7b2da6de8b0984de637807daf493da1e03bc0d34e5297cb004e"}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 2m2.988310126s ago: executing program 52 (id=3298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) 2m0.185124233s ago: executing program 53 (id=3300): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) listen(0xffffffffffffffff, 0x3ff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_csum={0x4c, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7, 0x6, 0x6, 0x4}, 0x26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x96ba7a0e16f57e63, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x992d, 0x400, 0xffffffff, 0x3b9}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r6, 0x3516, 0xa00100, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x400c0}, [@IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) mmap(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r12, 0x9100}], 0x1, 0x0, 0x0, 0x0) write$apparmor_current(r12, &(0x7f0000000140)=@profile={'permprofile ', '\x00'}, 0xd) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1}, 0xc0) 1m26.545021085s ago: executing program 2 (id=3299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001600)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) socketpair(0xb, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000440)="7ab08b500dde659b9972fb5ba10862b90455ff1e24fdd0d07a342744fe45544b6cc405f7b7feb97befa248ecacc2e56b9f95821cef6d2b050a4964f072e35249b977bdbaf9aaf5004281d056dc43853378d7a0e2ebc1e003825f72a3030aa193b93e4971c2502b99cd128d77f7b057e8865792e893dc3fa855407330e39569964c78fd", 0x83}, {&(0x7f0000000540)}], 0x2}}], 0x3, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x7f}, &(0x7f00000000c0)=0x8) 1m25.974548486s ago: executing program 2 (id=3304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400050010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1m25.407460029s ago: executing program 2 (id=3305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m23.728471155s ago: executing program 2 (id=3306): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdef}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 1m23.413837316s ago: executing program 2 (id=3307): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x28, 0x25, 0x11, 0x19, 0x4, 0x0, 0x7, 0x114, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffd39) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x41b, &(0x7f0000000080)={0x0, 0x6d9b, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x3, 0x8001, 0x7, 0xb, 0x10000000000008, 0x46, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r3, @ANYRES8, @ANYBLOB="200025bd7000fedbdf250100000008001700", @ANYRES32=r4, @ANYBLOB="fa0c000000ffffff0c0016000000000000000000050007000200000006001b004e20000005001300040000008dee34d643823f91f1646baaf48c4819495719b93b218e657b7472de35ef2ee13aa17094879051958a6459ce791b8945847dea1af2fafcdf0feb77"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESDEC=r0], 0x20}}, 0x20000004) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) 1m19.920432062s ago: executing program 7 (id=3301): mremap(&(0x7f000028a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00001b4000/0x3000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, {"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", 0x1000}}, 0x1006) mremap(&(0x7f000028a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00001b4000/0x3000)=nil) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, {"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", 0x1000}}, 0x1006) (async) 1m18.027492988s ago: executing program 2 (id=3311): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m17.863929802s ago: executing program 7 (id=3312): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m12.239713106s ago: executing program 7 (id=3316): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x2, 0x100, 0xcfcd4592ae3d59a8, {0x3b, 0x3, 0x5, 0x90}}) 1m11.93444917s ago: executing program 7 (id=3319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x40047452, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 1m2.475673526s ago: executing program 54 (id=3311): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 55.826444237s ago: executing program 55 (id=3319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x40047452, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 51.811708152s ago: executing program 3 (id=3334): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) io_setup(0x3ff, &(0x7f00000000c0)=0x0) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r5, 0x0}]) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000004c0)=0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="9f") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x397, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xcc, 0x6, 0x3c, 0x10, 0x3f0, 0xa31d, 0x4052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x385, 0x1, 0x30, 0x0, 0xd0, 0x7, "", [{{0x9, 0x4, 0x26, 0xfc, 0xa, 0xff, 0x6, 0x1b, 0x43, [@uac_control={{0xa, 0x24, 0x1, 0xa991, 0x1c}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x1, "717e0ff2f4"}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0xfe, "af733c"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x5, 0x5, [@generic={0xfb, 0x23, "676fc53ae3696d7f863975f3aa901c5d1ad8f640339a42562ac49f48fd3b5ecc89374e467edf0c49c3eccdd4f43fdf1f6309b48cae83d59d2865956d404f82c4924fbc3e30edde480ce428d9a6db7789897c6224d457d721fe6cfaaff6bd2410a573d7550b9a5619f0a8dd8031a8b6d3ec1a196efc0132070becde23b590248d183a49a8fa9aff117872af440cb5c0f4ecc86f11b03f3330413305475db7ddfe0b97485cb3f85f0af4d3eeff1440ac2d29ebce1827fb52a1dd7028ec6fd75a07dc4065c1e9c38561d9a62cbed23b4d6c3d438b55d08e6d95d71fd0d263d011c561c9b8195ec340592368418b84a268c9366eabb11197cf6cd6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe2, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x10, 0xf8, 0x2d, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa4, 0x5}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0xea, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xcf, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x3, 0xfe, 0x53, [@generic={0x6c, 0x11, "2e34c1523707f995fb0467dc0a0c1eb83e523ffd815d555ae55478194caccdf553246dc1d3b3c4d41f2ed500ee70032ac733cce1319d2d5465b3bf1f920533105303c63d5976ba0ef6d16b49c0963d3308943ddc8921095aa3443f696ac850777fcfa17587701df55ed2"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x8, 0x5, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc1, 0x7}, @generic={0x82, 0x7, "2814130c885c84d7d1ba7241b5bc7eec53fa032367da9e0d96cd0d995c1d5ed1b43a32e4653e96d19e351206c6ca4bbe4e264ce36f0e2165d0699b361d14ad04c5384db17685a4522c7dd8ce81fb925d1629cd2301bda7c38acf9a2f7149f42b0a3a6edcbde7a46337a9e630c02e29142846ff6de7154dded5013f02907663d7"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0xe0, 0x1a, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x62, 0x23}, @generic={0x64, 0x3, "25d19f3764927dbc55eaab1029068a796edcd466ec26c1899969e1c10d5787b9115a50fa975d57f2512a1d9142a353e0fc74806b3e3ce660c846edbef377672a83639256e4e1092e05ad14d1898cebf11d405b5434328003fd2136aa7a4ae9901f94"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xfb, 0x5, 0x6, [@generic={0x53, 0xc, "1ff11123793f0a085aa70c87c7cce0d8d98bf83feabb51f1718843507527ccfd490c84e3ba52e430a526a05a2e93823c1689719abc3b9e5dec57572a5f0b78488e1576b1136012770ad54724b02ef2dffa"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x74, 0x1, 0x0, [@generic={0x25, 0x21, "049a4524b38afca75e035e5c6f17c2b1cb41aa33eb53a7a025d596a88489b68c41c634"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x1cf, 0x9, 0x3, 0x4f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x7f, 0xe, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xffff}]}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0x0, 0x81, 0x20, 0x7}, 0x41, &(0x7f0000000140)={0x5, 0xf, 0x41, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x100, 0xff00, 0x1000, [0x0, 0xffc000, 0x30, 0xffff, 0x30, 0xcf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x2, 0xfff8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x29, 0xec, 0x9, 0x2, 0x1}, @ptm_cap={0x3}]}, 0x8, [{0x20, &(0x7f0000000040)=ANY=[@ANYBLOB="20038d6acf8dd72a04ddf840506881eadca600000000"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x8b, &(0x7f0000000200)=@string={0x8b, 0x3, "d60a62004d2c960bee28f7065028c54a6d04198dae5859635e5c20085cc12936b092dd3ab0b8db72cb0f4c42a453b6cbcaa9b3408fca5ed921ac57aa70c902fc5564f3a82e0cb3107e74bc610092f3727be4a0481675e10848328d2f8e4ccf2a1a2becd93067bd49caeac47b0eacd104b726441e7d9dded5fff12eebd1648d4857bc196853da683f3b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41d}}, {0xb6, &(0x7f0000000300)=@string={0xb6, 0x3, "07c5641b06c59611045b053af8ab0fc27a649f3aee4446f6f9187ba9a966974e05bff7aed33a3c23b729fc6e9255363ee65350d1268932a92062b1e7587f19ad6d3d2f09e56e2dbab210d998929775805bb7f3d81a0cd6c9b33f65355bb3bb6a3a0785880c1e014958b5321bb76babc6caeb93808d89020118d8ad988e21bad025c6adfbb0d7bfd9fefe93af085c31d1497d220be1ae699a6c3ade76f4124ef9b292c83a3ad3497d969d78b619a426f50bd6d671"}}, {0xa1, &(0x7f00000007c0)=@string={0xa1, 0x3, "61f99499827b1cb25e3f42c47a70c949de855e04123998902bcf1e1741e7456f85215417e7907ec8f0b39661d77861da0e1434b840d03dadcd7e5dc2086a3bb741f3c5647ba7679793cb1e38b9c0c4fb5957176b2c5e3c165f8e22102daa00307f31391e32a958deea887bdd7d113ce12ccd5d8720e5ef64da31148a5d4f415bf7d1aac0e2941cba611c95efb2e42372fce99a0402734a41b49beb9d759766"}}, {0x47, &(0x7f0000000880)=@string={0x47, 0x3, "0ef741b1c8a88ad0f0f960d7fc6562841181191f83e6622cdca718636d0c23e0f03f1c12e980f6c35f31cb858f978dfc904a638a5eba0af9902cc22acc543b221362d7eba8"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io$uac2(r7, &(0x7f0000000a40)={0x14, &(0x7f00000009c0)={0x40, 0x22, 0x25, {0x25, 0xe, "0d56e0784732c0548e76f6b37dae491d95e86f8dd0eb59857fb3ac6bd9d06999c04f2f"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000a80)={0x0, 0x7, 0x30, "98235c02a16c71d4a288ae1db268ea830b79f1ed5d49bb9c2a179261b2bcc760d00b5a40c2d8d1493834815d59ea0ade"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x30}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b40)={0x20, 0x81, 0x2, "4dd5"}, &(0x7f0000000b80)={0x20, 0x82, 0x2, '9&'}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, ';z/'}, &(0x7f0000000c00)={0x20, 0x84, 0x1, "82"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, ']@p'}}) 48.463224442s ago: executing program 3 (id=3343): r0 = memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00)\xfa\xe8\xa5Z\x11\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x91\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) mmap(&(0x7f0000336000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, r0, 0x9be02000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="000000000d000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.1019568s ago: executing program 3 (id=3346): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000340)=[@cr4={0x1, 0x100200}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x4, 0x3, 0x9, 0x8, 0x6, 0x6, 0x9, 0x9, 0xa5, [0x400, 0xf47, 0x5, 0xd, 0x80000000, 0xfffffff3, 0x1, 0x7f]}}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (rerun: 32) 47.444357639s ago: executing program 3 (id=3349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$kcm(0x11, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) 47.163395535s ago: executing program 3 (id=3351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x28, 0x803, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffe9b, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x7, 0x1, {0x10, 0x6}}]}}]}, 0x3c}}, 0x0) 46.337033788s ago: executing program 3 (id=3354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0x2, 0x121840) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000001900)={{r0}, "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"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x44010}, 0x44000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001006e00000008", @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e3100000000000000"], 0x60}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) r8 = openat$vcs(0xffffffffffffff9c, 0x0, 0x10a00, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x80802, 0x0) bind$xdp(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r13, 0x0, 0x0) 32.024289635s ago: executing program 0 (id=3368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$kcm(0x11, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) 31.64079484s ago: executing program 0 (id=3369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001f000000000000000010000061abc1"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000010000000000009f09000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff0bffb702000008000000b7030000000000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 31.545445812s ago: executing program 0 (id=3370): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x40002350, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x2f, 0xd}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a8864450000280022000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405530854000090"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(r5, 0x1, 0x2f, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) writev(0xffffffffffffffff, 0x0, 0x0) 30.942534226s ago: executing program 56 (id=3354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0x2, 0x121840) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000001900)={{r0}, "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"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x44010}, 0x44000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001006e00000008", @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e3100000000000000"], 0x60}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) r8 = openat$vcs(0xffffffffffffff9c, 0x0, 0x10a00, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x80802, 0x0) bind$xdp(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r13, 0x0, 0x0) 30.84644722s ago: executing program 8 (id=3372): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e00030000000300000005000700080000005fb6465337590775be641b10308106b31a6b4d5f8b5b085961e39f6b21d5b50e024bd4507641ce05be2fa64fd72abda58b9a54fb136453e4fc1efe643ef454917a6f4184a547d8069805031deedfd8e74f82e5c76710"], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1f30}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x34, '\x00', @st={0x4, [{0x2, @uvalue=0x1000}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x56}, {0x3, @uvalue=0x4}]}, 0xfd}, {0x24, '\x00', @data=0x800, 0x5}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast2, 0x47f40b73}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x24044804) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r10, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 28.373941455s ago: executing program 8 (id=3373): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fc0000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26.585241345s ago: executing program 0 (id=3374): r0 = memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00)\xfa\xe8\xa5Z\x11\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x91\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) mmap(&(0x7f0000336000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, r0, 0x9be02000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000028000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.33966721s ago: executing program 8 (id=3375): unshare(0x20000480) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff0009"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYBLOB], 0xd0060) 26.246641122s ago: executing program 0 (id=3376): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079104800000000007900280000000000950074000000000022187069f9fb6bdbca6359d81e8eecd7934bdcd758593c4e4ead4367ee3caad7a68421695cdba2a119ca79a0a9a842dbeba155bc249578ff037773a2813b594c769c354a802307ef4ea733072570de61c55077543278cb2f2ce50f80aa94017b5ba8805cdd558a7eb801e1a9442402e596944d7dc5db8c2aa2a96eb2ba810078c32e228ea525f9dabdd2de349bf424610dc6a94b237888800628fa480e7d411df454c90cf5e070b0fa21c5fa54a65b920e43e67e9d7a6094bda46a016e7b8f9edbb8"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000009000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 26.158170355s ago: executing program 8 (id=3377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$kcm(0x11, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) 25.871654037s ago: executing program 0 (id=3378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x143b02) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000040)={0x0, {0x14c, 0x66}}) 25.771319584s ago: executing program 8 (id=3379): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000601f6050e"], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r9, 0x0, 0x40001) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x6, 0x3136564e, 0x3, @stepwise={0x80004, 0xffffffff, 0x4, 0x34d48743, 0x80000001, 0x200}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0xf, 0x1, 0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r12, @ANYBLOB="020028bd7000fbdbdf250e0000004c000380060007004e240000080001000200000014000600fc003e4eef0eefa51de57d00000000000000000000000000011400020062617461647630000000000000000000060004000400000008000300005d1f918000028008000700ffff00000c000380080001000200000008000500000000004400038008000100ec4423c308000300030000000800030001000000060004000100000008000100010000000800030000000000060007004e23000008000500ac1e000108000600a4090000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008887}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 22.002989453s ago: executing program 8 (id=3380): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x5}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r7 = socket(0x80000000000000a, 0x80000, 0x20000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000020000801000000180000000200b900861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f3], [0x2, 0x9, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xc3d3, 0x0, 0x0, 0x20001]], '\x00', [{0x0, 0x3}, {0x1000000}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000, 0x3}, {0xffffffff}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0x10000}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r8, &(0x7f0000000d80), 0x0, 0x10162, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) 1.855659486s ago: executing program 57 (id=3378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x143b02) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000040)={0x0, {0x14c, 0x66}}) 0s ago: executing program 58 (id=3380): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x5}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r7 = socket(0x80000000000000a, 0x80000, 0x20000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000020000801000000180000000200b900861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f3], [0x2, 0x9, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xc3d3, 0x0, 0x0, 0x20001]], '\x00', [{0x0, 0x3}, {0x1000000}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000, 0x3}, {0xffffffff}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0x10000}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r8, &(0x7f0000000d80), 0x0, 0x10162, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) kernel console output (not intermixed with test programs): ecified [ 1634.705803][T18276] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1634.874234][T20170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1634.946375][T18276] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.990710][T18276] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1635.051399][T18276] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1635.133618][T18276] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1635.174829][T18276] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1635.216053][T18276] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.245595][T18276] usb 10-1: Product: syz [ 1635.275821][T18276] usb 10-1: Manufacturer: syz [ 1635.312743][T18276] usb 10-1: SerialNumber: syz [ 1635.367523][T18276] usb 10-1: config 0 descriptor?? [ 1635.439556][T18276] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found [ 1635.702509][T20160] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3151'. [ 1635.787034][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3151'. [ 1635.798211][T18276] snd_usb_toneport 10-1:0.0: cannot get proper max packet size [ 1635.846938][T20160] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3151'. [ 1635.856955][T18276] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected [ 1635.924534][T18276] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1636.129658][T16888] usb 10-1: USB disconnect, device number 5 [ 1636.947544][T20199] loop2: detected capacity change from 0 to 7 [ 1637.064846][T20199] Dev loop2: unable to read RDB block 7 [ 1637.137142][T20199] loop2: unable to read partition table [ 1637.205533][T20199] loop2: partition table beyond EOD, truncated [ 1637.253971][T20199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1637.457155][ T30] audit: type=1804 audit(1773678451.492:345): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3164" name="bus" dev="ramfs" ino=114058 res=1 errno=0 [ 1637.544544][T20207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3163'. [ 1640.311545][T20218] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1640.399735][T20218] bond1: (slave lo): Enslaving as an active interface with an up link [ 1640.634180][T20218] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1641.294583][T20242] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3168'. [ 1648.661356][T20263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1649.960159][T16883] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1650.292391][T16883] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1650.325797][T16883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.434716][T16883] usb 2-1: config 0 descriptor?? [ 1650.486362][T16883] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1651.525494][T16883] gspca_stv06xx: I2C: Read error writing address: -71 [ 1651.637711][T16883] usb 2-1: USB disconnect, device number 122 [ 1652.978165][T20257] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3171'. [ 1654.306650][T20279] loop2: detected capacity change from 0 to 7 [ 1654.318542][T20279] Dev loop2: unable to read RDB block 7 [ 1654.324153][T20279] loop2: unable to read partition table [ 1654.382751][T20279] loop2: partition table beyond EOD, truncated [ 1654.411329][T20279] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1654.440102][T20263] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 1654.776541][T20263] bond1 (unregistering): Released all slaves [ 1655.592839][T20283] xt_bpf: check failed: parse error [ 1658.031535][T20321] syzkaller0: entered promiscuous mode [ 1658.068744][T20321] syzkaller0: entered allmulticast mode [ 1658.108412][T20323] tc action pedit offset must be on 32 bit boundaries [ 1658.942021][T20325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3185'. [ 1659.673146][T20333] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1660.576484][T19293] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1660.853264][T19293] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1661.637593][T19293] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.826184][T19293] usb 10-1: config 0 descriptor?? [ 1661.948457][T19293] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1663.215197][T20341] bond1: (slave lo): Releasing backup interface [ 1663.261419][T20341] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1663.290561][T16867] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1663.640355][T20341] bridge_slave_0: left allmulticast mode [ 1663.863381][T20341] bridge_slave_0: left promiscuous mode [ 1663.903044][T20341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.977428][T16867] usb 6-1: Using ep0 maxpacket: 16 [ 1664.136165][T16867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.154719][T16867] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1664.180647][T16867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.279265][T20341] bridge_slave_1: left allmulticast mode [ 1664.294958][T16867] usb 6-1: config 0 descriptor?? [ 1664.358086][T20341] bridge_slave_1: left promiscuous mode [ 1664.381117][T16867] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1664.448407][T20341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.703414][T16888] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1664.866412][T20341] bond0: (slave bond_slave_0): Releasing backup interface [ 1665.046501][T20341] bond0: (slave bond_slave_1): Releasing backup interface [ 1665.287284][T20341] team0: Port device team_slave_0 removed [ 1665.304639][T16888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1665.459886][T20341] team0: Port device team_slave_1 removed [ 1665.579882][T20341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.634240][T16888] usb 2-1: string descriptor 0 read error: -22 [ 1665.635718][T20341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.649641][T16888] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 1665.836242][T16888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.988133][T20341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.086879][T20341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.324804][T18276] usb 6-1: USB disconnect, device number 40 [ 1666.372148][T20341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1666.637687][T20371] syzkaller1: entered promiscuous mode [ 1666.648850][T19293] gspca_stv06xx: I2C: Read error writing address: -71 [ 1666.686735][T20371] syzkaller1: entered allmulticast mode [ 1666.706129][T19293] usb 10-1: USB disconnect, device number 6 [ 1666.741745][T20396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3199'. [ 1667.071667][T16888] usbhid 2-1:1.0: can't add hid device: -71 [ 1667.104369][T20402] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 1667.119488][T16888] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1667.182976][T16888] usb 2-1: USB disconnect, device number 123 [ 1667.195566][T20407] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1667.206920][T20407] bond1: (slave lo): Enslaving as an active interface with an up link [ 1667.221405][T20407] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1667.333186][T18276] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1667.623117][T18276] usb 6-1: Using ep0 maxpacket: 32 [ 1667.747382][T18276] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1667.944336][T18276] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1668.016692][T18276] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1668.078661][T18276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.168748][T18276] usb 6-1: config 0 descriptor?? [ 1668.740804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.795784][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.381896][T20422] syzkaller0: entered promiscuous mode [ 1669.468129][T20422] syzkaller0: entered allmulticast mode [ 1669.581754][T18276] corsair-cpro 0003:1B1C:0C10.0022: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1670.088280][T18276] corsair-cpro 0003:1B1C:0C10.0022: probe with driver corsair-cpro failed with error -110 [ 1670.277707][T18276] usb 6-1: USB disconnect, device number 41 [ 1670.365727][ T30] audit: type=1326 audit(1773678484.412:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1670.496618][T15637] IPVS: starting estimator thread 0... [ 1670.723015][T20438] IPVS: using max 31 ests per chain, 74400 per kthread [ 1670.792369][ T30] audit: type=1326 audit(1773678484.412:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1670.951242][ T30] audit: type=1326 audit(1773678484.442:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0ba35cfce code=0x7ffc0000 [ 1671.116506][ T30] audit: type=1326 audit(1773678484.442:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1671.532074][T20448] netlink: 'syz.4.3207': attribute type 1 has an invalid length. [ 1671.552636][ T30] audit: type=1326 audit(1773678484.542:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1671.917116][ T30] audit: type=1326 audit(1773678484.542:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1672.216831][ T30] audit: type=1326 audit(1773678484.542:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1672.435469][ T30] audit: type=1326 audit(1773678484.542:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1672.641615][ T30] audit: type=1326 audit(1773678484.572:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1673.104061][ T30] audit: type=1326 audit(1773678484.572:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba39c799 code=0x7ffc0000 [ 1673.688385][T18276] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1673.947081][T18276] usb 6-1: Using ep0 maxpacket: 8 [ 1674.000443][T20475] netlink: 'syz.6.3213': attribute type 1 has an invalid length. [ 1674.036364][T18276] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1676.215816][T18276] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1677.175826][T18276] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1677.355689][T18276] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.509227][T18276] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1677.635822][T18276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.815916][T18276] usb 6-1: can't set config #16, error -71 [ 1677.933532][T18276] usb 6-1: USB disconnect, device number 42 [ 1678.353946][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1678.353963][ T30] audit: type=1800 audit(1773678492.402:366): pid=20502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3219" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1678.365927][T18276] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1678.787674][T18276] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1680.729470][T18276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.747202][T18276] usb 6-1: config 0 has no interface number 0 [ 1682.757793][T18713] Bluetooth: hci0: command 0x0406 tx timeout [ 1682.764718][T18713] Bluetooth: hci1: command 0x0406 tx timeout [ 1682.884618][T18276] usb 6-1: string descriptor 0 read error: -71 [ 1682.950263][T18276] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1683.057345][T18276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.148794][T18276] usb 6-1: config 0 descriptor?? [ 1683.225443][T18276] usb 6-1: can't set config #0, error -71 [ 1683.267305][T20513] loop2: detected capacity change from 0 to 7 [ 1683.339970][T18276] usb 6-1: USB disconnect, device number 43 [ 1683.349017][T20513] Dev loop2: unable to read RDB block 7 [ 1683.407704][T20513] loop2: unable to read partition table [ 1683.454085][T20513] loop2: partition table beyond EOD, truncated [ 1683.505767][T20513] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1684.459247][T20531] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 1685.126768][T20541] bond1: option mode: unable to set because the bond device has slaves [ 1685.400336][T20543] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1685.453944][T16888] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1686.338894][T20532] Bluetooth: hci3: command 0x0406 tx timeout [ 1686.349658][T20532] Bluetooth: hci4: command 0x0406 tx timeout [ 1686.356931][T20532] Bluetooth: hci5: command 0x0406 tx timeout [ 1686.415915][T18276] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1687.327697][T18276] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1687.396869][T18276] usb 5-1: not running at top speed; connect to a high speed hub [ 1687.407849][T18276] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1687.435132][T18276] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1687.444333][T18276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.619974][T18276] usb 5-1: Product: syz [ 1687.640237][T18276] usb 5-1: Manufacturer: syz [ 1687.644874][T18276] usb 5-1: SerialNumber: syz [ 1688.247765][T18276] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1688.328296][T18276] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1689.234864][T18276] usb 5-1: USB disconnect, device number 18 [ 1689.649659][T20569] syzkaller0: entered promiscuous mode [ 1689.655430][T20569] syzkaller0: entered allmulticast mode [ 1689.675164][T20518] udevd[20518]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1689.816954][T16888] usb 6-1: unable to read config index 0 descriptor/all [ 1689.836670][T16888] usb 6-1: can't read configurations, error -71 [ 1690.618165][T20584] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1690.648066][T20582] binder: 20581:20582 ioctl c0306201 200000000240 returned -11 [ 1695.279325][T20600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1695.465788][T16883] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1695.535935][T19293] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1695.699089][T16883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1695.722862][T16883] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1695.740826][T16883] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1695.773498][T19293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.826040][T19293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.868914][T16883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1695.886139][T19293] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1695.917340][T18276] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1695.940803][T16883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1695.953787][T19293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.975943][T16883] usb 2-1: Product: syz [ 1695.980134][T16883] usb 2-1: Manufacturer: syz [ 1696.001344][T19293] usb 6-1: config 0 descriptor?? [ 1696.015500][T16883] usb 2-1: SerialNumber: syz [ 1696.116405][T18276] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1696.182121][T18276] usb 5-1: not running at top speed; connect to a high speed hub [ 1696.201547][T18276] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.321730][T18276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1696.369027][T16883] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1696.392088][T18276] usb 5-1: string descriptor 0 read error: -22 [ 1696.413442][T18276] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1696.563775][T18276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.624291][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 1696.644508][T19293] uclogic 0003:5543:0042.0023: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 1696.718852][T18276] usb 5-1: 0:2 : does not exist [ 1697.059143][T20642] input: syz1 as /devices/virtual/input/input48 [ 1697.445437][T20644] syzkaller1: entered promiscuous mode [ 1697.578361][T20644] syzkaller1: entered allmulticast mode [ 1698.732575][T19293] usb 2-1: USB disconnect, device number 124 [ 1698.823862][T19293] usblp0: removed [ 1699.247338][T16883] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1699.435848][T16883] usb 10-1: Using ep0 maxpacket: 32 [ 1699.475815][T19293] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1699.895931][T19293] usb 2-1: Using ep0 maxpacket: 8 [ 1699.951786][T19293] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1700.025662][T19293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.050211][T16883] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1700.077119][T19293] usb 2-1: Product: syz [ 1700.081328][T19293] usb 2-1: Manufacturer: syz [ 1700.112092][T16883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.148443][T19293] usb 2-1: SerialNumber: syz [ 1700.208914][T19293] usb 2-1: config 0 descriptor?? [ 1700.220484][T16883] usb 10-1: config 0 descriptor?? [ 1700.264858][T19293] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1701.116127][T16883] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1701.191141][T16883] usb 10-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1701.346345][T16883] usb 10-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1702.620110][T15637] usb 6-1: USB disconnect, device number 46 [ 1702.657116][T18276] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1702.737799][T18276] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1702.818651][T18276] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1703.099683][T18276] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1703.616184][T19293] gspca_sonixj: i2c_w8 err -110 [ 1703.685862][T19293] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1704.134055][T19292] usb 2-1: USB disconnect, device number 125 [ 1706.082498][T19292] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1706.250565][T19292] usb 6-1: Using ep0 maxpacket: 16 [ 1706.271646][T19292] usb 6-1: config 1 has an invalid interface number: 228 but max is 0 [ 1706.290209][T19292] usb 6-1: config 1 has no interface number 0 [ 1706.300570][T19292] usb 6-1: config 1 interface 228 has no altsetting 0 [ 1706.317900][T19292] usb 6-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 1706.341030][T19292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.356733][T19292] usb 6-1: Product: syz [ 1706.372542][T19292] usb 6-1: Manufacturer: syz [ 1706.382667][T19292] usb 6-1: SerialNumber: syz [ 1708.895575][T19292] usb 6-1: USB disconnect, device number 47 [ 1711.510770][T20713] syz.6.3257 (20713): drop_caches: 2 [ 1711.523854][T15362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1711.534291][T15362] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1711.581746][T15362] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1711.599454][T15362] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1711.610298][T15362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1712.465174][T18276] usb 5-1: USB disconnect, device number 19 [ 1713.775916][T15362] Bluetooth: hci2: command tx timeout [ 1716.175745][T15362] Bluetooth: hci2: command tx timeout [ 1717.475044][ T6558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.258139][T15362] Bluetooth: hci2: command tx timeout [ 1718.420611][ T6558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.594344][T20729] chnl_net:caif_netlink_parms(): no params data found [ 1719.406364][ T6558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.575927][T19292] usb 2-1: new low-speed USB device number 126 using dummy_hcd [ 1719.779609][T19292] usb 2-1: Invalid ep0 maxpacket: 64 [ 1719.840340][ T6558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.946211][T19292] usb 2-1: new low-speed USB device number 127 using dummy_hcd [ 1720.117058][T19292] usb 2-1: Invalid ep0 maxpacket: 64 [ 1720.133107][T19292] usb usb2-port1: attempt power cycle [ 1720.247070][T20729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.295552][T20729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.336385][T15362] Bluetooth: hci2: command tx timeout [ 1720.346017][T20729] bridge_slave_0: entered allmulticast mode [ 1720.391949][T20729] bridge_slave_0: entered promiscuous mode [ 1720.418362][T20729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.471704][T20729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.506328][T20729] bridge_slave_1: entered allmulticast mode [ 1720.515761][T19292] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 1720.596381][T20729] bridge_slave_1: entered promiscuous mode [ 1720.622874][T19292] usb 2-1: Invalid ep0 maxpacket: 64 [ 1720.775863][T19292] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1720.855072][T19292] usb 2-1: Invalid ep0 maxpacket: 64 [ 1720.895429][T19292] usb usb2-port1: unable to enumerate USB device [ 1721.294335][T20799] loop5: detected capacity change from 0 to 567 [ 1721.427716][T20729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.977709][T20729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.763147][T20807] netlink: 'syz.6.3271': attribute type 27 has an invalid length. [ 1722.915755][T19293] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1723.207660][T19293] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1723.224775][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3273'. [ 1723.269043][T20729] team0: Port device team_slave_0 added [ 1723.274792][T19293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.322770][T20812] vlan2: entered promiscuous mode [ 1723.334105][T19293] usb 2-1: config 0 has no interface number 0 [ 1723.365123][T20812] macvlan1: entered promiscuous mode [ 1723.377929][T19293] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1723.426820][T19293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.458776][T20729] team0: Port device team_slave_1 added [ 1723.469158][T19293] usb 2-1: Product: syz [ 1723.484695][T19293] usb 2-1: Manufacturer: syz [ 1723.502096][T19293] usb 2-1: SerialNumber: syz [ 1723.544370][T19293] usb 2-1: config 0 descriptor?? [ 1723.559966][T19293] hub 2-1:0.31: bad descriptor, ignoring hub [ 1723.571107][T19293] hub 2-1:0.31: probe with driver hub failed with error -5 [ 1723.580475][T19293] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1723.589070][T19293] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1723.598513][T19293] uvcvideo 2-1:0.31: Failed to create links for entity 32774 [ 1723.606531][T19293] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 1723.720775][ T6558] bridge_slave_1: left allmulticast mode [ 1723.733360][ T6558] bridge_slave_1: left promiscuous mode [ 1723.784853][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.854602][ T6558] bridge_slave_0: left allmulticast mode [ 1723.878580][ T6558] bridge_slave_0: left promiscuous mode [ 1723.884612][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.907449][T15637] usb 2-1: USB disconnect, device number 4 [ 1724.095546][T15637] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1724.286182][T15637] usb 6-1: Using ep0 maxpacket: 32 [ 1724.325998][T15637] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1724.355821][T15637] usb 6-1: config 0 has no interface number 0 [ 1724.387036][T15637] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1724.436092][T15637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.474761][T15637] usb 6-1: Product: syz [ 1724.494486][T15637] usb 6-1: Manufacturer: syz [ 1724.515509][T15637] usb 6-1: SerialNumber: syz [ 1724.564310][T15637] usb 6-1: config 0 descriptor?? [ 1724.603219][T15637] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1724.820551][T15637] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1724.837104][T19292] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1724.888843][T15637] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1724.952451][T15637] usb 6-1: USB disconnect, device number 48 [ 1724.970785][ T6558] batman_adv: batadv0: Removing interface: gretap1 [ 1725.096050][T19292] usb 2-1: Using ep0 maxpacket: 32 [ 1725.227824][T19292] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1726.410569][T19292] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1726.442663][ T6558] batman_adv: batadv0: Removing interface: bridge1 [ 1726.451840][T19292] usb 2-1: config 7 has no interface number 0 [ 1726.482331][T19292] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1726.509503][T19292] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1726.519619][T19292] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1726.529402][T19292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.543699][T19292] usb 2-1: Product: syz [ 1726.548363][T19292] usb 2-1: Manufacturer: syz [ 1726.553190][T19292] usb 2-1: SerialNumber: syz [ 1726.612924][ T6558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1726.743399][ T6558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1726.774540][T19292] usb 2-1: Unknown endpoint type found, address 0x07 [ 1726.794750][ T6558] bond0 (unregistering): Released all slaves [ 1726.807406][T19292] usb 2-1: Unknown endpoint type found, address 0x03 [ 1726.832393][T19292] usb 2-1: Not enough endpoints found in device, aborting! [ 1726.862981][ T6558] bond1 (unregistering): (slave lo): Releasing backup interface [ 1726.903298][ T6558] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1726.969241][ T6558] bond1 (unregistering): Released all slaves [ 1726.984871][T20835] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3279'. [ 1726.999430][T19292] usb 2-1: USB disconnect, device number 5 [ 1727.115038][T20729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.133280][T20729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.239028][T20729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.272026][T20729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.307528][T20729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.384642][T20729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.981518][T20846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1728.220593][T20729] hsr_slave_0: entered promiscuous mode [ 1728.309380][T20729] hsr_slave_1: entered promiscuous mode [ 1728.468077][T20729] debugfs: 'hsr0' already exists in 'hsr' [ 1728.559026][T20729] Cannot create hsr debugfs directory [ 1729.189535][T20867] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1729.206492][T20867] team0: Port device macvlan2 added [ 1729.214167][T20877] binder: 20876:20877 ioctl 40047451 200000000540 returned -22 [ 1729.214438][T20877] binder: 20876:20877 ioctl c040583c 200000000240 returned -22 [ 1729.541559][ T6558] hsr_slave_0: left promiscuous mode [ 1729.542091][ T6558] hsr_slave_1: left promiscuous mode [ 1729.542531][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.542545][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.543010][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.543037][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.624791][ T6558] veth1_macvtap: left promiscuous mode [ 1729.624847][ T6558] veth0_macvtap: left promiscuous mode [ 1729.624930][ T6558] veth1_vlan: left promiscuous mode [ 1729.624985][ T6558] veth0_vlan: left promiscuous mode [ 1729.974754][T19293] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1730.181068][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.181122][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.183952][T19293] usb 2-1: Using ep0 maxpacket: 32 [ 1730.214031][T19293] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1730.214050][T19293] usb 2-1: config 0 has no interface number 0 [ 1730.214074][T19293] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1730.252235][T19293] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1730.252266][T19293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.252283][T19293] usb 2-1: Product: syz [ 1730.252296][T19293] usb 2-1: Manufacturer: syz [ 1730.252309][T19293] usb 2-1: SerialNumber: syz [ 1730.283385][T19293] usb 2-1: config 0 descriptor?? [ 1730.299877][T20887] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1730.728815][T20887] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1732.556651][ T6558] team0 (unregistering): Port device team_slave_1 removed [ 1733.050104][ T6558] team0 (unregistering): Port device team_slave_0 removed [ 1735.828826][T20885] bridge0: entered promiscuous mode [ 1736.718507][T20909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.718696][T20909] batadv_slave_0: entered promiscuous mode [ 1736.954565][T19293] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1736.954595][T19293] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1736.954825][T19293] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1736.958531][T19293] usb 2-1: USB disconnect, device number 6 [ 1740.325957][T20948] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3294'. [ 1742.141121][T20729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1742.160658][T20729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1742.170177][T20729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1742.232323][T20969] syzkaller0: entered promiscuous mode [ 1742.232348][T20969] syzkaller0: entered allmulticast mode [ 1742.233759][T20729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1743.933302][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1743.960908][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1743.968234][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1744.000481][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1744.026982][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1745.740055][T20901] syz.9.3290 (20901): drop_caches: 2 [ 1746.255871][ T5826] Bluetooth: hci3: command tx timeout [ 1747.800875][T15362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1747.803769][T15362] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1747.804668][T15362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1747.806064][T15362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1747.806658][T15362] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1748.335811][T15362] Bluetooth: hci3: command tx timeout [ 1749.856252][T15362] Bluetooth: hci6: command tx timeout [ 1750.420277][T15362] Bluetooth: hci3: command tx timeout [ 1751.936175][T15362] Bluetooth: hci6: command tx timeout [ 1752.495859][T15362] Bluetooth: hci3: command tx timeout [ 1754.020607][T15362] Bluetooth: hci6: command tx timeout [ 1756.095893][T15362] Bluetooth: hci6: command tx timeout [ 1757.357901][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1757.362388][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1757.363246][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1757.364112][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1757.364698][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1759.925815][ T5826] Bluetooth: hci7: command tx timeout [ 1760.100313][T15362] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1760.104068][T15362] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1760.104942][T15362] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1760.106133][T15362] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1760.106718][T15362] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1761.950847][T15362] Bluetooth: hci7: command tx timeout [ 1762.178786][T15362] Bluetooth: hci8: command tx timeout [ 1764.021425][T15362] Bluetooth: hci7: command tx timeout [ 1764.256113][T15362] Bluetooth: hci8: command tx timeout [ 1766.048515][T16883] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1766.048586][T16883] dvb_usb_az6027 10-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1766.100986][T15362] Bluetooth: hci7: command tx timeout [ 1766.110765][T16883] usb 10-1: USB disconnect, device number 7 [ 1766.336087][T15362] Bluetooth: hci8: command tx timeout [ 1768.425873][T15362] Bluetooth: hci8: command tx timeout [ 1772.021962][ T5826] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1772.026864][ T5826] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1772.029694][ T5826] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1772.031121][ T5826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1772.031731][ T5826] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1772.588805][T20729] kthread_run failed with err -4 [ 1774.095902][ T5826] Bluetooth: hci9: command tx timeout [ 1775.920500][T10736] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.133096][T10736] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.180182][ T5826] Bluetooth: hci9: command tx timeout [ 1776.377590][T10736] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.509587][T10736] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.358369][T20999] chnl_net:caif_netlink_parms(): no params data found [ 1777.532187][T21013] chnl_net:caif_netlink_parms(): no params data found [ 1777.553560][T21007] chnl_net:caif_netlink_parms(): no params data found [ 1777.599223][T21022] chnl_net:caif_netlink_parms(): no params data found [ 1777.613784][T21016] chnl_net:caif_netlink_parms(): no params data found [ 1778.271724][ T5826] Bluetooth: hci9: command tx timeout [ 1778.437125][T10736] team0: Port device macvlan2 removed [ 1778.449170][T10736] bond0 (unregistering): Released all slaves [ 1778.458556][T10736] bond1 (unregistering): Released all slaves [ 1779.101079][T20999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.101222][T20999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.101459][T20999] bridge_slave_0: entered allmulticast mode [ 1779.117396][T20999] bridge_slave_0: entered promiscuous mode [ 1779.134043][T21013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.134143][T21013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.134327][T21013] bridge_slave_0: entered allmulticast mode [ 1779.140969][T21013] bridge_slave_0: entered promiscuous mode [ 1779.149301][T21013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.149392][T21013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.149575][T21013] bridge_slave_1: entered allmulticast mode [ 1779.155889][T21013] bridge_slave_1: entered promiscuous mode [ 1779.339701][T20999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.339805][T20999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.340018][T20999] bridge_slave_1: entered allmulticast mode [ 1779.341815][T20999] bridge_slave_1: entered promiscuous mode [ 1779.422298][T21007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.422600][T21007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.422740][T21007] bridge_slave_0: entered allmulticast mode [ 1779.424356][T21007] bridge_slave_0: entered promiscuous mode [ 1779.778925][T21022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.779066][T21022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.779302][T21022] bridge_slave_0: entered allmulticast mode [ 1779.783440][T21022] bridge_slave_0: entered promiscuous mode [ 1779.785164][T21007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.785259][T21007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.785400][T21007] bridge_slave_1: entered allmulticast mode [ 1779.797293][T21007] bridge_slave_1: entered promiscuous mode [ 1779.831633][T20999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.889637][T10736] hsr_slave_0: left promiscuous mode [ 1779.895036][T10736] hsr_slave_1: left promiscuous mode [ 1779.902671][T10736] veth1_macvtap: left promiscuous mode [ 1779.902703][T10736] veth0_macvtap: left promiscuous mode [ 1779.903000][T10736] veth1_vlan: left promiscuous mode [ 1779.903054][T10736] veth0_vlan: left promiscuous mode [ 1780.338510][ T5826] Bluetooth: hci9: command tx timeout [ 1780.522514][T21016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.528162][T21016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.530181][T21016] bridge_slave_0: entered allmulticast mode [ 1780.531806][T21016] bridge_slave_0: entered promiscuous mode [ 1780.544579][T21013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.551367][T21013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.749431][T21022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.749580][T21022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.749798][T21022] bridge_slave_1: entered allmulticast mode [ 1780.751674][T21022] bridge_slave_1: entered promiscuous mode [ 1780.755351][T20999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.762068][T21007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.775926][T21016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.776023][T21016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.776215][T21016] bridge_slave_1: entered allmulticast mode [ 1780.777796][T21016] bridge_slave_1: entered promiscuous mode [ 1780.874883][T21007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.912168][T21016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.914207][T21013] team0: Port device team_slave_0 added [ 1780.974415][T21016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.996947][T21013] team0: Port device team_slave_1 added [ 1781.001784][T21022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1781.008575][T20999] team0: Port device team_slave_0 added [ 1781.114564][T21022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.117774][T20999] team0: Port device team_slave_1 added [ 1781.119791][T21007] team0: Port device team_slave_0 added [ 1781.121932][T21016] team0: Port device team_slave_0 added [ 1781.129276][T21016] team0: Port device team_slave_1 added [ 1781.147287][T21007] team0: Port device team_slave_1 added [ 1781.194956][T21013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.194974][T21013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.194996][T21013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.197254][T21013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.197269][T21013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.197290][T21013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.321747][T20999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.321767][T20999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.321790][T20999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.352534][T21007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.352555][T21007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.352577][T21007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.353616][T21016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.353630][T21016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.353650][T21016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.362185][T21016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.362201][T21016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.362223][T21016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.363556][T20999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.363570][T20999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.363592][T20999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.374021][T21022] team0: Port device team_slave_0 added [ 1781.377198][T21022] team0: Port device team_slave_1 added [ 1781.395490][T21007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.395508][T21007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.395539][T21007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.634537][T21022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.634556][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.634578][T21022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.663556][T21013] hsr_slave_0: entered promiscuous mode [ 1781.664603][T21013] hsr_slave_1: entered promiscuous mode [ 1781.665483][T21013] debugfs: 'hsr0' already exists in 'hsr' [ 1781.665503][T21013] Cannot create hsr debugfs directory [ 1781.782349][T21022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.782367][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.782390][T21022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1782.057889][T20999] hsr_slave_0: entered promiscuous mode [ 1782.058936][T20999] hsr_slave_1: entered promiscuous mode [ 1782.059699][T20999] debugfs: 'hsr0' already exists in 'hsr' [ 1782.059717][T20999] Cannot create hsr debugfs directory [ 1782.146634][T21016] hsr_slave_0: entered promiscuous mode [ 1782.147664][T21016] hsr_slave_1: entered promiscuous mode [ 1782.148422][T21016] debugfs: 'hsr0' already exists in 'hsr' [ 1782.148451][T21016] Cannot create hsr debugfs directory [ 1782.358159][T21007] hsr_slave_0: entered promiscuous mode [ 1782.359255][T21007] hsr_slave_1: entered promiscuous mode [ 1782.360048][T21007] debugfs: 'hsr0' already exists in 'hsr' [ 1782.360068][T21007] Cannot create hsr debugfs directory [ 1782.393575][T21022] hsr_slave_0: entered promiscuous mode [ 1782.394588][T21022] hsr_slave_1: entered promiscuous mode [ 1782.395374][T21022] debugfs: 'hsr0' already exists in 'hsr' [ 1782.395393][T21022] Cannot create hsr debugfs directory [ 1785.075369][T10736] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.215028][T10736] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.323197][T10736] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.423735][T10736] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.526130][T20999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1785.535118][T20999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1785.553879][T20999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1785.637168][T20999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1786.170624][T10736] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.289524][T10736] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.439246][T10736] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.570671][T10736] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.690113][T20999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.800922][T20999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.861281][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.861408][T10961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.918428][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.918540][T10961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.125990][T10736] bridge_slave_1: left allmulticast mode [ 1787.126014][T10736] bridge_slave_1: left promiscuous mode [ 1787.126193][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.133925][T10736] bridge_slave_0: left allmulticast mode [ 1787.133948][T10736] bridge_slave_0: left promiscuous mode [ 1787.134135][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.162823][T10736] bridge_slave_1: left allmulticast mode [ 1787.162849][T10736] bridge_slave_1: left promiscuous mode [ 1787.163035][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.172506][T10736] bridge_slave_0: left allmulticast mode [ 1787.172530][T10736] bridge_slave_0: left promiscuous mode [ 1787.172708][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.184907][T10736] bridge_slave_1: left allmulticast mode [ 1787.184931][T10736] bridge_slave_1: left promiscuous mode [ 1787.185107][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.200221][T10736] bridge_slave_0: left allmulticast mode [ 1787.200245][T10736] bridge_slave_0: left promiscuous mode [ 1787.200419][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.496130][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.510179][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.520270][T10736] bond0 (unregistering): Released all slaves [ 1787.709872][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.719832][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.725255][T10736] bond0 (unregistering): Released all slaves [ 1787.930382][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.948153][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.954048][T10736] bond0 (unregistering): Released all slaves [ 1787.990568][T20999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1787.990592][T20999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1788.214297][T20999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.727400][T20999] veth0_vlan: entered promiscuous mode [ 1788.830288][T20999] veth1_vlan: entered promiscuous mode [ 1789.319779][T10736] hsr_slave_0: left promiscuous mode [ 1789.324267][T10736] hsr_slave_1: left promiscuous mode [ 1789.324959][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.330701][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.357475][T10736] hsr_slave_0: left promiscuous mode [ 1789.362024][T10736] hsr_slave_1: left promiscuous mode [ 1789.362731][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.362776][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.367869][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1789.367891][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.395355][T10736] hsr_slave_0: left promiscuous mode [ 1789.400160][T10736] hsr_slave_1: left promiscuous mode [ 1789.400910][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.405529][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1789.405551][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.430138][T10736] veth1_macvtap: left promiscuous mode [ 1789.430172][T10736] veth0_macvtap: left promiscuous mode [ 1789.430256][T10736] veth1_vlan: left promiscuous mode [ 1789.430311][T10736] veth0_vlan: left promiscuous mode [ 1789.448991][T10736] veth1_macvtap: left promiscuous mode [ 1789.449025][T10736] veth0_macvtap: left promiscuous mode [ 1789.449133][T10736] veth1_vlan: left promiscuous mode [ 1789.449189][T10736] veth0_vlan: left promiscuous mode [ 1789.813852][T10736] team0 (unregistering): Port device team_slave_1 removed [ 1789.835453][T10736] team0 (unregistering): Port device team_slave_0 removed [ 1790.191640][T10736] team0 (unregistering): Port device team_slave_1 removed [ 1790.211634][T10736] team0 (unregistering): Port device team_slave_0 removed [ 1790.582633][T10736] team0 (unregistering): Port device team_slave_1 removed [ 1790.601441][T10736] team0 (unregistering): Port device team_slave_0 removed [ 1790.804632][T20999] veth0_macvtap: entered promiscuous mode [ 1790.859343][T20999] veth1_macvtap: entered promiscuous mode [ 1791.242359][T21022] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1791.480363][T21022] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1791.489712][T21022] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1791.620393][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.620453][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.643042][T21022] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1791.795286][T21013] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1792.134314][T20999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1792.141910][T21013] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1792.160013][T21013] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1792.170173][T21013] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1792.299979][T20999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1792.609172][ T6558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.609229][ T6558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.609262][ T6558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.609291][ T6558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.715391][T21007] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1792.747863][T21007] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1792.898727][T21007] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1792.926943][T21007] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1793.072208][T20999] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht' [ 1793.135389][T10961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.135411][T10961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.181250][T20999] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht' [ 1793.219996][T21022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.291351][T21016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1793.347190][T21016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1793.353225][T21016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1793.364960][T21022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.370774][T21016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1793.371346][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.371364][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.448937][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.449037][T10735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.451577][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.451677][T10735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.578061][T21013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.611575][T10736] IPVS: stop unused estimator thread 0... [ 1793.754050][T21158] syzkaller1: entered promiscuous mode [ 1793.754074][T21158] syzkaller1: entered allmulticast mode [ 1793.760148][T21013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.786129][T21007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.934818][T10736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.934920][T10736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.988112][T10736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.988214][T10736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.004669][T21007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.030812][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.030914][T10735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.058499][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.058606][T10735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.499094][T21022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.510352][T21013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1794.672931][T21016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.730693][T21016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.794069][T21013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.798066][T10736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.798170][T10736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.892871][T10736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.892970][T10736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.938625][T21007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1795.030831][T21022] veth0_vlan: entered promiscuous mode [ 1795.074445][T21013] veth0_vlan: entered promiscuous mode [ 1795.083627][T21022] veth1_vlan: entered promiscuous mode [ 1795.097395][T21013] veth1_vlan: entered promiscuous mode [ 1795.214568][T21022] veth0_macvtap: entered promiscuous mode [ 1795.218185][T21007] veth0_vlan: entered promiscuous mode [ 1795.232105][T21016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1795.250304][T21022] veth1_macvtap: entered promiscuous mode [ 1795.260972][T21007] veth1_vlan: entered promiscuous mode [ 1795.272957][T21013] veth0_macvtap: entered promiscuous mode [ 1795.327644][T21013] veth1_macvtap: entered promiscuous mode [ 1795.337154][T21022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.390852][T21016] veth0_vlan: entered promiscuous mode [ 1795.394953][T21022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.429903][T21013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.434822][T21007] veth0_macvtap: entered promiscuous mode [ 1795.439351][T10736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.439402][T10736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.439433][T10736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.439462][T10736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.454921][T21013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.461365][T21016] veth1_vlan: entered promiscuous mode [ 1796.110106][T21007] veth1_macvtap: entered promiscuous mode [ 1796.118459][ T6558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.118520][ T6558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.118565][ T6558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.118594][ T6558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.367652][T21007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1796.434786][T21022] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 1796.531491][T21007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1796.608577][T10736] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.609389][T10736] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.609689][T10736] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.610364][T10736] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.670605][T17552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.670634][T17552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.681750][T21013] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 1796.717265][T21016] veth0_macvtap: entered promiscuous mode [ 1796.864068][T21016] veth1_macvtap: entered promiscuous mode [ 1796.900720][T21022] ieee80211 phy70: Selected rate control algorithm 'minstrel_ht' [ 1796.927528][T17554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.927550][T17554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.052377][T21016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.101305][T21016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1797.102939][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.102960][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.125349][T21013] ieee80211 phy71: Selected rate control algorithm 'minstrel_ht' [ 1797.158591][T10736] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.158662][T10736] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.158708][T10736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.158739][T10736] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.109070][T21007] ieee80211 phy72: Selected rate control algorithm 'minstrel_ht' [ 1799.228083][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.228106][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.411200][T21016] ieee80211 phy73: Selected rate control algorithm 'minstrel_ht' [ 1799.432764][T10961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.432787][T10961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.667404][T21007] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 1799.738758][T10961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.738782][T10961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.784297][T21016] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 1799.849388][T17554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.849411][T17554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.084265][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.084289][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.175421][T21195] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3309'. [ 1807.915781][T19292] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1808.068985][T19292] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1808.069014][T19292] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1808.069031][T19292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1808.069071][T19292] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1808.069103][T19292] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1808.071391][T19292] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1808.071416][T19292] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1808.071433][T19292] usb 4-1: Product: syz [ 1808.071446][T19292] usb 4-1: Manufacturer: syz [ 1808.104775][T19292] cdc_wdm 4-1:1.0: skipping garbage [ 1808.104798][T19292] cdc_wdm 4-1:1.0: skipping garbage [ 1808.124110][T19292] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1808.124133][T19292] cdc_wdm 4-1:1.0: Unknown control protocol [ 1811.903752][T21249] bridge0: port 3(hsr0) entered blocking state [ 1811.903869][T21249] bridge0: port 3(hsr0) entered disabled state [ 1811.904096][T21249] hsr0: entered allmulticast mode [ 1811.904134][T21249] hsr_slave_0: entered allmulticast mode [ 1811.904148][T21249] hsr_slave_1: entered allmulticast mode [ 1811.962486][T21249] hsr0: entered promiscuous mode [ 1811.963143][T21249] bridge0: port 3(hsr0) entered blocking state [ 1811.963271][T21249] bridge0: port 3(hsr0) entered forwarding state [ 1812.081794][T19292] usb 4-1: USB disconnect, device number 32 [ 1818.395761][T15637] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1818.546105][T15637] usb 4-1: Using ep0 maxpacket: 32 [ 1818.571177][T15637] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.585712][T15637] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1818.585742][T15637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.585759][T15637] usb 4-1: Product: syz [ 1818.585772][T15637] usb 4-1: Manufacturer: syz [ 1818.585784][T15637] usb 4-1: SerialNumber: syz [ 1818.588432][T15637] usb 4-1: config 0 descriptor?? [ 1818.665825][T15637] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1818.852660][T15362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1818.856025][T15362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1818.856983][T15362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1818.857981][T15362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1818.860519][T15362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1819.061211][T21271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1819.061235][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1819.105773][T19293] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1819.245946][T15637] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1819.246162][T15637] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 1819.521917][T15637] usb 4-1: USB disconnect, device number 33 [ 1819.556472][T19293] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.556519][T19293] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1819.556542][T19293] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1819.556565][T19293] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1819.556584][T19293] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1819.576075][T19293] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1819.576104][T19293] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1819.576122][T19293] usb 9-1: Product: syz [ 1819.576135][T19293] usb 9-1: Manufacturer: syz [ 1819.576148][T19293] usb 9-1: SerialNumber: syz [ 1819.592936][T19293] usb 9-1: config 0 descriptor?? [ 1820.917848][T15362] Bluetooth: hci1: command tx timeout [ 1821.032011][T19293] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1821.032037][T19293] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1822.987482][T15362] Bluetooth: hci1: command tx timeout [ 1823.003191][T19293] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1823.003215][T19293] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1823.003502][T19293] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1824.915240][T19292] usb 9-1: USB disconnect, device number 14 [ 1825.057258][T15362] Bluetooth: hci1: command tx timeout [ 1825.285782][T15637] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1825.345815][T16797] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1825.559920][T15637] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1825.561904][T15637] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1825.561930][T15637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.561948][T15637] usb 1-1: Product: syz [ 1825.561961][T15637] usb 1-1: Manufacturer: syz [ 1825.561974][T15637] usb 1-1: SerialNumber: syz [ 1825.595717][T16797] usb 4-1: device descriptor read/64, error -71 [ 1825.767018][T15637] cdc_ncm 1-1:1.0: skipping garbage [ 1825.867872][T16797] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1825.996023][T16797] usb 4-1: device descriptor read/64, error -71 [ 1826.670656][T16797] usb usb4-port1: attempt power cycle [ 1826.851729][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1826.854763][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1826.855793][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1826.857465][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1826.858162][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1827.055724][T16797] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1827.076495][T16797] usb 4-1: device descriptor read/8, error -71 [ 1827.139683][ T5826] Bluetooth: hci1: command tx timeout [ 1827.348919][T16797] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1827.368907][T16797] usb 4-1: device descriptor read/8, error -71 [ 1827.373966][T15637] cdc_ncm 1-1:1.0: bind() failure [ 1827.418443][T15637] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1827.419114][T15637] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1827.438720][T15637] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1827.472582][T15637] usb 1-1: USB disconnect, device number 55 [ 1827.478709][T16797] usb usb4-port1: unable to enumerate USB device [ 1827.641377][T21295] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3331'. [ 1828.718346][T21311] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1828.718468][T21310] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1828.902070][ T5826] Bluetooth: hci2: command tx timeout [ 1828.965894][T15637] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1829.083395][T21319] fuse: Unknown parameter '‡r' [ 1829.165885][T15637] usb 4-1: Using ep0 maxpacket: 32 [ 1829.220906][T21321] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3337'. [ 1829.221685][T15637] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1829.221713][T15637] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1829.221743][T15637] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1829.221763][T15637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.244002][T15637] usb 4-1: config 0 descriptor?? [ 1829.603014][T17554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.115982][T15637] corsair-cpro 0003:1B1C:0C10.0024: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1830.438199][T21332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3339'. [ 1830.670826][T21308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.671196][T21308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.678385][T15637] corsair-cpro 0003:1B1C:0C10.0024: probe with driver corsair-cpro failed with error -71 [ 1830.833076][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1830.867963][T16797] usb 4-1: USB disconnect, device number 38 [ 1830.895163][T17554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.975767][ T5826] Bluetooth: hci2: command tx timeout [ 1831.081045][T21269] chnl_net:caif_netlink_parms(): no params data found [ 1831.609280][T17554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.287356][T17554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.467817][T21269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.467957][T21269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.468104][T21269] bridge_slave_0: entered allmulticast mode [ 1832.469738][T21269] bridge_slave_0: entered promiscuous mode [ 1832.472229][T21269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.472375][T21269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.472508][T21269] bridge_slave_1: entered allmulticast mode [ 1832.474229][T21269] bridge_slave_1: entered promiscuous mode [ 1832.645973][T15637] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1832.714816][T21269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.728552][T21269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.775834][T15637] usb 1-1: device descriptor read/64, error -71 [ 1832.838227][T21269] team0: Port device team_slave_0 added [ 1832.841098][T21269] team0: Port device team_slave_1 added [ 1832.874222][T21382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1832.905938][T21290] chnl_net:caif_netlink_parms(): no params data found [ 1833.015698][T15637] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1833.055765][ T5826] Bluetooth: hci2: command tx timeout [ 1833.146418][T15637] usb 1-1: device descriptor read/64, error -71 [ 1833.192773][T21269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1833.192792][T21269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1833.192823][T21269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1833.256256][T15637] usb usb1-port1: attempt power cycle [ 1833.378923][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3352'. [ 1833.378946][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3352'. [ 1833.538596][ T30] audit: type=1326 audit(1773678647.592:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.8.3353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889f19c799 code=0x0 [ 1833.615672][T15637] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1833.660319][T15637] usb 1-1: device descriptor read/8, error -71 [ 1833.678231][T21269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1833.678251][T21269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1833.678273][T21269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1833.885130][T21269] hsr_slave_0: entered promiscuous mode [ 1833.887697][T21269] hsr_slave_1: entered promiscuous mode [ 1833.888477][T21269] debugfs: 'hsr0' already exists in 'hsr' [ 1833.888498][T21269] Cannot create hsr debugfs directory [ 1833.896371][T15637] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1833.918782][T15637] usb 1-1: device descriptor read/8, error -71 [ 1833.927960][T17554] bridge_slave_1: left allmulticast mode [ 1833.927984][T17554] bridge_slave_1: left promiscuous mode [ 1833.928170][T17554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.994904][T17554] bridge_slave_0: left allmulticast mode [ 1833.994929][T17554] bridge_slave_0: left promiscuous mode [ 1833.995154][T17554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.028424][T15637] usb usb1-port1: unable to enumerate USB device [ 1834.151923][T21410] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3354'. [ 1835.140317][ T5826] Bluetooth: hci2: command tx timeout [ 1835.159004][T17554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1835.168750][T17554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.174329][T17554] bond0 (unregistering): Released all slaves [ 1835.632365][T21290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.632505][T21290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.632729][T21290] bridge_slave_0: entered allmulticast mode [ 1835.640091][T21290] bridge_slave_0: entered promiscuous mode [ 1835.787735][T21290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.787875][T21290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.788099][T21290] bridge_slave_1: entered allmulticast mode [ 1835.791774][T21290] bridge_slave_1: entered promiscuous mode [ 1836.067427][T21185] IPVS: starting estimator thread 0... [ 1836.150679][T17554] hsr_slave_0: left promiscuous mode [ 1836.153570][T17554] hsr_slave_1: left promiscuous mode [ 1836.154028][T17554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1836.154040][T17554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1836.154617][T17554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1836.154629][T17554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1836.163651][T17554] veth1_macvtap: left promiscuous mode [ 1836.163704][T17554] veth0_macvtap: left promiscuous mode [ 1836.163786][T17554] veth1_vlan: left promiscuous mode [ 1836.163840][T17554] veth0_vlan: left promiscuous mode [ 1836.166090][T21438] IPVS: using max 31 ests per chain, 74400 per kthread [ 1837.272447][T17554] team0 (unregistering): Port device team_slave_1 removed [ 1837.314106][T17554] team0 (unregistering): Port device team_slave_0 removed [ 1838.122241][T21290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1838.126146][T21290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1838.328496][T21290] team0: Port device team_slave_0 added [ 1838.681501][T21290] team0: Port device team_slave_1 added [ 1839.093099][T21290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1839.093117][T21290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1839.093139][T21290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1839.160901][T21290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1839.160921][T21290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1839.160943][T21290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1839.547227][T21290] hsr_slave_0: entered promiscuous mode [ 1839.556896][T21290] hsr_slave_1: entered promiscuous mode [ 1839.560202][T21290] debugfs: 'hsr0' already exists in 'hsr' [ 1839.560235][T21290] Cannot create hsr debugfs directory [ 1839.798084][T17554] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.997243][T17554] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.154068][T17554] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.417821][T21462] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3359'. [ 1840.553879][T17554] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.762525][T21269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1840.799915][T21269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1840.844935][T21269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1840.875896][T15637] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1841.015050][T21290] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.028244][T15637] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.028270][T15637] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1841.031258][T15637] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1841.031284][T15637] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1841.031301][T15637] usb 9-1: SerialNumber: syz [ 1841.126355][T21269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1841.464748][T21290] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.668167][T15637] usb 9-1: 0:2 : does not exist [ 1841.668253][T15637] usb 9-1: unit 5: unexpected type 0x09 [ 1841.790022][T15637] usb 9-1: USB disconnect, device number 15 [ 1841.842796][T21227] udevd[21227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1841.970340][T21290] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.297320][T21290] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.311725][T17554] hsr0: left allmulticast mode [ 1842.311747][T17554] hsr_slave_0: left allmulticast mode [ 1842.311761][T17554] hsr_slave_1: left allmulticast mode [ 1842.311830][T17554] hsr0: left promiscuous mode [ 1842.312023][T17554] bridge0: port 3(hsr0) entered disabled state [ 1842.338035][T17554] bridge_slave_1: left allmulticast mode [ 1842.338059][T17554] bridge_slave_1: left promiscuous mode [ 1842.338261][T17554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.381565][T17554] bridge_slave_0: left allmulticast mode [ 1842.381590][T17554] bridge_slave_0: left promiscuous mode [ 1842.381768][T17554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.392507][T17554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1843.394278][T17554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1843.395290][T17554] bond0 (unregistering): Released all slaves [ 1847.175696][T19292] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1847.204948][T17554] hsr_slave_0: left promiscuous mode [ 1847.351995][T17554] hsr_slave_1: left promiscuous mode [ 1847.353052][T17554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1847.353083][T17554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.357487][T17554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1847.357507][T17554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1847.370594][T17554] veth1_macvtap: left promiscuous mode [ 1847.370627][T17554] veth0_macvtap: left promiscuous mode [ 1847.370743][T17554] veth1_vlan: left promiscuous mode [ 1847.370834][T17554] veth0_vlan: left promiscuous mode [ 1847.378286][T19292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.378314][T19292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.378347][T19292] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1847.378366][T19292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.380845][T19292] usb 9-1: config 0 descriptor?? [ 1847.727723][T21537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1847.731963][T21537] trusted_key: encrypted_key: insufficient parameters specified [ 1847.799676][T19292] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 1847.799792][T19292] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 1847.803246][T19292] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0025/input/input51 [ 1847.883369][T19292] cm6533_jd 0003:0D8C:0022.0025: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 1847.946747][T21541] loop2: detected capacity change from 0 to 7 [ 1847.949286][T21541] Dev loop2: unable to read RDB block 7 [ 1847.949329][T21541] loop2: unable to read partition table [ 1847.949528][T21541] loop2: partition table beyond EOD, truncated [ 1847.949559][T21541] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1848.133828][T16889] usb 9-1: USB disconnect, device number 16 [ 1848.670823][T17554] team0 (unregistering): Port device team_slave_1 removed [ 1848.716409][T17554] team0 (unregistering): Port device team_slave_0 removed [ 1849.562220][T21551] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 1849.578114][T21269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1849.672942][T21290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1849.721654][T21290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1849.915694][T16883] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1850.065735][T16883] usb 9-1: Using ep0 maxpacket: 16 [ 1850.068117][T16883] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.068141][T16883] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1850.070932][T15362] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1850.073447][T15362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1850.076872][T16883] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1850.076898][T16883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.076915][T16883] usb 9-1: Product: syz [ 1850.076928][T16883] usb 9-1: Manufacturer: syz [ 1850.076941][T16883] usb 9-1: SerialNumber: syz [ 1850.080812][T15362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1850.086122][T15362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1850.086795][T15362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1850.312597][T16883] usb 9-1: 0:2 : does not exist [ 1850.345817][T21290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1850.364299][T16883] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1850.480410][T21269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.527133][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.527242][T10737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.585391][T21290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1850.616096][T16883] usb 9-1: USB disconnect, device number 17 [ 1850.907382][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.907481][T10737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.973535][T21227] udevd[21227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1851.132795][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1851.282597][T21552] hsr_slave_0: left promiscuous mode [ 1851.288904][T21552] hsr_slave_1: left promiscuous mode [ 1852.255939][T15362] Bluetooth: hci3: command tx timeout [ 1853.061590][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.061645][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.086195][T21589] loop2: detected capacity change from 0 to 7 [ 1854.093129][T21589] Dev loop2: unable to read RDB block 7 [ 1854.093173][T21589] loop2: unable to read partition table [ 1854.093354][T21589] loop2: partition table beyond EOD, truncated [ 1854.093388][T21589] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1854.138023][T21269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.358858][T15362] Bluetooth: hci3: command tx timeout [ 1854.473488][T21290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.660946][T21269] veth0_vlan: entered promiscuous mode [ 1854.690223][T21290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.760455][T21563] chnl_net:caif_netlink_parms(): no params data found [ 1854.858552][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.858681][T10737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.954641][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.954743][T10737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.173815][T21269] veth1_vlan: entered promiscuous mode [ 1855.194179][T21605] netlink: 'syz.8.3379': attribute type 1 has an invalid length. [ 1856.000756][T21612] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1856.027281][T21612] bond1: (slave lo): Enslaving as an active interface with an up link [ 1856.029262][T21612] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1856.187276][T21563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.187433][T21563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.187595][T21563] bridge_slave_0: entered allmulticast mode [ 1856.201055][T21563] bridge_slave_0: entered promiscuous mode [ 1856.203793][T21563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.203897][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.204063][T21563] bridge_slave_1: entered allmulticast mode [ 1856.286272][T21563] bridge_slave_1: entered promiscuous mode [ 1856.424769][T15362] Bluetooth: hci3: command tx timeout [ 1856.494751][T21269] veth0_macvtap: entered promiscuous mode [ 1856.503618][T21290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1856.512805][T21269] veth1_macvtap: entered promiscuous mode [ 1856.586081][T21563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1856.697572][T21563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.044284][T21290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.053737][T21269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1857.753393][T21563] team0: Port device team_slave_0 added [ 1857.763978][T21563] team0: Port device team_slave_1 added [ 1857.771364][T21269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1857.973943][T17554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.974001][T17554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.974034][T17554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.974064][T17554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.069660][T21563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1858.069679][T21563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.069702][T21563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1858.071482][T21563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1858.071497][T21563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.071518][T21563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1858.348214][T21269] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 1858.415226][T21563] hsr_slave_0: entered promiscuous mode [ 1858.436867][T21563] hsr_slave_1: entered promiscuous mode [ 1858.445850][T21563] debugfs: 'hsr0' already exists in 'hsr' [ 1858.445874][T21563] Cannot create hsr debugfs directory [ 1859.046386][T15362] Bluetooth: hci3: command tx timeout [ 1859.207742][T21290] veth0_vlan: entered promiscuous mode [ 1879.870287][T21290] veth1_vlan: entered promiscuous mode [ 1880.739842][ T5826] Bluetooth: hci7: command 0x0406 tx timeout [ 1880.827154][T17554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.827177][T17554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.817545][T21290] veth0_macvtap: entered promiscuous mode [ 1882.000892][T21290] veth1_macvtap: entered promiscuous mode [ 1882.013476][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1882.016900][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1882.017888][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1882.018721][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1882.019351][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1882.584432][T15362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1882.613953][T15362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1882.679071][T15362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1882.679970][T15362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1882.680658][T15362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1882.984427][T21290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1883.003724][T21290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1883.019946][T16581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1883.022828][T16581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1883.023704][T16581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1883.024560][T16581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1883.025110][T16581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1884.658363][T16581] Bluetooth: hci4: command tx timeout [ 1884.671852][T17554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.058726][T16581] Bluetooth: hci5: command tx timeout [ 1885.159818][T16581] Bluetooth: hci6: command tx timeout [ 1885.859219][T16581] Bluetooth: hci8: command 0x0406 tx timeout [ 1886.736053][T16581] Bluetooth: hci4: command tx timeout [ 1887.135987][T16581] Bluetooth: hci5: command tx timeout [ 1887.215715][T16581] Bluetooth: hci6: command tx timeout [ 1888.815745][T16581] Bluetooth: hci4: command tx timeout [ 1889.147172][T16581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1889.150898][T16581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1889.151891][T16581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1889.152688][T16581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1889.153315][T16581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1889.216464][T16581] Bluetooth: hci5: command tx timeout [ 1889.287762][T17552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.287841][T17552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.287874][T17552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.296307][T16581] Bluetooth: hci6: command tx timeout [ 1889.616777][T10736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.981598][T10736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.209169][T10736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.658129][T10736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.895812][T16581] Bluetooth: hci4: command tx timeout [ 1891.216486][T16581] Bluetooth: hci1: command tx timeout [ 1891.291951][T21647] chnl_net:caif_netlink_parms(): no params data found [ 1891.315121][T16581] Bluetooth: hci5: command tx timeout [ 1891.381743][T16581] Bluetooth: hci6: command tx timeout [ 1891.533839][T21651] chnl_net:caif_netlink_parms(): no params data found [ 1891.748100][T21563] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1891.920319][T21563] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1891.924744][T21563] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1892.010783][T21563] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1892.024524][T10736] bridge_slave_1: left allmulticast mode [ 1892.024551][T10736] bridge_slave_1: left promiscuous mode [ 1892.024741][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.088286][T10736] bridge_slave_0: left allmulticast mode [ 1892.088311][T10736] bridge_slave_0: left promiscuous mode [ 1892.088534][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.470527][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1892.479153][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1892.485191][T10736] bond0 (unregistering): Released all slaves [ 1892.505067][T21651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.505165][T21651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.505319][T21651] bridge_slave_0: entered allmulticast mode [ 1892.507698][T21651] bridge_slave_0: entered promiscuous mode [ 1892.509592][T21656] chnl_net:caif_netlink_parms(): no params data found [ 1892.757829][T21647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.757928][T21647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.758096][T21647] bridge_slave_0: entered allmulticast mode [ 1892.779276][T21647] bridge_slave_0: entered promiscuous mode [ 1892.844129][T21651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.844225][T21651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.844404][T21651] bridge_slave_1: entered allmulticast mode [ 1892.855842][T21651] bridge_slave_1: entered promiscuous mode [ 1892.947775][T21647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.947900][T21647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.948117][T21647] bridge_slave_1: entered allmulticast mode [ 1892.950825][T21647] bridge_slave_1: entered promiscuous mode [ 1893.042367][T21647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.042695][T21664] chnl_net:caif_netlink_parms(): no params data found [ 1893.212105][T21651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.250400][T21647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.277769][T21651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.295770][T16581] Bluetooth: hci1: command tx timeout [ 1893.542109][T21647] team0: Port device team_slave_0 added [ 1893.626761][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1893.626786][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1893.634511][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1893.634535][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1893.659071][T10736] veth1_macvtap: left promiscuous mode [ 1893.659105][T10736] veth0_macvtap: left promiscuous mode [ 1893.659187][T10736] veth1_vlan: left promiscuous mode [ 1893.659266][T10736] veth0_vlan: left promiscuous mode [ 1894.584732][T10736] team0 (unregistering): Port device team_slave_1 removed [ 1894.608775][T10736] team0 (unregistering): Port device team_slave_0 removed [ 1894.831329][T21651] team0: Port device team_slave_0 added [ 1894.834196][T21651] team0: Port device team_slave_1 added [ 1894.913588][T21647] team0: Port device team_slave_1 added [ 1894.973891][T21656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1894.973992][T21656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.974163][T21656] bridge_slave_0: entered allmulticast mode [ 1894.978361][T21656] bridge_slave_0: entered promiscuous mode [ 1895.043164][T21656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.043262][T21656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.043416][T21656] bridge_slave_1: entered allmulticast mode [ 1895.045069][T21656] bridge_slave_1: entered promiscuous mode [ 1895.080616][T21651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1895.080635][T21651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.080657][T21651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1895.115255][T21647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1895.115274][T21647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.115296][T21647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1895.118159][T21647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1895.118174][T21647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.118195][T21647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1895.160569][T21651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1895.160589][T21651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.160612][T21651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1895.220773][T21656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1895.226578][T21664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.226713][T21664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.226862][T21664] bridge_slave_0: entered allmulticast mode [ 1895.229823][T21664] bridge_slave_0: entered promiscuous mode [ 1895.378013][T16581] Bluetooth: hci1: command tx timeout [ 1895.509650][T21656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1895.510405][T21664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.510569][T21664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.510719][T21664] bridge_slave_1: entered allmulticast mode [ 1895.512529][T21664] bridge_slave_1: entered promiscuous mode [ 1895.529685][T21563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.897345][T21651] hsr_slave_0: entered promiscuous mode [ 1895.898462][T21651] hsr_slave_1: entered promiscuous mode [ 1895.899239][T21651] debugfs: 'hsr0' already exists in 'hsr' [ 1895.899258][T21651] Cannot create hsr debugfs directory [ 1895.922788][T21647] hsr_slave_0: entered promiscuous mode [ 1895.934882][T21647] hsr_slave_1: entered promiscuous mode [ 1895.940514][T21647] debugfs: 'hsr0' already exists in 'hsr' [ 1895.940538][T21647] Cannot create hsr debugfs directory [ 1896.108561][T21563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1896.112793][T10736] IPVS: stop unused estimator thread 0... [ 1896.277423][T21656] team0: Port device team_slave_0 added [ 1896.460840][T21664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.475088][T21656] team0: Port device team_slave_1 added [ 1896.491056][T17554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.491165][T17554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.498113][T21664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.575613][T17554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.575712][T17554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.698228][T21656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1896.698247][T21656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.698269][T21656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1896.700762][T21656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1896.700778][T21656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.700800][T21656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1896.741436][T21664] team0: Port device team_slave_0 added [ 1896.745161][T21664] team0: Port device team_slave_1 added [ 1896.994158][T10736] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.154109][T10736] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.209846][T21656] hsr_slave_0: entered promiscuous mode [ 1897.213327][T21656] hsr_slave_1: entered promiscuous mode [ 1897.214056][T21656] debugfs: 'hsr0' already exists in 'hsr' [ 1897.214075][T21656] Cannot create hsr debugfs directory [ 1897.227924][T21664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1897.227942][T21664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1897.227963][T21664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1897.229785][T21664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1897.229800][T21664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1897.229821][T21664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1897.327460][T10736] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.459246][T16581] Bluetooth: hci1: command tx timeout [ 1897.559982][T10736] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.673831][T21664] hsr_slave_0: entered promiscuous mode [ 1897.674955][T21664] hsr_slave_1: entered promiscuous mode [ 1897.679212][T21664] debugfs: 'hsr0' already exists in 'hsr' [ 1897.679234][T21664] Cannot create hsr debugfs directory [ 1898.867880][T21563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1899.048494][T10736] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.612040][T10736] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.848992][T21563] veth0_vlan: entered promiscuous mode [ 1899.938408][T10736] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.958952][T21563] veth1_vlan: entered promiscuous mode [ 1900.117616][T10736] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.164471][T21563] veth0_macvtap: entered promiscuous mode [ 1900.229446][T21563] veth1_macvtap: entered promiscuous mode [ 1900.281465][T21563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1900.310404][T21563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1900.516664][ T6558] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.516719][ T6558] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.516751][ T6558] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.516781][ T6558] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.731027][T21656] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.841866][T21656] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.891410][T21563] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 1900.982263][T21656] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.021031][T17552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.021053][T17552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.035913][T21563] ieee80211 phy78: Selected rate control algorithm 'minstrel_ht' [ 1901.070131][T17552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.070153][T17552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.265280][T21656] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.495650][T16887] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1901.673317][T16887] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.697882][T16887] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1901.697911][T16887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.697929][T16887] usb 10-1: Product: syz [ 1901.697941][T16887] usb 10-1: Manufacturer: syz [ 1901.697954][T16887] usb 10-1: SerialNumber: syz [ 1901.705083][T16887] usb 10-1: config 0 descriptor?? [ 1901.712712][T10736] bridge_slave_1: left allmulticast mode [ 1901.712736][T10736] bridge_slave_1: left promiscuous mode [ 1901.712963][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.715049][T16887] usb 10-1: ucan: probing device on interface #0 [ 1901.715073][T16887] usb 10-1: ucan: invalid EP count (0) [ 1901.715114][T16887] usb 10-1: ucan: probe failed; try to update the device firmware [ 1901.761017][T10736] bridge_slave_0: left allmulticast mode [ 1901.761044][T10736] bridge_slave_0: left promiscuous mode [ 1901.761250][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.787242][T10736] bridge_slave_1: left allmulticast mode [ 1901.787266][T10736] bridge_slave_1: left promiscuous mode [ 1901.787440][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.800801][T10736] bridge_slave_0: left allmulticast mode [ 1901.800825][T10736] bridge_slave_0: left promiscuous mode [ 1901.801054][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.815364][T10736] bridge_slave_1: left allmulticast mode [ 1901.815390][T10736] bridge_slave_1: left promiscuous mode [ 1901.817719][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.826666][T10736] bridge_slave_0: left allmulticast mode [ 1901.826688][T10736] bridge_slave_0: left promiscuous mode [ 1901.826900][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.921166][T19292] usb 10-1: USB disconnect, device number 8 [ 1902.467668][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1902.479611][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1902.486164][T10736] bond0 (unregistering): Released all slaves [ 1904.023881][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1904.038477][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1904.044057][T10736] bond0 (unregistering): Released all slaves [ 1904.445218][T10736] bond1 (unregistering): (slave lo): Releasing backup interface [ 1904.471200][T10736] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1904.472631][T10736] bond1 (unregistering): Released all slaves [ 1904.540060][T21821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.464141][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1905.478377][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1905.488015][T10736] bond0 (unregistering): Released all slaves [ 1906.153350][T21656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1906.248303][T21656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1906.317854][T21656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1906.322952][T21656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1906.425269][T10736] hsr_slave_0: left promiscuous mode [ 1906.434592][T10736] hsr_slave_1: left promiscuous mode [ 1906.435470][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1906.435492][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1906.442680][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1906.442701][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1906.586646][T21827] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3387'. [ 1906.609777][T10736] hsr_slave_0: left promiscuous mode [ 1906.663889][T10736] hsr_slave_1: left promiscuous mode [ 1906.666739][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1906.666761][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1906.703323][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1906.703347][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1906.728206][T10736] hsr_slave_0: left promiscuous mode [ 1906.732701][T10736] hsr_slave_1: left promiscuous mode [ 1906.733937][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1906.733958][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1906.738776][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1906.738798][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1906.766743][T10736] veth1_macvtap: left promiscuous mode [ 1906.766776][T10736] veth0_macvtap: left promiscuous mode [ 1906.766885][T10736] veth1_vlan: left promiscuous mode [ 1906.766942][T10736] veth0_vlan: left promiscuous mode [ 1906.769968][T10736] veth1_macvtap: left promiscuous mode [ 1906.769996][T10736] veth0_macvtap: left promiscuous mode [ 1906.770078][T10736] veth1_vlan: left promiscuous mode [ 1906.770155][T10736] veth0_vlan: left promiscuous mode [ 1906.788528][T10736] veth1_macvtap: left promiscuous mode [ 1906.788562][T10736] veth0_macvtap: left promiscuous mode [ 1906.788647][T10736] veth1_vlan: left promiscuous mode [ 1906.788702][T10736] veth0_vlan: left promiscuous mode [ 1907.351577][T10736] team0 (unregistering): Port device team_slave_1 removed [ 1907.378743][T10736] team0 (unregistering): Port device team_slave_0 removed [ 1907.807544][T10736] team0 (unregistering): Port device team_slave_1 removed [ 1907.827722][T10736] team0 (unregistering): Port device team_slave_0 removed [ 1908.309603][T10736] team0 (unregistering): Port device team_slave_1 removed [ 1908.321629][T10736] team0 (unregistering): Port device team_slave_0 removed [ 1908.621449][T21647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1908.643128][T21647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1908.765263][T21647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1908.844144][T21647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1910.041316][T21656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.108924][T21656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1910.201366][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.201468][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.203254][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.203356][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.223627][T21647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.593600][T21651] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1910.631102][T21656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1910.631128][T21656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1910.642861][T21651] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1910.716735][T21647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1910.717012][T21651] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1910.753095][T21651] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1910.846130][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.846231][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.848152][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.848250][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.914078][T21656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.301633][T21656] veth0_vlan: entered promiscuous mode [ 1911.375437][T21656] veth1_vlan: entered promiscuous mode [ 1911.423792][T21664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1911.496506][T21664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1911.516305][T21664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1911.551078][T21664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1911.748930][T21656] veth0_macvtap: entered promiscuous mode [ 1911.755616][T21656] veth1_macvtap: entered promiscuous mode [ 1911.800080][T21651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1911.854024][T21647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.980588][T21656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1912.007883][T21656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1912.132840][T21651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.138179][T17554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.138256][T17554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.138306][T17554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.138350][T17554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.170897][T21639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.171008][T21639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.200128][T21647] veth0_vlan: entered promiscuous mode [ 1912.230277][T21647] veth1_vlan: entered promiscuous mode [ 1912.248909][T21639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.249055][T21639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.445406][T21656] ieee80211 phy79: Selected rate control algorithm 'minstrel_ht' [ 1912.569944][T20246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.569967][T20246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.572813][T21656] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 1912.631209][T21647] veth0_macvtap: entered promiscuous mode [ 1912.674786][T21664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.677246][T21647] veth1_macvtap: entered promiscuous mode [ 1912.704187][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.704208][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.779103][T21664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.847482][T21647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1912.849333][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.849430][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.948097][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.948209][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.962940][T21647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.031097][T10736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.031162][T10736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.031194][T10736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.031225][T10736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.065328][T21651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.374802][T21647] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 1913.498294][ T6558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.498317][ T6558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.558572][T21647] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 1913.575688][T21651] veth0_vlan: entered promiscuous mode [ 1913.679503][T21651] veth1_vlan: entered promiscuous mode [ 1913.687778][T21664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.725997][T17554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.726019][T17554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.902456][T21651] veth0_macvtap: entered promiscuous mode [ 1913.960484][T21651] veth1_macvtap: entered promiscuous mode [ 1913.965771][T21664] veth0_vlan: entered promiscuous mode [ 1914.040373][T21664] veth1_vlan: entered promiscuous mode [ 1914.057324][T21651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1914.078101][T21651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1914.104529][T17554] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.104572][T17554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.104602][T17554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.104630][T17554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.229947][T21664] veth0_macvtap: entered promiscuous mode [ 1914.345897][T21664] veth1_macvtap: entered promiscuous mode [ 1914.418021][T21651] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 1914.503880][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.503936][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.509123][T21664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1914.533130][T21664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1914.561599][T17554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.561621][T17554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.626361][T21651] ieee80211 phy84: Selected rate control algorithm 'minstrel_ht' [ 1914.637830][T17554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.637887][T17554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.637918][T17554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.637948][T17554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.666431][T16797] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1914.782359][T17554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.782381][T17554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.826990][T16797] usb 2-1: Using ep0 maxpacket: 16 [ 1914.855686][T16797] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 1914.855740][T16797] usb 2-1: config 1 has no interface number 0 [ 1914.855767][T16797] usb 2-1: config 1 interface 228 has no altsetting 0 [ 1914.863905][T16797] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 1914.863934][T16797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.863952][T16797] usb 2-1: Product: syz [ 1914.863965][T16797] usb 2-1: Manufacturer: syz [ 1914.863978][T16797] usb 2-1: SerialNumber: syz [ 1914.889860][T21664] ieee80211 phy85: Selected rate control algorithm 'minstrel_ht' [ 1915.036005][T20246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1915.036028][T20246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1915.047972][T21664] ieee80211 phy86: Selected rate control algorithm 'minstrel_ht' [ 1915.215129][T10736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1915.215172][T10736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1915.591268][T21901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3326'. [ 1917.138791][T16797] usb 2-1: USB disconnect, device number 7 [ 1972.897622][T15362] Bluetooth: hci3: command 0x0406 tx timeout [ 1975.946975][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.947030][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1989.376343][ T31] INFO: task syz.3.3354:21407 blocked for more than 143 seconds. [ 1989.376371][ T31] Tainted: G L syzkaller #0 [ 1989.376382][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1989.376392][ T31] task:syz.3.3354 state:D stack:25704 pid:21407 tgid:21406 ppid:21016 task_flags:0x400140 flags:0x00080002 [ 1989.376440][ T31] Call Trace: [ 1989.376448][ T31] [ 1989.376462][ T31] __schedule+0x15dd/0x52d0 [ 1989.376509][ T31] ? __pfx___schedule+0x10/0x10 [ 1989.376535][ T31] ? schedule+0x90/0x360 [ 1989.376556][ T31] schedule+0x164/0x360 [ 1989.376575][ T31] schedule_timeout+0xc3/0x2c0 [ 1989.376602][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1989.376635][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1989.376667][ T31] __down_common+0x321/0x730 [ 1989.376694][ T31] ? __pfx___down_common+0x10/0x10 [ 1989.376724][ T31] down+0x80/0xd0 [ 1989.376745][ T31] console_lock+0x58/0x90 [ 1989.376761][ T31] vcs_open+0x61/0xd0 [ 1989.376781][ T31] chrdev_open+0x4cd/0x5e0 [ 1989.376804][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1989.376823][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1989.376848][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1989.376866][ T31] do_dentry_open+0x785/0x14e0 [ 1989.376901][ T31] vfs_open+0x3b/0x340 [ 1989.376922][ T31] ? path_openat+0x2df0/0x3860 [ 1989.376943][ T31] path_openat+0x2e08/0x3860 [ 1989.376975][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1989.376997][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1989.377028][ T31] ? __pfx_path_openat+0x10/0x10 [ 1989.377045][ T31] ? __x64_sys_openat+0x138/0x170 [ 1989.377066][ T31] ? do_syscall_64+0x14d/0xf80 [ 1989.377084][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.377109][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1989.377137][ T31] do_file_open+0x23e/0x4a0 [ 1989.377160][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1989.377198][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1989.377221][ T31] ? alloc_fd+0x64b/0x6c0 [ 1989.377253][ T31] do_sys_openat2+0x113/0x200 [ 1989.377279][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1989.377302][ T31] ? exc_page_fault+0x6a/0xc0 [ 1989.377324][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1989.377349][ T31] __x64_sys_openat+0x138/0x170 [ 1989.377377][ T31] do_syscall_64+0x14d/0xf80 [ 1989.377394][ T31] ? trace_irq_disable+0x3b/0x150 [ 1989.377417][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.377434][ T31] ? clear_bhb_loop+0x40/0x90 [ 1989.377456][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.377474][ T31] RIP: 0033:0x7f80dbf5cfce [ 1989.377491][ T31] RSP: 002b:00007f80dce20b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1989.377511][ T31] RAX: ffffffffffffffda RBX: 00007f80dce216c0 RCX: 00007f80dbf5cfce [ 1989.377524][ T31] RDX: 0000000000121800 RSI: 00007f80dce20c00 RDI: ffffffffffffff9c [ 1989.377536][ T31] RBP: 00007f80dce20c00 R08: 0000000000000000 R09: 0000000000000000 [ 1989.377548][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1989.377560][ T31] R13: 00007f80dc216038 R14: 00007f80dc215fa0 R15: 00007f80dc33fa48 [ 1989.377588][ T31] [ 1989.377659][ T31] [ 1989.377659][ T31] Showing all locks held in the system: [ 1989.377672][ T31] 1 lock held by khungtaskd/31: [ 1989.377683][ T31] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1989.377757][ T31] 2 locks held by getty/5580: [ 1989.377767][ T31] #0: ffff8880368ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1989.377817][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1989.377866][ T31] 7 locks held by kworker/u8:10/6558: [ 1989.377880][ T31] 2 locks held by kworker/0:0/15637: [ 1989.377895][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1989.377943][ T31] #1: ffffc9000c207c40 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1989.377991][ T31] 6 locks held by kworker/u8:21/17553: [ 1989.378001][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1989.378049][ T31] #1: ffffc90004447c40 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1989.378096][ T31] #2: ffff88813fe720b8 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x6e0 [ 1989.378139][ T31] #3: ffff888059b440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1989.378186][ T31] #4: ffff888059b442e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_receive_buf_common+0x84/0x1300 [ 1989.378234][ T31] #5: ffffc9000447d380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_receive_char+0x658/0xc50 [ 1989.378284][ T31] 6 locks held by syz.5.3283/20868: [ 1989.378305][ T31] [ 1989.378311][ T31] ============================================= [ 1989.378311][ T31] [ 1989.378327][ T31] NMI backtrace for cpu 0 [ 1989.378340][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1989.378360][ T31] Tainted: [L]=SOFTLOCKUP [ 1989.378366][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1989.378375][ T31] Call Trace: [ 1989.378382][ T31] [ 1989.378389][ T31] dump_stack_lvl+0xe8/0x150 [ 1989.378411][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1989.378432][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1989.378453][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1989.378476][ T31] sys_info+0x135/0x170 [ 1989.378494][ T31] watchdog+0xfd9/0x1030 [ 1989.378520][ T31] ? watchdog+0x21a/0x1030 [ 1989.378547][ T31] kthread+0x388/0x470 [ 1989.378563][ T31] ? __pfx_watchdog+0x10/0x10 [ 1989.378582][ T31] ? __pfx_kthread+0x10/0x10 [ 1989.378598][ T31] ret_from_fork+0x51e/0xb90 [ 1989.378620][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1989.378644][ T31] ? __switch_to+0xc7d/0x1450 [ 1989.378666][ T31] ? __pfx_kthread+0x10/0x10 [ 1989.378682][ T31] ret_from_fork_asm+0x1a/0x30 [ 1989.378715][ T31] [ 1989.378722][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1989.378750][ C1] NMI backtrace for cpu 1 [ 1989.378763][ C1] CPU: 1 UID: 0 PID: 6558 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1989.378784][ C1] Tainted: [L]=SOFTLOCKUP [ 1989.378790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1989.378801][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1989.378824][ C1] RIP: 0010:__lock_acquire+0x482/0x2cf0 [ 1989.378846][ C1] Code: 41 8d 5c 24 01 49 ff cc 89 d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce 78 0b 00 00 <31> c1 ff cb 49 ff cc f7 c1 00 60 00 00 74 cf eb 17 48 c7 c7 b0 c8 [ 1989.378860][ C1] RSP: 0018:ffffc90000a07d58 EFLAGS: 00000087 [ 1989.378873][ C1] RAX: 0000000000022007 RBX: 0000000000000007 RCX: 0000000000022007 [ 1989.378883][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 1989.378893][ C1] RBP: ffff888026fe8c48 R08: ffffffff81767e95 R09: ffffffff8e75e520 [ 1989.378905][ C1] R10: ffffc90000a08038 R11: ffffffff81b0c240 R12: 0000000000000005 [ 1989.378915][ C1] R13: 0000000000000000 R14: ffff888026fe8000 R15: 0000000000000005 [ 1989.378926][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 1989.378938][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1989.378949][ C1] CR2: 00007f4c63894286 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1989.378963][ C1] Call Trace: [ 1989.378969][ C1] [ 1989.378981][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1989.379005][ C1] lock_acquire+0xf0/0x2e0 [ 1989.379023][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1989.379045][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1989.379066][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 1989.379083][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1989.379104][ C1] unwind_next_frame+0xc2/0x23c0 [ 1989.379132][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1989.379162][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1989.379183][ C1] ? kmem_cache_free+0x187/0x630 [ 1989.379200][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 1989.379218][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1989.379234][ C1] arch_stack_walk+0x11b/0x150 [ 1989.379258][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 1989.379276][ C1] stack_trace_save+0xa9/0x100 [ 1989.379291][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1989.379305][ C1] ? kmem_cache_free+0x187/0x630 [ 1989.379321][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 1989.379338][ C1] ? nft_do_chain+0x45e/0x1990 [ 1989.379354][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 1989.379369][ C1] ? nf_hook_slow+0xc5/0x220 [ 1989.379383][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1989.379401][ C1] ? NF_HOOK+0x336/0x3c0 [ 1989.379419][ C1] ? process_backlog+0xaa3/0x1950 [ 1989.379441][ C1] ? __napi_poll+0xae/0x340 [ 1989.379462][ C1] kasan_save_track+0x3e/0x80 [ 1989.379478][ C1] ? kasan_save_track+0x3e/0x80 [ 1989.379492][ C1] ? kasan_save_free_info+0x46/0x50 [ 1989.379513][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1989.379529][ C1] ? kmem_cache_free+0x187/0x630 [ 1989.379544][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 1989.379576][ C1] ? skb_release_data+0x6c3/0x940 [ 1989.379593][ C1] kasan_save_free_info+0x46/0x50 [ 1989.379615][ C1] __kasan_slab_free+0x5c/0x80 [ 1989.379631][ C1] kmem_cache_free+0x187/0x630 [ 1989.379647][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 1989.379666][ C1] nft_synproxy_eval_v4+0x352/0x4e0 [ 1989.379685][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1989.379703][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1989.379722][ C1] nft_synproxy_do_eval+0x305/0x580 [ 1989.379740][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1989.379757][ C1] ? nft_trace_init+0x283/0x4c0 [ 1989.379779][ C1] nft_do_chain+0x45e/0x1990 [ 1989.379795][ C1] ? __pfx_tcp_conn_schedule+0x10/0x10 [ 1989.379812][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 1989.379831][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1989.379856][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1989.379876][ C1] nft_do_chain_inet+0x29d/0x380 [ 1989.379891][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1989.379909][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1989.379931][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1989.379948][ C1] nf_hook_slow+0xc5/0x220 [ 1989.379963][ C1] NF_HOOK+0x21f/0x3c0 [ 1989.379982][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1989.380002][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1989.380020][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1989.380038][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1989.380059][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1989.380080][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1989.380101][ C1] NF_HOOK+0x336/0x3c0 [ 1989.380120][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1989.380145][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1989.380163][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1989.380183][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1989.380204][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1989.380223][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1989.380240][ C1] ? process_backlog+0x3eb/0x1950 [ 1989.380263][ C1] process_backlog+0xaa3/0x1950 [ 1989.380291][ C1] __napi_poll+0xae/0x340 [ 1989.380311][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1989.380333][ C1] net_rx_action+0x627/0xf70 [ 1989.380355][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1989.380373][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1989.380401][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 1989.380419][ C1] handle_softirqs+0x22a/0x870 [ 1989.380439][ C1] ? do_softirq+0x76/0xd0 [ 1989.380459][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 1989.380479][ C1] do_softirq+0x76/0xd0 [ 1989.380497][ C1] [ 1989.380502][ C1] [ 1989.380508][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1989.380527][ C1] nsim_dev_trap_report_work+0x7c7/0xb80 [ 1989.380553][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1989.380576][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1989.380605][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1989.380626][ C1] ? assign_work+0x3d5/0x5e0 [ 1989.380645][ C1] worker_thread+0xa53/0xfc0 [ 1989.380673][ C1] kthread+0x388/0x470 [ 1989.380686][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1989.380705][ C1] ? __pfx_kthread+0x10/0x10 [ 1989.380719][ C1] ret_from_fork+0x51e/0xb90 [ 1989.380739][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1989.380757][ C1] ? __switch_to+0xc7d/0x1450 [ 1989.380774][ C1] ? __pfx_kthread+0x10/0x10 [ 1989.380788][ C1] ret_from_fork_asm+0x1a/0x30 [ 1989.380814][ C1] [ 1989.381758][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1989.381777][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1989.381799][ T31] Tainted: [L]=SOFTLOCKUP [ 1989.381806][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1989.381817][ T31] Call Trace: [ 1989.381824][ T31] [ 1989.381832][ T31] vpanic+0x56c/0xa60 [ 1989.381857][ T31] ? __pfx_vpanic+0x10/0x10 [ 1989.381885][ T31] panic+0xc5/0xd0 [ 1989.381905][ T31] ? __pfx_panic+0x10/0x10 [ 1989.381924][ T31] ? printk_trigger_flush+0x13d/0x180 [ 1989.381943][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1989.381967][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1989.381992][ T31] watchdog+0x1023/0x1030 [ 1989.382019][ T31] ? watchdog+0x21a/0x1030 [ 1989.382046][ T31] kthread+0x388/0x470 [ 1989.382062][ T31] ? __pfx_watchdog+0x10/0x10 [ 1989.382082][ T31] ? __pfx_kthread+0x10/0x10 [ 1989.382099][ T31] ret_from_fork+0x51e/0xb90 [ 1989.382122][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1989.382141][ T31] ? __switch_to+0xc7d/0x1450 [ 1989.382157][ T31] ? __pfx_kthread+0x10/0x10 [ 1989.382174][ T31] ret_from_fork_asm+0x1a/0x30 [ 1989.382208][ T31] [ 1989.382455][ T31] Kernel Offset: disabled