last executing test programs: 9m51.481601968s ago: executing program 32 (id=677): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x7) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x402) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x19, 0xfe}, {0x9, 0x5, 0x8f44bf2897946724, 0x2, 0x260, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x72}}}}}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9b4, 0x0, 0x2, 0x0, &(0x7f0000000200)="80fa", 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r7, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) 7m49.665241146s ago: executing program 33 (id=855): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='bic', 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f00000016c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000001700)={0x164, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb4aa, @loopback, 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}}, {0x12, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mq_timedsend(r4, 0x0, 0x0, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r10, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5e, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000054}, 0x14) mq_timedsend(r4, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 7m21.120556564s ago: executing program 34 (id=885): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, 0x1, 0xfffffffb, 0x1a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f00000013c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) gettid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(r4, &(0x7f0000001140)=""/4096, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r6 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = fsopen(0x0, 0x1) fsmount(r7, 0x1, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_dev$video4linux(0x0, 0x7ff, 0x4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, 0x0) 6m20.35711859s ago: executing program 5 (id=981): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 6m17.591224989s ago: executing program 5 (id=984): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 6m16.033546042s ago: executing program 35 (id=969): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70060fa8c8696a", 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40), 0x0, 0x4000004) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd00", 0x22) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r6 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) 6m14.383763505s ago: executing program 5 (id=989): socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000500)='wg2\x00') r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=@tcp6=r0}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002"], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300502800"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m14.134977739s ago: executing program 5 (id=991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000640)=[{0x0}, {&(0x7f00000004c0)="158a540d", 0x4}], 0x2, 0x8, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10284}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r6, 0x8947, &(0x7f0000000400)={'bond0\x00', @ifru_addrs=@llc={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @broadcast}}) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$binfmt_script(r8, &(0x7f0000000040)={'#! ', './file1'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x9, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 6m12.423536797s ago: executing program 5 (id=992): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', 0x2002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'syz1\x00'}}, {@obj_user={'obj_user', 0x3d, 'syz1\x00'}}, {@subj_type={'subj_type', 0x3d, '/%$+@'}}, {@measure}, {@pcr={'pcr', 0x3d, 0x39}}, {@subj_role={'subj_role', 0x3d, '%\\^'}}]}}, 0x1, 0x0, &(0x7f0000000580)="d2e214fbdf1a5a6bbc93165f87e5b9feb5739c") close_range(r5, 0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r5, &(0x7f00000005c0)='./file0\x00') syz_usb_control_io$printer(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x20, 0x5, 0x2, "d310"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xf9, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x4, 0xd0, 0x9, {0x8, 0xb, 0x2, 0x0, 0x1, 0x22, 0x30, 0x99}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1b, 0xf512}, [@power_domain={0x11, 0x24, 0x10, 0x5, 0x0, 0x7, 0xaf, "c85b5438a458b856"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x800, 0xf0, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x3, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd, 0x4, 0x81, {0xa, 0x25, 0x25, 0xffffffd3, 0x5, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6a, 0x1, 0x48, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x67, 0xe6, 0x0, 0x5}, @as_header={0x17, 0x24, 0x1, 0x5, 0x8, 0x8, 0x3, 0x6, 0x4, 0x3, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x9, 0x6, 0xff, 0x5}, @as_header={0x17, 0x24, 0x1, 0x3, 0x7, 0xdff7, 0x3, 0x6, 0x4, 0xffff, 0x7f}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xc3, 0x2, 0x6, 0xd, 'd', "d02085"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0xff, 0xd9, {0xa, 0x25, 0x25, 0x1, 0x45, 0xc1}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x88, 0x2, 0x4, 0x8, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0x93, &(0x7f0000000280)=@string={0x93, 0x3, "f83a160a5044b838ae7ba343b0c89c10909fec87b83a1acc977d1bff620f9cf29b5693f4f2d6ee73fa16e797687150eb41f64c848cfca59d47036d36f365e8ca14b6b30ad023764fcfddb40b3684849e3e320172344b7d3bfb1b91af576d2d9d777a092083b5ca64950fa1eb8a35264859d54c6cfb8b3f250f715e320fa41f0f530b19aa87304146e3b60462e65ed3300d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x96, &(0x7f0000000440)=@string={0x96, 0x3, "ce13f5899f967164a528dff16285b6a4ebf1d10a736e770496b570c6f2eae264a1ed378336033c10908f83795f632e5329ca1e618f7b04eca13a68c5ff32c8ad710a68296d64fa1fd64b897eb5328791945cba305db8e88c0341ed464dac644c3cea1e2f92696868c7cf9d6719d20d10940bb002573143411b07a5efa756a9fb0a2c6cf8aec0116df3d0481b2e279c57f9c9ccba"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80000, 0x3, 0x2d}, 0x18) 6m7.988447304s ago: executing program 5 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x27, &(0x7f00000002c0)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x4, 0xc, 0x69c5, 0xb89a}, 0x0) syz_open_dev$dri(0x0, 0x40000004, 0x100) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4101, 0x0) read$dsp(r3, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1}) r7 = fsopen(&(0x7f0000000100)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x27, &(0x7f00000002c0)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x4, 0xc, 0x69c5, 0xb89a}, 0x0) syz_open_dev$dri(0x0, 0x40000004, 0x100) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4101, 0x0) read$dsp(r3, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1}) r7 = fsopen(&(0x7f0000000100)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$media(&(0x7f00000000c0), 0x8103, 0x8400) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x4001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) fcntl$lock(r2, 0x26, &(0x7f0000000400)={0x1, 0x0, 0x9, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0a, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getownex(r3, 0x10, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r5, r3, 0x0, 0x20000023893) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5, 0x3, 0x3, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) 4m58.553896833s ago: executing program 7 (id=1075): syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(0xffffffffffffffff, 0x400, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/108) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, &(0x7f00000001c0)={{0xffffff07, 0x5, 0x7, 0x8}, &(0x7f0000000180)={{0xb, 0x7, 0xe, 0x6}}}, 0x5, &(0x7f00000002c0), 0x3}}) sendfile(r1, r0, 0x0, 0x23b) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) 4m54.32805599s ago: executing program 9 (id=1079): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x404040, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x90, 0x2, [@TCA_MATCHALL_ACT={0x8c, 0x2, [@m_ife={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x4, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xfaed}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x1b, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000740)) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x5, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB], 0x0) 4m53.797317218s ago: executing program 7 (id=1082): mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r2, r1, 0x0, 0x7ffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') lseek(r3, 0x9, 0x2) getdents64(r3, 0x0, 0x59) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x20000080) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r3, 0xf02c4000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0xffffffff, 0x7, 0x2f, 0xe, 0x1, 0xfffffffb, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x6, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1004, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x100005, 0x3, 0x40, 0x10000, 0x4, 0x6, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x8, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7fff, 0x48b03) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, 0xffffffffffffffff, 0x3266b000) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r7, 0x0, 0x0, 0xb) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000126000/0x3000)=nil) ptrace(0x10, r8) 4m52.745255868s ago: executing program 7 (id=1083): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 4m49.921746448s ago: executing program 9 (id=1087): mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r2, r1, 0x0, 0x7ffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') lseek(r3, 0x9, 0x2) getdents64(r3, 0x0, 0x59) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x20000080) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r3, 0xf02c4000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0xffffffff, 0x7, 0x2f, 0xe, 0x1, 0xfffffffb, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x6, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1004, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x100005, 0x3, 0x40, 0x10000, 0x4, 0x6, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x8, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7fff, 0x48b03) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, 0xffffffffffffffff, 0x3266b000) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r7, 0x0, 0x0, 0xb) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000126000/0x3000)=nil) ptrace(0x10, r8) 4m48.78793663s ago: executing program 9 (id=1088): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007", 0x29}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_macvtap\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x4, 0x3, 0x3118, 0x3, 0xe, 0xfffffffe, 0x8, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) userfaultfd(0x800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x2, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r5], 0x50) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) 4m44.933014255s ago: executing program 7 (id=1092): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r10, 0x80000001}, 0x8) 4m43.508938072s ago: executing program 9 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x10000000000006, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004000e00080017"], 0x20}, 0x1, 0x0, 0x0, 0x42810}, 0x0) accept(r9, 0x0, &(0x7f0000000100)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 4m40.27331426s ago: executing program 9 (id=1098): socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)="03a6839c576a2fe4253f844295321d2af6a98fdb2718760768a56d7c665a9ae5a785c01791649d46fe19c72b36ee62", 0x2f}], 0x1}, 0x10) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=@tcp6=r0}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60"], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300502800"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4m40.153295765s ago: executing program 7 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08"], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x10003, 0x7, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0xda5a, @loopback}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0xa4, 0x8, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f00000000c0)={'ipvlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 4m24.594570748s ago: executing program 37 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08"], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x10003, 0x7, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0xda5a, @loopback}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0xa4, 0x8, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f00000000c0)={'ipvlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3m49.558508974s ago: executing program 0 (id=1146): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7c, 0x7fffffff}]}) cachestat(r0, &(0x7f0000000000)={0x9, 0x9}, &(0x7f0000000080), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0x4, 0x0, 0x8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002100)=@x86={0x34, 0x4, 0x4, 0x0, 0x30, 0x1, 0x9, 0xa, 0x9, 0x8, 0xd0, 0xb3, 0x0, 0x0, 0x5, 0x2, 0x5, 0xf7, 0x9, '\x00', 0x1, 0x100000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001200010000000000ffdbdf250aa500fd40010000000000000000020000d3ee1fcbd8eca01ec42869000000000000000000000000000000000000a0000000003475ab039f853c", @ANYRES32=0x0, @ANYBLOB="01000000000300000000000001000000"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) 3m45.9941259s ago: executing program 0 (id=1150): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000efdbdf256900000008000300c46c45e76c11070400000044fe89c429c1a500062b9aef9bef8452607e7f8d72cef9546dcee0416a9627ad6f3bf825d0adaaa7eb2a35e916b428d560c2fe148e8bedf8e1192fcdb4c710f3cb6bdf9db275d4af543e1bc872", @ANYRES32=r5, @ANYBLOB="0500d300020000000a00060008021100000100000a00060008021100000100000500d2000d0000000600d400250c00000a00060008021100000000000500d30006000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x8, 0x6, 0x6, 0x27, 0x80, 0xf, 0x5b, 0x2, 0x2, 0x3ff, 0x1, 0xd8, 0x4f, 0x5, 0xadf0, [0x22, 0x200]}}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80) dup2(r2, r7) 3m42.313285997s ago: executing program 0 (id=1153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x6}, @exit], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x498042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3m39.104935819s ago: executing program 0 (id=1156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x204a83, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f000001c000/0x2000)=nil, 0x2000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e0, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x53c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x835e5000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000000100000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3m33.315638626s ago: executing program 0 (id=1161): mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r2, r1, 0x0, 0x7ffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') lseek(r3, 0x9, 0x2) getdents64(r3, 0x0, 0x59) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x20000080) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r3, 0xf02c4000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0xffffffff, 0x7, 0x2f, 0xe, 0x1, 0xfffffffb, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x6, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1004, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x100005, 0x3, 0x40, 0x10000, 0x4, 0x6, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x8, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, 0xffffffffffffffff, 0x3266b000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r6, 0x0, 0x0, 0xb) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000126000/0x3000)=nil) ptrace(0x10, r7) 3m30.610032259s ago: executing program 0 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 3m14.94424436s ago: executing program 39 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 3m9.4150205s ago: executing program 4 (id=1183): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x10000014}) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x100, &(0x7f0000002340)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4a3be9da113572ca, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(0x0, 0x8, 0x20202) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000000c0)={0x5, 0x6, 0xd, 0x9}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$P9_RUNLINKAT(r4, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) 3m8.334664944s ago: executing program 4 (id=1185): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) 3m4.42963542s ago: executing program 4 (id=1189): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 3m0.606089055s ago: executing program 4 (id=1194): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r2, 0x0, 0xfffa83) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x1, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2e, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x808c) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0x7fff) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], 0x0, 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="6562204dcf56f8"], 0x7) write$apparmor_exec(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000018"], 0x7) symlinkat(&(0x7f0000003080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r8, 0x0, 0x0) listen(r0, 0x7) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) 2m56.713749126s ago: executing program 4 (id=1197): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2], 0x0) r6 = dup(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x20000000000001bf, &(0x7f00000012c0)=ANY=[@ANYRES16=r5, @ANYRES16=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0xffffffffffffff8f) r8 = syz_clone(0x4039080, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x2, 0x0) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000000000000000008000f000180000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40048c0}, 0x884) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2m51.602871439s ago: executing program 4 (id=1202): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a6a000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x29, 0x2, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f80776f421522159a90acc350c37221dd24c145d8e882e0e5ddbd53a522dddfdb2a6ab611e8dd88220391666f4f1", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf251100000004000980"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 2m36.421164788s ago: executing program 40 (id=1202): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a6a000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x29, 0x2, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f80776f421522159a90acc350c37221dd24c145d8e882e0e5ddbd53a522dddfdb2a6ab611e8dd88220391666f4f1", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf251100000004000980"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 2m32.754905026s ago: executing program 1 (id=1216): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0x917d5fef21e5a99b, 0x100, 0x3, {0xf, 0x1, 0x4}}) 2m26.424557144s ago: executing program 1 (id=1220): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}]}, 0x3c}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x4, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100]}, 0x20) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x91, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x10, 0xa0, 0x0, 0xd, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_ident={0x2, 0xb, 0x2, 0x0, 0x81}, @sadb_x_sec_ctx={0x5, 0x18, 0x18, 0x6, 0x1a, "15fb0c1c7f01912d25c6c8eeff8ea54bd20b700b7b4035578446"}, @sadb_lifetime={0x4, 0x2, 0x6, 0x8, 0x9, 0x9}]}, 0x68}}, 0x4041840) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 2m22.93578825s ago: executing program 1 (id=1223): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x1f, 0x2a, 0x8a0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0x11}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40c0) socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x490001, 0x0) io_uring_setup(0x10, &(0x7f00000003c0)={0x0, 0xde90, 0x200, 0x0, 0xfffffffd}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010ec80649e84cc49f10eb90c9983e4bf"], 0x10b8}, 0xff00) close_range(r1, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002840)={{0xffffffffffffffff, &(0x7f0000000100)='&/&\x00', 0x82800, &(0x7f0000000180)={@align, {0xf2, 0x3, 0x96, 0x5}}, 0x6, &(0x7f0000000200), &(0x7f00000002c0)=0x1}, 0x3, &(0x7f00000027c0)=[{0x3, 0xb98, &(0x7f0000000240)='/d\xa4)\x8f\xa1e-\x1a6\x06\xdc\x00M{Wev/kvm\x00', &(0x7f0000001600)="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", 0x1000, 0x22}, {0x1, 0x4, &(0x7f0000000440)='\x02\xca\xe4!?\xee\x9e\'\xbb\xfa\x8b,P`@J\b\xbbQ\x89\'f\x1ce\xd6\xc8\xb9\xb5\xf7\xf8\xf1*\x98\x1b\xd9\x0e\xac\xc2\xbbf\xaa\xb9\xff\x82\xf1\xb6XE1\xd1\xee\x1f@\x03\xd1\xce\xb3\xf5\x80jU\xd4\x10|\xbbr\x95W1\n\xff^o8\x830\xc6\a\x80', &(0x7f0000002640)="d50fca3ce803b4d072c7de4b770795e91301bee192e796fb796dfcf1c669a1029c09b7b270158375eb9eebbe76debca9159c9b1670a7a8675df4df132811ee1b3201cfbfa21c7249a270f7de57c9e2339c8aa89f21638e9668ad8fdf1e9415c8aa269a29d968d8ebd41b1a8b86f203c0d4ee30bb033c765faa12167837feb7610bc354cbb992c809be03fb1c4c0d89ae708b6aa6f7d23af5c4", 0x99, 0x20}, {0x2, 0xfffffffc, &(0x7f0000002700)='*^\x00', &(0x7f0000000340)="d69b6a356dc99f42d3a69cd0d3d93901d4ab7e883ea81bc2c37217fda8be90753fba958be4b437dd92012ca7c27164ac59322a644e4d989b4e3e94c65d4247524b71de464e352e2019f9e6503aa8c9083dca11ae2f63bdb354d651208d5830fe4b05188e2c60eccfed96b1845e90a60346304910535c025e6bbb03a0f07af9", 0x7f, 0x2}]}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000180)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) write$binfmt_elf64(r9, &(0x7f0000000200)=ANY=[], 0xfd14) close(r9) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 2m19.096009937s ago: executing program 1 (id=1227): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000740)=""/164}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, 0x0) 2m12.307037711s ago: executing program 1 (id=1233): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r3, &(0x7f0000000440)=""/4070, 0x20, 0x101, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) prctl$PR_SET_PTRACER(0x59616d61, r0) 2m5.948319849s ago: executing program 3 (id=1237): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0x917d5fef21e5a99b, 0x100, 0x3, {0xf, 0x1, 0x4}}) 2m5.947976007s ago: executing program 1 (id=1238): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x8070bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8, r9}, 0xc) socket(0x10, 0x3, 0x0) 2m1.514474075s ago: executing program 3 (id=1241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x6c, 0x0, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 1m59.459957234s ago: executing program 3 (id=1243): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x800000000002) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@deltclass={0x60, 0x29, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {0xc, 0x9}, {0x4, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xaf}}, @TCA_RATE={0x6, 0x5, {0x4e, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2c, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) close(r9) syz_open_dev$ttys(0xc, 0x2, 0x0) 1m53.748922909s ago: executing program 3 (id=1246): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r7, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)=0x6) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000240)=""/69, 0x8ed}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m50.433713438s ago: executing program 41 (id=1238): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x8070bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5b43b4ec1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba930826fd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb4583f55c47828645e3046"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8, r9}, 0xc) socket(0x10, 0x3, 0x0) 1m39.677101484s ago: executing program 3 (id=1257): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffefffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x3c, 0x0, 0xfffffffffffffffd, 0x1001ffffc, 0xb, 0x8000000000000000, 0x0, 0x0, 0x9, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xc369d000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x2, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x1, 0x2, 0x3, 0x3}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="fc", 0x7}]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf25190000002000018008000300030000fab6e19300697036746e6c30000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x8, 0xfff1}, {0xffff, 0xe03df7854d413f8f}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x10000005}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040084) r10 = socket$nl_route(0x10, 0x3, 0x0) sched_getattr(0x0, &(0x7f0000000580)={0x38}, 0x46, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000280)) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {}, {0x2, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) 1m35.784136388s ago: executing program 3 (id=1259): r0 = socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0, r3, 0x4000, r3}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100028bd700000002000e3ffff"], 0x20}}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}}, 0x4000) 1m20.367950005s ago: executing program 42 (id=1259): r0 = socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0, r3, 0x4000, r3}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100028bd700000002000e3ffff"], 0x20}}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}}, 0x4000) 34.97128122s ago: executing program 2 (id=1308): socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x0, &(0x7f0000000100)) unshare(0x24020400) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000680)={r7, 0x1ff, 0x0, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x8000000000000000, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() socket(0x5, 0x803, 0x0) 31.571648568s ago: executing program 2 (id=1311): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffff8, @loopback}, 0x1c) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x480c1) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000740)=""/164}) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x15, 0x0, @buffer={0x2, 0x48, &(0x7f0000000800)=""/89}, &(0x7f0000000880)="259374c96ae35b00"/21, 0x0, 0x40000000, 0x0, 0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, 0x0) 22.341390745s ago: executing program 2 (id=1325): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240), 0x8) r5 = epoll_create(0x5) r6 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x300, r6, &(0x7f0000000040)={0x32000000}) 18.260879945s ago: executing program 8 (id=1320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000003c0), 0x61) r1 = socket$inet6(0xa, 0x3, 0xff) pipe2$9p(0x0, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) socket$netlink(0x10, 0x3, 0xf) listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) r7 = socket$rxrpc(0x21, 0x2, 0x2) io_uring_setup(0x1612, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) fcntl$notify(r6, 0x402, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, &(0x7f0000001540)={&(0x7f0000000100)=[{&(0x7f0000001680)}, {&(0x7f0000001180)}, {&(0x7f0000001280)="2ca9d421ecd639c433d1e3bb8c3fbd563255ce5c1e6cce52ba7983120acf9c3b1767da2c3c736c233c9bbd7ee57772de68c84f44638a372a6d3e5e3ce7cc0bbb49f33a34188085e70df201", 0x4b}, {&(0x7f0000001300)="246fa80faa53ad48a689561ac913bd100869fd5c303eaf2f6219817a2d5aac1ce3f5601c4dbabd0309d32e74f1585f46b78270f4d4794cd6e6d86c517c59f8614dd4a525809c51893ce4c6395c564ff4b33aba22bccafd792cce29281c", 0x5d}, {&(0x7f00000013c0)="13efc3e04d9ba42bc87de21a9367451603d39dee5a4c64f6f9a3998dfcb87ec812aa88f9ca6503fd14f37c407d17ceb024e1cfefae9d3cc21b7c", 0x3a}, {&(0x7f0000001400)="d924ec5fc3757b24d27191191026cd77f11aefee7fd8320808885d5231e9b058f5b7e1d604b5bbfc7261610f6834eb5f84f87ead11520d3f9fa86e33da8685a8fc3d629f056e92a9baf24c63f8d677206434291ed64a4566e0e6e22bd46e26849a2ba8d9a7c14293bd7ece", 0x6b}], 0x6, 0x7e21, 0x0, 0x1, 0x2, 0x0, 0x5, 0x80000101}) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 15.556470007s ago: executing program 8 (id=1321): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {}, [{0x8, 0x2}, {}]}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 15.273209758s ago: executing program 6 (id=1323): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000140)={0x9, @raw_data="32d50cc4d944e1dbfb0468f184815261cd02c4742a7cf7f341bcd79fdf609020657c17298556e4afb5a5a35405e82bfc753c58b4579d46a77d730a366cfe8b915bdcf35b4b0d9c53e2e2f1618efb1d9e291aa85cc5f263a26fa119c9700fd6ac8feab37e7b75150861e7d88dbc84850f931621f7539b65b0e03c5ac306c2b4b5407c4a4bb8eca2e033e7d63854807de7e7360e3fdbe4ba7fbfb35601009a626f5b76d4bc8575f262c9861b34e085b0687b57e01aec0f6fa56ec7c678f85ea36a9e2bf7828c0fa58e"}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) pipe(&(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) 12.805472812s ago: executing program 6 (id=1324): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x53, &(0x7f0000000000)=0x40, 0x4) r1 = socket$netlink(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x200, 0x105400) ioctl$BLKRAGET(r6, 0x1263, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x134, r8, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1dbd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000890}, 0x84) r9 = epoll_create(0x7) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000100)) close(r9) openat$iommufd(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) 12.141948333s ago: executing program 6 (id=1326): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000fe"], 0x55117e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080), 0x2, 0x40001) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000540)={0x28, 0x0, r7, r5, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000000440)="f4318ddbdb0d053751bc338672c7f79328b69ce2f5ea9485baf7c5490f2da63e2ec9f64fc1bf0f82168cb4d08b8d062f07d8ae37dbbd93f03a65ae8b4dd11215113abc00d09362fb70ef8eae74ff81b32a6e44a25edc63eb768e5d1dc9635d452ceaad26d539c3916a6f7801ce1480ad32ac2ca467edaad615162702da8b2d2b241fc68fc9d5276f50b27f17419e3a5335dd1f3f83da372d563dd9719b63cdfb30358a2dc2df1c0afa229035708bdfe147472172e8aa2b8de6ee33c810128a882a932ec93eb5b115c6b4f3"}) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$IOCTL_STATUS_ACCEL_DEV(r8, 0x40046103, &(0x7f0000000000)={0x0, 0x7fff, 0x8, 0x9, 0x5, 0x4, 0x5, 0x40, 0x4, 0x9, 0x0, "6590404b694fc8eb55ff90ec0df48ed23cb8fc8b05dd75f086824f1b8c5f3c64"}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000001e00", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x28) 11.936777263s ago: executing program 8 (id=1327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000680)=""/15, 0x45}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.424321483s ago: executing program 2 (id=1328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x4080) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f00000000c0)={{@_ha_fsid={[0x582, 0x2]}, {0xe, 0xf0, 0x8}}, {{[0x4, 0x8, 0x2, 0x3eb90791]}, 0x0, 0x0, 0x66af, 0x0, &(0x7f0000000280)=[{{@_ha_fsid={[0x3, 0x65d3]}, {0x600, 0x6, 0x7fff, 0xfffffffffffffeff}}, 0xc9, 0x0, '\x00'}, {{@_ha_fsid={[0x1, 0x40]}, {0x401, 0x6, 0xf95b, 0x799}}, 0x8, 0x0, ']\x00W\xa1\x93B\xb4O\"\xb5n\xd74\xaa\xa03\x19\x12\x00\x00h\xf4\xb81\xb4B\x96r\\O\xc1\xd8\x1f\xccN#S\x85W]P\xbe\xdb\xae6\x13\x03Y 3\x96E8\xfe\x19N\x1fN\xc8\x91]u15)\xa8\xb9*\xff\x99rNg\xd6\xdd\xcd\x02\x1d\x899\x0e(2\xf96i\xde;\xf2\xd0\xa6\xce\xf1\xe8\xe19\x11\xe7X\xd7]\xf6\xb9\x86\x80O\x8b\xee\x06\x9e3dg\xb0\xb0\xd3\xd9v\xab!d\xf0=\xa4P\xa3\x85\xb7\xffG\x1b\xdc;\xf8\vGL\x11\xb4\xef\x1fR\x90\xa9\xf23\r\xedT\xa4\xf0\x14\xfb#y\x8b\xa8\xc5\x1e\xf0\xdfwk\x03T\xeaP\xd7\xaa\x7ffo\x0f\xe8\xd9\x99\x00'}, {{@align=0xb, {0x5, 0xfff9, 0xc6, 0x7c9f}}, 0x5, 0x0, 'nl80211\x00'}, {{@align=0x4, {0xffff, 0x1, 0x5, 0x3}}, 0x9, 0x0, '@^\x00'}]}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r4, 0x0, 0x201f00) capget(&(0x7f0000005a80)={0x19980330}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030724bd7102f8dbdf250d000000"], 0x14}}, 0x4008800) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bdf000fddbdf2506000000200001800800030006000000140002007665746830"], 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x42e}]}}]}, 0x3c}}, 0x40014) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 8.761636056s ago: executing program 6 (id=1329): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r8], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x4000011) pipe(&(0x7f0000000000)) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r11, 0x5605) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r13 = dup(r12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r13, 0x0) r14 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r14, 0xc0884123, &(0x7f0000000080)) 8.53312176s ago: executing program 8 (id=1330): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000640)=""/106, 0x6a}], 0x2, 0x4, 0x3ff, 0x0) fsopen(&(0x7f0000000200)='cifs\x00', 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x10000011}) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x8000000401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x42, 0x80) acct(0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030d0000000000000000000000030006000000000002000000000000000000000000000000030005000000000002000000ac14140000000000000000000200090008000000e90000000000000002000100001e0000000000000000000001001800"], 0x68}, 0x1, 0x7}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000400)={r8, &(0x7f00000001c0)='syzkaller0\x00', 0x4000, &(0x7f0000000240)={@align=0xe, {0xc, 0x7, 0x800, 0x3}}, 0x3c2c, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}) 7.542206349s ago: executing program 6 (id=1331): futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x7f7f, 0x0, {0x9, 0x1}, {0x52, 0x2}, @period={0x58, 0x6, 0x2, 0x7f, 0xf800, {0x6, 0x93, 0xe, 0x2}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=&(0x7f00000000c0)}}) recvmmsg(r1, &(0x7f0000000940)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000840)=""/48, 0x30}], 0x2, &(0x7f00000008c0)=""/67, 0x43}, 0x9}], 0x1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000002700010004000000ffdbdf25ac141443000000000000000000000000ac14143400"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000011000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 5.903725606s ago: executing program 2 (id=1332): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x7ffffd, 0x0, 0xae) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) getpriority(0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x4010) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x17, 0x4}, 0x0) timer_gettime(r6, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 4.621058317s ago: executing program 8 (id=1333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x60bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r7}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x312}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x80796c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="65652ef2d89f6e29b889058ed00fa5140f12c9202cb80d008ee8f1f30f11f666b80001c0fe0f23c00f21f86635000000000f23f80f1f5d00", 0x38}], 0x1, 0x0, &(0x7f0000000240)=[@flags={0x3, 0x200000}, @cr0={0x0, 0x40000002}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066"], 0x330}}, 0x4008800) 2.810379089s ago: executing program 2 (id=1334): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) epoll_create1(0x80000) prctl$PR_SET_NAME(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r2 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x50) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x1000000000000000, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x800000002, 0x5, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x3e, 0x0, 0xfffffffffffffffd, 0x100200000, 0x9, 0x4, 0x0, 0xfffffffffffffffe, 0x2, 0x9, 0xffffffffffffffff, 0xcf, 0x1000, 0x2, 0x7fffffffffffffff, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0x5, 0x101, 0x7, 0xad0, 0x7785, 0x0, 0x4000000000000004, 0x8, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x80000002000, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x3, 0x80000000, 0xfffffffffffffffe, 0x2, 0x10001, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1, 0x4, 0x6df7, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x5, 0x100000000000, 0xffffffffffffffff, 0x3, 0x200007, 0x0, 0x7, 0xc0c3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffefffff, 0x0, 0x1, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x84]}) 2.795661002s ago: executing program 6 (id=1335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000062b200000000000009000000746902000f00000018100000", @ANYRESDEC=r0, @ANYBLOB="9deaae907cd0465118110000", @ANYBLOB, @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x82100, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7f) r3 = socket$kcm(0x29, 0x2, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c9e17c30d5470d16cf2df5901fa0e79cae2c72104c4c1f95f008aee1aa8948fa4916b2855a49f7fc71d7890f3830f77fb0c8c659e"], 0x110) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) fcntl$setstatus(r0, 0x4, 0x105c00) write(r9, &(0x7f0000000180)="e059ecaf3e3b8dc6d447856779e205ff96fda03f1deb23352f39518a9954aba8fe075b9c7301734d97ad8c492a7d6e59b40aa63a05fd17eabff5a17180973e7d1ad6cc10fe4ec97abd96fd10664c3adfdb9005c9280720", 0x57) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 0s ago: executing program 8 (id=1336): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, 0x0, 0xc080) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @ramp={0x4, 0x9, {0x401, 0x4, 0x6, 0x1ff}}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0x40) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r9, 0x2007ffd) sendfile(r4, r6, 0x0, 0x1000a3) kernel console output (not intermixed with test programs): 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 673.575708][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.615194][T11227] bridge_slave_1: entered allmulticast mode [ 673.649029][ T9284] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 673.677533][T11227] bridge_slave_1: entered promiscuous mode [ 673.700624][ T9284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.749735][ T9284] usb 5-1: Product: syz [ 673.783382][ T9284] usb 5-1: Manufacturer: syz [ 673.811762][ T9284] usb 5-1: SerialNumber: syz [ 673.895652][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 673.993210][ T9284] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input19 [ 674.125688][ T9284] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 674.170153][ T9284] (id 0x00) [ 674.459689][ T9284] rc_core: IR keymap rc-imon-pad not found [ 674.494606][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.506756][ T9284] Registered IR keymap rc-empty [ 674.529829][ T9284] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 674.580828][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.599368][ T9284] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 674.678594][ T9284] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 674.739870][ T9284] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input20 [ 674.843795][ T9284] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:39> initialized [ 675.145187][ T9190] Bluetooth: hci6: command tx timeout [ 675.234639][T11227] team0: Port device team_slave_0 added [ 675.505164][T11227] team0: Port device team_slave_1 added [ 676.066518][ T5713] usb 5-1: USB disconnect, device number 39 [ 676.082389][T11257] imon:send_packet: packet tx failed (-71) [ 676.115558][T11257] imon:vfd_write: send packet #2 failed [ 676.981398][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.024202][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.197721][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.217588][ T9190] Bluetooth: hci6: command tx timeout [ 677.707630][ T9190] Bluetooth: hci3: command 0x0406 tx timeout [ 678.093566][T11271] syz.4.1018 (11271): drop_caches: 2 [ 678.315025][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 678.461657][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.487919][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.589464][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 678.656835][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 678.668110][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.689254][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.719632][ T24] usb 5-1: Product: syz [ 678.760918][ T24] usb 5-1: Manufacturer: syz [ 678.815702][ T24] usb 5-1: SerialNumber: syz [ 678.884448][ T24] usb 5-1: config 0 descriptor?? [ 678.952505][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 678.989445][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 679.018175][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.070350][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 679.104957][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.206105][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 679.227573][T11227] hsr_slave_0: entered promiscuous mode [ 679.250942][T11227] hsr_slave_1: entered promiscuous mode [ 679.264188][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 679.295159][ T5628] Bluetooth: hci6: command tx timeout [ 679.313236][T11227] debugfs: 'hsr0' already exists in 'hsr' [ 679.326680][T11227] Cannot create hsr debugfs directory [ 679.345027][ T24] usb 5-1: media controller created [ 679.560744][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.808769][ T24] usb 5-1: selecting invalid altsetting 3 [ 679.851857][ T24] ttusb2: set interface to alts=3 failed [ 680.202889][ T24] DVB: Unable to find symbol tda10086_attach() [ 680.245515][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 680.280178][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 680.361619][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 680.428139][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 680.462933][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 680.523328][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 680.625662][ T24] usb 5-1: USB disconnect, device number 40 [ 680.885517][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 681.137544][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1022'. [ 682.187060][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1023'. [ 683.060198][T11309] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[10949] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   @ h debu€   Õ@$ À ( € \x0c Ý  þÿÿú üÿÿÿ €  [ 683.850330][T11308] ip6erspan0: entered allmulticast mode [ 684.139969][T11227] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 684.522907][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.593786][T11227] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 684.777063][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.802880][T11227] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 684.922015][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.016384][T11227] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 685.166039][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.415936][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 685.415957][ T30] audit: type=1326 audit(1779418526.722:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 685.621104][T11330] netlink: 'syz.7.1027': attribute type 4 has an invalid length. [ 685.637419][ T30] audit: type=1326 audit(1779418526.722:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 685.759089][T11334] netlink: 'syz.7.1027': attribute type 4 has an invalid length. [ 685.770105][ T30] audit: type=1326 audit(1779418526.822:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 685.899595][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.906580][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.947555][ T30] audit: type=1326 audit(1779418526.822:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 686.137159][ T30] audit: type=1326 audit(1779418526.842:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 686.271195][T11227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.305989][ T30] audit: type=1326 audit(1779418526.842:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 686.460236][T11227] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.484253][ T30] audit: type=1326 audit(1779418526.852:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 686.562985][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.570323][ T9431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.684107][ T30] audit: type=1326 audit(1779418526.852:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 686.742438][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.749740][ T9431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.871238][ T30] audit: type=1326 audit(1779418526.852:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 687.038030][ T30] audit: type=1326 audit(1779418526.862:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.7.1027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd98b9ce59 code=0x7ffc0000 [ 687.747488][T11343] netlink: 'syz.0.1029': attribute type 62 has an invalid length. [ 688.038194][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.063571][ T1225] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 688.255152][ T1225] usb 1-1: Using ep0 maxpacket: 16 [ 688.305842][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.365343][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.434651][ T1225] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 688.507614][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.575826][ T1225] usb 1-1: config 0 descriptor?? [ 688.646925][ T1225] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 688.716410][ T1225] usbhid 1-1:0.0: can't add hid device: -22 [ 688.756085][ T1225] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 688.933839][T11227] veth0_vlan: entered promiscuous mode [ 689.605718][T11354] libceph: resolve '0..' (ret=-3): failed [ 689.991889][T11227] veth1_vlan: entered promiscuous mode [ 690.391536][T11227] veth0_macvtap: entered promiscuous mode [ 690.464175][T11227] veth1_macvtap: entered promiscuous mode [ 690.590373][T11227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.695255][T11227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.811971][ T9746] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.930746][ T9744] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.997282][ T9744] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.069509][ T9744] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.791369][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.821878][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.171717][ T9755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.208361][ T9755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.765497][ T5706] usb 1-1: USB disconnect, device number 32 [ 693.969194][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 694.278343][T11379] usb usb8: check_ctrlrecip: process 11379 (syz.8.1036) requesting ep 01 but needs 81 [ 694.476326][T11379] netlink: 'syz.8.1036': attribute type 4 has an invalid length. [ 694.967245][ T1225] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 695.215714][ T1225] usb 9-1: Using ep0 maxpacket: 16 [ 695.265324][ T1225] usb 9-1: config 0 has no interfaces? [ 695.350394][ T1225] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 695.420537][ T1225] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 695.509196][ T1225] usb 9-1: Manufacturer: syz [ 695.598622][ T1225] usb 9-1: config 0 descriptor?? [ 695.743606][T11398] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1039'. [ 698.652112][T11412] x_tables: duplicate underflow at hook 4 [ 700.131718][ T5706] usb 9-1: USB disconnect, device number 3 [ 702.358291][ T5706] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 702.617721][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 702.680786][ T5706] usb 1-1: config 0 has no interfaces? [ 702.788802][ T5706] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.834781][ T5706] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.981816][ T5706] usb 1-1: Manufacturer: syz [ 703.228767][ T5706] usb 1-1: config 0 descriptor?? [ 703.519541][T11448] syz.7.1049 (11448): drop_caches: 2 [ 706.744408][T11468] syz_tun: entered allmulticast mode [ 707.846348][ T9283] usb 1-1: USB disconnect, device number 33 [ 708.415014][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 709.311010][T11496] syz.0.1066 (11496): drop_caches: 2 [ 709.621219][ T5706] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 709.750017][T11504] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 709.853448][ T9284] IPVS: starting estimator thread 0... [ 709.876121][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 709.995334][T11505] IPVS: using max 38 ests per chain, 91200 per kthread [ 710.020312][ T5706] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 710.059574][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.099261][ T5706] usb 1-1: Product: syz [ 710.117797][ T5706] usb 1-1: Manufacturer: syz [ 710.133281][ T5706] usb 1-1: SerialNumber: syz [ 710.193201][ T5706] usb 1-1: config 0 descriptor?? [ 710.216973][ T5706] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 710.278103][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 710.326428][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 710.382774][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 710.433046][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 710.562365][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 710.621039][ T5706] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 710.665801][ T5706] usb 1-1: media controller created [ 710.754501][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 710.880588][ T5706] usb 1-1: selecting invalid altsetting 3 [ 710.898654][ T5706] ttusb2: set interface to alts=3 failed [ 711.055142][ T5706] DVB: Unable to find symbol tda10086_attach() [ 711.064525][ T5706] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 711.125464][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 711.141441][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 711.183641][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 711.214090][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 711.257154][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 711.303138][ T5706] usb 1-1: USB disconnect, device number 34 [ 711.464687][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 711.582822][T11514] netlink: 'syz.4.1057': attribute type 27 has an invalid length. [ 713.087020][T11528] netlink: 'syz.9.1059': attribute type 13 has an invalid length. [ 714.714199][T11535] pic_ioport_write: 54 callbacks suppressed [ 714.714221][T11535] kvm: pic: level sensitive irq not supported [ 714.723082][T11535] picdev_read: 54 callbacks suppressed [ 714.723102][T11535] kvm: pic: non byte read [ 714.789346][T11535] kvm: pic: level sensitive irq not supported [ 714.789950][T11535] kvm: pic: non byte read [ 714.806562][T11535] kvm: pic: level sensitive irq not supported [ 714.806641][T11535] kvm: pic: non byte read [ 714.888620][T11535] kvm: pic: level sensitive irq not supported [ 714.888726][T11535] kvm: pic: non byte read [ 714.915793][T11535] kvm: pic: level sensitive irq not supported [ 714.915878][T11535] kvm: pic: non byte read [ 714.966383][T11535] kvm: pic: level sensitive irq not supported [ 715.039136][T11535] kvm: pic: non byte read [ 715.153442][T11535] kvm: pic: level sensitive irq not supported [ 715.153517][T11535] kvm: pic: non byte read [ 715.232965][T11535] kvm: pic: level sensitive irq not supported [ 715.233045][T11535] kvm: pic: non byte read [ 715.316043][T11535] kvm: pic: level sensitive irq not supported [ 715.316113][T11535] kvm: pic: non byte read [ 718.742508][T11570] xt_ecn: cannot match TCP bits for non-tcp packets [ 718.779989][T11571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.363823][T11576] syz.4.1069 (11576): drop_caches: 2 [ 719.584922][ T5706] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 719.779018][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 719.802666][ T5706] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 719.838916][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.878401][ T5706] usb 5-1: Product: syz [ 719.902730][ T5706] usb 5-1: Manufacturer: syz [ 719.926054][ T5706] usb 5-1: SerialNumber: syz [ 719.973229][ T5706] usb 5-1: config 0 descriptor?? [ 720.011375][ T5706] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 720.051050][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 720.081019][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 720.134122][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 720.160985][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 720.341145][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 720.371915][T11581] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1070'. [ 720.425224][ T5706] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 720.454914][ T5706] usb 5-1: media controller created [ 720.550551][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 720.670638][ T5706] usb 5-1: selecting invalid altsetting 3 [ 720.692790][ T5706] ttusb2: set interface to alts=3 failed [ 720.997814][ T5706] DVB: Unable to find symbol tda10086_attach() [ 721.030982][ T5706] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 721.092841][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 721.124638][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 721.174570][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 721.201101][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 721.263874][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 721.806487][T11592] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1072'. [ 721.919761][T11587] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1071'. [ 721.945625][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1072'. [ 722.601132][ T5713] IPVS: starting estimator thread 0... [ 722.610841][T11603] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 722.745239][T11604] IPVS: using max 25 ests per chain, 60000 per kthread [ 729.136448][ T5713] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 729.176959][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 729.309127][T11644] syz.8.1081 (11644): drop_caches: 2 [ 729.317071][ T5713] usb 10-1: device descriptor read/64, error -32 [ 729.502812][T11647] syz.7.1082 (11647): drop_caches: 2 [ 729.575091][ T5713] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 729.585112][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 729.610232][T11647] dvb-usb: bulk message failed: -22 (7/0) [ 729.667271][T11647] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 729.761205][T11647] ttusb2: i2c transfer failed. [ 729.785339][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 729.823656][T11642] netlink: 'syz.0.1080': attribute type 21 has an invalid length. [ 729.825437][ T5713] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.976479][ T24] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 730.097300][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.115064][ T5713] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.164739][ T24] usb 9-1: Product: syz [ 730.200329][ T5713] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.211592][ T24] usb 9-1: Manufacturer: syz [ 730.464598][T11661] xt_ecn: cannot match TCP bits for non-tcp packets [ 730.575106][ T24] usb 9-1: SerialNumber: syz [ 730.580569][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.759916][ T24] usb 9-1: config 0 descriptor?? [ 730.765990][ T5713] usb 10-1: Product: syz [ 730.795400][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.891426][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.909417][ T5713] usb 10-1: Manufacturer: syz [ 731.036951][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 731.053139][ T5713] usb 10-1: SerialNumber: syz [ 731.072406][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 731.202504][T11644] dvb-usb: bulk message failed: -22 (7/0) [ 731.236615][T11644] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 731.255876][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 731.273272][ T5713] usb 10-1: 0:2 : does not exist [ 731.299587][ T5713] usb 10-1: unit 9 not found! [ 731.305746][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 731.321607][T11644] ttusb2: i2c transfer failed. [ 731.435225][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 731.717425][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 731.844540][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 731.941014][ T24] usb 9-1: media controller created [ 732.010682][ T5713] usb 10-1: USB disconnect, device number 3 [ 732.253403][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.537168][ T24] usb 9-1: selecting invalid altsetting 3 [ 732.627756][ T24] ttusb2: set interface to alts=3 failed [ 732.877877][T11676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 733.402476][ T24] DVB: Unable to find symbol tda10086_attach() [ 733.511468][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 733.631759][T11687] dvb-usb: bulk message failed: -22 (7/0) [ 733.642684][T11686] syz.9.1087 (11686): drop_caches: 2 [ 733.662071][T11676] netlink: 'syz.8.1086': attribute type 21 has an invalid length. [ 733.686167][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 733.705399][T11687] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 733.741993][T11676] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1086'. [ 733.752324][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 733.812370][T11687] ttusb2: i2c transfer failed. [ 733.867795][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 733.913084][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 734.044125][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 734.422270][T11693] netlink: 'syz.9.1088': attribute type 4 has an invalid length. [ 734.779046][T11696] usb usb1: usbfs: process 11696 (syz.9.1088) did not claim interface 63 before use [ 735.941291][T11702] misc userio: Invalid payload size [ 737.443685][T11676] netlink: 'syz.8.1086': attribute type 4 has an invalid length. [ 737.493665][T11676] netlink: 'syz.8.1086': attribute type 3 has an invalid length. [ 737.553889][T11676] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1086'. [ 738.741744][T11724] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 738.751794][T11724] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 740.750761][T11735] fuse: Bad value for 'rootmode' [ 742.078818][ T1178] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.321561][T11743] syz.4.1096 (11743): drop_caches: 2 [ 742.425839][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.477664][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.533753][T11743] dvb-usb: bulk message failed: -22 (7/0) [ 742.580221][T11743] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 742.697925][T11743] ttusb2: i2c transfer failed. [ 742.789161][ T1178] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.432843][T11759] dummy0: entered allmulticast mode [ 744.542507][ T1178] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.969198][ T1178] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.197954][T11768] vivid-008: disconnect [ 745.379572][T11770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.911204][T11765] vivid-008: reconnect [ 746.973850][T11777] xt_ecn: cannot match TCP bits for non-tcp packets [ 747.175197][ T1225] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 747.311493][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.319723][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.334978][ T1225] usb 1-1: Using ep0 maxpacket: 8 [ 747.360284][ T1225] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 747.390183][ T1225] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 747.429123][ T1225] usb 1-1: config 0 has no interface number 0 [ 747.461928][ T1225] usb 1-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 747.518714][ T1225] usb 1-1: config 0 interface 52 has no altsetting 0 [ 747.541682][ T1225] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 747.569337][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.604367][ T1225] usb 1-1: config 0 descriptor?? [ 748.213353][ T1178] bridge_slave_1: left allmulticast mode [ 748.235090][ T1178] bridge_slave_1: left promiscuous mode [ 748.252795][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.366499][ T1178] bridge_slave_0: left allmulticast mode [ 748.394272][ T1178] bridge_slave_0: left promiscuous mode [ 748.426882][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.947573][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.991358][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.012336][ T1225] usb 1-1: string descriptor 0 read error: -71 [ 750.048264][ T1225] usb 1-1: Can not set alternate setting to 1, error: -71 [ 750.072456][ T1225] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 750.125402][ T1225] usb 1-1: USB disconnect, device number 35 [ 752.201981][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.284100][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.297540][ T1225] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 752.339833][ T1178] bond0 (unregistering): Released all slaves [ 752.470819][ T1225] usb 1-1: unable to get BOS descriptor or descriptor too short [ 752.494111][ T1225] usb 1-1: not running at top speed; connect to a high speed hub [ 752.506912][ T1225] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 752.527582][ T1225] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 752.540740][ T1225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.550578][ T1225] usb 1-1: Product: syz [ 752.561453][ T1225] usb 1-1: Manufacturer: syz [ 752.566675][ T1225] usb 1-1: SerialNumber: syz [ 752.639157][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9 [ 752.858884][ T1225] qmi_wwan 1-1:251.0: probe with driver qmi_wwan failed with error -22 [ 752.912967][ T1225] usb 1-1: USB disconnect, device number 36 [ 755.053426][ T1178] hsr_slave_0: left promiscuous mode [ 755.132526][ T1178] hsr_slave_1: left promiscuous mode [ 755.195233][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.283640][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.361885][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.398387][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.531519][ T1178] veth1_macvtap: left promiscuous mode [ 755.576994][ T1178] veth0_macvtap: left promiscuous mode [ 755.609172][ T1178] veth1_vlan: left promiscuous mode [ 755.684988][ T1178] veth0_vlan: left promiscuous mode [ 756.936464][T11842] x_tables: duplicate underflow at hook 1 [ 756.970141][T11842] kAFS: unable to lookup cell 'ÿ' [ 758.067783][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 758.156333][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 758.493698][T11851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 758.554235][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 758.578346][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 758.581449][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 758.582038][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 758.582097][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 759.255361][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.290710][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.303049][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.326061][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.334227][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.590818][ T9190] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 759.611051][ T9190] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 759.621696][ T9190] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.633455][ T9190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.642302][ T9190] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 760.470888][ T5291] 8021q: adding VLAN 0 to HW filter on device eth10 [ 761.465284][ T5628] Bluetooth: hci3: command tx timeout [ 761.705608][ T5628] Bluetooth: hci5: command tx timeout [ 761.976868][T11873] xt_ecn: cannot match TCP bits for non-tcp packets [ 763.205185][T11890] tipc: Enabled bearer , priority 0 [ 763.535157][ T5628] Bluetooth: hci3: command tx timeout [ 763.574628][T11895] sctp: [Deprecated]: syz.4.1116 (pid 11895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 763.574628][T11895] Use struct sctp_sack_info instead [ 763.652786][T11899] syzkaller0: entered promiscuous mode [ 763.680238][T11899] syzkaller0: entered allmulticast mode [ 763.777619][ T5628] Bluetooth: hci5: command tx timeout [ 763.968047][T11899] tipc: Resetting bearer [ 764.308735][ T5291] 8021q: adding VLAN 0 to HW filter on device eth11 [ 764.492684][T11888] tipc: Resetting bearer [ 764.735030][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 765.507019][T11888] tipc: Disabling bearer [ 765.618746][ T9190] Bluetooth: hci3: command tx timeout [ 765.865788][ T9190] Bluetooth: hci5: command tx timeout [ 765.905685][T11915] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1118'. [ 766.605398][ T1178] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.303659][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.311151][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.321374][T11854] bridge_slave_0: entered allmulticast mode [ 767.329620][T11854] bridge_slave_0: entered promiscuous mode [ 767.718129][ T9190] Bluetooth: hci3: command tx timeout [ 767.748636][ T1178] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.812153][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.849293][T11927] trusted_key: encrypted_key: key user:syz not found [ 767.885321][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.935912][ T9190] Bluetooth: hci5: command tx timeout [ 767.957870][T11854] bridge_slave_1: entered allmulticast mode [ 767.996076][T11854] bridge_slave_1: entered promiscuous mode [ 768.426892][T11856] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.472785][T11856] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.553564][T11856] bridge_slave_0: entered allmulticast mode [ 768.584114][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 768.584134][ T30] audit: type=1326 audit(1779418609.882:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 768.673509][T11934] netlink: 'syz.0.1120': attribute type 4 has an invalid length. [ 768.686254][T11856] bridge_slave_0: entered promiscuous mode [ 768.757367][ T30] audit: type=1326 audit(1779418609.882:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 768.782499][T11938] netlink: 'syz.0.1120': attribute type 4 has an invalid length. [ 768.830368][T11856] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.891943][ T30] audit: type=1326 audit(1779418609.942:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 768.969354][T11856] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.989150][ T30] audit: type=1326 audit(1779418609.942:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 769.067656][ T30] audit: type=1326 audit(1779418609.942:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 769.125025][T11856] bridge_slave_1: entered allmulticast mode [ 769.142475][ T30] audit: type=1326 audit(1779418609.942:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 769.184145][T11856] bridge_slave_1: entered promiscuous mode [ 769.222563][T11854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.316559][T11854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.336559][ T30] audit: type=1326 audit(1779418609.942:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 769.393730][T11947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.503856][ T30] audit: type=1326 audit(1779418609.952:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 769.641103][ T30] audit: type=1326 audit(1779418609.952:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 769.739090][ T1178] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.756530][ T30] audit: type=1326 audit(1779418609.952:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.0.1120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294f79ce59 code=0x7ffc0000 [ 769.870687][ T9190] Bluetooth: hci1: command 0x0406 tx timeout [ 769.907661][T11947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.614555][ T1178] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.755311][T11856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.791146][T11854] team0: Port device team_slave_0 added [ 770.812474][ T5291] 8021q: adding VLAN 0 to HW filter on device eth12 [ 770.849598][T11856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.000706][T11854] team0: Port device team_slave_1 added [ 771.231985][T11856] team0: Port device team_slave_0 added [ 771.527748][T11854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.560573][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.724238][T11854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.830943][T11856] team0: Port device team_slave_1 added [ 772.053909][T11854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.095736][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.223536][T11854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.390320][T11856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.433091][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.559819][T11856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.926094][T11856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.012531][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.182586][T11856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.200969][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 773.299834][T11973] No such timeout policy "syz1" [ 773.318327][T11973] netlink: 'syz.0.1123': attribute type 8 has an invalid length. [ 774.189013][T11854] hsr_slave_0: entered promiscuous mode [ 774.224365][T11854] hsr_slave_1: entered promiscuous mode [ 774.685502][T11977] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 774.730740][T11977] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 774.748669][T11856] hsr_slave_0: entered promiscuous mode [ 774.760785][T11856] hsr_slave_1: entered promiscuous mode [ 774.786178][T11856] debugfs: 'hsr0' already exists in 'hsr' [ 774.805027][T11856] Cannot create hsr debugfs directory [ 774.837571][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1125'. [ 775.093186][T11977] vlan2: entered promiscuous mode [ 775.117209][T11977] bond0: entered promiscuous mode [ 775.369246][T11977] bond_slave_0: entered promiscuous mode [ 775.490528][T11977] bond_slave_1: entered promiscuous mode [ 775.569909][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 775.569929][ T30] audit: type=1326 audit(1779418616.872:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 775.755570][ T30] audit: type=1326 audit(1779418616.872:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 775.821367][ T1178] bridge_slave_1: left allmulticast mode [ 775.843846][ T1178] bridge_slave_1: left promiscuous mode [ 775.886286][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.905631][ T30] audit: type=1326 audit(1779418616.912:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 775.975277][ T30] audit: type=1326 audit(1779418616.912:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 776.030771][ T30] audit: type=1326 audit(1779418616.912:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 776.104536][ T30] audit: type=1326 audit(1779418616.912:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 776.168174][ T30] audit: type=1326 audit(1779418616.912:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 776.233888][ T30] audit: type=1326 audit(1779418616.922:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 776.297981][ T30] audit: type=1326 audit(1779418616.922:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 776.362237][ T30] audit: type=1326 audit(1779418616.922:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.4.1129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44999ce59 code=0x7ffc0000 [ 776.470794][ T1178] bridge_slave_0: left allmulticast mode [ 776.476918][ T1178] bridge_slave_0: left promiscuous mode [ 776.485394][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.478845][T11995] kvm: pic: level sensitive irq not supported [ 777.478975][T11995] kvm: pic: non byte read [ 777.500467][T11995] kvm: pic: level sensitive irq not supported [ 777.500547][T11995] kvm: pic: non byte read [ 777.525354][T11995] kvm: pic: level sensitive irq not supported [ 777.525430][T11995] kvm: pic: non byte read [ 777.551602][T11995] kvm: pic: level sensitive irq not supported [ 777.551833][T11995] kvm: pic: non byte read [ 777.618097][T11995] kvm: pic: level sensitive irq not supported [ 777.637589][T11995] kvm: pic: non byte read [ 777.755765][T11995] kvm: pic: level sensitive irq not supported [ 777.755860][T11995] kvm: pic: non byte read [ 777.810520][T11995] kvm: pic: level sensitive irq not supported [ 777.810598][T11995] kvm: pic: non byte read [ 777.838698][T11995] kvm: pic: level sensitive irq not supported [ 777.838815][T11995] kvm: pic: non byte read [ 777.870236][T11995] kvm: pic: level sensitive irq not supported [ 777.870401][T11995] kvm: pic: non byte read [ 777.912083][T11995] kvm: pic: level sensitive irq not supported [ 777.912161][T11995] kvm: pic: non byte read [ 779.022683][T12004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.036446][T12004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.108694][T12004] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1132'. [ 779.142370][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.232540][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.244149][ T1178] bond0 (unregistering): Released all slaves [ 779.393415][T11998] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 779.410300][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 779.737440][T12010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.761335][T12010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.824717][ T1178] hsr_slave_0: left promiscuous mode [ 780.886600][ T1178] hsr_slave_1: left promiscuous mode [ 780.931962][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.941822][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.033677][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.050446][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.434213][ T1178] veth1_macvtap: left promiscuous mode [ 781.442693][ T1178] veth0_macvtap: left promiscuous mode [ 781.453054][ T1178] veth1_vlan: left promiscuous mode [ 781.460940][ T1178] veth0_vlan: left promiscuous mode [ 782.150291][T12030] usb usb8: check_ctrlrecip: process 12030 (syz.4.1135) requesting ep 01 but needs 81 [ 782.296837][T12030] netlink: 'syz.4.1135': attribute type 4 has an invalid length. [ 782.359543][T12034] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1143'. [ 782.439096][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.449206][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.064291][ T5291] 8021q: adding VLAN 0 to HW filter on device eth13 [ 786.138803][T11854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.599906][T12063] fuse: Bad value for 'fd' [ 786.643106][T12065] binder: 12057:12065 ioctl 4018620d 0 returned -22 [ 786.727289][T12065] No such timeout policy "syz1" [ 787.860767][T11756] syz_tun (unregistering): left allmulticast mode [ 788.405387][T12079] program syz.8.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.560396][T11854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.904703][T11854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.474644][T11854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.061266][ T1178] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.381056][ T1178] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.409528][T12098] kAFS: unable to lookup cell 'ÿ' [ 790.490752][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 790.821832][ T1178] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.274224][ T1178] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.726684][T11854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 791.791070][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.819686][ T5291] 8021q: adding VLAN 0 to HW filter on device eth14 [ 791.849999][T11854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 792.103878][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.982985][T11854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 793.246465][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.276762][T11854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 793.339216][T11854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.468005][ T1178] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.756377][T12141] program syz.8.1149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.799563][T12141] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 796.367755][ T1178] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.595335][T11854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.830205][ T1178] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.094214][T11854] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.306236][ T1178] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.430472][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.437719][ T9763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.450310][T12150] kAFS: unable to lookup cell 'ÿ' [ 797.472661][T12151] kAFS: unable to lookup cell '(,c¾Ì' [ 798.010109][T12154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.082891][ T5291] 8021q: adding VLAN 0 to HW filter on device eth15 [ 798.108818][T12154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.146062][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.153291][ T9758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.197210][T12153] syz.4.1151 (12153): drop_caches: 2 [ 798.206001][T12154] dvb-usb: bulk message failed: -22 (7/0) [ 798.260105][T12154] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 798.340833][T12154] ttusb2: i2c transfer failed. [ 798.828897][T11856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 798.880031][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.911666][T11856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 798.981547][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.010111][T11856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 799.066212][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.457518][T11856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 799.492676][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.900683][ T1178] bridge_slave_1: left allmulticast mode [ 799.920110][ T1178] bridge_slave_1: left promiscuous mode [ 799.957225][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.982063][ T1178] bridge_slave_0: left allmulticast mode [ 800.009495][ T1178] bridge_slave_0: left promiscuous mode [ 800.044923][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.144627][ T1178] bridge_slave_1: left allmulticast mode [ 800.186579][ T1178] bridge_slave_1: left promiscuous mode [ 800.217802][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.273298][ T1178] bridge_slave_0: left allmulticast mode [ 800.298565][ T1178] bridge_slave_0: left promiscuous mode [ 800.321976][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.030784][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 801.030806][ T30] audit: type=1800 audit(1779418642.322:1569): pid=12180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1153" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 801.620458][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.731709][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.830212][ T1178] bond0 (unregistering): Released all slaves [ 802.870471][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.952351][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.025302][ T1178] bond0 (unregistering): Released all slaves [ 803.494318][T12195] binfmt_misc: register: failed to install interpreter file ./cgroup [ 803.582296][T11854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.340622][T11856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.762154][T11856] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.994184][T11854] veth0_vlan: entered promiscuous mode [ 805.129690][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.136954][ T9744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.351333][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.358605][ T9752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.442716][T11854] veth1_vlan: entered promiscuous mode [ 805.694514][T11854] veth0_macvtap: entered promiscuous mode [ 805.788281][ T1178] hsr_slave_0: left promiscuous mode [ 805.810608][ T1178] hsr_slave_1: left promiscuous mode [ 805.850455][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.894243][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.952344][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.996937][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.095957][ T1178] hsr_slave_0: left promiscuous mode [ 806.138678][ T1178] hsr_slave_1: left promiscuous mode [ 806.174035][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.212945][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.253174][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.299946][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.407224][ T1178] veth1_macvtap: left promiscuous mode [ 806.430664][ T1178] veth0_macvtap: left promiscuous mode [ 806.447557][ T1178] veth1_vlan: left promiscuous mode [ 806.470655][ T1178] veth0_vlan: left promiscuous mode [ 806.494482][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.518997][ T1178] veth1_macvtap: left promiscuous mode [ 806.529478][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.540467][ T9284] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 806.548331][ T1178] veth0_macvtap: left promiscuous mode [ 806.564209][ T1178] veth1_vlan: left promiscuous mode [ 806.577151][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.587757][ T1178] veth0_vlan: left promiscuous mode [ 806.603884][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.739808][ T9284] usb 1-1: Using ep0 maxpacket: 32 [ 806.769143][ T9284] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 806.802123][ T9284] usb 1-1: config 0 has no interface number 0 [ 806.829742][ T9284] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.863867][ T9284] usb 1-1: config 0 interface 89 has no altsetting 0 [ 806.889782][ T9284] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 806.907798][T12220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.927192][ T9284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.940307][T12220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.950714][ T9284] usb 1-1: Product: syz [ 806.966819][ T9284] usb 1-1: Manufacturer: syz [ 806.982300][ T9284] usb 1-1: SerialNumber: syz [ 807.000801][ T9284] usb 1-1: config 0 descriptor?? [ 807.023217][ T9284] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 807.046151][ T9284] em28xx 1-1:0.89: Video interface 89 found: [ 807.620894][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 807.640941][ T9284] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 807.664340][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 808.397441][ T9284] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 808.445402][ T9284] em28xx 1-1:0.89: board has no eeprom [ 808.545167][ T9284] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 808.568848][ T9284] em28xx 1-1:0.89: analog set to bulk mode. [ 808.585949][T12205] em28xx 1-1:0.89: Registering V4L2 extension [ 808.613867][ T9284] usb 1-1: USB disconnect, device number 37 [ 808.653498][ T9284] em28xx 1-1:0.89: Disconnecting em28xx [ 808.740925][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.750929][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.782753][T12205] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 808.797954][T12205] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 808.810888][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 808.824038][T12205] em28xx 1-1:0.89: No AC97 audio processor [ 808.867452][T12205] usb 1-1: Decoder not found [ 808.883673][T12205] em28xx 1-1:0.89: failed to create media graph [ 808.898222][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 808.905981][T12205] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 808.981158][T12205] em28xx 1-1:0.89: Registering snapshot button... [ 809.184229][T12205] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input21 [ 809.488396][T12205] em28xx 1-1:0.89: Remote control support is not available for this card. [ 809.527460][ T9284] em28xx 1-1:0.89: Closing input extension [ 809.559935][ T9284] em28xx 1-1:0.89: Deregistering snapshot button [ 809.669562][ T5291] 8021q: adding VLAN 0 to HW filter on device eth16 [ 809.894359][T12238] syz.0.1161 (12238): drop_caches: 2 [ 810.010546][T11854] veth1_macvtap: entered promiscuous mode [ 810.062349][ T9284] em28xx 1-1:0.89: Freeing device [ 810.098066][T11648] udevd[11648]: setting owner of /dev/bus/usb/001/037 to uid=0, gid=0 failed: No such file or directory [ 810.198142][T11854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.273838][T11854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.352857][ T9746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.427199][ T9284] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 810.436201][ T9746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.450771][ T9746] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.466928][T11856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.505945][ T9746] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.604996][ T9284] usb 1-1: Using ep0 maxpacket: 32 [ 810.618941][ T9284] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 810.682480][ T9284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.756994][ T9284] usb 1-1: Product: syz [ 810.828106][ T9284] usb 1-1: Manufacturer: syz [ 810.864218][ T9284] usb 1-1: SerialNumber: syz [ 810.926317][ T9284] usb 1-1: config 0 descriptor?? [ 811.001040][ T9284] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 811.077606][ T9284] dvb-usb: bulk message failed: -22 (4/0) [ 811.102371][ T9284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 811.116889][ T9284] dvb-usb: bulk message failed: -22 (5/0) [ 811.124106][ T9284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 811.247863][T12238] dvb-usb: bulk message failed: -22 (7/0) [ 811.257049][T11856] veth0_vlan: entered promiscuous mode [ 811.339797][T12238] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 811.371894][T12238] ttusb2: i2c transfer failed. [ 811.395816][ T9284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 811.518957][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 811.532147][ T9284] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 811.577616][ T9284] usb 1-1: media controller created [ 811.730688][ T9284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 811.808087][T11856] veth1_vlan: entered promiscuous mode [ 811.948032][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1164'. [ 812.004138][ T9284] usb 1-1: selecting invalid altsetting 3 [ 812.032814][ T9284] ttusb2: set interface to alts=3 failed [ 812.075731][ T9763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.137145][ T9763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.429472][ T9284] DVB: Unable to find symbol tda10086_attach() [ 812.487777][ T9284] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 812.498984][ T1178] IPVS: stop unused estimator thread 0... [ 812.529565][ T9284] dvb-usb: bulk message failed: -22 (4/0) [ 812.557421][ T1178] IPVS: stop unused estimator thread 0... [ 812.602003][ T9284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 812.618627][ T9758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.652439][ T9758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.660476][ T9284] dvb-usb: bulk message failed: -22 (5/0) [ 812.672117][T11856] veth0_macvtap: entered promiscuous mode [ 812.687440][ T9284] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 812.733202][ T9284] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 812.792820][T11856] veth1_macvtap: entered promiscuous mode [ 813.073987][T11856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.173375][T11856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.287751][ T9758] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.369854][ T9746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.472182][ T9746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.547276][ T9746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.648517][ T9752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.701960][ T9752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.052043][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.105653][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.918388][T12289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.643857][T12303] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 816.719858][T12303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 819.828873][T12335] Cannot find add_set index 0 as target [ 820.780886][T12345] kAFS: unable to lookup cell 'ÿ' [ 821.544948][T12354] fuse: Bad value for 'fd' [ 822.512131][T12355] dvb-usb: bulk message failed: -22 (32/0) [ 822.537559][T12355] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 822.619683][T12355] ttusb2: i2c transfer failed. [ 823.925262][ T30] audit: type=1800 audit(1779418665.202:1570): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1173" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=12600 res=0 errno=0 [ 824.299691][T12363] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 827.707976][T12410] xt_ecn: cannot match TCP bits for non-tcp packets [ 827.927251][T12410] netlink: 'syz.8.1176': attribute type 1 has an invalid length. [ 828.184986][T12205] usb 1-1: USB disconnect, device number 38 [ 828.492925][T12205] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 829.096991][ T9190] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 829.110628][ T9190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 829.136712][ T9190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 829.174136][ T9190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 829.192324][ T9190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 831.295142][ T5628] Bluetooth: hci2: command tx timeout [ 831.985204][T12432] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.052377][T12432] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.100013][T12432] bridge_slave_0: entered allmulticast mode [ 832.155781][T12432] bridge_slave_0: entered promiscuous mode [ 832.216341][T12432] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.273873][T12432] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.314950][T12432] bridge_slave_1: entered allmulticast mode [ 832.383543][T12432] bridge_slave_1: entered promiscuous mode [ 832.615348][T12432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.669097][T12432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.196582][T12432] team0: Port device team_slave_0 added [ 833.356394][T12432] team0: Port device team_slave_1 added [ 833.375081][ T5628] Bluetooth: hci2: command tx timeout [ 833.672006][T12432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.733028][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.851357][T12432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.957657][T12432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.994281][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.109403][T12432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.419862][T12432] hsr_slave_0: entered promiscuous mode [ 834.444731][T12432] hsr_slave_1: entered promiscuous mode [ 834.493172][T12432] debugfs: 'hsr0' already exists in 'hsr' [ 834.521584][T12432] Cannot create hsr debugfs directory [ 835.455061][ T5628] Bluetooth: hci2: command tx timeout [ 837.535396][ T5628] Bluetooth: hci2: command tx timeout [ 841.227043][ T30] audit: type=1326 audit(1779418682.532:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 841.339782][T12557] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 841.403425][ T30] audit: type=1326 audit(1779418682.562:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 841.539635][ T30] audit: type=1326 audit(1779418682.572:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 842.161273][ T30] audit: type=1326 audit(1779418682.572:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 842.312625][ T30] audit: type=1326 audit(1779418682.582:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 842.462384][ T30] audit: type=1326 audit(1779418682.582:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 842.851970][ T30] audit: type=1326 audit(1779418682.592:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 842.987468][ T30] audit: type=1326 audit(1779418682.592:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 843.069880][T12569] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 843.173958][T12569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.205673][ T30] audit: type=1326 audit(1779418682.592:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 843.271974][T12568] netdevsim netdevsim4: Direct firmware load for . [ 843.271974][T12568] failed with error -2 [ 843.288392][T12569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.362593][T12568] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 843.362593][T12568] [ 843.407480][ T30] audit: type=1326 audit(1779418682.612:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.1192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f165e19ce59 code=0x7ffc0000 [ 844.901623][T12582] dvb-usb: bulk message failed: -22 (32/0) [ 844.909987][T12582] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 845.084571][T12582] ttusb2: i2c transfer failed. [ 846.101837][T12568] [U]  [ 849.318671][T12617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1197'. [ 850.143467][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 850.504582][T12432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 850.558692][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.612420][T12432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 851.373508][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.474101][T12432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 851.530542][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.577056][T12432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 851.659606][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.237165][T12432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.443590][T12432] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.539070][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.547012][ T9752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.645233][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.653231][ T9752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.182639][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.328153][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 853.618313][T12432] veth0_vlan: entered promiscuous mode [ 853.755943][T12432] veth1_vlan: entered promiscuous mode [ 854.057425][T12432] veth0_macvtap: entered promiscuous mode [ 854.208872][T12432] veth1_macvtap: entered promiscuous mode [ 854.506625][T12432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.566516][T12432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.667392][ T9752] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.680825][ T9752] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.696948][ T9752] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.719585][ T9752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.008139][ T5291] 8021q: adding VLAN 0 to HW filter on device eth17 [ 857.408710][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.456587][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.567480][ T9744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.602107][ T9744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.848341][ T5291] 8021q: adding VLAN 0 to HW filter on device eth18 [ 860.417730][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 861.500883][T12748] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 864.607087][T12769] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 864.927707][T12775] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 864.993713][T12777] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1210'. [ 865.320094][T12775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.379941][T12775] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 865.845265][T12777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.955588][T12777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.073753][T12777] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 866.207877][T12777] bond0 (unregistering): Released all slaves [ 866.701463][ T5715] usb 5-1: USB disconnect, device number 41 [ 867.302745][ T9190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 867.322216][ T9190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 867.336889][ T9190] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 867.351776][ T9190] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 867.362098][ T9190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 867.686024][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1213'. [ 867.709482][T12808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1213'. [ 867.750157][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.806633][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.844641][T12808] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1213'. [ 867.895040][ T9284] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 868.067064][ T9284] usb 2-1: Using ep0 maxpacket: 8 [ 868.093879][ T9284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.139756][ T9284] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 868.196706][ T9284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 868.242020][ T9284] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 868.281733][ T9284] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 868.312703][ T9284] usb 2-1: Product: syz [ 868.326895][ T9284] usb 2-1: Manufacturer: syz [ 868.343705][ T9284] usb 2-1: SerialNumber: syz [ 868.370393][ T9284] usb 2-1: config 0 descriptor?? [ 868.564918][ T9284] rc_core: IR keymap rc-imon-rsc not found [ 868.582781][ T9284] Registered IR keymap rc-empty [ 868.760127][ T9284] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 868.821807][ T9284] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 869.213723][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 869.213742][ T30] audit: type=1800 audit(1779418710.512:1604): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1214" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 869.452188][ T9284] usb 2-1: USB disconnect, device number 26 [ 869.466419][ T9190] Bluetooth: hci6: command tx timeout [ 870.191892][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.205393][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.115008][ T9284] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 871.287536][ T9284] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.409431][ T9284] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 871.484902][ T9284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 871.545089][ T9190] Bluetooth: hci6: command tx timeout [ 871.575671][ T9284] usb 2-1: Product: syz [ 871.614657][ T9284] usb 2-1: Manufacturer: syz [ 871.654886][ T9284] usb 2-1: SerialNumber: syz [ 872.022137][ T9284] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 872.338475][ T9284] usb 2-1: USB disconnect, device number 27 [ 872.422857][T12844] usblp0: removed [ 873.289633][T12807] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.348911][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.398283][T12807] bridge_slave_0: entered allmulticast mode [ 873.503291][T12807] bridge_slave_0: entered promiscuous mode [ 873.621387][T12807] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.629058][ T9190] Bluetooth: hci6: command tx timeout [ 873.703194][T12807] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.784318][T12807] bridge_slave_1: entered allmulticast mode [ 873.842367][T12807] bridge_slave_1: entered promiscuous mode [ 874.156884][T12807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.223639][T12807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.491726][T12807] team0: Port device team_slave_0 added [ 874.541571][T12807] team0: Port device team_slave_1 added [ 874.976718][T12807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.022124][T12807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.087000][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 875.125155][T12807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.330124][T12807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.409781][T12807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.654940][T12807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.667993][T12878] Cannot find add_set index 0 as target [ 875.705079][ T9190] Bluetooth: hci6: command tx timeout [ 876.175783][T12807] hsr_slave_0: entered promiscuous mode [ 876.237384][T12807] hsr_slave_1: entered promiscuous mode [ 876.290740][T12807] debugfs: 'hsr0' already exists in 'hsr' [ 876.336521][T12807] Cannot create hsr debugfs directory [ 877.975795][T12895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.330604][T12912] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 879.558048][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 879.579609][T12913] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 879.646535][T12913] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 880.479159][T12912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 880.643842][T12919] bond1: (slave gretap1): making interface the new active one [ 880.724216][T12919] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 880.938220][T12920] macvlan2: entered promiscuous mode [ 880.962296][T12920] macvlan2: entered allmulticast mode [ 881.015354][T12920] bond1: entered promiscuous mode [ 881.061843][T12920] gretap1: entered promiscuous mode [ 881.138996][T12920] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 881.177691][T12938] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 881.227046][T12920] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 881.288818][T12920] bond1: left promiscuous mode [ 881.330562][T12920] gretap1: left promiscuous mode [ 881.448039][T12938] netlink: 'syz.8.1224': attribute type 10 has an invalid length. [ 882.138117][T12938] team0 (unregistering): Port device team_slave_0 removed [ 882.270791][T12938] team0 (unregistering): Port device team_slave_1 removed [ 882.491072][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 882.517126][T12930] Bluetooth: hci5: command 0x0406 tx timeout [ 882.517372][T12802] Bluetooth: hci3: command 0x0406 tx timeout [ 884.233107][T12958] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 884.800960][ T5730] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 885.035016][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 885.090100][ T5730] usb 2-1: config 0 has no interfaces? [ 885.191931][ T5730] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 885.246901][ T5730] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 885.285357][ T5730] usb 2-1: Manufacturer: syz [ 885.324375][ T5730] usb 2-1: config 0 descriptor?? [ 887.233664][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 888.851862][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1231'. [ 889.943500][T13017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 890.294458][ T5291] 8021q: adding VLAN 0 to HW filter on device eth19 [ 890.487617][ T24] usb 2-1: USB disconnect, device number 28 [ 890.880585][T12807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 891.022351][T12807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.105779][T12807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 891.220015][T12807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.282236][T12807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 891.402929][T12807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.464301][T12807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 891.602945][T12807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.424716][T12807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.607203][T12807] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.707976][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.715227][ T9752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.860286][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.867527][ T9752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.727329][T12807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.869791][T12807] veth0_vlan: entered promiscuous mode [ 895.093605][T12807] veth1_vlan: entered promiscuous mode [ 895.409114][T12807] veth0_macvtap: entered promiscuous mode [ 895.491404][T12807] veth1_macvtap: entered promiscuous mode [ 895.659515][T12807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.814093][T12807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.921952][ T9744] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.983039][ T9744] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.047877][ T9744] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.076970][ T9744] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.196022][T13073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.243015][T13073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.604363][ T5291] 8021q: adding VLAN 0 to HW filter on device eth20 [ 898.055150][ T9284] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 898.377374][ T9284] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 898.631195][ T9284] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 898.701840][ T9284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 898.734702][ T9284] usb 4-1: Product: syz [ 898.768930][ T9284] usb 4-1: Manufacturer: syz [ 898.837232][ T9284] usb 4-1: SerialNumber: syz [ 899.370161][ T9284] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 899.594646][ T5728] usb 4-1: USB disconnect, device number 27 [ 899.770674][ T5728] usblp0: removed [ 902.639471][T13080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.648042][T13080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.300879][T13163] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 905.534586][T10373] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 905.618961][T10373] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 905.650583][T10373] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 905.726186][T10373] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 905.814269][T10373] rtc rtc0: __rtc_set_alarm: err=-22 [ 907.709626][T13186] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 907.863798][ T808] IPVS: starting estimator thread 0... [ 907.974923][T13189] IPVS: using max 24 ests per chain, 57600 per kthread [ 908.108260][ T30] audit: type=1326 audit(1779418749.392:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.6.1244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 908.251371][ T30] audit: type=1326 audit(1779418749.392:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.6.1244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 909.949290][ T30] audit: type=1800 audit(1779418751.252:1607): pid=13201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1246" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=52629 res=0 errno=0 [ 910.008571][T13205] input: syz1 as /devices/virtual/input/input23 [ 911.385515][ T30] audit: type=1326 audit(1779418752.682:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.6.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 911.432281][ T30] audit: type=1326 audit(1779418752.692:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.6.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 911.467665][ T30] audit: type=1326 audit(1779418752.722:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.6.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 911.497839][ T30] audit: type=1326 audit(1779418752.722:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.6.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 911.587999][ T30] audit: type=1326 audit(1779418752.722:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.6.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 911.624464][T13225] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 911.663079][ T30] audit: type=1326 audit(1779418752.722:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.6.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 911.757955][ T30] audit: type=1326 audit(1779418752.722:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.6.1248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8b4659ce59 code=0x7ffc0000 [ 912.935648][T12929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 912.960126][T12929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 912.973486][T12929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 912.994680][T12929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 913.005676][T12929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 915.054938][T12929] Bluetooth: hci7: command tx timeout [ 916.062640][T13264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1252'. [ 916.159718][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 916.218046][T13266] loop9: detected capacity change from 0 to 2640 [ 916.239797][T13266] buffer_io_error: 10 callbacks suppressed [ 916.239903][T13266] Buffer I/O error on dev loop9, logical block 0, async page read [ 916.346450][T13266] Buffer I/O error on dev loop9, logical block 0, async page read [ 916.409802][T13266] loop9: unable to read partition table [ 916.418844][T13267] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 916.441455][T13266] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 916.468708][T13267] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 916.468824][T13267] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 916.482910][T13267] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 916.483038][T13267] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 916.483134][T13267] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 916.483220][T13267] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 916.483306][T13267] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 917.139002][T12929] Bluetooth: hci7: command tx timeout [ 919.214982][T12929] Bluetooth: hci7: command tx timeout [ 920.211210][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 920.400654][T13297] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 920.400654][T13297] Please contact the netfilter-devel mailing list or update your nftables rules. [ 920.975584][T13315] Cannot find add_set index 0 as target [ 921.287087][T13319] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1255'. [ 921.310845][T12929] Bluetooth: hci7: command tx timeout [ 921.324305][T13073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.646721][T13073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.923934][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.982062][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.024243][T13238] bridge_slave_0: entered allmulticast mode [ 924.067322][T13238] bridge_slave_0: entered promiscuous mode [ 924.122741][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.142387][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.173735][T13238] bridge_slave_1: entered allmulticast mode [ 924.217474][T13238] bridge_slave_1: entered promiscuous mode [ 924.246871][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1258'. [ 924.423933][T13340] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1258'. [ 924.484341][T13238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.567905][T13238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.811197][T13238] team0: Port device team_slave_0 added [ 924.867989][T13238] team0: Port device team_slave_1 added [ 925.409275][T13073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.512358][T13342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.866634][T13238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.931540][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.110522][T13238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.198037][T13238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.216396][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.323833][T13238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.617270][T13373] fuse: Bad value for 'fd' [ 927.643548][T13372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.655201][T13372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.624387][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.631771][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.846181][T13073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.361938][T13238] hsr_slave_0: entered promiscuous mode [ 932.369378][T13238] hsr_slave_1: entered promiscuous mode [ 932.378858][T13238] debugfs: 'hsr0' already exists in 'hsr' [ 932.387075][T13238] Cannot create hsr debugfs directory [ 933.529028][T13404] netlink: 'syz.6.1263': attribute type 16 has an invalid length. [ 933.539888][T13404] netlink: 'syz.6.1263': attribute type 17 has an invalid length. [ 933.749172][T13400] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.785317][T13400] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.161604][T13404] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.168906][T13404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.209794][T13404] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.217085][T13404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.024271][T13073] bridge_slave_1: left allmulticast mode [ 935.049551][T13073] bridge_slave_1: left promiscuous mode [ 935.071203][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.172760][T13073] bridge_slave_0: left allmulticast mode [ 935.194891][T13073] bridge_slave_0: left promiscuous mode [ 935.219806][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.995928][T13425] netlink: zone id is out of range [ 937.052906][T13425] netlink: zone id is out of range [ 937.314013][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1266'. [ 937.402100][T13425] netlink: zone id is out of range [ 937.429000][T13425] netlink: set zone limit has 4 unknown bytes [ 938.808404][T13073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.911590][T13073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.967519][T13073] bond0 (unregistering): Released all slaves [ 940.056341][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.067002][T13459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.063003][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 943.077352][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 943.106723][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 943.123091][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 943.141649][T12802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.101852][T13515] fuse: Bad value for 'fd' [ 944.262809][T13518] fuse: Bad value for 'fd' [ 944.939688][T13073] hsr_slave_0: left promiscuous mode [ 944.954525][T13073] hsr_slave_1: left promiscuous mode [ 944.983645][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.008218][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.193467][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.223903][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.289101][T13073] veth1_macvtap: left promiscuous mode [ 945.295195][T12802] Bluetooth: hci0: command tx timeout [ 945.330140][T13073] veth0_macvtap: left promiscuous mode [ 945.342528][T13073] veth1_vlan: left promiscuous mode [ 945.361915][T13073] veth0_vlan: left promiscuous mode [ 946.844536][T13073] team0 (unregistering): Port device team_slave_1 removed [ 947.060378][T13073] team0 (unregistering): Port device team_slave_0 removed [ 947.375056][T12802] Bluetooth: hci0: command tx timeout [ 947.746562][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 948.072200][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.087464][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.382403][T13544] Cannot find add_set index 0 as target [ 949.455324][T12802] Bluetooth: hci0: command tx timeout [ 949.890558][T13547] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1276'. [ 951.536129][T12802] Bluetooth: hci0: command tx timeout [ 952.268924][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 954.176161][T12802] Bluetooth: hci2: command 0x0406 tx timeout [ 954.906483][T13238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 954.988876][T13238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 955.530717][T13073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.661567][T13238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 955.743574][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 955.820823][T13238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 955.833363][T13238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 955.868502][T13238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 955.992505][T13238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 956.080374][T13238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 956.132653][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.141474][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.150458][T13507] bridge_slave_0: entered allmulticast mode [ 956.161165][T13507] bridge_slave_0: entered promiscuous mode [ 956.370206][T13073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.514361][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.556344][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.609962][T13507] bridge_slave_1: entered allmulticast mode [ 956.651606][T13507] bridge_slave_1: entered promiscuous mode [ 957.219524][T13073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.363590][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.410323][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.552159][T13073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.856630][T12204] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 958.046957][T12204] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 958.064774][T12204] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 958.098110][T12204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 958.110013][T12204] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 958.130722][T12204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.218635][T13507] team0: Port device team_slave_0 added [ 958.247555][T12204] usb 3-1: config 0 descriptor?? [ 958.267669][T13507] team0: Port device team_slave_1 added [ 958.870031][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.877643][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.912790][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.007833][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.024855][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.086752][T13596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.110915][T13596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.123777][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.188635][T12204] usbhid 3-1:0.0: can't add hid device: -71 [ 959.213539][T12204] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 959.260931][T12204] usb 3-1: USB disconnect, device number 32 [ 959.860007][T13507] hsr_slave_0: entered promiscuous mode [ 959.881729][T13507] hsr_slave_1: entered promiscuous mode [ 959.902042][T13507] debugfs: 'hsr0' already exists in 'hsr' [ 959.918913][T13507] Cannot create hsr debugfs directory [ 960.577488][T13073] bridge_slave_1: left allmulticast mode [ 960.598122][T13073] bridge_slave_1: left promiscuous mode [ 960.621359][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.761734][T13073] bridge_slave_0: left allmulticast mode [ 960.793256][T13073] bridge_slave_0: left promiscuous mode [ 960.821957][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.384268][T13073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.452605][T13073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.501566][T13073] bond0 (unregistering): Released all slaves [ 962.827409][T13238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.849667][T13073] tipc: Disabling bearer [ 962.867126][T13073] tipc: Left network mode [ 964.550151][T13238] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.398167][T13642] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 965.777404][T13082] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.784606][T13082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.876196][T13082] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.883478][T13082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.078041][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.176715][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.220600][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.232572][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.386290][T13073] veth1_macvtap: left promiscuous mode [ 967.412566][T13073] veth0_macvtap: left promiscuous mode [ 967.436518][T13073] veth1_vlan: left promiscuous mode [ 967.471794][T13073] veth0_vlan: left promiscuous mode [ 968.838701][ T24] IPVS: starting estimator thread 0... [ 968.975020][T13686] IPVS: using max 38 ests per chain, 91200 per kthread [ 969.631003][T13073] team0 (unregistering): Port device vlan0 removed [ 970.348258][T13073] team0 (unregistering): Port device team_slave_1 removed [ 970.468155][T13073] team0 (unregistering): Port device team_slave_0 removed [ 971.817389][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.842818][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.949420][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 971.949437][ T30] audit: type=1326 audit(1779418813.252:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.8.1294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95799ce59 code=0x0 [ 972.469477][T13507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 972.501682][T13507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.590503][T13507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 972.653746][T13507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.701430][T13507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 972.778480][T13507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.843781][T13507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 973.084329][T13507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.098881][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 973.147209][ T30] audit: type=1800 audit(1779418814.432:1622): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1296" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 973.393526][T12802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 973.418221][T12802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 973.429629][T12802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 973.458638][T12802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 973.468573][T12802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 973.556117][T13073] IPVS: stop unused estimator thread 0... [ 973.678873][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.214063][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.468474][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.476360][T13075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.605286][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.612609][T13075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.535011][T12929] Bluetooth: hci3: command tx timeout [ 976.887317][T13073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.616068][T12929] Bluetooth: hci3: command tx timeout [ 977.997106][T13073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.673264][T13073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.817477][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1301'. [ 978.921414][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1301'. [ 979.160583][T13073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.694933][T12929] Bluetooth: hci3: command tx timeout [ 980.720256][T13733] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.746246][T13733] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.759553][T13733] bridge_slave_0: entered allmulticast mode [ 981.063100][T13733] bridge_slave_0: entered promiscuous mode [ 981.158274][T13733] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.167627][T13733] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.180803][T13733] bridge_slave_1: entered allmulticast mode [ 981.203418][T13733] bridge_slave_1: entered promiscuous mode [ 981.663322][T13733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.756069][T13733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.784901][T12929] Bluetooth: hci3: command tx timeout [ 982.151412][T13733] team0: Port device team_slave_0 added [ 982.203731][T13507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.366547][T13831] netlink: 'syz.2.1305': attribute type 1 has an invalid length. [ 982.384559][T13733] team0: Port device team_slave_1 added [ 982.650698][T13073] bridge_slave_1: left allmulticast mode [ 982.671691][T13073] bridge_slave_1: left promiscuous mode [ 982.686545][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.764612][T13073] bridge_slave_0: left allmulticast mode [ 982.807504][T13073] bridge_slave_0: left promiscuous mode [ 982.850824][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.518079][T13833] macvlan2: entered promiscuous mode [ 986.527354][T13833] macvlan2: entered allmulticast mode [ 986.547185][T13833] bond1: entered promiscuous mode [ 986.573812][T13833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 986.602910][T13833] bond1: left promiscuous mode [ 987.573352][T13826] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1304'. [ 987.599920][T13733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.608216][T13733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.637712][T13733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.670652][T13733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.678996][T13733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.751319][T13733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.437726][T13733] hsr_slave_0: entered promiscuous mode [ 988.622550][T13733] hsr_slave_1: entered promiscuous mode [ 988.830137][T13733] debugfs: 'hsr0' already exists in 'hsr' [ 988.926417][T13733] Cannot create hsr debugfs directory [ 990.025302][T12929] Bluetooth: hci6: command 0x0406 tx timeout [ 991.250689][T13073] hsr_slave_0: left promiscuous mode [ 991.302556][T13073] hsr_slave_1: left promiscuous mode [ 991.335888][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.398147][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.435467][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.465876][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.521611][T13073] veth1_macvtap: left promiscuous mode [ 991.544181][T13073] veth0_macvtap: left promiscuous mode [ 991.570309][T13073] veth1_vlan: left promiscuous mode [ 991.578822][T13073] veth0_vlan: left promiscuous mode [ 991.872072][T13919] netlink: 'syz.2.1311': attribute type 4 has an invalid length. [ 992.395078][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 992.570516][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 992.622742][ T24] usb 3-1: config 1 has no interfaces? [ 992.681874][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 992.696549][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 992.733123][ T24] usb 3-1: Manufacturer: syz [ 993.072507][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.083382][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.557630][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1314'. [ 993.577571][T13073] team0 (unregistering): Port device team_slave_1 removed [ 993.730786][T13073] team0 (unregistering): Port device team_slave_0 removed [ 993.951947][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1314'. [ 995.236199][T13507] veth0_vlan: entered promiscuous mode [ 995.461343][T13507] veth1_vlan: entered promiscuous mode [ 996.263683][T13962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.434031][T13963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.465171][T13963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.643521][T13507] veth0_macvtap: entered promiscuous mode [ 996.841367][T13507] veth1_macvtap: entered promiscuous mode [ 996.956643][T13507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.333788][T13507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.592544][T12204] usb 3-1: USB disconnect, device number 33 [ 998.113421][T13073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.532776][T13979] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 998.820280][ T9755] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.836993][ T9755] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.851144][ T9755] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.994473][T13073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.108102][ T9755] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.465762][T13073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.878509][T13073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.585681][T13075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.622106][T13075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.080128][T13733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1001.118534][T13733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1001.143279][ T9752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.194030][ T9752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.486073][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1317'. [ 1001.531313][T13733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1001.621169][T13733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1001.666248][T13733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1001.720447][T13733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.707126][T13733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1002.758356][T13733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1003.270383][T13073] bridge_slave_1: left allmulticast mode [ 1003.321270][T13073] bridge_slave_1: left promiscuous mode [ 1003.362603][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.431765][T13073] bridge_slave_0: left allmulticast mode [ 1003.483860][T13073] bridge_slave_0: left promiscuous mode [ 1003.528125][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.633599][T13073] bridge_slave_1: left allmulticast mode [ 1003.668516][T13073] bridge_slave_1: left promiscuous mode [ 1003.706312][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.773768][T13073] bridge_slave_0: left allmulticast mode [ 1003.806293][T13073] bridge_slave_0: left promiscuous mode [ 1003.838338][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.100319][T12929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1004.112334][T12929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1004.124562][T12929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1004.144162][T12929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1004.154388][T12929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1005.186251][T13073] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1005.410710][T13073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.436526][T13073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.457551][T13073] bond0 (unregistering): Released all slaves [ 1005.527148][T13073] bond1 (unregistering): Released all slaves [ 1006.074082][T13073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.103935][T13073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.128758][T13073] bond0 (unregistering): Released all slaves [ 1006.255240][T12929] Bluetooth: hci4: command tx timeout [ 1007.460062][T13073] hsr_slave_0: left promiscuous mode [ 1007.469633][T13073] hsr_slave_1: left promiscuous mode [ 1007.483688][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.493929][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.516620][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.536805][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.608467][T13073] hsr_slave_0: left promiscuous mode [ 1007.662378][T13073] hsr_slave_1: left promiscuous mode [ 1007.688658][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.735972][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.810243][T13073] veth1_macvtap: left promiscuous mode [ 1007.829473][T13073] veth0_macvtap: left promiscuous mode [ 1007.854083][T13073] veth1_vlan: left promiscuous mode [ 1007.885028][T13073] veth0_vlan: left promiscuous mode [ 1008.348258][T12929] Bluetooth: hci4: command tx timeout [ 1009.273781][T13073] team0 (unregistering): Port device team_slave_1 removed [ 1009.366988][T13073] team0 (unregistering): Port device team_slave_0 removed [ 1010.169859][T13073] team0 (unregistering): Port device team_slave_1 removed [ 1010.190524][T13073] team0 (unregistering): Port device team_slave_0 removed [ 1010.424934][T12929] Bluetooth: hci4: command tx timeout [ 1011.141526][T14074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.250168][T14079] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1011.652351][T14084] netlink: 'syz.8.1327': attribute type 4 has an invalid length. [ 1011.665435][T13733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.231125][T13733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.504976][T12929] Bluetooth: hci4: command tx timeout [ 1012.666871][T14029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.696855][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.721508][T14029] bridge_slave_0: entered allmulticast mode [ 1012.748408][T14029] bridge_slave_0: entered promiscuous mode [ 1012.794843][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.802117][ T9744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.888745][T14029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.920627][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.947834][T14029] bridge_slave_1: entered allmulticast mode [ 1012.979802][T14029] bridge_slave_1: entered promiscuous mode [ 1013.153993][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.161281][ T9744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.247957][T14029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.300787][T14029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.002559][T14096] capability: warning: `syz.2.1328' uses 32-bit capabilities (legacy support in use) [ 1014.038824][T13073] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.065697][T14096] QAT: Invalid ioctl 1075883590 [ 1014.081389][T14096] QAT: Invalid ioctl 1075883590 [ 1014.130865][T14096] QAT: Invalid ioctl 1075883590 [ 1014.168554][T14096] QAT: Invalid ioctl 1075883590 [ 1014.198153][T14096] QAT: Invalid ioctl 1075883590 [ 1014.217385][T14096] QAT: Invalid ioctl 1075883590 [ 1014.236298][T14096] QAT: Invalid ioctl 1075883590 [ 1014.296400][T14096] QAT: Invalid ioctl 1075883590 [ 1014.354649][T14096] QAT: Invalid ioctl 1075883590 [ 1014.387794][T14029] team0: Port device team_slave_0 added [ 1014.420680][T14096] QAT: Invalid ioctl 1075883590 [ 1014.536198][T14099] gretap0: entered promiscuous mode [ 1014.593825][T14099] vlan2: entered promiscuous mode [ 1014.714086][T14029] team0: Port device team_slave_1 added [ 1015.099682][T13073] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.422746][T14029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.459257][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.590373][T14029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.604039][T14113] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1331'. [ 1015.710930][T14029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.731785][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.792592][T14114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1015.824616][T14029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.906113][T13733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.393366][T14113] unsupported nlmsg_type 40 [ 1016.528922][T13073] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.871843][T13073] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.124521][T14029] hsr_slave_0: entered promiscuous mode [ 1017.188316][T14029] hsr_slave_1: entered promiscuous mode [ 1017.382850][T13733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.255690][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1018.662359][T14140] netlink: 51 bytes leftover after parsing attributes in process `syz.8.1333'. [ 1019.267745][T14139] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1333'. [ 1019.664238][T13073] bridge_slave_1: left allmulticast mode [ 1019.680332][T13073] bridge_slave_1: left promiscuous mode [ 1019.702776][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.744057][T13073] bridge_slave_0: left allmulticast mode [ 1019.768098][T13073] bridge_slave_0: left promiscuous mode [ 1019.789589][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.750378][T13073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.772265][T14159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.855625][ T30] audit: type=1326 audit(1779418862.152:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.2.1334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f2312596bd7 code=0x0 [ 1021.453973][T13073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.501497][T13073] bond0 (unregistering): Released all slaves [ 1021.917446][T13733] veth0_vlan: entered promiscuous mode [ 1022.195118][T13733] veth1_vlan: entered promiscuous mode [ 1022.916049][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1023.123403][T14172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1023.136169][ T31] INFO: task kworker/0:6:5715 blocked for more than 143 seconds. [ 1023.152251][ T31] Tainted: G L syzkaller #0 [ 1023.165662][T14172] PM: Image not found (code -6) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1023.193777][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1023.249166][ T31] task:kworker/0:6 state:D stack:20904 pid:5715 tgid:5715 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1023.301336][ T31] Workqueue: usb_hub_wq hub_event [ 1023.309420][T14172] netlink: 'syz.8.1336': attribute type 10 has an invalid length. [ 1023.329380][ T31] Call Trace: [ 1023.351326][ T31] [ 1023.363544][ T31] __schedule+0x1821/0x5740 [ 1023.390488][ T31] ? kasan_save_stack+0x3e/0x60 [ 1023.413962][ T31] ? __pfx___schedule+0x10/0x10 [ 1023.444131][ T31] ? schedule+0x90/0x360 [ 1023.468104][ T31] schedule+0x164/0x360 [ 1023.495785][ T31] schedule_timeout+0xc3/0x2c0 [ 1023.529140][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1023.561945][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1023.600482][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1023.641369][ T31] ? wait_for_completion+0x274/0x5e0 [ 1023.682944][ T31] wait_for_completion+0x2cc/0x5e0 [ 1023.707026][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1023.762287][ T31] i2c_del_adapter+0x5c0/0x790 [ 1023.818893][ T31] ? trace_irq_disable+0x3b/0x140 [ 1023.874988][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1023.894234][ T31] ? dvb_usb_i2c_exit+0x55/0xb0 [ 1023.982476][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1024.021014][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 1024.043423][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1024.072878][ T31] ? usb_disable_interface+0x31d/0x350 [ 1024.093890][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1024.107028][ T31] usb_unbind_interface+0x26e/0x910 [ 1024.128364][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1024.154822][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1024.166656][T12204] usb 9-1: USB disconnect, device number 4 [ 1024.178101][ T5715] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1024.193411][ T31] device_release_driver_internal+0x4d9/0x870 [ 1024.215710][ T31] bus_remove_device+0x455/0x570 [ 1024.252061][ T31] ? device_release_driver_internal+0x76f/0x870 [ 1024.276275][ T31] ? schedule+0x90/0x360 [ 1024.292992][ T31] ? schedule+0x164/0x360 [ 1024.306554][ T31] ? schedule_timeout+0x158/0x2c0 [ 1024.331227][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1024.341550][T12204] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1024.357908][ T31] ? usb_control_msg+0x2c1/0x3e0 [ 1024.376617][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1024.392714][ T31] ? hub_ext_port_status+0x52d/0x820 [ 1024.407598][ T31] ? msleep+0x39/0x100 [ 1024.421651][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 1024.429002][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1024.440330][ T31] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 1024.453716][ T31] ? update_load_avg+0x1b0/0x1eb0 [ 1024.465733][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1024.471282][ T31] ? psi_group_change+0xab8/0x1050 [ 1024.476590][ T31] ? __schedule+0x2a66/0x5740 [ 1024.487133][ T31] ? __schedule+0x17ef/0x5740 [ 1024.505094][ T31] ? __schedule+0x1821/0x5740 [ 1024.513707][ T31] ? __pfx___schedule+0x10/0x10 [ 1024.519002][ T31] ? schedule+0x90/0x360 [ 1024.528303][ T31] ? schedule+0x164/0x360 [ 1024.533746][ T31] ? worker_thread+0xc21/0xfc0 [ 1024.539125][ T31] ? kthread+0x389/0x470 [ 1024.549202][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1024.564955][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.579138][ T31] ? ret_from_fork+0x514/0xb70 [ 1024.584278][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.592755][ T31] ? __switch_to+0xc79/0x1410 [ 1024.600348][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.610462][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1024.620159][ T31] [ 1024.623986][ T31] [ 1024.623986][ T31] Showing all locks held in the system: [ 1024.632276][ T31] 1 lock held by khungtaskd/31: [ 1024.730923][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1024.747428][ T31] 3 locks held by kworker/0:2/808: [ 1024.759702][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1024.788066][ T31] #1: ffffc9000471fc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1024.834836][ T31] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1024.875153][ T31] 2 locks held by getty/5384: [ 1024.904000][ T31] #0: ffff88803234a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1024.944759][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1024.985042][ T31] 3 locks held by kworker/u8:9/9752: [ 1024.990572][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1025.034761][ T31] #1: ffffc900046bfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1025.079405][ T31] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1025.114852][ T31] 3 locks held by kworker/u8:11/9755: [ 1025.125490][ T31] #0: ffff88801b362140 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1025.164756][ T31] #1: ffffc900077afc40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1025.209135][ T31] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd6/0x660 [ 1025.244815][ T31] 3 locks held by kworker/0:7/12204: [ 1025.260123][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1025.305269][ T31] #1: ffffc9000340fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1025.336256][ T31] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1025.374834][ T31] 6 locks held by kworker/u8:1/13073: [ 1025.383719][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1025.425071][ T31] #1: ffffc9000410fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1025.444844][ T31] #2: ffffffff8fdc2628 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1025.469420][ T31] #3: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1025.495060][ T31] #4: ffff888084400780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0x126/0x220 [ 1025.514884][ T31] #5: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1025.539339][ T31] 3 locks held by kworker/u8:7/13075: [ 1025.554911][ T31] #0: ffff888032004940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1025.579022][ T31] #1: ffffc900040dfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1025.595193][ T31] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1025.605054][ T31] 1 lock held by syz-executor/13733: [ 1025.610510][ T31] #0: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1025.621092][ T31] 7 locks held by syz-executor/14029: [ 1025.628891][ T31] #0: ffff888034a28410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1025.638401][ T31] #1: ffff888036000480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1025.648874][ T31] #2: ffff88802860ba58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1025.660801][ T31] #3: ffffffff8f6503a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1025.671511][ T31] #4: ffff8880255ec128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1025.684012][ T31] #5: ffff8880322ee258 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1025.697268][ T31] #6: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1025.707014][ T31] 2 locks held by syz.6.1335/14158: [ 1025.712261][ T31] 1 lock held by syz.8.1336/14172: [ 1025.717552][ T31] #0: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 1025.726794][ T31] [ 1025.730159][ T31] ============================================= [ 1025.730159][ T31] [ 1025.739827][ T31] NMI backtrace for cpu 0 [ 1025.739860][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.739889][ T31] Tainted: [L]=SOFTLOCKUP [ 1025.739897][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.739911][ T31] Call Trace: [ 1025.739919][ T31] [ 1025.739929][ T31] dump_stack_lvl+0xe8/0x150 [ 1025.739961][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1025.740061][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1025.740088][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1025.740119][ T31] sys_info+0x135/0x170 [ 1025.740140][ T31] watchdog+0xfd3/0x1030 [ 1025.740183][ T31] ? watchdog+0x1c9/0x1030 [ 1025.740220][ T31] kthread+0x389/0x470 [ 1025.740248][ T31] ? __pfx_watchdog+0x10/0x10 [ 1025.740277][ T31] ? __pfx_kthread+0x10/0x10 [ 1025.740306][ T31] ret_from_fork+0x514/0xb70 [ 1025.740333][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1025.740356][ T31] ? __switch_to+0xc79/0x1410 [ 1025.740391][ T31] ? __pfx_kthread+0x10/0x10 [ 1025.740420][ T31] ret_from_fork_asm+0x1a/0x30 [ 1025.740469][ T31] [ 1025.740489][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1025.857605][ C1] NMI backtrace for cpu 1 [ 1025.857625][ C1] CPU: 1 UID: 0 PID: 13077 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.857652][ C1] Tainted: [L]=SOFTLOCKUP [ 1025.857658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.857671][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1025.857708][ C1] RIP: 0010:lock_is_held_type+0x89/0x150 [ 1025.857741][ C1] Code: 90 07 41 83 bd 88 0b 00 00 00 7e 48 4c 89 eb 48 81 c3 90 0b 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 f7 01 00 00 <85> c0 75 2a 49 ff c7 49 63 85 88 0b 00 00 48 83 c3 28 49 39 c7 7c [ 1025.857785][ C1] RSP: 0018:ffffc90000a08da0 EFLAGS: 00000046 [ 1025.857859][ C1] RAX: 0000000000000000 RBX: ffff888028c36870 RCX: 0000000000010002 [ 1025.857872][ C1] RDX: ffff888028c35c40 RSI: ffff8880b8728298 RDI: ffff888028c36870 [ 1025.857887][ C1] RBP: 00000000ffffffff R08: ffff88807df52317 R09: 0000000000000000 [ 1025.857899][ C1] R10: ffff88807df52308 R11: ffffed100fbea463 R12: 0000000000000046 [ 1025.857912][ C1] R13: ffff888028c35c40 R14: ffff8880b8728298 R15: 0000000000000004 [ 1025.857926][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1025.857941][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1025.857954][ C1] CR2: 000055e2ff947138 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1025.857971][ C1] Call Trace: [ 1025.857978][ C1] [ 1025.857988][ C1] __hrtimer_run_queues+0x20c/0xa20 [ 1025.858023][ C1] hrtimer_interrupt+0x44b/0x950 [ 1025.858058][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1025.858083][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1025.858110][ C1] [ 1025.858116][ C1] [ 1025.858122][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1025.858160][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 1025.858179][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 7a 06 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 25 02 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 0a 02 0c [ 1025.858195][ C1] RSP: 0018:ffffc9000413f700 EFLAGS: 00000293 [ 1025.858216][ C1] RAX: ffffffff81b9c2b6 RBX: ffff8880b873c148 RCX: ffff888028c35c40 [ 1025.858230][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1025.858240][ C1] RBP: ffffc9000413f840 R08: ffffffff9030d3f7 R09: 1ffffffff2061a7e [ 1025.858254][ C1] R10: dffffc0000000000 R11: fffffbfff2061a7f R12: 1ffff110170c8589 [ 1025.858268][ C1] R13: dffffc0000000000 R14: ffff8880b8642c48 R15: 0000000000000000 [ 1025.858284][ C1] ? smp_call_function_many_cond+0xfe6/0x13d0 [ 1025.858309][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1025.858338][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1025.858357][ C1] ? kmem_cache_alloc_bulk_noprof+0xaf/0x7c0 [ 1025.858392][ C1] ? __pfx___text_poke+0x10/0x10 [ 1025.858417][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1025.858441][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1025.858460][ C1] smp_text_poke_batch_finish+0xb5f/0x1160 [ 1025.858491][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1025.858519][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1025.858553][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1025.858582][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1025.858621][ C1] static_key_disable+0x1a/0x20 [ 1025.858640][ C1] toggle_allocation_gate+0x1fe/0x290 [ 1025.858667][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1025.858695][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1025.858718][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1025.858736][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1025.858755][ C1] process_scheduled_works+0xb5d/0x1860 [ 1025.858787][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1025.858808][ C1] ? assign_work+0x3d5/0x5e0 [ 1025.858827][ C1] worker_thread+0xa53/0xfc0 [ 1025.858858][ C1] kthread+0x389/0x470 [ 1025.858881][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1025.858899][ C1] ? __pfx_kthread+0x10/0x10 [ 1025.858922][ C1] ret_from_fork+0x514/0xb70 [ 1025.858943][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1025.858961][ C1] ? __switch_to+0xc79/0x1410 [ 1025.858988][ C1] ? __pfx_kthread+0x10/0x10 [ 1025.859012][ C1] ret_from_fork_asm+0x1a/0x30 [ 1025.859042][ C1] [ 1026.307319][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1026.314257][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.324972][ T31] Tainted: [L]=SOFTLOCKUP [ 1026.329321][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1026.339409][ T31] Call Trace: [ 1026.342725][ T31] [ 1026.345741][ T31] vpanic+0x56c/0xa60 [ 1026.349785][ T31] ? __pfx___schedule+0x10/0x10 [ 1026.354676][ T31] ? __pfx_vpanic+0x10/0x10 [ 1026.359222][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1026.365433][ T31] panic+0xc5/0xd0 [ 1026.369190][ T31] ? __pfx_panic+0x10/0x10 [ 1026.373646][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1026.379067][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1026.385272][ T31] watchdog+0x102c/0x1030 [ 1026.389662][ T31] ? watchdog+0x1c9/0x1030 [ 1026.394153][ T31] kthread+0x389/0x470 [ 1026.398263][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.402986][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.407627][ T31] ret_from_fork+0x514/0xb70 [ 1026.412260][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.417405][ T31] ? __switch_to+0xc79/0x1410 [ 1026.422126][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.426767][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.431584][ T31] [ 1026.435263][ T31] Kernel Offset: disabled [ 1026.439604][ T31] Rebooting in 86400 seconds..