last executing test programs: 20m4.162735652s ago: executing program 32 (id=2004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24, 0x300000000000000}]) 8m30.477886923s ago: executing program 33 (id=5652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x6}, {}, {0x2, 0xf}}}, 0x24}}, 0x20040054) 2m52.292772699s ago: executing program 2 (id=7185): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x2, [0x9, 0x100]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e22, @local}}}, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x108, 0x0, 0xffffffff, 0x258, 0x108, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f0000000140), {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 'vxcan1\x00', 'ip6gretap0\x00', {}, {}, 0x88, 0x1, 0x2a}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x2d0, 0x400, 0x1}}, @common=@addrtype={{0x30}, {0x100, 0x108, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1e, @remote, @multicast1, @port=0x4e20, @gre_key=0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'pimreg0\x00', {}, {0xff}, 0x73, 0x3, 0x61}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @multicast2, @loopback, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@remote, @private=0xa010102, 0xff, 0xffff00, 'veth1_virt_wifi\x00', '\x00', {0xff}, {}, 0xc, 0x1, 0x8}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @icmp_id=0x65, @port=0x4e21}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xff000000, 'geneve1\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x29, 0x1, 0x8}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x58d, 0x8}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@loopback, [0xff, 0x0, 0xff0000ff, 0xffffff00], 0x4e20, 0x33, 0x2, 0x4e21, 0x20, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @gre_key=0x1, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x48000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x2, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x880) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000007c0)={0x7}, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e60eb966cd31"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4004880) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000940)={r1, @in={{0x2, 0x4e20, @empty}}, 0xa35, 0x4, 0x9, 0x8, 0x20, 0x9, 0x48}, &(0x7f0000000a00)=0x9c) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)=0x1000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a80), 0x20000, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000001ac0)={'ip6_vti0\x00'}) flock(r2, 0x8) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000001b00)={0x2, 0x2118d5a}, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000001b40)) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000001b80)=@assoc_value={r5, 0x7}, 0x8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) pread64(r6, &(0x7f0000001bc0)=""/246, 0xf6, 0x0) read$usbfs(r2, &(0x7f0000001cc0)=""/28, 0x1c) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000001d40)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @remote}, 0x14, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001d00)='wlan1\x00', 0x5, 0x1, 0x7}) syz_io_uring_setup(0xaa0, &(0x7f0000001dc0)={0x0, 0x12da, 0x1000, 0x3, 0x38, 0x0, r2}, &(0x7f0000001e40)=0x0, &(0x7f0000001e80)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x100, &(0x7f0000001ec0)=0x8, 0x0, 0x4) r11 = epoll_create(0xe02a) epoll_pwait2(r11, &(0x7f0000001f00)=[{}, {}, {}], 0x3, &(0x7f0000001f40)={0x77359400}, &(0x7f0000001f80)={[0x1]}, 0x8) 2m51.595633611s ago: executing program 4 (id=7178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x74}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_CQM={0x4}]}, 0x2c}}, 0x0) faccessat(r3, &(0x7f0000000140)='./file0\x00', 0x102) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close(r4) fcntl$setsig(r3, 0xa, 0x21) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m51.325992877s ago: executing program 2 (id=7179): socket(0x10, 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async, rerun: 32) r3 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async, rerun: 32) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) (rerun: 32) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e65772064656661ec6ee30358756ce9b17ad1d618c05b45837420757365723a73797a203030303030304a84775c3030303030"], 0x2a, 0x0) (async, rerun: 32) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000000c0)="718128f8", 0x4, 0xfffffffffffffffe) (rerun: 32) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) (async, rerun: 64) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) (async) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x84) (async) r8 = msgget$private(0x0, 0x40) msgsnd(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485080081d4f09ff887dad08fabd2f5276904e8a44f1e8a17faf746d15265777f15"], 0x51, 0x0) (async) io_setup(0x9, &(0x7f0000000100)) 2m51.173045978s ago: executing program 3 (id=7181): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fanotify_init(0x200, 0x0) dup(r1) open(0x0, 0x108843, 0x98) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x80000001}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x8, 0x2a, 0xe, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffc01}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.993313188s ago: executing program 3 (id=7184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x2400, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x1000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x10001, 'syz1\x00', 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001680)={0x0, 0xa99, 0x5, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001a80)={0x0, 0x8, 0x1, [0x3, 0x2, 0x6, 0x1, 0x8], [0x1ff, 0x0, 0x0, 0xa, 0x9, 0x1b87, 0x9, 0x1, 0x1a01, 0x40, 0x6, 0x4, 0x3, 0x5, 0x101, 0x9, 0x179c15f8, 0x6, 0x4, 0x8001, 0x60, 0x6, 0x2, 0xe, 0x6, 0xffffffff, 0x2, 0x999, 0x5c, 0x4, 0x6, 0x1, 0xb, 0x7f, 0x1, 0x2, 0x9, 0x8, 0x8, 0x1cf, 0x0, 0x3, 0xd, 0x2, 0xfffffffffffff800, 0x7, 0x0, 0xffffffffffffffff, 0x4318, 0x9, 0x174, 0x5, 0x100, 0x4, 0xfffffffffffffff8, 0x3, 0x0, 0x2, 0x6, 0x584c, 0xfffffffffffffffe, 0x1, 0x8, 0x9, 0xe, 0x9, 0x9, 0x4, 0xfff, 0x0, 0x9, 0x401, 0x3, 0xf364, 0x3d5d, 0x1, 0xffffffffffffff95, 0x0, 0x3, 0xffffffffffffff80, 0x1000, 0x9, 0x81, 0x100000000, 0x0, 0x0, 0x7f, 0x4, 0x8, 0x5c16bb2b, 0x3, 0xffffffffffffffff, 0x3, 0x2, 0x82, 0xd15, 0x9, 0x5, 0x80, 0x23, 0x81, 0x7fffffff, 0x2, 0xfffffffeffffffff, 0x0, 0x5, 0x8000, 0x7fffffffffffffff, 0x8, 0xd, 0x7, 0xffff, 0x4, 0x7, 0x80000000, 0xffffffffffffe4f6, 0x1, 0x4, 0x6, 0xfffffffffffffff8, 0xfffffffffffffff5]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001ec0)={0x1, 0x4, {0x4, @usage=0x9, r4, 0x2, 0x3, 0x2, 0x3, 0x2, 0x42, @usage=0x4, 0x80000001, 0x4, [0x7, 0xd9, 0x8, 0x556871ba, 0x63, 0x8]}, {0xfffffffffffff800, @struct={0x80000000, 0x8}, r5, 0x1000, 0x9, 0x7ff, 0x4, 0x7, 0x2, @usage, 0x8001, 0x3, [0x3, 0xe9d, 0x3, 0xb3, 0x3, 0x3]}, {0x0, @usage, 0x0, 0x1, 0x3, 0x1, 0x5a4, 0x9, 0x20, @usage=0x9, 0x7, 0x9, [0x3, 0xffffffffffffffff, 0xdc, 0xc20, 0x7, 0x400]}, {0x7fff, 0x432, 0xfffffffffffffff8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f00000004c0)={&(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000080)="88381f373eca014977637911c62520e375ace4", 0x13}, {&(0x7f0000000300)="830fa271784d6992c6feb852a782736b803741d9edb1370054a059ea8400e2f03c031eee0f841cc5f44b4343038df04e508d0c07a2c34baa43765b8c42113b18d8d2507a715fea096513424c48453d319cb55128e0a7700b5fa4e9ff74122b799175be4f1184149bca418d6bfa1821fd8c434ed80f1279cb76b840fc0bc98dc7a607cd8701b6e2be72fb5a1e2d7c202f8e414d0bb0d783f035fc7520771e6d5d864028aad12dc831d3b00efd8252fc3fd9ef8b7d7ce140ec20f7f52ae95179d678215937551a6b07b4324a93fa141f61e0d8a1361142", 0xd6}, {&(0x7f0000000200)="9787e8618e791f68602808f0f5f21df4dd53e855b60d3dea739182bd3cf3b9c7d257f598dec9a66b37a7cb6ed694548d1aa8262b22218fcc15b600f25700a6c8a3e0dec74892bac49a22cbd339b24e0d300a1727dc3955ff23ebc387732175b2daf74389cf94866ce1e5519d9eeaf2cb016083591b357cee5801b44304520cdc7260523c3f89749c97fe35b1587e47fd1e31877edef945c8c459371a62235c12393a8faaa992db67a8e8a072067f2c3ee42ba9", 0xb3}, {&(0x7f0000000400)="a1366f045b5d2330a065d542ae0afbca9f32773dad7d313106419e2cc5691e252c171a024a462b7b21b847e249e5f38bb6a47406bdbc7d62a4efcc06eede2cc5713ffbf57192336dd6ad67599b2198103232c31acd4d4b9f1e347863b5e21d78d4a9f94c2d67d40a5f227b6142902bcc1e2cd1f7b1f03c2ccae00a215b956ea4b656f28d22ef0c163388c8f380fcd310a2f995eac65269cc9a29eda4af", 0x9d}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000100)="430e29e8152ef84660c270e98a9eb7b621289535762c5cbb5531b6e78ecd37b4df9c673939587e5db8edc8e88f4da7e0e7840ffd77c2433fdd71d509ba3ea20cc8dd5fa3404f7c630d8ce8", 0x4b}], 0x6, &(0x7f0000001600)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x6b83ff22}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x78}, 0xc805) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x48}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m49.825766784s ago: executing program 2 (id=7186): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chroot(&(0x7f0000000000)='./file1\x00') read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x175) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0xb0, 0x0, 0x1, [{{0x0, 0x2, 0xb, 0x96a, 0x80000001, 0xffffffff, {0x5, 0x1, 0x1, 0x7d, 0x9, 0x26ef, 0x1000, 0xc, 0x18000003, 0xd000, 0x9, r2, 0x0, 0x19, 0x80}}, {0x1, 0xac4, 0x2, 0x2, '..'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 2m49.799794237s ago: executing program 4 (id=7187): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fstatfs(r0, &(0x7f0000000140)=""/166) unshare(0x6020400) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000400)={0xf, 0x1, 0x3, "33c500100000000040fcd817a45b729fd5085780ee0f00", 0x33524742}) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x3, 0x9, 0xd}) unshare(0x4020580) r4 = epoll_create1(0x80000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0xebd880d0c5770aa6}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xfc, 0x6, "2d3a113429199f3ca21164590a8087616819f69ed192485a675f17682aad23a6ea4c842b2862a28b9120c658fe1b5c4c77a187fb10d2dfa86bbab179b3c028fd7d2f9d50cf8629fa5e671c12499ea6396735dc9af93198e0e09ac09d56b8048a390a221ed24f6d46a4515d5c597ee9b21168d2ee8da68fe69a6f0efc0a23652b37b308f301f79ae851803dafb88e8b66c26c27ecdb86eb6f0455d135e8f6ac2ed3de6ad514ee1ac9ef99b9387c89127cbff35f3e396707f570a01b7c9be72b735c16134d4fddd4cc2e0cab30999c99bf0f893581e90b68057971fa816e6b8bc45d45ce0bafba17bdfce64fcea88a70a7a5ad286b84cf92a6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x619}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffa8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELOBJ={0x190, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x67, 0x8, "6619349ecaf0bd209aa3d8353dd1fe8bc3b5b0d550014280c39cec1724a5d34c4b3832bc01179d4a544526d0daeb0bdb5d011f521ed4f9d2de2872e5c269ef069a2b1fde950831ef7b328c121011fd35a98b31c4a22caad9547e5ef5b02f5958e06dc4"}, @NFTA_OBJ_USERDATA={0xfc, 0x8, "db74c46a19acceec05b7c898afbb8430bb325983eb9fbc44f71648962b4c439a4054eb0f214370f08bf68284fda8e19bc6738adb0f2edd17f3dfca56f7de0366e727843c870e179467ce91c2ac24b6eec9857982c6f5678633d419e4394985418f92894aeebbc72968aa2ee9f1833d01bc75ba93488a26e141c7d4b546435721780f5a8fcdefd5cbe307e3c66e2bf8d7fa50fcf794d54887cbc0b2cf1e479d776f893667098c8a21cbad518a18bb9ec9412905c4fbf9e92ad1c31fefa77be8f8798711563eb32ce5f9d013ba1b28835e6844a22958527fae5f7bac9cbdabe447fb617368f9d5a10a391be9b96e5c262e3a801307abe6872a"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x494}}, 0x200000d4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, {0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10081}}}, 0x3a) r8 = getpid() getsockopt(r7, 0x25c40783, 0x5397, &(0x7f0000000480)=""/87, &(0x7f0000000200)=0x57) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs$namespace(r8, &(0x7f0000000080)='ns/mnt\x00') 2m49.786606539s ago: executing program 3 (id=7188): socket$nl_route(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) syz_clone(0x4200000, &(0x7f0000000100)="e42bd1136922dc10586c680f782c0eee0ef3d027395ada121999b86b4fb36784fea9c2e2e3347681bb499a9a275f235621350f3979b85401a07e126346d59835270752402b1ab8538cc1d61ab1b58530d6994238c0d421e1b5cc30db31fbf7aaecfed8c520b792f3ed16f752bea6e761a26ecbc1a4cbfecd2226797873e641fefef6f3f66698e8613f705e4943f23abfe7e19fb19429558f5847062277597e94", 0xa0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)="eaf8d11885c977afe32a9ce28f7226530ff742eb2c") landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) 2m49.7427171s ago: executing program 0 (id=7189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) 2m49.670099171s ago: executing program 2 (id=7190): sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000440)="5040f2d770957e56fa0a65472d2488d9fef6b3fb105be0ecb30af03054a00b56df32da", 0x23}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x2}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m49.573669317s ago: executing program 3 (id=7192): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) close_range(r2, r3, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000240)=0xa00) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400000200000000000000efff", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7], 0x44}}, 0x4054) 2m49.573290069s ago: executing program 4 (id=7193): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045518, &(0x7f0000002a40)) shutdown(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x3fc3a000) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e55697298a0ae35e18d14dd4b6592fa14c0489b858840d12654fb8ddbd1563e581b6a29f56e6127a48c40b95af04e135572e6084e5706e88f02b4440c32e93c31603beb0bc2616de2e7f2a3936b7862df4bc4178710a61eb2e0e7b4ac16cde4477d10653b0d6afde80c950848626b7296ec902f7dc875cbb34a73638a2a48eec75667340826ad84022664c0039de213dc5054b5ecc2ea3c385fe8cdeb814e4eb6262fb39fb637c13a6c1b401f1eafc7a09d49980e60e5caca3520ffeeaf9b20a67d680c7ade66ff7398725ab5bfeed67b48888284c03f6c5331b33f5bd12b10f2c9f8a82549939fbf23caba0dfe1cd962f5e97d9a7dbfed7b25dfcd025cafb3c3b34bde13e2cf3684db786b56929bd381fa5e178b268005224cf7d79103524ec32d22509292501062fd2a907f9eb1a564bcb58da00933f9fb49af10ce55617b9edfad6ca5f9060623e0d6fb73aa68c9b5190dc671968ecbf752962f6e3f0ef6b3ff918603cd511ec00dc67ba004c6469380f5c5390226ccd5ebb934a63c103e4fb6b69c42a6e8e8aa434fd0c787de018fc1e25189ba81be91c80d5e3c9d021baa3cb3abaf755b79e41a8604392c68a018e1750ab6d54608969f3c9273b1a08c3b8d7d9b6f03f4bd3a6c64790617d72a891556cba509f21f992c59db9f78853421fb9ec4ddb2fe782f5da26c038626f26d1e4fda289cea520d44630b041e18ea2ecf56852c25f1ddf3bbaed2c17ba898575431134ee7c27fbf8548dfd63364b8beae267085bfa964786745134ae2b64c4a263f885c198952e795c17e04f0d9e4360de13ae3f2481e6d234bb5c54e03d5e0cb27e5b610ea2c0d85d21bc66e5c861f1e8ba66620cb6f590b2fe294013923b7fc9b170f449e7873bb9aa14cf7421e61feaaeb349a2acb5816a51325f45065b035be05f4498e77eb5e875c03b0c41061caadee14eb2764a5846ba0cab400e1676f533abc56930e5acccf331b0611af1e2947b11820d32e142ca885f4df233678ccbcfa63e5cfa708adcfefa34f059f81f14a5ef2538ef446feec5c78828c618576b18b86c7ee37d8182a8dee51d5dd199cd2ee915f5e25be2885822ab3e5b988786764e611f0bb1214bb9d825c9c4e15c061acf2b4e7361831e0fe9fc409e0004631ab31c42bfd962ba7a0e475f3a91643ce65d2efb94976b14fcf7d21c93bd9208b7bb7a3dfc4444cf14d127401c6892ba93ac786476e0885f028ae6141de817d3517cce625eebb50e2c1e5e64ffc50da4d2eaa605501769e4c1a40fd9da7da178b4bf468942514082773698770ef455ea263fefa4fb258c15afb076c7979296f901e84a2b71eb63cb3d9dfd9abb3e1f8f657070d75541c20476f37e14ca43014ef80b33eeca91ace604ec2051d73ec2f69ffa14bcd79ea577e9676825094606343d31874111fbc535d28fa7a9e379d38226001e241d3515e1d63ba56f1eebe8ea788c4d768f4c4fbbaf834ca3f21460613d768dacf2a27778dc2b4598726646b8c06b6e4d38162720c807724f92bdc9f0b0f5d303d5a5a3998aa270a6760c7651df601bc42c78dd9bd53ee960cf80a30a6b7a1a880d37ff31fb2c9bb0c591bba3ef8228a0506f45065c65b131aff8da8eebbd6754b9e5601632da39c329a229062a94833b23c97371d510a19e2d3b5bc516e3d3c8601495fbeecc16c5c50ba6c435974e8275d372add206964f29997b515f63f50121029e61f47db19fc63b07d0f059ca686e80fb6c294667affaea2daff241bdd0945bfbfe28643136bcea9aa345d482fc3b9d872b482463b92b25f0e5157be3fd8b7a328f327ddfa5c05a6f172deb795f19b9f2091386acb060f170540bfa898057c206d81afd85701b8ee030076bc3782d7d8f6673111baf80818aeca7e5944d91a7f4fce840303867ea18d2b92d74c67157284c787fcfde780fc9a53ae5560e101ef125ce707d34f957072958dc9916492e73a90a10f660a221a7c6730ac0ac01e37d54f058b64f41a46be5320800172e2c9fda248a2964548ddf1f53599027c29ede6079a72d454bcf4403808111d00cb4e3aadd060c333e57c64a70bdfbb572fe228538c82ab427416cdcce1dd643ece610ca7042e2a164d3dfdabb966f1a8fc875cd002920321dac62e25f38cb0031e4de6324b0db402b12c4b0e335898e21b7b326ebbeec0b4bc21ef2dd6f9755e8ff35602d30189ae3efe9c487aec2ce90dbbe790c919b77036240786f3fe9441204b81bc43b5f5cbede75702a1c28ab16d2f578dddb3624f596b5b82e2f26b63966ddc78c8ffa13a23b6c4ee2c741820b9738fe881ddeeeba60fa4221885be55a6fdaa0b90b246f5959b844afd6898bc8c0a75fc45fb968d6e8ea6831d15808b23904355c62a8590d1ba51cdb051bd5ccc1b62a8ca520af60daefae7f7f1dcc90a02ab3af5307fcd5fed9af7d9b192f080be6ded768c6d1d4ea0ba5cc996e5c24b8048eeaea09cabcf1c0488a357280395cfc5394ba160c439dda0a7f4ed182d3f33a4addb1c74d7d797179c633013b24c7e0cd2f4b86904bd1d70a4821c7ff619455953d820e1594c7136e66c260c868776129eddedfdec5ebb0da2e5207215f9c47d7bf74319661311232ca1d108da00df2d07ff5720c474981cb54bd185448ae0e3d9d3194614ae67bdb24122cb2207be610456c35ba6e11429a3a6c266b4bfd905c7534de4fe03ac5063cbb08b3a75137e59e3e8b3fee3989bfb0735ea6f948371a60efff49ea51d5825dd61ef9a0b735fc859c9b003325fe6e3a5fdb8d2cf51e2e9a4c73a8af3a702a83d57d3ddb81d5e9342c97f143ed28228c16a1625d8ba4f0ffddc968f37cb07ea09d35703f920cf4e7a1394b7f18e6f2508a4c90acc92710ddce1e7a9a22ad2d540f669411b263b3e20b07131cc17cf20ae8030de00862bdc33b7eb4f8122c47c833e73aed84199e5d584625570193e18c3d165dae7941d17cc07034a2a5c67c708d6c96f9c5595800dfb65f42c413716b952d42727e7117915b359d1f1c0a64f0ee4b4a0bfbc4e9fc794cd02369e9594acb7805a155ec03505df719aa47e5da38fd3ab736fa76acee10abd1b220b32436260f2ab86f7d0c20fd9b3a1e63b9b3dbd91e7579fec104f5a714f4d0a00a03a1848c58508e8ec27c7fa04d3baf64e1258bd1d72465f3a64c793b3e09a97ca1a2efbac7adb6228ef4588be15afc21c80905a26a22f4db7940b9369051dde4e24008a5f7b943d769578ffa46572435c2076c60096252f3b3b5fe6d8f4579d11c9c71cbf7444c661306fa07dd01e670fa8d24071b09d6e74a268a0d43aef3b7f8e126900bf2e21304785712f327275a2e16febd4faaaacce68b92dcc3c27ca035bb4210408a34103719c82d33c8b43dd9a46cc0420a533b906317fb817ef6164286b8ddacee6191027bfa9ed19746c8401bab93d08d028fd9e2203cccf56b22042c402e8a438ed226112fa71d02c4537d4156a3af28ab4ffcf19309d283902f1e70f42d6713782c5e468a086fdb5c8b3e15de36acc4469ec42ea23a1e5e8e399f4d4be71dd4b4c268db2ab91b68ceafb95cbba36228e59bc0cd7f987a2ad4bbd23b67acabb26a0f4c694ff320f2275042c85ef256aeef306cf5e2803d6c55827011e2f98d0e80819e0039a71cc9c59464f209afa7891a359a3f9efb4bba2a18fd013e8664a6bec7e717ffe2f0c06f7268862696cfae0fe6fab5b1a2921c0e29aaa8638f6a18d1cbaaa4aa0d76f66fa9f44511e631f2fde8024210eb39f545a648c1b77ab04a7d110edbd1dce3939b4dee867df3cb3107fffe5ab22fe5e32b38447d32094259cee40c9a5254df72cbd7a29188d7285facd6e2f5c78ee9d11645cf026e99162da9c2d148373018fe8e052ffccc4e3952e86228d7835a3bc9b4a5c6099dd3e802b059ef2225cbe4664458729c78032e184b61a089870c6b3c2bf2e5df6bd65bc195e1ccbe58b9a6dde49897ab59dd269a737f04e37e34d3d10c3b01c744a742d52da1bceca63fcbecc136a80bf3ca1df2f226de073b67a0b646674744acd14d5dab9929f2cb804637ebf211f2b3a8b959723808904e9044deb551b2613c1e501385693e7abff809b641c02107187cf1bd1c9571a9023942f0c78c467611193a7e6900eefc49fded206630336cd8d2849731b73798d9258be75b843f051679e6bd541c78457db5470d3d494f333a81b3ed26b57f9f7726275c12f192f4b1d9615c7fe3e0bb22fb47ae1effea3bd2a0a379593a25f933c8af1f14d08bd8ca692c9af3eaee136664e1829204c171ad6e50fa928a3c1f5ee2c14f984884c2cb0256acfa6172d030940f3f9f99443c730b0f070192d36fb83b3d470cf3098bd8b0f09eb6d1b58efbde00305c3a50e00df17b9963f1c06f26b48e4a166073f3f3119ed2b56af1f8c056c07f65ffc3f2e81efa22f97c66998b35bb2af3ce2d89af5f5b1368ce9148937f826c3ef81a116382bd3f53e26f210aed545f38c1e21400957b824eaa95bb401ef308852c7e5015b89244a403308de785a81739634161e33d79435f18cf378bd9f5eb59b40a55abe627f6944ec239f80fc15526e7f1b2c2949a85b8c15a299cee1c86f61746a4eae3dc5f347225f1965cf09d4457b1a1b692fb108a681607d6276c4a6cf35709dc95aa249ae245a0435c481cbae672037aefc82fee9f249e643e658d173aea1d99e361f383dd674a5f2a6525755eaba2d59928a8d9e2eb1aafd129cb4c2cefd5da0213d900efa938e937a7c4e62243eeb3f5f43be35323f63b0b1ac2a298fcfbf71129da3465e488f52b82ec725bdf2fd943e09004c62abf5332139fb38b797756c5e9de926da21f8d77408ea740cf5ec8a657eae110df0550c6ca2585e0cdd5de1e986da91ca1d112f0d5397fdc612b2163164dedddf60c1e3dcd94195b65f50a9c86fb7b67b91dc7c0b8ab3d1c254663fc09ad5fd2c97221f1c6032557ff0a2fc441b71b3a6a6c52efded4133c8d57ce15523550237e7fef838d66cd77c48a743b2a2cc7c1f0ef3d520eb7ce9c086d73c352fe311337b3558a6985660a19ac852edceed56e3e9bb49b8a788eaa3f9be70b3fd1e764888a35a6c874256f9a8e53790281e30fdc1ed35ef03e9bd805ba3ef6ad07c3eef31fadcaba39c9b793e15d04f096c62f6282e8fc4aa31b275bc7fe5dce144ba736151d046b1285b698422ae84ae222e835e2ea80791082cd1742385764a0b047fcadfd8da7acc8f820dd50444fbbecb18ff5c9df10e08609d4b0f76ce14dc8ab056227e3604b3933df593a1b961fba44678131c958b15246e5054465bfffba1cb05c8d4a3ce7a3473d88c9213b5d8fcef3c46f8650fec5077bffaf9b469051b0e5aa7b55f863f0919ca310505a063890b1560597aac6ca1ed9a7c7ed8e894597098cc9333d687bd8e1b4539bb9f74d034d2fc316ef806d67bcec412fb485a03f87cb89d122809fc55f1a7fb35a74440d661ee736340cdbe70141214e899cf9f907a2463f995d21e2d1d25fe92b47ea198f467bf5e775104bbb0ed11534ef25eabdd6b14e8961ee0534f5ab504151f1b2f1853f7229e07131696deb538114d51df2d5c4145bb53d7292e1544c3075806980d5d595528dcf1ce6d4d35470331f00a7bb00e4a1b38982f5dbd2114715a3bd23fa9dbadfe2970853a89d1abb9ae5d4f3bab355691c3ccbbe4bcb2e44425d6c2c3dc3ddd8d43872a6063f111c1c7e6ed4449b39bbd6df92ed4a0e4808ffad0391f89b509f683061bcbe06369e47d43e9", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000000)={r5, 0x1000, &(0x7f0000002a80)=""/4096}) syz_io_uring_setup(0x5787, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x1, 0x20b}, &(0x7f0000000240), &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000340)=[0x0], 0x5, 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000003c0)={0x1, r6, 0xa18, 0x7, 0x6, 0x0, 0x3, 0x5, 0x2}) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x2) r8 = getpgid(0x0) syz_pidfd_open(r8, 0x0) 2m49.467638421s ago: executing program 0 (id=7194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000280)=0x9, 0xb29, 0x6) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000064000/0x1000)=nil, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008b00)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004380)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000429000/0x4000)=nil, 0x4000}) 2m49.237894767s ago: executing program 0 (id=7195): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fanotify_init(0x200, 0x0) dup(r1) open(0x0, 0x108843, 0x98) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x80000001}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x8, 0x2a, 0xe, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffc01}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.552964254s ago: executing program 6 (id=7196): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0, 0x204}) 2m48.166553593s ago: executing program 6 (id=7197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000180)={0x20, 0x8000000000000013, 0x0, {0x0, 0x4}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x8000, 0xffffffffffffffc0, 0xd, 0x5, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setresuid(0x0, 0xee00, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000040)) socket(0xb, 0x800, 0x7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r10, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x50) 2m45.501922384s ago: executing program 0 (id=7198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x74}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_CQM={0x4}]}, 0x2c}}, 0x0) faccessat(r3, &(0x7f0000000140)='./file0\x00', 0x102) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close(r4) fcntl$setsig(r3, 0xa, 0x21) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m44.478161348s ago: executing program 6 (id=7199): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400003f1000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x54}}, 0x0) 2m44.347785913s ago: executing program 6 (id=7200): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m43.58671197s ago: executing program 6 (id=7201): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={r3, 0x2}, 0x8) 2m43.500402993s ago: executing program 4 (id=7202): socket$nl_route(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) syz_clone(0x4200000, &(0x7f0000000100)="e42bd1136922dc10586c680f782c0eee0ef3d027395ada121999b86b4fb36784fea9c2e2e3347681bb499a9a275f235621350f3979b85401a07e126346d59835270752402b1ab8538cc1d61ab1b58530d6994238c0d421e1b5cc30db31fbf7aaecfed8c520b792f3ed16f752bea6e761a26ecbc1a4cbfecd2226797873e641fefef6f3f66698e8613f705e4943f23abfe7e19fb19429558f5847062277597e94", 0xa0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)="eaf8d11885c977afe32a9ce28f7226530ff742eb2c") landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) 2m43.058175444s ago: executing program 2 (id=7203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x5a475914) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m42.821978912s ago: executing program 4 (id=7204): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x1c000000, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) 2m42.321217586s ago: executing program 0 (id=7205): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r3], 0x38}, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m42.189911432s ago: executing program 6 (id=7206): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x3}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$cont(0x7, r0, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='net/ip_mr_cache\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a32000000000500040004000000050005000200000011000300286173683a6e65742c6e6574000000000c00078008000600000000000500010007000000"], 0x58}}, 0x20000000) readahead(r4, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000010c0)={0x1780, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="d722c82df351"}, @NL80211_ATTR_SCAN_SUPP_RATES={0x3d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xff, 0x1, "523f43b248fd12abd0403edd111e97ca252581b6fa8d7d5c8ec991423a2791b26c32845a9a4b5c7774e6a5c3dffc5f0afcd6050a0193f618741a802c661b065a999b6310e87530feb0618ed8e8406f1cc78567574ed3ee50d5604046d3a77552641714a251469c5a95264aea5ae2b8a52cc98f9eed771e6c5737fb2f314430bd1317d4703b318396e2e176f3025936dcf44432b665d4f97325b9fe4839b461f7c0dcab8d1a2e33fc96fe7dacc6b2bae0d2815ad7a73e52c030853252d5c5e6b33aea3734a625309dc275a243acab6a0e1fd40c512a851aee051efc6a8a65250f9bbaf7b044a53b2e99fb34ec08ed6aaa9b5c989f4590996718f40c"}, @NL80211_BAND_6GHZ={0x79, 0x3, "ac4e4b3376b7cf5f05d58d6d9354e29b026e72f26307414836774b0575fe86ee614b7c652a511232afb3884f1f35f96fa496d473c0ca28c7db64d64fd2cc6652103658c2f88aa2dcf8ab2cd55fb9793a8dc83d76f43ea37546492a2e46437246314a61f3f2e1e398c629e204271e81f2d5a4ff2aca"}, @NL80211_BAND_5GHZ={0x87, 0x1, "accd1e0aceb77619d04369ef22c22aacc67a4aeba591a966fd830f11efcf2d6ece84c6d1f8c257c8a3324d42598f58683305e57deb486839f9f9fccb8a274e68a35abb4df47f169d76e3d9388d8cdd8322a84a8b6891f888c248ab536acb90509e3be77c11e605c0379bef6bf5f833e62ccdabad81bd13acce6881446a8bcdfb1af7a3"}, @NL80211_BAND_60GHZ={0x2c, 0x2, "56988e8b6031818a0d5f1e8ec8533fb05b960677b6d86d06d5720c4cc24dcfe9696ce1a4a52a33ff"}, @NL80211_BAND_2GHZ={0x59, 0x0, "d342050e5a0bb87e40113a899f0ee4b3235b48c6116998c8e744ee714e70ac2a09640a96d98ab376303e4b864155c412132a8544f641a28dce216f672aa5c0541e658fecc438cdd2931a2de6fcfe8b524da388328f"}, @NL80211_BAND_60GHZ={0x83, 0x2, "bc6ee02ff8bded77b9bc5339d6cdfd0c17a480ccdc93c0df3bb43eb85fcb5b46a333282fbd87f9e8620a557064c8a464897b5fcdbe5c3b522fd9bfcf5904cd77542e73ad7d5fd62a45d0f869386a9d51dc4621670fa44f74038b26eb2567f7dd8da8ac96185796fc82a3a6df2f678d52fd486ff75f565879d290633e981f26"}, @NL80211_BAND_2GHZ={0x9e, 0x0, "29528d7ba7294558e2c630498eb789fd3f479ec540a1d34e78b2976eda2540cffffee29c127d50f47666763e85a90128e240d559f1f60e26f1327442cae8445bff29d0474cffcae3454d6e3f83801f5fb358833f8f482f4a4aa3ff15af083129e862fc52ab4851d8e6901af909069d6c81f4c54865ffc6960f0a0e6b8a7244d47c7ce9cca5d5aefb2ed2c4619f07a758dbc114963aae28ded5f7"}, @NL80211_BAND_5GHZ={0x1b, 0x1, "6579ac24063c03d93a3c6d7649071a2f316d63879579d8"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1360, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf6, 0x2, "923db7ba9275f90a4d3cefb22e8f8fa5d632d6e2320850f712fc4a2a0bb01afbd8a3c8dce24161a45a54e252da588ecfed3052811046760a754088e6fe7bd82c4b7ac09bb5e640e2c291a8fcbfb9e03388778def62877490d9a4f22cf235ef4ac49fc5dfb12863fb009df3615c3d6d8a2042b6f2a68ba19b0346597974db26610c68ee0e8ce46fde535516820940e264870a9f3ad692420367e23724aae90b63ca48e53aba2fb56c7aecc49714e378c180221937674bdf3b0cd49dc380ae4b8aae5592f8cd79c2162a43756f6a5d94c742a445a9f7fd74eb12716dadd2eb3a52cc33e1adaffc6848fc4cdb7f5a3907db452a"}, @NL80211_BAND_60GHZ={0xed, 0x2, "d6b83a68a70d8355c15ed2ad314c6e52ac8dce4cd45e100eef8ab605219c501f150c617156001251cfdef6517384d86d4663f65c5b049a953920531e7d07a74a94ae796e26682fc542fa353e9d963f074412d5024591d24c31b0bce557ed21ee25591d207d0a43ba23e342ebbda266b0ace47faaa3971b095b399ac04a53c0624b6cbd48659fb03e91232c8e523d860b0b2524858e5b6352dea7b4c55cfd6da168f0ef09fc8cbd4eb45e8eec6314c5abb920b53a8ff1d6b6288c59a4ecee944b97c8edc6f7ed2f03000000ab7f2d042c11b674b2cd0f60978fbe553a52fcbe736c7165cb6758dde819"}, @NL80211_BAND_60GHZ={0x9e, 0x2, "1bca4142c017d98298031c91f5723a19c372415a92b7a212076f1d527d0215e330e0fa68015102d05f11d16988180513139e9c3a44584913a6aed32f2c8a94994fe88ef031a24155fef5eee15c4645e9eb4eabcc0df7843eb184e0f41662456e391c8d5f97beca2592000d8ffaff21e3e3ae5cc792f1abe4094024e73550386ffc1c362c1374e30b463f3d69ebb781b06215a4ad9eb976dd2d5a"}, @NL80211_BAND_6GHZ={0x5e, 0x3, "77ccb3f012f5130d9f155bf713350639f8e8e62e620baab969c85b96ab96803ee7dcf8f19d8d661ad73b106a50c884f45c22b1d8f9f1e55af9bd2c82676deeb3469078aa2c043f56531ab4da6c4b8016896135f0f54a7adc61cb"}, @NL80211_BAND_5GHZ={0x6f, 0x1, "574d08e930a8e73a7cc1ba7ed96d742686d978c8adc576950c7b42f8c5f4ba9c8636422beb6be7fa625bb47b0a2fa9505d12cd007a600512dd8bd7da9d8fe07f9e245a4e5af46b089c98a0023c5eae814deafc0eb05da448f0ec4481ec0e7d662dfc716b0fc9a67a88739e"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1780}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) syz_io_uring_setup(0x510a, &(0x7f0000000280)={0x0, 0x7d69, 0x2011, 0x3, 0x1ae}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000380), 0x0, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r4) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f00000000c0)=0x800ba) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000540)={0xe}) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000180)={0x7f0, 0x1, [{0x1, 0x1}]}) 2m41.205630367s ago: executing program 4 (id=7207): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0xea1085a4413175e2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x400005) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth1_to_hsr\x00', @local}) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000), 0x0, 0x1) 2m39.732039606s ago: executing program 0 (id=7208): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fanotify_init(0x200, 0x0) dup(r1) open(0x0, 0x108843, 0x98) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x80000001}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x8, 0x2a, 0xe, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffc01}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.713042765s ago: executing program 2 (id=7209): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r3], 0x38}, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20200100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m39.490568561s ago: executing program 3 (id=7210): syz_emit_ethernet(0x7e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x12, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x1, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 2m36.969972084s ago: executing program 3 (id=7211): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r3], 0x38}, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m23.860210571s ago: executing program 34 (id=7206): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x3}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$cont(0x7, r0, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='net/ip_mr_cache\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a32000000000500040004000000050005000200000011000300286173683a6e65742c6e6574000000000c00078008000600000000000500010007000000"], 0x58}}, 0x20000000) readahead(r4, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000010c0)={0x1780, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="d722c82df351"}, @NL80211_ATTR_SCAN_SUPP_RATES={0x3d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xff, 0x1, "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"}, @NL80211_BAND_6GHZ={0x79, 0x3, "ac4e4b3376b7cf5f05d58d6d9354e29b026e72f26307414836774b0575fe86ee614b7c652a511232afb3884f1f35f96fa496d473c0ca28c7db64d64fd2cc6652103658c2f88aa2dcf8ab2cd55fb9793a8dc83d76f43ea37546492a2e46437246314a61f3f2e1e398c629e204271e81f2d5a4ff2aca"}, @NL80211_BAND_5GHZ={0x87, 0x1, "accd1e0aceb77619d04369ef22c22aacc67a4aeba591a966fd830f11efcf2d6ece84c6d1f8c257c8a3324d42598f58683305e57deb486839f9f9fccb8a274e68a35abb4df47f169d76e3d9388d8cdd8322a84a8b6891f888c248ab536acb90509e3be77c11e605c0379bef6bf5f833e62ccdabad81bd13acce6881446a8bcdfb1af7a3"}, @NL80211_BAND_60GHZ={0x2c, 0x2, "56988e8b6031818a0d5f1e8ec8533fb05b960677b6d86d06d5720c4cc24dcfe9696ce1a4a52a33ff"}, @NL80211_BAND_2GHZ={0x59, 0x0, "d342050e5a0bb87e40113a899f0ee4b3235b48c6116998c8e744ee714e70ac2a09640a96d98ab376303e4b864155c412132a8544f641a28dce216f672aa5c0541e658fecc438cdd2931a2de6fcfe8b524da388328f"}, @NL80211_BAND_60GHZ={0x83, 0x2, "bc6ee02ff8bded77b9bc5339d6cdfd0c17a480ccdc93c0df3bb43eb85fcb5b46a333282fbd87f9e8620a557064c8a464897b5fcdbe5c3b522fd9bfcf5904cd77542e73ad7d5fd62a45d0f869386a9d51dc4621670fa44f74038b26eb2567f7dd8da8ac96185796fc82a3a6df2f678d52fd486ff75f565879d290633e981f26"}, @NL80211_BAND_2GHZ={0x9e, 0x0, "29528d7ba7294558e2c630498eb789fd3f479ec540a1d34e78b2976eda2540cffffee29c127d50f47666763e85a90128e240d559f1f60e26f1327442cae8445bff29d0474cffcae3454d6e3f83801f5fb358833f8f482f4a4aa3ff15af083129e862fc52ab4851d8e6901af909069d6c81f4c54865ffc6960f0a0e6b8a7244d47c7ce9cca5d5aefb2ed2c4619f07a758dbc114963aae28ded5f7"}, @NL80211_BAND_5GHZ={0x1b, 0x1, "6579ac24063c03d93a3c6d7649071a2f316d63879579d8"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1360, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf6, 0x2, "923db7ba9275f90a4d3cefb22e8f8fa5d632d6e2320850f712fc4a2a0bb01afbd8a3c8dce24161a45a54e252da588ecfed3052811046760a754088e6fe7bd82c4b7ac09bb5e640e2c291a8fcbfb9e03388778def62877490d9a4f22cf235ef4ac49fc5dfb12863fb009df3615c3d6d8a2042b6f2a68ba19b0346597974db26610c68ee0e8ce46fde535516820940e264870a9f3ad692420367e23724aae90b63ca48e53aba2fb56c7aecc49714e378c180221937674bdf3b0cd49dc380ae4b8aae5592f8cd79c2162a43756f6a5d94c742a445a9f7fd74eb12716dadd2eb3a52cc33e1adaffc6848fc4cdb7f5a3907db452a"}, @NL80211_BAND_60GHZ={0xed, 0x2, "d6b83a68a70d8355c15ed2ad314c6e52ac8dce4cd45e100eef8ab605219c501f150c617156001251cfdef6517384d86d4663f65c5b049a953920531e7d07a74a94ae796e26682fc542fa353e9d963f074412d5024591d24c31b0bce557ed21ee25591d207d0a43ba23e342ebbda266b0ace47faaa3971b095b399ac04a53c0624b6cbd48659fb03e91232c8e523d860b0b2524858e5b6352dea7b4c55cfd6da168f0ef09fc8cbd4eb45e8eec6314c5abb920b53a8ff1d6b6288c59a4ecee944b97c8edc6f7ed2f03000000ab7f2d042c11b674b2cd0f60978fbe553a52fcbe736c7165cb6758dde819"}, @NL80211_BAND_60GHZ={0x9e, 0x2, "1bca4142c017d98298031c91f5723a19c372415a92b7a212076f1d527d0215e330e0fa68015102d05f11d16988180513139e9c3a44584913a6aed32f2c8a94994fe88ef031a24155fef5eee15c4645e9eb4eabcc0df7843eb184e0f41662456e391c8d5f97beca2592000d8ffaff21e3e3ae5cc792f1abe4094024e73550386ffc1c362c1374e30b463f3d69ebb781b06215a4ad9eb976dd2d5a"}, @NL80211_BAND_6GHZ={0x5e, 0x3, "77ccb3f012f5130d9f155bf713350639f8e8e62e620baab969c85b96ab96803ee7dcf8f19d8d661ad73b106a50c884f45c22b1d8f9f1e55af9bd2c82676deeb3469078aa2c043f56531ab4da6c4b8016896135f0f54a7adc61cb"}, @NL80211_BAND_5GHZ={0x6f, 0x1, "574d08e930a8e73a7cc1ba7ed96d742686d978c8adc576950c7b42f8c5f4ba9c8636422beb6be7fa625bb47b0a2fa9505d12cd007a600512dd8bd7da9d8fe07f9e245a4e5af46b089c98a0023c5eae814deafc0eb05da448f0ec4481ec0e7d662dfc716b0fc9a67a88739e"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1780}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) syz_io_uring_setup(0x510a, &(0x7f0000000280)={0x0, 0x7d69, 0x2011, 0x3, 0x1ae}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000380), 0x0, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r4) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f00000000c0)=0x800ba) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000540)={0xe}) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000180)={0x7f0, 0x1, [{0x1, 0x1}]}) 2m18.298600205s ago: executing program 35 (id=7207): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0xea1085a4413175e2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x400005) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth1_to_hsr\x00', @local}) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000), 0x0, 0x1) 2m18.102666051s ago: executing program 36 (id=7208): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fanotify_init(0x200, 0x0) dup(r1) open(0x0, 0x108843, 0x98) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x80000001}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x8, 0x2a, 0xe, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffc01}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.939385012s ago: executing program 37 (id=7209): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r3], 0x38}, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20200100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m17.47291603s ago: executing program 38 (id=7211): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r3], 0x38}, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 12.621746839s ago: executing program 5 (id=7533): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x1, 0x0, 0x9}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a001800002001000000000000003a000000000000fe80000000000000000000000000000000020000000000000709"], 0x0) 12.583016079s ago: executing program 5 (id=7534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x21, 0x80005, 0xb2d3) getsockopt(r4, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047452, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000003, 0x0, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(0x0, 0x0, 0x101d01) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) r7 = dup(r6) ftruncate(r2, 0x40000009) prlimit64(0x0, 0xe, 0x0, 0x0) getdents(r7, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10.716622976s ago: executing program 5 (id=7540): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x6, 0xb8, {0xb8, 0x2, "4c249a5825089c51c8ea31d27a910f692adc6f515786b414a34d95a68df1fcbbfe146c42319c9ffd86a227b237038b9b1acdb6d0f57f6a73e7109654e9293abd7ad1fcefb01eb83e974002a9a831d08ebce47974954798a61e9428d4683e1d9a7fea2ca1bc0198e40c7803a2ee2a71c1544fc6ac452f65a0b1404c2778af85bc642e588f56fdfc696ff326e1bf1c5c40b6773622047183aae753319de7eac7d279aa3d012aff80d44cbec43dad2268c4dafa54925d26"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0xf, 0x3b, "f8e8438e9811f1ddf5c127784cbe4c7fce623c8c4d9c9b063dc63fa0b08d9a82803093f11a1238ddb088fc400b69ab74aee18d2e8c196e91ba3135"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="15b1db077bdd26b9e2aceb6dcd5ad20037fef914d6268ddcfe6b3fa5f9bca80779aaa3ef0496007b80122d7b45b8b478ac386e3283889a13e7858e52f4e2777d69578201dad65dcbebd287d714f8731ab892097ef5c2ea06d331627efb8edd1ecf4a0b731cd0982bf5e69475d5aac7bfc398424df35b6aaa0fe53ff78827d4001fa95c72ba57d00a308bf44bf9e14a6d9d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 9.682177753s ago: executing program 7 (id=7545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7220000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x4000000000000000) 9.575041566s ago: executing program 7 (id=7546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'veth0_vlan\x00', {'veth1_macvtap\x00'}, 0x1}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x1000, &(0x7f0000016000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x2000, 0x1000}}, "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", "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"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) 9.50364653s ago: executing program 1 (id=7547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0xf2ff000000000000) 9.450626394s ago: executing program 9 (id=7548): r0 = socket(0x15, 0x5, 0x5) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x20c}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbe) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed"], 0x10}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) write(r1, &(0x7f0000000200)='G', 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') 9.145702016s ago: executing program 1 (id=7549): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c"], 0xc0}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x405689, 0x74c03) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.979177595s ago: executing program 1 (id=7550): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtfilter={0x2c, 0x2c, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xffe0, 0x1}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000001440)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/118, 0x76}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000002080)=""/84, 0x54}, {&(0x7f0000002100)=""/166, 0xa6}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/190, 0xbe}, 0x4d}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = userfaultfd(0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000300), 0x0, 0x4008804) (async) recvmmsg(r2, &(0x7f0000000080), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_procfs(0x0, 0x0) (async) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x4) (async) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) statfs(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) semtimedop(0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x24044000) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) (async) symlink(&(0x7f0000001780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e01020301090224"], 0x0) 8.369388841s ago: executing program 8 (id=7551): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000200)=0x7f, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800001, 0x0, 0x6, 0x0, 0x5, 0xfffffffc}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x4c001}, 0x44810) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2488c0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000440)='b', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670300000000000000adfa8ab66d33ae106f26529a847f552c305aab3fab92e416849f60dc9a40af916317e1dcafb3d0085e1720e1b9fe4f2d67617063dc2b5430e3d3b9e20000c658ead541e23d501cb5013ddb9907485f5138aa86d56e3db583f06da8b835d247dbebee4136f47b6525b7ee68f0cc6675e09013f669c6a081e3fa11fb1ee373cf12dfe24171e00dc178939c55b2dc6470206c699a40da10be34ceb2c21132a4c4e8a283bdc9661366bde33e64ee63f494d808c1b2062426cd10bfa6bed4af3d8909a8e152dae3e3454f635d2b47767d381a", @ANYRESDEC=r8], 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f00000060c0)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffe66) write$FUSE_LSEEK(r8, &(0x7f0000000180)={0x18, 0x0, r9, {0xa}}, 0x18) keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r7, r6}, &(0x7f0000000280)=""/190, 0x15, &(0x7f00000000c0)={&(0x7f00000005c0)={'hmac(sha256-ce)\x00'}, &(0x7f00000003c0)="7088f839d5822a190d", 0x9}) ioperm(0x0, 0xf1, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmmsg$alg(r5, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="f2d66824693b05301a08be4fef16ae17fa", 0x11}, {&(0x7f0000000600)="78d737112a752f5085f909666540d4325fa02035b21d0276ad0fc25ea62f5f870e793bd1bf0146f9599dc135dd241ea0819cf4459532049726df14af817ba5a1c16f29634c5da0fe8bbaa5da1162c745760bfe69ca2e88809ad1706cc5f2132901b4de83add10813dc779bd8a28e03c288863795dd4c687b42a7d7d1bbd47dd5d2bb9cb449904b81db541061062c6557733d2a3232e67484e365bcf598496dbbc2821ef54fcab98e658e7add0fb6761f3f25a83b449b55ebc9eb50cc58d6f400d4f14fd671846d5537117c24d3df006cb511fe7bcf256e8056556e1db7", 0xdd}, {&(0x7f0000000540)="743d6f342061c09ef0109f9caf43566a1df0eab47e53d0f699da9b51360fc6f4b7efbd17c63207d4310aac64cd5a800f21f2572ae09e5bfaea99a12502af259e5de8640bff3eb963e9162f430241e95ca8fc65026669cba2ea7fd8accc065a0cdc27db446ff80fc0d3ad", 0x6a}, {&(0x7f0000002380)="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", 0x7c0}, {&(0x7f0000000700)="3a42721c323ecd7748a187de9904de3ffc3284e14d6ecdff303a8f8e22c012c7e72843f70ca5836a4a82e048a86b9ac268923f5c47efe2921beed3e689d7b37f5025e334d99f9c536448ca9c14bfb76c75b84b1121e4469f533a4b7d5fc80e58fe4e3f637b85d1022a937299cc", 0x6d}], 0x5, &(0x7f00000007c0), 0x0, 0x24004094}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)="8078140e556b8bf1bdafab7eb1bf8a8ed4d4313976a2443f8ebc730c657abbb54f4880b1b96ba7c37094c2c3458dc5c8272e23a69ca5e5a894e66124494ecb7fad555aedad5192a4dcb475344dabc630309a6e02dea5fcaaa5ceb9e4c81ee8b05a9033c004136fb080deaf1594f6b4714a600aa529dcab292a4d0fb00fa4703a454964546f106fe7e643c8923bcc4dd3726010097776b8d3c72f422b11b37bdd8b3ee9e8c7ff3d4c4b11fc59c6d1b2f6ce34bbda744f079138323524c28ed142dba57ee0489d089ad390ab3473a18e", 0xcf}, {&(0x7f0000000900)="9a976e83b0d5ed53ff5fd59dd1f1544c9253c3870d81383f9b73b70220f5115a17bdab434c48643276d85e162b5df894528f4dbe3729c19c1d5551fc0cbda81582c7c055ba4b91a89f66edc262b4944361e7b042cae214ebb1448779a75d37af61b01d0894102375b4eab2c1f4bc59dab4e95bac037b043d229acc5dc906af79ed80d9d4d3d70eba672ce7fb020cc1b075c360f411e1209413a3fa98ef50e4465f8256f9a2904081baa8ae4384ae257bae6b2b8fd10db227dce661e964776770434ef20baffb06ea03acce81855ca005de1e6fa6", 0xd4}, {&(0x7f0000000a00)="47f642e7d37ee4522df9bc965dc7032b23d96ddf29c699f66ec4787c724bedd3d6b8222d9efb290219bbf060520b2ffdc5cc49617fb957565b408fbadfcb04429a87c8adfba96041bfcf926144ac7fd75a73b1076aba9403eef6c4cf95c98d0d718a2a06b435857aae485e020efac32abfaebedf32bc9b88fcc8c3a11f5fc88746d0ad0488bee4fb6a5f9d1942a6cfb869f6c0f372e34c0f8272573c5d159b981964d3838f5a0ba29eb2a6590aa9c1195b2feb14c1f854859ca176ea3b37cb2def3b", 0xc2}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x1) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x80000000, 0x6}, 0x1c) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000004001"]) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYRES16=r10, @ANYRESHEX=r6, @ANYBLOB="12800b00010062726964675f000024000280050017000000000005002c0001bd9b000500240000000000e90716cd1e244b0c755042123c000b26734400"/75], 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0xfe0f00) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) socket$inet(0x2, 0x1, 0x0) 7.958348999s ago: executing program 9 (id=7552): syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44091}, 0xef) 7.940479414s ago: executing program 9 (id=7553): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="49b7cba24ba2055bae4743deebb0ea0a6d2668ad6d90fa19a62e0bd96d0a0d78a646a899e244850b93eedf84b5d8d3429d3f0d216b151da999f4899cfafb7cb54d757a09ff8e28dba8e74f0d14ce5b0774387b988f1d7fdfb8b16d575ee56294fa8bac6436857072915a921d1989a6c913dc38c9a668ffcd91f3f5fa2764b210d94959c8a18cd8eddad2d8e34dc609f891ac7fc1de00ac97429a3a1f3d9a7a4ba71b577875111f9d844e86e81f0a5fa321020b9a8d5c38146a985c68cb3de57a3e8dfee01ac9473ddb6998c1d38f04831b6c1d421523ba1061abb6805514f5d254021924ba9e7c0762e17b4809b5ab048fd4763fa00085d8bb20064bb8985a4b7a734233e0495459044583fefb27e8d5b3fd4ac7b51424cf8307bc199c7fab3e8a7eee9071efb3765d46421b225bf727219f8b3cd8bf8db1128096082c40db87a03d5be4bdbdae43be1bca306369021c27b81ad0f5ea15bcca5326f7f42d8faa8c14f7de0bd3c374da09f3e384ff30e94444b0fbd79396c910559bde230ede3e1e2d9668925ab42af9297a771394676f71335febc1997db7dd65e097a9cc5a72d912d894cd625b73b904bfea3bee02790efe5410d4634e2d0146dd708f9685d010e4e6078575b23e962579b6c3b7a4afc7ca15e6c3d637ce4ffba6b6d283d4685e002c26a2f0cda33858af1ee1a5f31c8aee058b051fcf74de9d4d434275f291ea5850dca37f51e33f2e23f7596c2e437c26bf1919a6ac90db80d2707964334847248a5ef338e4a2871f53f16638117eeff7310a0b17da76a9145b641ecd0c38c0febe6a5ff14fccc7262a2a4a98671576457272c8577826d9a0e134d309c34bd3f25b6573fb46c4030e3111a8de38fdd0f4c2656e05ed69a3e5e260ee9277d62feddd92405d9f29b8f0d950b6f6517b7e2b4e017db0034e1f83c67572904ab5e5ec3d5e79e975269e2d72f46504d3ceaa54ab68b14d411325275c1dd09d83fc05ba638b9544d5e0889364f7f9355f99ad48ad8d70844343318c20a01a75c87ef82193b7739bc312a127dff47cdb7c6615ddc10a264e870f3d7377ecb85cf09b37e1677a9c24bd53c365856d4ea1191393f6f2de39db94bb7c9b96ee343ee66cd07b07d9e260e388f97341a5007de84eb565669f81ae48454e3ea0a8055c0b6681091ceca9871f3d57255c641ac9d29b0d373d5e6ae5ca0beccd71e2c3a5e4e289b97852bb1cb07d6b5c9fdd5cbcde77491eba107a97cbc9cbc027ce90531cc27cbf843355217c4bb0e60005bce5ba9976bb2ab552cd0eb1a94ff80691917ef1b9da100cbf2bf3c169e9b329df75ac726dffbc32498fa54079c4256722f5ae5fe3a232b63c75c11b1d190ae11d0086c840b5b63a1f2c0ee63523728705d8747dc743b13fe725af3d6cab03343582e53ab1", 0x3f1}, {&(0x7f00000041c0)="1269da71e0cc9189ddd4d5bc965c", 0xe}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x35, "787ef5a525f82b98a2da48c53fc8644f445995f0ea7b7bde111d3e49d8a990861ec7be6529922ab974693293ab7ef9b068e09a1edb"}, &(0x7f0000000040)=0x3d) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x4, 0x7, 0x3, 0x9, 0x2}, 0x14) r3 = socket$l2tp(0x2, 0x2, 0x73) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r5 = eventfd(0x7) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x1, 0x1, r3, &(0x7f0000000080)='=', 0x1, 0x0, 0x0, 0x0, r5}]) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}}, 0x44) sendmsg$netlink(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1400f1ff2500030628bd7000fedbdf250400ce808f18f55683a580063dc12aa50a538d97da70ca0c0c76dc3b9353199c94d41a5a2d3fd63bbceae0866be013a74b27f65d14777b4ca6d13bef37"], 0x14}], 0x1}, 0x40) 7.779512113s ago: executing program 8 (id=7554): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') unshare(0x2040400) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f00000011c0)=[{{&(0x7f0000000140)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x18}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="ea283cc9a9bbe28be7a59e1c5dab02bc0cd832748afefd87c493d589b6cd9b711c40bf407b4cef2c51bd776d450b56b6c101c4b79c9cb14844afc31007f1220d27bd5181f462e7d6edc729ecc8a33dceb46a029e286364c941925c3c744905f391537daa96d325086389", 0x6a}, {&(0x7f00000003c0)="afe6706e7559fcfdc8a3331cb5789cfb2e160a13f6ffad4baf034758a12e8574e543f1e45d0344e6cc25d67247340e4366b355f80d16e23a0bce448d5166fcefba9cec2411db047ce6f295d25e1b1edaf0754f5b63f056b540757206dde88fdb6518c087b4579e98599fbfec0ebd512d25d00992bb859674f21003bc5f93efb4532b133d771d084602bdca0cca95f8400f96f0fe835a21ada6d3f0ab884de168c9808ae6f53239e827976ddc621a74d43818607f5c4c9faeddb77188d5b86df1467fd9d902b2ba8f5b95b9bee81769562346f07594d9fc7bac", 0xd9}, {&(0x7f0000000280)="63d854485313c201e2fb3e42238fde0f35ea7323c2562bea0637663fe367", 0x1e}, {&(0x7f0000000540)="e1d7eb0b3bf0659497307f1e00a138f18511f1175b49fa70123d19e4dfdd667501c9877ff85274c2b1f194bfb0d1fc6f7c4de6637ed63ce79f17122686f6a13c6a7af9e92fd49c7efcba55173cf2b43e9aae81be9b4f3663ba6600a9ec243d9c7aa28780347ace567650740be2e703cb0045325acbf1db7cda89de16876ebcb5437f27e4d7aea9ef46292da5517db374", 0x90}], 0x4}}], 0x2, 0x44008004) write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef) time(0x0) unshare(0x480) listen(r2, 0x4000008) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000110001000000000000000000051acd0a14000000090a010400000000000000000a0000041400000011000100000100000a00000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40000, 0x114) pselect6(0x40, &(0x7f0000000240)={0x6, 0x100000000, 0x4, 0x3, 0x2, 0xd8, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x2, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71eb, 0xc}, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x7, 0x9, 0x3, 0x2}, {0x3, 0x1, 0x80, 0x4}, {0x40, 0x2, 0x4, 0x6d}, {0x7f, 0x1, 0xf, 0x3}]}, 0x10) write$6lowpan_control(r0, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 7.734184639s ago: executing program 9 (id=7555): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "a370eb322a038c00", "00c673cd80fa23d2d93287007c25140a", "ee061ca5", "00ce7984d1454e4f"}, 0x28) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d7", 0x90}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40092) 7.596023592s ago: executing program 7 (id=7556): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.54089289s ago: executing program 8 (id=7557): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44110000100001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=r2, @ANYRES64=r2, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x9f1402a68c353f5b, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x124) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r7}, 0x0) openat2(r5, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r6, 0x0) shmctl$IPC_RMID(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e23, 0xc, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x3c}, {0x0, 0x5, 0x31, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca8}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x2b}, 0xa, @in6=@empty, 0x3505, 0x0, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 7.185938155s ago: executing program 1 (id=7558): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x9, {{0x2, 0x4e23, @multicast1}}, 0x2}, 0x90) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0xfff5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) socket$netlink(0x10, 0x3, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.075900831s ago: executing program 9 (id=7559): mlock(&(0x7f0000ff8000/0x5000)=nil, 0x5000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x70bd25, 0x0, {0x2, 0x0, 0x7fe8}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 6.015351159s ago: executing program 5 (id=7560): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="c249000300000000280037800b015a96fc4feba2776900001800"], 0x48}}, 0x8000) 5.829489676s ago: executing program 1 (id=7561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x1000000}, 0x0) 5.809395546s ago: executing program 9 (id=7562): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r4, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000019faa366bf0c48efa4adcc8ace536b832799e2c284caa3a76f1c2e89f75c8da50417550ab345171970354682645f72474eb05fec94ac3b405507d69fafa244c1da1763b521685717116e5c5abf01877f87230e821b8e1371fa2b12ccd82319406cfca996f822a340f63be542509d621feee371c3bbef515edd44425c62ce5f8d5cca0ef27c", @ANYRES16=r7, @ANYBLOB="01070000000000000000450000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) 5.701098553s ago: executing program 1 (id=7563): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xbea, &(0x7f00000007c0)=ANY=[@ANYBLOB="120101020d500920"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) unshare(0xc000400) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8004000000000000240012800b00010067656e657665100014000280080001000200000017000300050000001400030067656e65766531"], 0x58}}, 0x2000000) syz_usb_connect(0x3, 0x2d, &(0x7f0000001100)=ANY=[@ANYBLOB="120100026dc77640e305030579250102030109021b00020400500809e9270700e31ef7000904310800989c2605"], 0x0) 5.621116716s ago: executing program 8 (id=7564): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r6, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) 5.558020718s ago: executing program 5 (id=7565): r0 = socket$inet(0x2, 0x5, 0x1000000) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xf133, 0x10000, 0x0, 0x3d8}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @mcast1, 0xb}, 0x1c) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r8, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r13, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x20000001) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x8001) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}}, 0x20044000) r14 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r14, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) 4.393615207s ago: executing program 7 (id=7566): syz_emit_ethernet(0x5e, &(0x7f0000000740)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) 4.166500158s ago: executing program 7 (id=7567): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, 0x3c, 0x107, 0x0, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0xd}, @nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x48}]}]}, 0x3c}, 0x1, 0x100000000000000, 0x0, 0xc000}, 0x4040) 3.902303214s ago: executing program 5 (id=7568): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.71056988s ago: executing program 7 (id=7569): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xfa61, 0x400, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000600)={0x5, 0x7f, 0x6}, 0xc) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c2", 0xc9}, {&(0x7f0000000b80)}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000001) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 3.42740493s ago: executing program 8 (id=7570): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) unshare(0x2a020400) (async) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000040000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff0800014000000011"], 0x140}}, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8000) (async) read$alg(r4, &(0x7f0000000000)=""/35, 0x23) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffffffff, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x94) 0s ago: executing program 8 (id=7571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r3, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x90000) kernel console output (not intermixed with test programs): 3.529097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.597667][T30101] tipc: Resetting bearer [ 1433.610420][T30101] tipc: Disabling bearer [ 1434.455820][T18280] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1434.719180][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1434.728140][T18280] usb 4-1: Using ep0 maxpacket: 16 [ 1434.784427][T18280] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1434.815196][T18280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.883594][T18280] usb 4-1: Product: syz [ 1434.908104][T18280] usb 4-1: Manufacturer: syz [ 1434.928512][T18280] usb 4-1: SerialNumber: syz [ 1434.939725][ T10] usb 7-1: device descriptor read/64, error -71 [ 1434.956574][T30132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6967'. [ 1435.220397][ T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1435.401735][ T10] usb 7-1: device descriptor read/64, error -71 [ 1435.537210][ T10] usb usb7-port1: attempt power cycle [ 1435.614133][T18280] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1435.832622][T18280] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 1435.900397][ T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1435.941424][ T10] usb 7-1: device descriptor read/8, error -71 [ 1436.025941][T30123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.035552][T30123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.113473][T20143] usb 4-1: USB disconnect, device number 84 [ 1436.179208][ T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1436.200499][ T10] usb 7-1: device descriptor read/8, error -71 [ 1436.310920][ T10] usb usb7-port1: unable to enumerate USB device [ 1436.749109][ T5940] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1436.837281][ T30] audit: type=1326 audit(1755802583.716:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30155 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ffd8ebe9 code=0x7ffc0000 [ 1436.914099][ T30] audit: type=1326 audit(1755802583.716:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30155 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f29ffd8ebe9 code=0x7ffc0000 [ 1436.967740][ T5940] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1436.991279][ T30] audit: type=1326 audit(1755802583.716:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30155 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ffd8ebe9 code=0x7ffc0000 [ 1437.014398][ T5940] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1437.034699][ T5940] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1437.062394][ T30] audit: type=1326 audit(1755802583.716:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30155 comm="syz.3.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29ffd8ebe9 code=0x7ffc0000 [ 1437.085591][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.117824][T30146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1437.132011][ T5940] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1437.702268][T30169] netlink: 'syz.4.6979': attribute type 1 has an invalid length. [ 1437.761719][T30172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1437.874665][T30173] usb usb8: usbfs: process 30173 (syz.0.6977) did not claim interface 0 before use [ 1438.370357][ T5940] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1438.579295][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 1438.589418][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1438.601018][ T5940] usb 5-1: config 8 has an invalid interface number: 137 but max is 0 [ 1438.612058][ T5940] usb 5-1: config 8 has no interface number 0 [ 1438.632043][ T5940] usb 5-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 1438.653667][ T5940] usb 5-1: config 8 interface 137 has no altsetting 0 [ 1438.669484][ T5940] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 1438.680288][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.688323][ T5940] usb 5-1: Product: syz [ 1438.692781][ T5940] usb 5-1: Manufacturer: syz [ 1438.697405][ T5940] usb 5-1: SerialNumber: syz [ 1438.708302][T30180] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1439.395600][T18280] usb 3-1: USB disconnect, device number 111 [ 1441.801523][ T5940] cyberjack 5-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 1441.815848][ T5940] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1441.825121][T30239] usb usb8: usbfs: process 30239 (syz.0.6993) did not claim interface 0 before use [ 1442.024512][ T5940] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1442.049724][T30237] Can't find ip_set type (ash:net,net [ 1442.207443][ T5940] usb 5-1: USB disconnect, device number 69 [ 1442.224083][ T5940] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1442.373290][ T5940] cyberjack 5-1:8.137: device disconnected [ 1442.838600][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1442.871480][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.023529][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.100939][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.128887][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.166393][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.193778][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.223526][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.234041][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.254261][ T5940] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 1443.269114][T20143] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1443.286000][ T5940] hid-generic 00A0:0006:0003.0047: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1443.445598][T20143] usb 3-1: config 0 has no interfaces? [ 1443.451295][T20143] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1443.469074][T20143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.500941][T20143] usb 3-1: config 0 descriptor?? [ 1445.613224][T30302] tipc: Started in network mode [ 1445.618162][T30302] tipc: Node identity 72dd61075154, cluster identity 4711 [ 1445.625487][T30302] tipc: Enabled bearer , priority 0 [ 1445.644629][T30302] syzkaller0: entered promiscuous mode [ 1445.650461][T30302] syzkaller0: entered allmulticast mode [ 1445.663531][ T5940] usb 3-1: USB disconnect, device number 112 [ 1445.698307][T30302] tipc: Resetting bearer [ 1445.715824][T30301] tipc: Resetting bearer [ 1445.778407][T30301] tipc: Disabling bearer [ 1445.969112][T18280] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1446.184729][T18280] usb 4-1: Using ep0 maxpacket: 32 [ 1446.221309][T18280] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1446.236246][T18280] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1446.245806][T18280] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1446.295006][T18280] usb 4-1: Product: syz [ 1446.336220][T18280] usb 4-1: Manufacturer: syz [ 1446.343923][T18280] usb 4-1: SerialNumber: syz [ 1446.360366][T18280] usb 4-1: config 0 descriptor?? [ 1446.370731][T30309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1446.378885][T18280] hub 4-1:0.0: bad descriptor, ignoring hub [ 1446.517234][T18280] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1446.629971][T18280] usb 4-1: USB disconnect, device number 85 [ 1447.297385][T18280] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1447.560156][T18280] usb 4-1: Using ep0 maxpacket: 32 [ 1447.576208][T18280] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1447.589920][T18280] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1447.599313][T18280] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1447.629321][T30332] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1447.737315][T18280] usb 4-1: Product: syz [ 1447.744711][T18280] usb 4-1: Manufacturer: 깕襭퉥᠓節﷞艨繣팿፮崶鐮銁쁯䖽㊕ᑅ裏礣谊㟇퍆䱃鰺燊妾᭽꬀釓ꌉᲞ◪冞ꓶᏻ꼧ꜦḜ㮯槮浨獲䷺㋹椷㇯悀鴵滸곹㏮檗燐쬃◃▦ꁶ篋ⷩ弆㱤恽ꓚ䵫㠥뙨醤ⴿ䇱뵲ퟭ鐶㪵諔璴╗忶᪲⤅븙ଈ墧䑚☌闖㦚钺䯆찕썍딧옂凮㲪訞醏ﺂ紧 [ 1447.853533][T18280] usb 4-1: SerialNumber: syz [ 1447.865578][T18280] usb 4-1: config 0 descriptor?? [ 1447.875984][T30309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1447.896878][T18280] hub 4-1:0.0: bad descriptor, ignoring hub [ 1447.903162][T18280] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1448.104008][T30309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.122508][T30309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.364616][T30309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.373430][T30309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.700716][ T5861] usb 4-1: USB disconnect, device number 86 [ 1449.957349][T30269] Set syz1 is full, maxelem 65536 reached [ 1450.330906][T30370] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1450.625937][T30374] FAULT_INJECTION: forcing a failure. [ 1450.625937][T30374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.749806][T30374] CPU: 1 UID: 0 PID: 30374 Comm: syz.2.7029 Not tainted syzkaller #0 PREEMPT(full) [ 1450.749834][T30374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1450.749846][T30374] Call Trace: [ 1450.749853][T30374] [ 1450.749862][T30374] dump_stack_lvl+0x189/0x250 [ 1450.749887][T30374] ? __pfx____ratelimit+0x10/0x10 [ 1450.749910][T30374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1450.749930][T30374] ? __pfx__printk+0x10/0x10 [ 1450.749954][T30374] ? rcu_is_watching+0x15/0xb0 [ 1450.749973][T30374] should_fail_ex+0x414/0x560 [ 1450.749996][T30374] _copy_to_user+0x31/0xb0 [ 1450.750017][T30374] simple_read_from_buffer+0xe1/0x170 [ 1450.750042][T30374] proc_fail_nth_read+0x1b3/0x220 [ 1450.750062][T30374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1450.750083][T30374] ? rw_verify_area+0x2a6/0x4d0 [ 1450.750104][T30374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1450.750123][T30374] vfs_read+0x200/0xa30 [ 1450.750143][T30374] ? fdget_pos+0x247/0x320 [ 1450.750160][T30374] ? __pfx___mutex_lock+0x10/0x10 [ 1450.750183][T30374] ? __pfx_vfs_read+0x10/0x10 [ 1450.750207][T30374] ? __fget_files+0x3a0/0x420 [ 1450.750230][T30374] ? __fget_files+0x2a/0x420 [ 1450.750257][T30374] ksys_read+0x145/0x250 [ 1450.750278][T30374] ? __pfx_ksys_read+0x10/0x10 [ 1450.750296][T30374] ? rcu_is_watching+0x15/0xb0 [ 1450.750314][T30374] ? rcu_is_watching+0x15/0xb0 [ 1450.750331][T30374] do_syscall_64+0xfa/0x3b0 [ 1450.750355][T30374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.750370][T30374] ? clear_bhb_loop+0x60/0xb0 [ 1450.750389][T30374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.750406][T30374] RIP: 0033:0x7fb6b6f8d5fc [ 1450.750422][T30374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1450.750437][T30374] RSP: 002b:00007fb6b7d41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1450.750457][T30374] RAX: ffffffffffffffda RBX: 00007fb6b71b5fa0 RCX: 00007fb6b6f8d5fc [ 1450.750471][T30374] RDX: 000000000000000f RSI: 00007fb6b7d410a0 RDI: 0000000000000004 [ 1450.750483][T30374] RBP: 00007fb6b7d41090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.750495][T30374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.750506][T30374] R13: 00007fb6b71b6038 R14: 00007fb6b71b5fa0 R15: 00007fb6b72dfa28 [ 1450.750525][T30374] [ 1450.839308][T27523] Bluetooth: hci3: command 0x0406 tx timeout [ 1450.844341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.999177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.054960][T30377] usb usb8: usbfs: process 30377 (syz.4.7027) did not claim interface 0 before use [ 1451.294154][T30383] syz.2.7031 (30383): drop_caches: 2 [ 1451.325286][T30382] syz.2.7031 (30382): drop_caches: 2 [ 1451.340827][T30383] syz.2.7031 (30383): drop_caches: 2 [ 1451.345138][T30382] syz.2.7031 (30382): drop_caches: 2 [ 1451.589146][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1451.995048][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1452.019102][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.035159][ T10] usb 5-1: Product: syz [ 1452.047038][ T10] usb 5-1: Manufacturer: syz [ 1452.058809][ T10] usb 5-1: SerialNumber: syz [ 1452.070974][ T10] usb 5-1: config 0 descriptor?? [ 1452.704864][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 1452.713280][ T10] usb 5-1: Please update to version 0.2 or newer [ 1452.840692][T18280] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1452.942647][ T10] usb 5-1: USB disconnect, device number 70 [ 1452.979186][T20143] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1452.979249][T18280] usb 4-1: device descriptor read/64, error -71 [ 1453.150621][T20143] usb 3-1: Using ep0 maxpacket: 8 [ 1453.163844][T20143] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1453.187631][T20143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.261975][T20143] usb 3-1: Product: syz [ 1453.269320][T18280] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1453.285425][T20143] usb 3-1: Manufacturer: syz [ 1453.309094][T20143] usb 3-1: SerialNumber: syz [ 1453.349663][T20143] usb 3-1: config 0 descriptor?? [ 1453.409160][T18280] usb 4-1: device descriptor read/64, error -71 [ 1453.519486][T18280] usb usb4-port1: attempt power cycle [ 1453.572025][T20143] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1453.701199][T30422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7042'. [ 1453.718203][T30422] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1453.774588][T30423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7041'. [ 1453.793336][T30423] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1453.909199][T18280] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1453.939966][T18280] usb 4-1: device descriptor read/8, error -71 [ 1454.192866][T20143] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1454.199840][T18280] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1454.229834][T18280] usb 4-1: device descriptor read/8, error -71 [ 1454.339935][T18280] usb usb4-port1: unable to enumerate USB device [ 1455.757240][ T10] usb 3-1: USB disconnect, device number 113 [ 1455.784430][T30445] FAULT_INJECTION: forcing a failure. [ 1455.784430][T30445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.800204][T30445] CPU: 1 UID: 0 PID: 30445 Comm: syz.2.7047 Not tainted syzkaller #0 PREEMPT(full) [ 1455.800230][T30445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1455.800242][T30445] Call Trace: [ 1455.800250][T30445] [ 1455.800258][T30445] dump_stack_lvl+0x189/0x250 [ 1455.800284][T30445] ? __pfx____ratelimit+0x10/0x10 [ 1455.800308][T30445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1455.800328][T30445] ? __pfx__printk+0x10/0x10 [ 1455.800348][T30445] ? __might_fault+0xb0/0x130 [ 1455.800374][T30445] ? rcu_is_watching+0x15/0xb0 [ 1455.800393][T30445] should_fail_ex+0x414/0x560 [ 1455.800416][T30445] _copy_from_user+0x2d/0xb0 [ 1455.800437][T30445] ___sys_sendmsg+0x158/0x2a0 [ 1455.800456][T30445] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.800476][T30445] ? kstrtouint+0x6e/0xe0 [ 1455.800510][T30445] ? rcu_is_watching+0x15/0xb0 [ 1455.800527][T30445] ? lock_release+0x4b/0x3e0 [ 1455.800551][T30445] ? __might_fault+0xcc/0x130 [ 1455.800574][T30445] __sys_sendmmsg+0x227/0x430 [ 1455.800594][T30445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1455.800610][T30445] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1455.800644][T30445] ? ksys_write+0x22a/0x250 [ 1455.800666][T30445] ? __pfx_ksys_write+0x10/0x10 [ 1455.800686][T30445] ? rcu_is_watching+0x15/0xb0 [ 1455.800706][T30445] __x64_sys_sendmmsg+0xa0/0xc0 [ 1455.800722][T30445] do_syscall_64+0xfa/0x3b0 [ 1455.800745][T30445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.800763][T30445] ? clear_bhb_loop+0x60/0xb0 [ 1455.800783][T30445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.800800][T30445] RIP: 0033:0x7fb6b6f8ebe9 [ 1455.800816][T30445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1455.800832][T30445] RSP: 002b:00007fb6b7d41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1455.800852][T30445] RAX: ffffffffffffffda RBX: 00007fb6b71b5fa0 RCX: 00007fb6b6f8ebe9 [ 1455.800864][T30445] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000006 [ 1455.800873][T30445] RBP: 00007fb6b7d41090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.800883][T30445] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1455.800898][T30445] R13: 00007fb6b71b6038 R14: 00007fb6b71b5fa0 R15: 00007fb6b72dfa28 [ 1455.800916][T30445] [ 1456.099589][ T957] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1456.312863][ T957] usb 4-1: Using ep0 maxpacket: 8 [ 1456.360132][ T957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.390024][ T957] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1456.399400][ T957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.407445][ T957] usb 4-1: Product: syz [ 1456.419237][ T957] usb 4-1: Manufacturer: syz [ 1456.424496][ T957] usb 4-1: SerialNumber: syz [ 1456.431511][ T957] usb 4-1: config 0 descriptor?? [ 1456.438031][ T957] cdc_phonet 4-1:0.0: invalid descriptor buffer length [ 1456.444975][ T957] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1456.632917][T30452] Set syz1 is full, maxelem 65536 reached [ 1457.234842][T30473] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1457.252939][T30473] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1457.274825][T30473] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1457.348136][T18280] usb 4-1: USB disconnect, device number 91 [ 1457.893228][T30485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7061'. [ 1457.911453][T30485] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1459.180917][ T5940] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1459.370105][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 1459.378025][ T5940] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1459.386772][ T5940] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1459.406889][ T5940] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1459.440836][ T5940] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1459.455361][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1459.494887][ T5940] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1459.505336][ T5940] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1459.515352][ T5940] usb 5-1: Product: syz [ 1459.529213][ T5940] usb 5-1: Manufacturer: syz [ 1459.543747][ T5940] usb 5-1: SerialNumber: syz [ 1459.555607][ T5940] usb 5-1: config 0 descriptor?? [ 1459.569703][ T5940] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1459.592378][ T5940] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1459.744996][T30502] usb usb8: usbfs: process 30502 (syz.2.7067) did not claim interface 0 before use [ 1459.770214][ T5940] usb 5-1: USB disconnect, device number 71 [ 1459.777392][ T5940] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1460.494495][T30517] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1460.503869][T30517] tipc: Invalid UDP bearer configuration [ 1460.503894][T30517] tipc: Enabling of bearer rejected, failed to enable media [ 1460.998954][T30542] netlink: 'syz.0.7080': attribute type 1 has an invalid length. [ 1461.269110][ T5940] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1461.470470][ T5940] usb 7-1: Using ep0 maxpacket: 8 [ 1461.480551][ T5940] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1461.490626][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.498642][ T5940] usb 7-1: Product: syz [ 1461.505465][ T5940] usb 7-1: Manufacturer: syz [ 1461.510922][ T5940] usb 7-1: SerialNumber: syz [ 1461.542329][ T5940] usb 7-1: config 0 descriptor?? [ 1461.548933][ T5940] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1461.715451][T30552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7083'. [ 1461.724645][T30552] openvswitch: netlink: nsh attribute has 5288 unknown bytes. [ 1461.732226][T30552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1461.968509][T30544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.199236][ T5940] gspca_sonixj: reg_w1 err -110 [ 1462.204167][ T5940] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1462.224860][T30544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.752624][T30563] tipc: Started in network mode [ 1462.799183][ T5940] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1462.820636][ T5861] usb 7-1: USB disconnect, device number 46 [ 1462.861414][T30563] tipc: Node identity 468e2e367e3e, cluster identity 4711 [ 1462.871259][T30563] tipc: Enabled bearer , priority 0 [ 1462.913932][T30570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1462.924310][T30571] syzkaller0: entered promiscuous mode [ 1462.950356][T30571] syzkaller0: entered allmulticast mode [ 1462.976272][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1463.006721][T30570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1463.016976][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.038158][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1463.048838][T30563] tipc: Resetting bearer [ 1463.142075][T30563] tipc: Resetting bearer [ 1463.152510][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.164789][T30563] tipc: Disabling bearer [ 1463.470534][ T5940] usb 4-1: usb_control_msg returned -32 [ 1463.476145][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 1463.566255][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7088'. [ 1463.582858][T30581] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1463.762373][T30589] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1464.494353][T30599] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1464.894291][ T10] usb 4-1: USB disconnect, device number 92 [ 1465.327055][T30612] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1465.354329][T30612] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1465.378139][T30612] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1466.319784][T30618] sctp: [Deprecated]: syz.0.7100 (pid 30618) Use of int in maxseg socket option. [ 1466.319784][T30618] Use struct sctp_assoc_value instead [ 1467.109958][T30638] veth1_to_hsr: entered allmulticast mode [ 1468.097583][T30645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7108'. [ 1468.164698][T30645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1468.368347][T30657] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1468.377750][T30657] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1468.444662][T18280] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1468.666975][T30657] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1468.719186][T18280] usb 5-1: Using ep0 maxpacket: 16 [ 1468.778632][T18280] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 1468.809604][T18280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.838175][T18280] usb 5-1: Product: syz [ 1468.947072][T18280] usb 5-1: Manufacturer: syz [ 1468.956300][T18280] usb 5-1: SerialNumber: syz [ 1468.986571][T18280] usb 5-1: config 0 descriptor?? [ 1469.169317][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1469.871880][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7118'. [ 1469.881128][T30687] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1469.888330][T30687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1470.139388][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1470.540838][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1470.552500][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 22264, setting to 1024 [ 1470.703782][ T5940] usb 5-1: USB disconnect, device number 72 [ 1470.709775][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1470.709803][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1470.753419][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1470.870301][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.902967][ T10] usb 3-1: Product: syz [ 1471.019962][ T10] usb 3-1: Manufacturer: syz [ 1471.041379][ T10] usb 3-1: SerialNumber: syz [ 1471.138988][T30666] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1471.146862][T30666] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1471.439284][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1471.448034][ T10] usbtest 3-1:1.0: Linux user mode ISO test driver [ 1471.454677][ T10] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1471.470986][ T10] usb 3-1: USB disconnect, device number 114 [ 1473.039764][T30711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7122'. [ 1473.049473][T30711] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1473.056660][T30711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1473.328014][T30726] veth1_to_hsr: entered allmulticast mode [ 1473.450448][T30720] veth1_to_hsr: entered allmulticast mode [ 1474.809207][ T10] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1475.158646][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7133'. [ 1475.169286][T30755] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1475.211225][T30755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1475.271625][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1475.629646][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.649686][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1475.659279][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.910833][T30768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7138'. [ 1475.929375][T30768] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1476.035336][ T10] usb 3-1: usb_control_msg returned -32 [ 1476.061736][ T10] usbtmc 3-1:16.0: can't read capabilities [ 1476.170542][T30775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7140'. [ 1476.379409][T27523] Bluetooth: hci5: command 0x0406 tx timeout [ 1476.749311][T30783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1477.045800][T30785] FAULT_INJECTION: forcing a failure. [ 1477.045800][T30785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.060628][T30785] CPU: 1 UID: 0 PID: 30785 Comm: syz.6.7143 Not tainted syzkaller #0 PREEMPT(full) [ 1477.060653][T30785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1477.060664][T30785] Call Trace: [ 1477.060672][T30785] [ 1477.060680][T30785] dump_stack_lvl+0x189/0x250 [ 1477.060705][T30785] ? __pfx____ratelimit+0x10/0x10 [ 1477.060738][T30785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1477.060758][T30785] ? __pfx__printk+0x10/0x10 [ 1477.060779][T30785] ? __might_fault+0xb0/0x130 [ 1477.060805][T30785] ? rcu_is_watching+0x15/0xb0 [ 1477.060824][T30785] should_fail_ex+0x414/0x560 [ 1477.060848][T30785] _copy_from_user+0x2d/0xb0 [ 1477.060868][T30785] ___sys_recvmsg+0x12e/0x510 [ 1477.060890][T30785] ? __pfx____sys_recvmsg+0x10/0x10 [ 1477.060910][T30785] ? __fget_files+0x2a/0x420 [ 1477.060940][T30785] ? rcu_is_watching+0x15/0xb0 [ 1477.060957][T30785] ? lock_release+0x4b/0x3e0 [ 1477.060980][T30785] ? __might_fault+0xcc/0x130 [ 1477.061003][T30785] do_recvmmsg+0x307/0x770 [ 1477.061025][T30785] ? __pfx_do_recvmmsg+0x10/0x10 [ 1477.061047][T30785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1477.061078][T30785] __x64_sys_recvmmsg+0x190/0x240 [ 1477.061098][T30785] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1477.061116][T30785] ? rcu_is_watching+0x15/0xb0 [ 1477.061135][T30785] ? rcu_is_watching+0x15/0xb0 [ 1477.061152][T30785] do_syscall_64+0xfa/0x3b0 [ 1477.061176][T30785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.061194][T30785] ? clear_bhb_loop+0x60/0xb0 [ 1477.061213][T30785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.061230][T30785] RIP: 0033:0x7ffb59f8ebe9 [ 1477.061246][T30785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.061262][T30785] RSP: 002b:00007ffb5ae5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1477.061283][T30785] RAX: ffffffffffffffda RBX: 00007ffb5a1b5fa0 RCX: 00007ffb59f8ebe9 [ 1477.061296][T30785] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 1477.061309][T30785] RBP: 00007ffb5ae5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.061320][T30785] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 1477.061332][T30785] R13: 00007ffb5a1b6038 R14: 00007ffb5a1b5fa0 R15: 00007ffb5a2dfa28 [ 1477.061351][T30785] [ 1477.614922][T30790] tipc: Enabled bearer , priority 0 [ 1477.651386][T30790] syzkaller0: entered promiscuous mode [ 1477.657090][T30790] syzkaller0: entered allmulticast mode [ 1477.674464][T30790] tipc: Resetting bearer [ 1477.690659][T30790] tipc: Resetting bearer [ 1477.853122][T30790] tipc: Disabling bearer [ 1478.052481][T20143] usb 3-1: USB disconnect, device number 115 [ 1478.506396][T30800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7147'. [ 1478.775691][T30800] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1479.223183][T30813] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1479.790939][T30822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7152'. [ 1480.130213][T30832] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 1481.701543][T30861] veth1_to_hsr: entered allmulticast mode [ 1482.247480][T30864] usb usb8: usbfs: process 30864 (syz.2.7160) did not claim interface 0 before use [ 1483.402456][T30884] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1484.487495][ T5940] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1484.541994][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.548475][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.766613][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 1484.824003][ T5940] usb 5-1: config 40 has an invalid descriptor of length 23, skipping remainder of the config [ 1484.842328][ T5940] usb 5-1: config 40 has 0 interfaces, different from the descriptor's value: 1 [ 1484.880570][ T5940] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1484.990949][T30906] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.7170'. [ 1485.100898][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.326077][ T5940] usb 5-1: string descriptor 0 read error: -71 [ 1485.333007][ T5940] usb 5-1: USB disconnect, device number 73 [ 1485.532577][T30910] tipc: Started in network mode [ 1485.539861][T30912] IPVS: set_ctl: invalid protocol: 28 172.30.1.7:20003 [ 1485.557477][T30910] tipc: Node identity a6793a1f76c6, cluster identity 4711 [ 1485.600925][T30910] tipc: Enabled bearer , priority 0 [ 1485.680909][T30913] syzkaller0: entered promiscuous mode [ 1485.686426][T30913] syzkaller0: entered allmulticast mode [ 1485.712556][T30910] tipc: Resetting bearer [ 1485.732109][T30910] tipc: Resetting bearer [ 1485.739202][T30910] tipc: Disabling bearer [ 1485.776201][T30917] tipc: Enabled bearer , priority 0 [ 1485.783750][T30917] syzkaller0: entered promiscuous mode [ 1485.790226][T30917] syzkaller0: entered allmulticast mode [ 1485.815536][T30917] tipc: Resetting bearer [ 1485.845124][T30917] tipc: Resetting bearer [ 1485.895896][T30917] tipc: Disabling bearer [ 1485.943902][T30926] sctp: [Deprecated]: syz.2.7185 (pid 30926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1485.943902][T30926] Use struct sctp_sack_info instead [ 1486.632818][T30937] usb usb8: usbfs: process 30937 (syz.3.7175) did not claim interface 0 before use [ 1486.984508][T30950] FAULT_INJECTION: forcing a failure. [ 1486.984508][T30950] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.166389][T30950] CPU: 1 UID: 0 PID: 30950 Comm: syz.6.7180 Not tainted syzkaller #0 PREEMPT(full) [ 1487.166414][T30950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1487.166424][T30950] Call Trace: [ 1487.166431][T30950] [ 1487.166440][T30950] dump_stack_lvl+0x189/0x250 [ 1487.166461][T30950] ? __pfx____ratelimit+0x10/0x10 [ 1487.166481][T30950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1487.166498][T30950] ? __pfx__printk+0x10/0x10 [ 1487.166519][T30950] ? fs_reclaim_acquire+0x7d/0x100 [ 1487.166542][T30950] ? rcu_is_watching+0x15/0xb0 [ 1487.166559][T30950] ? __pfx___might_resched+0x10/0x10 [ 1487.166572][T30950] ? lock_acquire+0x5f/0x360 [ 1487.166595][T30950] should_fail_ex+0x414/0x560 [ 1487.166617][T30950] should_failslab+0xa8/0x100 [ 1487.166649][T30950] __kmalloc_cache_noprof+0x70/0x3d0 [ 1487.166671][T30950] ? tcf_proto_create+0x65/0x330 [ 1487.166691][T30950] tcf_proto_create+0x65/0x330 [ 1487.166710][T30950] tc_new_tfilter+0x11aa/0x15b0 [ 1487.166735][T30950] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1487.166748][T30950] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1487.166771][T30950] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1487.166793][T30950] ? rcu_is_watching+0x15/0xb0 [ 1487.166808][T30950] ? lock_release+0x4b/0x3e0 [ 1487.166826][T30950] ? bpf_lsm_capable+0x9/0x20 [ 1487.166848][T30950] ? security_capable+0x7e/0x2e0 [ 1487.166871][T30950] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1487.166885][T30950] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1487.166908][T30950] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1487.166929][T30950] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1487.166951][T30950] ? ref_tracker_free+0x63a/0x7d0 [ 1487.166974][T30950] ? __asan_memcpy+0x40/0x70 [ 1487.166993][T30950] ? __pfx_ref_tracker_free+0x10/0x10 [ 1487.167019][T30950] netlink_rcv_skb+0x208/0x470 [ 1487.167042][T30950] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1487.167065][T30950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.167095][T30950] netlink_unicast+0x82c/0x9e0 [ 1487.167120][T30950] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.167141][T30950] ? netlink_sendmsg+0x642/0xb30 [ 1487.167162][T30950] ? skb_put+0x11b/0x210 [ 1487.167179][T30950] netlink_sendmsg+0x805/0xb30 [ 1487.167205][T30950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.167229][T30950] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1487.167245][T30950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1487.167264][T30950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.167287][T30950] __sock_sendmsg+0x219/0x270 [ 1487.167309][T30950] ____sys_sendmsg+0x505/0x830 [ 1487.167328][T30950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.167348][T30950] ? import_iovec+0x74/0xa0 [ 1487.167369][T30950] ___sys_sendmsg+0x21f/0x2a0 [ 1487.167387][T30950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.167418][T30950] ? __fget_files+0x2a/0x420 [ 1487.167440][T30950] ? __fget_files+0x3a0/0x420 [ 1487.167467][T30950] __x64_sys_sendmsg+0x19b/0x260 [ 1487.167485][T30950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1487.167505][T30950] ? __pfx_ksys_write+0x10/0x10 [ 1487.167529][T30950] ? rcu_is_watching+0x15/0xb0 [ 1487.167545][T30950] do_syscall_64+0xfa/0x3b0 [ 1487.167568][T30950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.167585][T30950] ? clear_bhb_loop+0x60/0xb0 [ 1487.167602][T30950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.167618][T30950] RIP: 0033:0x7ffb59f8ebe9 [ 1487.167643][T30950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.167659][T30950] RSP: 002b:00007ffb5ae5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.167679][T30950] RAX: ffffffffffffffda RBX: 00007ffb5a1b5fa0 RCX: 00007ffb59f8ebe9 [ 1487.167693][T30950] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 1487.167706][T30950] RBP: 00007ffb5ae5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.167717][T30950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.167728][T30950] R13: 00007ffb5a1b6038 R14: 00007ffb5a1b5fa0 R15: 00007ffb5a2dfa28 [ 1487.167749][T30950] [ 1487.749714][T30962] tipc: Enabling of bearer rejected, failed to enable media [ 1487.762162][T30957] tipc: Enabled bearer , priority 0 [ 1487.772150][T30957] syzkaller0: entered promiscuous mode [ 1487.777619][T30957] syzkaller0: entered allmulticast mode [ 1487.945406][T30965] loop7: detected capacity change from 0 to 7 [ 1487.966025][ C0] blk_print_req_error: 5 callbacks suppressed [ 1487.966044][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1487.981342][ C0] buffer_io_error: 5 callbacks suppressed [ 1487.981354][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.000347][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.009529][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.019195][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.028349][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.046747][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.056027][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.066329][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.075541][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.083871][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.091010][T30956] tipc: Resetting bearer [ 1488.093052][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.108467][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.117632][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.125829][T30955] tipc: Resetting bearer [ 1488.125894][T30965] ldm_validate_partition_table(): Disk read failed. [ 1488.139807][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.149056][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.157291][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.166497][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.188562][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.197746][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1488.209271][T30965] Dev loop7: unable to read RDB block 0 [ 1488.222530][T30965] loop7: unable to read partition table [ 1488.228454][T30965] loop7: partition table beyond EOD, truncated [ 1488.278951][T30965] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1488.321139][T30955] tipc: Disabling bearer [ 1488.546636][T30983] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns [ 1488.812584][T18280] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1488.970699][T18280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.151125][T30996] tipc: Enabled bearer , priority 0 [ 1489.179584][T30997] syzkaller0: entered promiscuous mode [ 1489.328829][T18280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1489.341119][T30997] syzkaller0: entered allmulticast mode [ 1489.591185][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7192'. [ 1489.646160][T18280] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1489.736540][T18280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.782305][T30998] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1489.824250][T18280] usb 3-1: config 0 descriptor?? [ 1490.010832][T31000] tipc: Resetting bearer [ 1490.057068][T31000] tipc: Disabling bearer [ 1491.205252][T18280] usbhid 3-1:0.0: can't add hid device: -71 [ 1491.349182][T18280] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1492.726329][T18280] usb 3-1: USB disconnect, device number 116 [ 1496.443682][T31039] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7205'. [ 1498.664840][T31043] tipc: Enabled bearer , priority 0 [ 1498.735823][T31043] syzkaller0: entered promiscuous mode [ 1500.137748][T31036] Can't find ip_set type (ash:net,net [ 1500.169395][T18280] tipc: Node number set to 951070262 [ 1500.333713][T31043] syzkaller0: entered allmulticast mode [ 1500.726868][T31058] tipc: Resetting bearer [ 1500.967593][T31060] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7209'. [ 1501.172647][T31058] tipc: Disabling bearer [ 1507.111502][T23081] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.019049][ C1] sched: DL replenish lagged too much [ 1522.859162][T23081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1522.871745][T23081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1522.880855][T23081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1522.888660][T23081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1522.896292][T23081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1522.915014][T23081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1522.923714][T23081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1522.939187][T23081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1522.946931][T23081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1522.956339][T23081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1523.413966][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1523.422604][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1523.430127][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1523.437731][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1523.449449][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1523.541693][T23081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1523.548932][T23081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1523.563029][T23081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1523.580020][T27523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1523.589210][T23081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1523.803163][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1523.812162][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1523.821884][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1523.831970][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1523.839456][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1524.941493][T23081] Bluetooth: hci0: command tx timeout [ 1524.977140][T28354] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.182301][T23081] Bluetooth: hci2: command tx timeout [ 1525.337257][T28354] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.579291][T23081] Bluetooth: hci1: command tx timeout [ 1525.644289][T28354] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.661561][T23081] Bluetooth: hci6: command tx timeout [ 1525.900235][T23081] Bluetooth: hci4: command tx timeout [ 1526.081539][T28354] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.823241][T31083] chnl_net:caif_netlink_parms(): no params data found [ 1526.843871][T31078] chnl_net:caif_netlink_parms(): no params data found [ 1526.855030][T31079] chnl_net:caif_netlink_parms(): no params data found [ 1527.019193][T23081] Bluetooth: hci0: command tx timeout [ 1527.087703][T31085] chnl_net:caif_netlink_parms(): no params data found [ 1527.261282][T23081] Bluetooth: hci2: command tx timeout [ 1527.659136][T23081] Bluetooth: hci1: command tx timeout [ 1527.739229][T23081] Bluetooth: hci6: command tx timeout [ 1527.979138][T23081] Bluetooth: hci4: command tx timeout [ 1529.099500][T23081] Bluetooth: hci0: command tx timeout [ 1529.339277][T23081] Bluetooth: hci2: command tx timeout [ 1529.739454][T23081] Bluetooth: hci1: command tx timeout [ 1529.819118][T23081] Bluetooth: hci6: command tx timeout [ 1530.059427][T23081] Bluetooth: hci4: command tx timeout [ 1531.179354][T23081] Bluetooth: hci0: command tx timeout [ 1531.419788][T23081] Bluetooth: hci2: command tx timeout [ 1531.819299][T23081] Bluetooth: hci1: command tx timeout [ 1531.902740][T23081] Bluetooth: hci6: command tx timeout [ 1532.139174][T23081] Bluetooth: hci4: command tx timeout [ 1532.201358][T28354] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1532.898394][T28354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1532.933572][T28354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1532.967376][T28354] bond0 (unregistering): Released all slaves [ 1533.138600][T28354] bond1 (unregistering): Released all slaves [ 1533.541524][T31081] chnl_net:caif_netlink_parms(): no params data found [ 1533.562994][T28354] : left promiscuous mode [ 1537.207528][T31078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.231690][T31078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.244654][T31078] bridge_slave_0: entered allmulticast mode [ 1537.260610][T31078] bridge_slave_0: entered promiscuous mode [ 1537.282269][T31078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.299231][T31078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.306570][T31078] bridge_slave_1: entered allmulticast mode [ 1537.320124][T31078] bridge_slave_1: entered promiscuous mode [ 1537.358529][T31079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.379161][T31079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.386546][T31079] bridge_slave_0: entered allmulticast mode [ 1537.400232][T31079] bridge_slave_0: entered promiscuous mode [ 1537.413148][T31079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.440043][T31079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.447559][T31079] bridge_slave_1: entered allmulticast mode [ 1537.455469][T31079] bridge_slave_1: entered promiscuous mode [ 1537.689822][T31078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.785260][T31083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.800108][T31083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.807325][T31083] bridge_slave_0: entered allmulticast mode [ 1537.839293][T31083] bridge_slave_0: entered promiscuous mode [ 1537.852787][T31083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.869717][T31083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.876945][T31083] bridge_slave_1: entered allmulticast mode [ 1537.902886][T31083] bridge_slave_1: entered promiscuous mode [ 1537.923110][T31079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.946467][T31078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.997166][T31085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.013085][T31085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.029331][T31085] bridge_slave_0: entered allmulticast mode [ 1538.053643][T31085] bridge_slave_0: entered promiscuous mode [ 1538.070961][T31085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.078113][T31085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.099327][T31085] bridge_slave_1: entered allmulticast mode [ 1538.109389][T31085] bridge_slave_1: entered promiscuous mode [ 1538.195976][T31079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.284806][T31078] team0: Port device team_slave_0 added [ 1538.450346][T31083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.471692][T31083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.605247][T31079] team0: Port device team_slave_0 added [ 1538.621312][T31078] team0: Port device team_slave_1 added [ 1538.629623][T31085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.672393][T31081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.679835][T31081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.687059][T31081] bridge_slave_0: entered allmulticast mode [ 1538.712860][T31081] bridge_slave_0: entered promiscuous mode [ 1538.730644][T31081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.737747][T31081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.759468][T31081] bridge_slave_1: entered allmulticast mode [ 1538.775765][T31081] bridge_slave_1: entered promiscuous mode [ 1538.862708][T31079] team0: Port device team_slave_1 added [ 1538.870399][T31085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.993379][T28354] tipc: Left network mode [ 1538.999002][T31083] team0: Port device team_slave_0 added [ 1539.126368][T31085] team0: Port device team_slave_0 added [ 1539.139850][T31078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.146809][T31078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.209108][T31078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.271202][T31081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.300458][T31083] team0: Port device team_slave_1 added [ 1539.356741][T31079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.381706][T31079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.443587][T31079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.483558][T31079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.497015][T31079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.565625][T31079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.600357][T31085] team0: Port device team_slave_1 added [ 1539.620268][T31078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.627237][T31078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.701673][T31078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.736001][T31081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.107517][T31081] team0: Port device team_slave_0 added [ 1540.119865][T31083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.126913][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.208368][T31083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.283712][T31085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.299328][T31085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.382688][T31085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.456681][T31079] hsr_slave_0: entered promiscuous mode [ 1540.482470][T31079] hsr_slave_1: entered promiscuous mode [ 1540.510110][T31079] debugfs: 'hsr0' already exists in 'hsr' [ 1540.515864][T31079] Cannot create hsr debugfs directory [ 1540.589633][T31078] hsr_slave_0: entered promiscuous mode [ 1540.610063][T31078] hsr_slave_1: entered promiscuous mode [ 1540.622733][T31078] debugfs: 'hsr0' already exists in 'hsr' [ 1540.641678][T31078] Cannot create hsr debugfs directory [ 1540.667282][T31081] team0: Port device team_slave_1 added [ 1540.711258][T31083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.722912][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.780615][T31083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.905271][T31085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.919536][T31085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.981352][T31085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.216855][T31081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.239228][T31081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.303292][T31081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.521679][T28354] hsr_slave_0: left promiscuous mode [ 1541.541180][T28354] hsr_slave_1: left promiscuous mode [ 1541.561768][T28354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.579307][T28354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.610755][T28354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.629386][T28354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.654631][T28354] veth0_macvtap: left promiscuous mode [ 1541.670742][T28354] veth1_vlan: left promiscuous mode [ 1541.676061][T28354] veth0_vlan: left promiscuous mode [ 1542.502787][T28354] team0 (unregistering): Port device team_slave_1 removed [ 1542.571746][T28354] team0 (unregistering): Port device team_slave_0 removed [ 1543.145340][T31081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.169107][T31081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.201784][T31081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.488410][T31083] hsr_slave_0: entered promiscuous mode [ 1543.499917][T31083] hsr_slave_1: entered promiscuous mode [ 1543.617548][T31085] hsr_slave_0: entered promiscuous mode [ 1543.644331][T31085] hsr_slave_1: entered promiscuous mode [ 1543.660667][T31085] debugfs: 'hsr0' already exists in 'hsr' [ 1543.667733][T31085] Cannot create hsr debugfs directory [ 1543.754919][T31081] hsr_slave_0: entered promiscuous mode [ 1543.776087][T31081] hsr_slave_1: entered promiscuous mode [ 1543.789740][T31081] debugfs: 'hsr0' already exists in 'hsr' [ 1543.795874][T31081] Cannot create hsr debugfs directory [ 1544.461489][T31079] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1544.579495][T31079] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1544.600721][T31079] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1544.677411][T31079] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1544.826451][T31078] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1544.853489][T31078] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1545.083816][T31078] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1545.115339][T31078] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1546.001425][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.007738][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.236725][T28354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.302470][T28354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.333800][T31079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.365803][T31079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.384397][T28354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.411493][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.418598][T11816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.461847][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.468977][T11816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.495266][T28354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.551980][T31078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.568284][T31081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1549.579547][T31081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1549.617459][T31081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1549.633052][T31079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1549.655320][T31081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1549.708013][T31083] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1549.733786][T31078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.769397][T31083] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1549.782657][T31083] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1549.824264][T31083] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1549.841549][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.848684][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.861279][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.868395][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.892527][T28354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.923577][T31079] veth0_vlan: entered promiscuous mode [ 1549.968918][T28354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.987932][T31079] veth1_vlan: entered promiscuous mode [ 1550.033509][T28354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.124473][T28354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.177307][T31078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.186378][T31085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1550.197110][T31079] veth0_macvtap: entered promiscuous mode [ 1550.214490][T31085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1550.227594][T31085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1550.241362][T31079] veth1_macvtap: entered promiscuous mode [ 1550.256934][T31085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1550.304534][T31083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.328602][T31079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.366738][T28354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.388610][T31081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.412334][T31079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1550.443236][T31083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.455542][T28353] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.468043][T28353] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.483648][T28354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.508252][T28353] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.526805][T28353] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.556802][T28354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.578757][T31078] veth0_vlan: entered promiscuous mode [ 1550.588984][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.596130][T11815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.609059][T11815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.616374][T11815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.643276][T28354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.674765][T31081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.704955][T31078] veth1_vlan: entered promiscuous mode [ 1550.710681][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.727189][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.763292][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.770610][T11815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.821354][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.832509][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.856040][T11815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.863234][T11815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.908620][T31085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.976217][T31078] veth0_macvtap: entered promiscuous mode [ 1551.040120][T31078] veth1_macvtap: entered promiscuous mode [ 1551.055433][T31085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.073619][T31083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.084231][T31081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.111992][T31078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.161427][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.168550][T11815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.216265][T11815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.223422][T11815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.366274][T31078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.458591][T25574] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.501576][T31081] veth0_vlan: entered promiscuous mode [ 1551.523832][T25574] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.535683][T25574] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.547976][T25574] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.725917][T31081] veth1_vlan: entered promiscuous mode [ 1551.847330][T28354] bridge_slave_1: left allmulticast mode [ 1551.870253][T28354] bridge_slave_1: left promiscuous mode [ 1551.876017][T28354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.895404][T28354] bridge_slave_0: left allmulticast mode [ 1551.908161][T28354] bridge_slave_0: left promiscuous mode [ 1551.920248][T28354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.949202][T28354] bridge_slave_1: left allmulticast mode [ 1551.955107][T28354] bridge_slave_1: left promiscuous mode [ 1551.969211][T28354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.988857][T28354] bridge_slave_0: left allmulticast mode [ 1551.999258][T28354] bridge_slave_0: left promiscuous mode [ 1552.005085][T28354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.327764][T28354] bridge_slave_1: left allmulticast mode [ 1552.334115][T28354] bridge_slave_1: left promiscuous mode [ 1552.351126][T28354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.360758][T28354] bridge_slave_0: left allmulticast mode [ 1552.366419][T28354] bridge_slave_0: left promiscuous mode [ 1552.375744][T28354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.242509][T28354] bridge_slave_1: left allmulticast mode [ 1553.248183][T28354] bridge_slave_1: left promiscuous mode [ 1553.261772][T28354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.274501][T28354] bridge_slave_0: left allmulticast mode [ 1553.280641][T28354] bridge_slave_0: left promiscuous mode [ 1553.294993][T28354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.827217][T28354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.837796][T28354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.852142][T28354] bond0 (unregistering): Released all slaves [ 1553.916517][T28354] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1554.038761][T28354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.068672][T28354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.082218][T28354] bond0 (unregistering): Released all slaves [ 1554.095773][T28354] bond1 (unregistering): Released all slaves [ 1554.107866][T28354] bond2 (unregistering): Released all slaves [ 1554.284967][T28354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.295246][T28354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.305759][T28354] bond0 (unregistering): Released all slaves [ 1554.318590][T28354] bond1 (unregistering): Released all slaves [ 1554.488175][T28354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.498063][T28354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.513297][T28354] bond0 (unregistering): Released all slaves [ 1554.527432][T28354] bond1 (unregistering): Released all slaves [ 1554.542993][T31083] veth0_vlan: entered promiscuous mode [ 1554.567817][T31168] veth1_to_hsr: entered allmulticast mode [ 1554.628284][T31081] veth0_macvtap: entered promiscuous mode [ 1554.654419][T28354] k*]: left promiscuous mode [ 1554.684864][T31083] veth1_vlan: entered promiscuous mode [ 1554.723951][T31081] veth1_macvtap: entered promiscuous mode [ 1554.743036][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.753907][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.762670][T28354] tipc: Left network mode [ 1554.778150][T31081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.821960][T31081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.836016][T28354] tipc: Left network mode [ 1554.838197][T31083] veth0_macvtap: entered promiscuous mode [ 1554.851956][T28353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.881250][T28353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.892052][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.911348][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.932975][T31083] veth1_macvtap: entered promiscuous mode [ 1554.943921][T31085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.962873][T28354] tipc: Left network mode [ 1554.967906][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.045760][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.160571][T31176] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.7219'. [ 1555.421098][T31083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.462022][T31083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.476327][T11815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.487445][T11815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.495261][T11816] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.525256][T31085] veth0_vlan: entered promiscuous mode [ 1555.548809][T25574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.558325][T25574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.568960][T31085] veth1_vlan: entered promiscuous mode [ 1555.674594][T31180] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7212'. [ 1555.699577][T11816] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.722191][T11816] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.452248][T11816] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.745490][T31085] veth0_macvtap: entered promiscuous mode [ 1556.768403][T31085] veth1_macvtap: entered promiscuous mode [ 1557.762164][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.777714][T31085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.815024][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.890806][T31085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.942557][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.943026][T28350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.979315][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.012437][T28350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.068755][T28350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.081914][T28350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.166006][T31204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7223'. [ 1558.175372][T31204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7223'. [ 1558.413954][T28354] hsr_slave_0: left promiscuous mode [ 1558.427303][T28354] hsr_slave_1: left promiscuous mode [ 1558.439966][T28354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.484885][T28354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.498977][T28354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.541557][T28354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.611364][T28354] hsr_slave_0: left promiscuous mode [ 1558.618031][T28354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.693677][T28354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.819617][T28354] hsr_slave_0: left promiscuous mode [ 1558.836777][T28354] hsr_slave_1: left promiscuous mode [ 1558.845373][T28354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.926515][T28354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.949807][T28354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.957385][T28354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.970592][T28354] hsr_slave_0: left promiscuous mode [ 1558.976348][T28354] hsr_slave_1: left promiscuous mode [ 1558.983171][T28354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.995114][T28354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.020782][T28354] veth1_macvtap: left promiscuous mode [ 1559.026563][T28354] veth0_macvtap: left promiscuous mode [ 1559.032327][T28354] veth1_vlan: left promiscuous mode [ 1559.038765][T28354] veth0_vlan: left promiscuous mode [ 1559.111781][T28354] veth1_macvtap: left promiscuous mode [ 1559.117444][T28354] veth0_macvtap: left promiscuous mode [ 1559.124632][T28354] veth1_vlan: left promiscuous mode [ 1559.136689][T28354] veth0_vlan: left promiscuous mode [ 1559.172953][T28354] veth1_macvtap: left promiscuous mode [ 1559.249249][T28354] veth0_macvtap: left promiscuous mode [ 1559.255026][T28354] veth1_vlan: left promiscuous mode [ 1559.261175][T28354] veth0_vlan: left promiscuous mode [ 1559.677167][T28354] team0 (unregistering): Port device team_slave_1 removed [ 1559.715447][T28354] team0 (unregistering): Port device team_slave_0 removed [ 1559.985749][T28354] team0 (unregistering): Port device team_slave_1 removed [ 1560.003838][T28354] team0 (unregistering): Port device team_slave_0 removed [ 1560.455157][T28354] team0 (unregistering): Port device team_slave_1 removed [ 1560.472445][T28354] team0 (unregistering): Port device team_slave_0 removed [ 1560.724281][T28354] team0 (unregistering): Port device team_slave_1 removed [ 1560.861386][T28354] team0 (unregistering): Port device team_slave_0 removed [ 1561.023514][T28350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.046086][T28350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.105492][T31225] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7228'. [ 1561.129519][T31221] tipc: Started in network mode [ 1561.143341][T31221] tipc: Node identity 26be5288487f, cluster identity 4711 [ 1561.162995][T31221] tipc: Enabled bearer , priority 0 [ 1561.174587][T31224] syzkaller0: entered promiscuous mode [ 1561.181644][T31224] syzkaller0: entered allmulticast mode [ 1561.201338][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.210658][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.239842][T31221] syzkaller0: entered promiscuous mode [ 1561.245687][T31221] syzkaller0: entered allmulticast mode [ 1561.344176][T31221] tipc: Resetting bearer [ 1561.418578][T31221] tipc: Resetting bearer [ 1561.438437][T31221] tipc: Disabling bearer [ 1561.645720][T31242] ptrace attach of "./syz-executor exec"[31079] was attempted by "./syz-executor exec"[31242] [ 1561.839384][T31246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7233'. [ 1562.271417][T31251] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1562.516215][T31251] bond0: (slave veth3): Enslaving as an active interface with an up link [ 1562.700890][T31254] vlan2: entered allmulticast mode [ 1562.741572][T31254] veth1: entered allmulticast mode [ 1562.844449][T31254] veth1: entered promiscuous mode [ 1562.861141][T31254] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 1564.029978][T31263] veth1_to_hsr: entered allmulticast mode [ 1565.851019][ T5940] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1566.045209][ T5940] usb 10-1: Using ep0 maxpacket: 32 [ 1566.055480][ T5940] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.338693][ T5940] usb 10-1: config 0 has no interfaces? [ 1566.562594][ T5940] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.604703][ T5940] usb 10-1: config 0 has no interfaces? [ 1566.621423][ T5940] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.632812][ T5940] usb 10-1: config 0 has no interfaces? [ 1566.701130][ T5940] usb 10-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 1566.711161][ T5940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.720189][ T5940] usb 10-1: Product: syz [ 1566.760983][ T5940] usb 10-1: Manufacturer: syz [ 1566.781829][ T5940] usb 10-1: SerialNumber: syz [ 1566.805244][ T5940] usb 10-1: config 0 descriptor?? [ 1567.053944][ T5940] usb 10-1: USB disconnect, device number 2 [ 1567.478405][T31111] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1567.667175][T31111] usb 2-1: Using ep0 maxpacket: 32 [ 1567.698929][T31111] usb 2-1: config 2 has an invalid interface number: 15 but max is 0 [ 1567.731872][T31111] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1568.429356][T31111] usb 2-1: config 2 has no interface number 1 [ 1568.797787][T31111] usb 2-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1568.811802][T31111] usb 2-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1568.837666][T31111] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1568.896996][T31111] usb 2-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 1568.914913][T31111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.928457][T31111] usb 2-1: Product: syz [ 1568.945195][T31111] usb 2-1: Manufacturer: syz [ 1568.968576][T31111] usb 2-1: SerialNumber: syz [ 1569.089006][T31111] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 1570.440015][T31333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7253'. [ 1570.826375][T31111] pwc: Failed to set LED on/off time (-71) [ 1570.834014][T31111] pwc: send_video_command error -71 [ 1570.843576][T31111] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1570.857226][T31111] Philips webcam 2-1:2.0: probe with driver Philips webcam failed with error -71 [ 1570.875498][T31111] usb 2-1: USB disconnect, device number 52 [ 1570.938608][T31335] fuse: Unknown parameter 'group_i00000000000000000000' [ 1576.995836][T31407] fuse: Unknown parameter 'group_id00000000000000000000' [ 1577.674052][T31413] netlink: 'syz.9.7271': attribute type 16 has an invalid length. [ 1577.682155][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7271'. [ 1578.835385][T31428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7273'. [ 1581.181956][T31451] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.7279'. [ 1581.861118][T31464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1583.211445][T31489] pim6reg: entered allmulticast mode [ 1583.961474][T31483] pim6reg: left allmulticast mode [ 1584.146181][T31502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7295'. [ 1584.236063][T31502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.615504][T31513] netlink: 'syz.7.7296': attribute type 16 has an invalid length. [ 1584.623538][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7296'. [ 1586.679475][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1586.923670][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.934183][ T43] usb 2-1: config 0 has no interfaces? [ 1586.942190][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1586.957415][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.974119][ T43] usb 2-1: config 0 descriptor?? [ 1587.260122][T31542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7304'. [ 1589.307795][T31569] fuse: Bad value for 'fd' [ 1589.346704][T31111] usb 2-1: USB disconnect, device number 53 [ 1589.414672][T31565] netlink: 'syz.8.7310': attribute type 10 has an invalid length. [ 1589.422598][T31565] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7310'. [ 1589.431794][T31565] team0: entered promiscuous mode [ 1589.436847][T31565] team_slave_0: entered promiscuous mode [ 1589.443456][T31565] team_slave_1: entered promiscuous mode [ 1589.449557][T31565] team0: entered allmulticast mode [ 1589.454782][T31565] team_slave_0: entered allmulticast mode [ 1589.460660][T31565] team_slave_1: entered allmulticast mode [ 1589.647560][T31565] bridge0: port 3(team0) entered blocking state [ 1589.654952][T31565] bridge0: port 3(team0) entered disabled state [ 1589.689587][T31565] bridge0: port 3(team0) entered blocking state [ 1589.695949][T31565] bridge0: port 3(team0) entered forwarding state [ 1589.799953][T31578] netlink: 'syz.1.7313': attribute type 3 has an invalid length. [ 1589.807717][T31578] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7313'. [ 1590.441938][T31589] netlink: 'syz.7.7317': attribute type 1 has an invalid length. [ 1590.599575][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7317'. [ 1591.489416][T31111] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1591.733402][T31111] usb 6-1: Using ep0 maxpacket: 16 [ 1591.777483][T31111] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 1591.791673][T31111] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1591.832417][T31111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.887630][T31111] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1592.110289][T31111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1592.111443][T31607] : entered promiscuous mode [ 1592.129092][T31111] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1592.146635][T31111] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1592.162182][T31111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.247458][T31111] usb 6-1: Product: syz [ 1592.278085][T31610] netlink: 'syz.1.7323': attribute type 4 has an invalid length. [ 1592.295419][T31111] usb 6-1: Manufacturer: syz [ 1592.354816][T31610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7323'. [ 1592.371945][T31111] usb 6-1: SerialNumber: syz [ 1592.434767][T31111] usb 6-1: config 0 descriptor?? [ 1592.453964][T31111] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 1592.469846][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87 [ 1592.534140][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 1592.592469][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 1592.726822][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 1592.785924][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 1592.826843][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7325'. [ 1592.838415][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 1592.856450][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 1592.876746][T31111] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1592.902144][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 1592.956945][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3 [ 1593.019970][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 1593.033384][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 1593.057517][T31111] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 1593.096534][T31111] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1594.084016][T31647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1594.182811][ T43] usb 6-1: USB disconnect, device number 101 [ 1594.244190][T31651] netlink: 'syz.8.7332': attribute type 1 has an invalid length. [ 1594.261086][ T43] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1594.290000][ T43] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1594.333450][ T43] keyspan 6-1:0.0: device disconnected [ 1594.382902][T31651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7332'. [ 1595.099950][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1595.430108][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1595.455851][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.491833][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1595.632581][T31668] veth1_to_hsr: entered allmulticast mode [ 1595.831944][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1595.848300][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1595.858982][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.867467][ T43] usb 2-1: Product: syz [ 1595.872445][ T43] usb 2-1: Manufacturer: syz [ 1595.877149][ T43] usb 2-1: SerialNumber: syz [ 1595.897048][ T43] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1595.912963][ T43] cdc_ncm 2-1:1.0: bind() failure [ 1596.060603][T31671] fuse: Bad value for 'fd' [ 1596.296090][T31672] syz.1.7336 (31672): drop_caches: 2 [ 1597.709940][ T43] usb 2-1: USB disconnect, device number 54 [ 1598.779108][T31110] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1598.827777][T31712] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.7346'. [ 1598.984599][T31110] usb 6-1: Using ep0 maxpacket: 32 [ 1599.013673][T31712] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.7346'. [ 1599.096844][T31110] usb 6-1: config 0 has no interfaces? [ 1599.114433][T31110] usb 6-1: config 0 has no interfaces? [ 1599.328284][T31110] usb 6-1: config 0 has no interfaces? [ 1599.507067][T31110] usb 6-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 1599.556579][T31110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.583707][T31717] fuse: Bad value for 'fd' [ 1599.682352][T31110] usb 6-1: Product: syz [ 1599.710258][T31110] usb 6-1: Manufacturer: syz [ 1599.724752][T31110] usb 6-1: SerialNumber: syz [ 1599.748187][T31110] usb 6-1: config 0 descriptor?? [ 1600.214311][T31724] veth1_to_hsr: entered allmulticast mode [ 1601.438742][T31155] usb 6-1: USB disconnect, device number 102 [ 1602.883865][T31754] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7358'. [ 1603.067100][T31758] fuse: Invalid rootmode [ 1603.175412][T31762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7359'. [ 1603.492272][T31766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7361'. [ 1603.501453][T31766] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1603.509133][T31766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1604.631286][T31155] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1604.999207][T31155] usb 2-1: Using ep0 maxpacket: 32 [ 1605.024940][T31155] usb 2-1: config 2 has an invalid interface number: 15 but max is 0 [ 1605.049516][T31155] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1605.110618][T31155] usb 2-1: config 2 has no interface number 1 [ 1605.125301][T31155] usb 2-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1605.686575][T31155] usb 2-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1606.023451][T31155] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1606.054775][T31155] usb 2-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 1606.077969][T31155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.158618][T31155] usb 2-1: Product: syz [ 1606.238778][T31155] usb 2-1: Manufacturer: syz [ 1606.269080][ T43] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1606.341836][T31155] usb 2-1: SerialNumber: syz [ 1606.348450][T31797] syz_tun: entered allmulticast mode [ 1606.489077][ T43] usb 10-1: device descriptor read/64, error -71 [ 1606.499428][T31155] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 1606.789104][ T43] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1606.939658][ T43] usb 10-1: device descriptor read/64, error -71 [ 1607.012194][T31801] vlan2: entered promiscuous mode [ 1607.030823][T31801] vlan2: entered allmulticast mode [ 1607.047260][T31801] hsr_slave_1: entered allmulticast mode [ 1607.062811][ T43] usb usb10-port1: attempt power cycle [ 1607.422315][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.428692][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.459688][ T43] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1607.498523][ T43] usb 10-1: device descriptor read/8, error -71 [ 1607.739928][ T43] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1607.776304][ T43] usb 10-1: device descriptor read/8, error -71 [ 1607.911066][ T43] usb usb10-port1: unable to enumerate USB device [ 1608.130591][T31155] pwc: Failed to set LED on/off time (-71) [ 1608.159502][T31155] pwc: send_video_command error -71 [ 1608.172665][T31155] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1608.209325][T31155] Philips webcam 2-1:2.0: probe with driver Philips webcam failed with error -71 [ 1608.665353][T31825] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7377'. [ 1608.787502][T31155] usb 2-1: USB disconnect, device number 55 [ 1610.173025][T31840] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7380'. [ 1610.898593][T31846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.907322][T31846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.041530][T31848] fuse: Invalid rootmode [ 1611.335697][T31864] openvswitch: netlink: VXLAN extension 13 out of range max 1 [ 1611.529974][T31869] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1611.631915][T31872] binder: 31861:31872 ioctl c0306201 2000000003c0 returned -14 [ 1613.159734][T31892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7396'. [ 1613.168667][T31892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7396'. [ 1613.183837][T31893] netlink: 'syz.8.7397': attribute type 7 has an invalid length. [ 1613.192911][T31892] geneve2: entered promiscuous mode [ 1613.201366][T31892] geneve2: entered allmulticast mode [ 1613.247724][T31893] : entered promiscuous mode [ 1614.694252][T31921] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1618.036085][T31960] FAULT_INJECTION: forcing a failure. [ 1618.036085][T31960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.201840][T31960] CPU: 0 UID: 0 PID: 31960 Comm: syz.9.7412 Not tainted syzkaller #0 PREEMPT(full) [ 1618.201857][T31960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1618.201864][T31960] Call Trace: [ 1618.201869][T31960] [ 1618.201874][T31960] dump_stack_lvl+0x189/0x250 [ 1618.201892][T31960] ? __pfx____ratelimit+0x10/0x10 [ 1618.201906][T31960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1618.201917][T31960] ? __pfx__printk+0x10/0x10 [ 1618.201930][T31960] ? lock_release+0x4b/0x3e0 [ 1618.201943][T31960] ? rcu_is_watching+0x15/0xb0 [ 1618.201954][T31960] should_fail_ex+0x414/0x560 [ 1618.201968][T31960] _copy_to_user+0x31/0xb0 [ 1618.201979][T31960] do_ipv6_getsockopt+0x110b/0x2300 [ 1618.201996][T31960] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1618.202008][T31960] ? aa_label_sk_perm+0x4cd/0x630 [ 1618.202022][T31960] ? kstrtoull+0x12f/0x1d0 [ 1618.202039][T31960] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1618.202061][T31960] ? get_pid_task+0x20/0x1f0 [ 1618.202081][T31960] ? rcu_is_watching+0x15/0xb0 [ 1618.202096][T31960] ? get_pid_task+0x20/0x1f0 [ 1618.202115][T31960] ? rcu_is_watching+0x15/0xb0 [ 1618.202130][T31960] ? get_pid_task+0x20/0x1f0 [ 1618.202150][T31960] ? lock_release+0x4b/0x3e0 [ 1618.202165][T31960] ? __pfx___might_resched+0x10/0x10 [ 1618.202175][T31960] ? rcu_is_watching+0x15/0xb0 [ 1618.202184][T31960] ? lock_release+0x4b/0x3e0 [ 1618.202195][T31960] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1618.202206][T31960] ? security_file_permission+0x75/0x290 [ 1618.202220][T31960] ? __might_fault+0xb0/0x130 [ 1618.202233][T31960] ? rcu_is_watching+0x15/0xb0 [ 1618.202242][T31960] ipv6_getsockopt+0xbd/0x290 [ 1618.202256][T31960] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1618.202268][T31960] ? __might_fault+0xb0/0x130 [ 1618.202279][T31960] ? __might_fault+0xcc/0x130 [ 1618.202291][T31960] ? sock_common_getsockopt+0x2d/0xb0 [ 1618.202310][T31960] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1618.202323][T31960] do_sock_getsockopt+0x372/0x450 [ 1618.202333][T31960] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1618.202342][T31960] ? rcu_needs_cpu+0xa0/0xb0 [ 1618.202350][T31960] ? __fget_files+0x3a0/0x420 [ 1618.202365][T31960] ? __fget_files+0x2a/0x420 [ 1618.202379][T31960] __x64_sys_getsockopt+0x1a5/0x250 [ 1618.202388][T31960] ? rcu_needs_cpu+0xa0/0xb0 [ 1618.202396][T31960] ? rcu_needs_cpu+0xa0/0xb0 [ 1618.202405][T31960] do_syscall_64+0xfa/0x3b0 [ 1618.202419][T31960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.202428][T31960] ? clear_bhb_loop+0x60/0xb0 [ 1618.202438][T31960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.202448][T31960] RIP: 0033:0x7f5b07f8ebe9 [ 1618.202458][T31960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.202467][T31960] RSP: 002b:00007f5b08ebd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1618.202478][T31960] RAX: ffffffffffffffda RBX: 00007f5b081b5fa0 RCX: 00007f5b07f8ebe9 [ 1618.202486][T31960] RDX: 000000000000004b RSI: 0000000000000029 RDI: 0000000000000003 [ 1618.202492][T31960] RBP: 00007f5b08ebd090 R08: 0000200000000040 R09: 0000000000000000 [ 1618.202498][T31960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.202504][T31960] R13: 00007f5b081b6038 R14: 00007f5b081b5fa0 R15: 00007f5b082dfa28 [ 1618.202514][T31960] [ 1618.525972][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.946555][T31972] netlink: 7 bytes leftover after parsing attributes in process `syz.7.7417'. [ 1618.962862][T31972] ip6erspan0: entered allmulticast mode [ 1619.159752][T31111] usb 6-1: new low-speed USB device number 103 using dummy_hcd [ 1619.230428][T31980] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.7419'. [ 1619.359761][T31111] usb 6-1: device descriptor read/64, error -71 [ 1619.599687][T31111] usb 6-1: new low-speed USB device number 104 using dummy_hcd [ 1619.890129][T31111] usb 6-1: device descriptor read/64, error -71 [ 1620.019435][T31111] usb usb6-port1: attempt power cycle [ 1620.101895][T31985] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7421'. [ 1620.153827][T31985] tipc: Started in network mode [ 1620.159209][T31985] tipc: Node identity aadc77130a68, cluster identity 4711 [ 1620.168306][T31985] tipc: Enabled bearer , priority 0 [ 1620.198377][T31985] syzkaller0: entered promiscuous mode [ 1620.251491][T31985] syzkaller0: entered allmulticast mode [ 1620.291187][T31985] tipc: Resetting bearer [ 1620.311532][T31984] tipc: Resetting bearer [ 1620.350340][T31984] tipc: Disabling bearer [ 1620.371810][T31111] usb 6-1: new low-speed USB device number 105 using dummy_hcd [ 1620.400725][T31111] usb 6-1: device descriptor read/8, error -71 [ 1620.700076][T31111] usb 6-1: new low-speed USB device number 106 using dummy_hcd [ 1620.835906][T31111] usb 6-1: device descriptor read/8, error -71 [ 1620.959531][T31111] usb usb6-port1: unable to enumerate USB device [ 1621.962078][T32018] FAULT_INJECTION: forcing a failure. [ 1621.962078][T32018] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.043530][T32018] CPU: 0 UID: 0 PID: 32018 Comm: syz.9.7430 Not tainted syzkaller #0 PREEMPT(full) [ 1622.043556][T32018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1622.043568][T32018] Call Trace: [ 1622.043575][T32018] [ 1622.043583][T32018] dump_stack_lvl+0x189/0x250 [ 1622.043609][T32018] ? __pfx____ratelimit+0x10/0x10 [ 1622.043632][T32018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.043651][T32018] ? __pfx__printk+0x10/0x10 [ 1622.043679][T32018] should_fail_ex+0x414/0x560 [ 1622.043703][T32018] should_failslab+0xa8/0x100 [ 1622.043727][T32018] __kmalloc_cache_noprof+0x70/0x3d0 [ 1622.043749][T32018] ? sctp_add_bind_addr+0x8c/0x370 [ 1622.043772][T32018] sctp_add_bind_addr+0x8c/0x370 [ 1622.043794][T32018] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1622.043818][T32018] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1622.043847][T32018] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1622.043868][T32018] ? sctp_v6_is_any+0x64/0x80 [ 1622.043891][T32018] ? sctp_copy_one_addr+0x93/0x360 [ 1622.043916][T32018] sctp_bind_addr_copy+0xb3/0x3c0 [ 1622.043938][T32018] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1622.043958][T32018] sctp_connect_new_asoc+0x2e0/0x690 [ 1622.043976][T32018] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1622.043992][T32018] ? lock_release+0x4b/0x3e0 [ 1622.044014][T32018] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1622.044032][T32018] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1622.044055][T32018] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1622.044080][T32018] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1622.044100][T32018] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1622.044123][T32018] sctp_sendmsg+0x155c/0x2810 [ 1622.044151][T32018] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1622.044173][T32018] ? rcu_is_watching+0x15/0xb0 [ 1622.044191][T32018] ? aa_sk_perm+0x81e/0x950 [ 1622.044215][T32018] ? __pfx_aa_sk_perm+0x10/0x10 [ 1622.044239][T32018] ? sock_rps_record_flow+0x19/0x410 [ 1622.044260][T32018] ? inet_sendmsg+0x2f4/0x370 [ 1622.044279][T32018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1622.044299][T32018] __sock_sendmsg+0x19c/0x270 [ 1622.044321][T32018] ____sys_sendmsg+0x52d/0x830 [ 1622.044339][T32018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1622.044355][T32018] ? __might_fault+0xb0/0x130 [ 1622.044381][T32018] ? import_iovec+0x74/0xa0 [ 1622.044400][T32018] ___sys_sendmsg+0x21f/0x2a0 [ 1622.044418][T32018] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.044436][T32018] ? kstrtouint+0x6e/0xe0 [ 1622.044469][T32018] ? __fget_files+0x2a/0x420 [ 1622.044493][T32018] ? __fget_files+0x3a0/0x420 [ 1622.044520][T32018] __sys_sendmmsg+0x227/0x430 [ 1622.044539][T32018] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1622.044555][T32018] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1622.044588][T32018] ? ksys_write+0x22a/0x250 [ 1622.044611][T32018] ? __pfx_ksys_write+0x10/0x10 [ 1622.044630][T32018] ? rcu_is_watching+0x15/0xb0 [ 1622.044650][T32018] __x64_sys_sendmmsg+0xa0/0xc0 [ 1622.044668][T32018] do_syscall_64+0xfa/0x3b0 [ 1622.044692][T32018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.044709][T32018] ? clear_bhb_loop+0x60/0xb0 [ 1622.044728][T32018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.044745][T32018] RIP: 0033:0x7f5b07f8ebe9 [ 1622.044761][T32018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.044776][T32018] RSP: 002b:00007f5b08ebd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1622.044797][T32018] RAX: ffffffffffffffda RBX: 00007f5b081b5fa0 RCX: 00007f5b07f8ebe9 [ 1622.044811][T32018] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 1622.044829][T32018] RBP: 00007f5b08ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.044840][T32018] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.044852][T32018] R13: 00007f5b081b6038 R14: 00007f5b081b5fa0 R15: 00007f5b082dfa28 [ 1622.044871][T32018] [ 1622.418399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.695425][T31942] Set syz1 is full, maxelem 65536 reached [ 1626.695894][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7446'. [ 1626.856901][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7446'. [ 1627.857767][T32103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1628.089426][T32110] netlink: zone id is out of range [ 1628.144021][T32110] netlink: zone id is out of range [ 1628.165700][T32110] netlink: zone id is out of range [ 1628.264437][T32110] netlink: zone id is out of range [ 1628.303481][T32110] netlink: zone id is out of range [ 1628.451080][T32110] netlink: zone id is out of range [ 1628.505635][T32110] netlink: set zone limit has 4 unknown bytes [ 1628.998912][T32121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7454'. [ 1629.008538][T32121] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1629.016708][T32121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1629.164553][T32125] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1629.462835][T32125] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1629.517540][T32125] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1629.888649][T32131] FAULT_INJECTION: forcing a failure. [ 1629.888649][T32131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1629.906743][T32131] CPU: 1 UID: 0 PID: 32131 Comm: syz.1.7458 Not tainted syzkaller #0 PREEMPT(full) [ 1629.906760][T32131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1629.906767][T32131] Call Trace: [ 1629.906771][T32131] [ 1629.906776][T32131] dump_stack_lvl+0x189/0x250 [ 1629.906793][T32131] ? __pfx____ratelimit+0x10/0x10 [ 1629.906807][T32131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1629.906818][T32131] ? __pfx__printk+0x10/0x10 [ 1629.906830][T32131] ? __might_fault+0xb0/0x130 [ 1629.906845][T32131] ? rcu_is_watching+0x15/0xb0 [ 1629.906855][T32131] should_fail_ex+0x414/0x560 [ 1629.906869][T32131] _copy_from_user+0x2d/0xb0 [ 1629.906880][T32131] ____sys_sendmsg+0x2fe/0x830 [ 1629.906892][T32131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1629.906903][T32131] ? import_iovec+0x74/0xa0 [ 1629.906915][T32131] ___sys_sendmsg+0x21f/0x2a0 [ 1629.906924][T32131] ? __pfx____sys_sendmsg+0x10/0x10 [ 1629.906934][T32131] ? kstrtouint+0x6e/0xe0 [ 1629.906952][T32131] ? rcu_is_watching+0x15/0xb0 [ 1629.906961][T32131] ? lock_release+0x4b/0x3e0 [ 1629.906974][T32131] ? __might_fault+0xcc/0x130 [ 1629.906986][T32131] __sys_sendmmsg+0x227/0x430 [ 1629.907007][T32131] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1629.907017][T32131] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1629.907035][T32131] ? ksys_write+0x22a/0x250 [ 1629.907048][T32131] ? __pfx_ksys_write+0x10/0x10 [ 1629.907064][T32131] ? rcu_is_watching+0x15/0xb0 [ 1629.907082][T32131] __x64_sys_sendmmsg+0xa0/0xc0 [ 1629.907100][T32131] do_syscall_64+0xfa/0x3b0 [ 1629.907123][T32131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.907137][T32131] ? clear_bhb_loop+0x60/0xb0 [ 1629.907148][T32131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.907157][T32131] RIP: 0033:0x7fbde278ebe9 [ 1629.907168][T32131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1629.907177][T32131] RSP: 002b:00007fbde3652038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1629.907189][T32131] RAX: ffffffffffffffda RBX: 00007fbde29b6090 RCX: 00007fbde278ebe9 [ 1629.907197][T32131] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000005 [ 1629.907203][T32131] RBP: 00007fbde3652090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.907210][T32131] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1629.907216][T32131] R13: 00007fbde29b6128 R14: 00007fbde29b6090 R15: 00007fbde2adfa28 [ 1629.907227][T32131] [ 1630.146032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1630.309959][T32136] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1630.502757][T32132] process '/newroot/52/file0' started with executable stack [ 1630.520248][T32138] FAULT_INJECTION: forcing a failure. [ 1630.520248][T32138] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.549606][T32138] CPU: 0 UID: 0 PID: 32138 Comm: syz.5.7460 Not tainted syzkaller #0 PREEMPT(full) [ 1630.549631][T32138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1630.549643][T32138] Call Trace: [ 1630.549651][T32138] [ 1630.549659][T32138] dump_stack_lvl+0x189/0x250 [ 1630.549689][T32138] ? __pfx____ratelimit+0x10/0x10 [ 1630.549711][T32138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1630.549731][T32138] ? __pfx__printk+0x10/0x10 [ 1630.549754][T32138] ? __pfx___might_resched+0x10/0x10 [ 1630.549771][T32138] ? lock_acquire+0x5f/0x360 [ 1630.549796][T32138] should_fail_ex+0x414/0x560 [ 1630.549818][T32138] should_failslab+0xa8/0x100 [ 1630.549843][T32138] __kmalloc_noprof+0xcb/0x4f0 [ 1630.549865][T32138] ? sock_kmalloc+0xd6/0x160 [ 1630.549885][T32138] sock_kmalloc+0xd6/0x160 [ 1630.549904][T32138] ____sys_sendmsg+0x1b5/0x830 [ 1630.549924][T32138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1630.549942][T32138] ? import_iovec+0x74/0xa0 [ 1630.549962][T32138] ___sys_sendmsg+0x21f/0x2a0 [ 1630.549980][T32138] ? __pfx____sys_sendmsg+0x10/0x10 [ 1630.550000][T32138] ? kstrtouint+0x6e/0xe0 [ 1630.550030][T32138] ? rcu_is_watching+0x15/0xb0 [ 1630.550048][T32138] ? lock_release+0x4b/0x3e0 [ 1630.550071][T32138] ? __might_fault+0xcc/0x130 [ 1630.550094][T32138] __sys_sendmmsg+0x227/0x430 [ 1630.550114][T32138] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1630.550131][T32138] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1630.550164][T32138] ? ksys_write+0x22a/0x250 [ 1630.550187][T32138] ? __pfx_ksys_write+0x10/0x10 [ 1630.550213][T32138] ? rcu_is_watching+0x15/0xb0 [ 1630.550232][T32138] __x64_sys_sendmmsg+0xa0/0xc0 [ 1630.550251][T32138] do_syscall_64+0xfa/0x3b0 [ 1630.550274][T32138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.550291][T32138] ? clear_bhb_loop+0x60/0xb0 [ 1630.550310][T32138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.550328][T32138] RIP: 0033:0x7fa84fb8ebe9 [ 1630.550344][T32138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1630.550360][T32138] RSP: 002b:00007fa850a39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1630.550380][T32138] RAX: ffffffffffffffda RBX: 00007fa84fdb5fa0 RCX: 00007fa84fb8ebe9 [ 1630.550393][T32138] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 1630.550405][T32138] RBP: 00007fa850a39090 R08: 0000000000000000 R09: 0000000000000000 [ 1630.550417][T32138] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1630.550428][T32138] R13: 00007fa84fdb6038 R14: 00007fa84fdb5fa0 R15: 00007fa84fedfa28 [ 1630.550448][T32138] [ 1631.357714][ T30] audit: type=1326 audit(1755802778.236:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32151 comm="syz.5.7465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa84fb8ebe9 code=0x0 [ 1631.403875][T32146] fuse: Unknown parameter '_ڒW4)U>՟Y:@bNfYX [ 1631.403875][T32146] +Vc:߱ZSL' [ 1631.420174][T32160] netlink: 'syz.5.7465': attribute type 10 has an invalid length. [ 1631.650470][T32160] team0: Port device dummy0 added [ 1632.509539][T32167] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7468'. [ 1632.669806][T31111] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1632.849670][T31111] usb 2-1: Using ep0 maxpacket: 16 [ 1632.858632][T31111] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1632.873258][T31111] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1632.934381][T31111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1632.949203][T31155] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1632.960233][T31111] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1632.997411][T31111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.051115][T31111] usb 2-1: config 0 descriptor?? [ 1633.110894][T31155] usb 10-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1633.120706][T31155] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.128894][T31155] usb 10-1: Product: syz [ 1633.143900][T31155] usb 10-1: Manufacturer: syz [ 1633.175634][T31155] usb 10-1: SerialNumber: syz [ 1633.228431][T31155] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1633.234948][T31155] r8152-cfgselector 10-1: config 0 descriptor?? [ 1633.483773][T31111] hid (null): unknown global tag 0xd [ 1633.497656][T32176] batadv0: entered promiscuous mode [ 1633.505432][T32176] macvtap1: entered promiscuous mode [ 1633.513717][T32176] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1633.601671][T32176] batadv0: left promiscuous mode [ 1633.662413][ T5920] r8152-cfgselector 10-1: USB disconnect, device number 7 [ 1633.686618][T31111] usb 2-1: USB disconnect, device number 56 [ 1634.192338][ T30] audit: type=1804 audit(1755802780.926:3429): pid=32182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.7472" name="file0" dev="ramfs" ino=172708 res=1 errno=0 [ 1634.601638][T32196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1634.879138][ T43] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1635.051149][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.063039][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.081049][ T43] usb 10-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1635.129663][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.551977][ T43] usb 10-1: config 0 descriptor?? [ 1635.687973][T32208] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7481'. [ 1635.791271][T32200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.800364][T32200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.838000][T32200] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7478'. [ 1636.304545][T32218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.313740][T32218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.519407][T32217] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.7483'. [ 1636.562123][ T5920] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1636.593549][ T43] usbhid 10-1:0.0: can't add hid device: -71 [ 1636.600558][ T43] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1636.617026][ T43] usb 10-1: USB disconnect, device number 8 [ 1636.737842][ T5920] usb 6-1: not running at top speed; connect to a high speed hub [ 1636.773285][ T5920] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 1636.953984][ T5920] usb 6-1: config 95 has no interface number 0 [ 1636.984259][ T5920] usb 6-1: config 95 interface 1 has no altsetting 0 [ 1637.054513][ T5920] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1637.075168][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.144861][ T5920] usb 6-1: Product: syz [ 1637.160317][ T5920] usb 6-1: Manufacturer: syz [ 1637.164949][ T5920] usb 6-1: SerialNumber: syz [ 1637.460509][ T5920] usb 6-1: USB disconnect, device number 107 [ 1637.802101][T32241] netlink: 'syz.8.7488': attribute type 1 has an invalid length. [ 1637.930386][T31111] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1638.189643][T31111] usb 2-1: Using ep0 maxpacket: 32 [ 1638.204872][T31111] usb 2-1: config 0 has no interfaces? [ 1638.222437][T31111] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 1638.223410][T32244] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7489'. [ 1638.262684][T31111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.295619][T32244] netem: unknown loss type 13 [ 1638.300261][T31111] usb 2-1: config 0 descriptor?? [ 1638.310575][T32244] netem: change failed [ 1638.472101][T32252] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.7491'. [ 1638.512732][T32236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.552352][T32236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.342837][T31110] usb 2-1: USB disconnect, device number 57 [ 1639.693300][T31111] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1639.863930][T31111] usb 10-1: Using ep0 maxpacket: 16 [ 1639.891635][T31111] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.918573][T31111] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.938813][T31111] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1639.954077][T31111] usb 10-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1639.976966][T31111] usb 10-1: config 7 interface 0 has no altsetting 0 [ 1639.984812][T31111] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1640.017347][T31111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.138747][T32275] blktrace: Concurrent blktraces are not allowed on sg0 [ 1640.666342][T32264] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7495'. [ 1641.251610][T31111] usbhid 10-1:7.0: can't add hid device: -71 [ 1641.262520][T31111] usbhid 10-1:7.0: probe with driver usbhid failed with error -71 [ 1641.358817][T31111] usb 10-1: USB disconnect, device number 9 [ 1641.863234][T32293] bond0: entered promiscuous mode [ 1641.887216][T32293] bond_slave_0: entered promiscuous mode [ 1641.894393][T32293] bond_slave_1: entered promiscuous mode [ 1641.947633][T32293] batadv0: entered promiscuous mode [ 1641.957676][T32293] hsr1: entered allmulticast mode [ 1641.972577][T32293] bond0: entered allmulticast mode [ 1641.977818][T32293] bond_slave_0: entered allmulticast mode [ 1641.985943][T32293] bond_slave_1: entered allmulticast mode [ 1641.993343][T32293] batadv0: entered allmulticast mode [ 1642.000478][T32293] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1642.009525][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7506'. [ 1642.022206][T32293] bond0: left promiscuous mode [ 1642.028946][T32304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7507'. [ 1642.053759][T32293] bond_slave_0: left promiscuous mode [ 1642.061153][T32305] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7506'. [ 1642.081517][T32293] bond_slave_1: left promiscuous mode [ 1642.096873][T32293] batadv0: left promiscuous mode [ 1642.114167][T32306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7506'. [ 1642.133809][T32306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7506'. [ 1642.163006][T32300] netdevsim netdevsim8: Direct firmware load for nel/config failed with error -2 [ 1642.211453][T32300] netdevsim netdevsim8: Falling back to sysfs fallback for: nel/config [ 1642.507354][T32323] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.7508'. [ 1642.679577][T32322] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.7509'. [ 1643.361554][T32328] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7511'. [ 1643.700353][T32334] fuse: Bad value for 'fd' [ 1644.208790][T32349] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1644.300976][T32351] syzkaller0: entered promiscuous mode [ 1644.311515][T32351] syzkaller0: entered allmulticast mode [ 1644.329949][T32351] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1644.352516][T32351] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7521'. [ 1644.374831][T32353] binder: 32352:32353 ioctl c0306201 200000000640 returned -22 [ 1644.805320][T32364] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7524'. [ 1644.819416][T32366] delete_channel: no stack [ 1644.828101][T32360] AppArmor: change_hat: Invalid input '0x000000000000' [ 1644.928388][T32373] netlink: 6 bytes leftover after parsing attributes in process `syz.5.7528'. [ 1644.971598][T32373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1645.237923][T32382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7532'. [ 1645.251222][T32382] bridge_slave_1: left allmulticast mode [ 1645.257326][T32382] bridge_slave_1: left promiscuous mode [ 1645.264143][T32382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.305571][T32382] bridge_slave_0: left allmulticast mode [ 1645.313927][T32382] bridge_slave_0: left promiscuous mode [ 1645.334221][T32382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.343910][T31077] Bluetooth: hci2: command 0x0406 tx timeout [ 1645.350176][T27523] Bluetooth: hci0: command 0x0406 tx timeout [ 1646.379107][T32398] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1646.813220][T32389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1646.895400][T32401] netlink: 'syz.1.7536': attribute type 1 has an invalid length. [ 1646.957266][T32401] bond1: entered promiscuous mode [ 1646.962496][T32401] bond1: entered allmulticast mode [ 1646.968124][T32401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1646.995935][T32401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1647.008437][T32401] bond2: entered promiscuous mode [ 1647.014176][T32401] bond2: entered allmulticast mode [ 1647.020438][T32401] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 1647.670132][T32355] [U] k} [ 1648.439178][T20143] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1648.634400][T20143] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.671373][T20143] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1648.735089][T20143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.786647][T20143] usb 6-1: config 0 descriptor?? [ 1648.833798][T20143] pwc: Askey VC010 type 2 USB webcam detected. [ 1649.275404][T20143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1649.288081][T20143] pwc: recv_control_msg error -32 req 02 val 2700 [ 1649.307414][T20143] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1649.325314][T20143] pwc: recv_control_msg error -32 req 04 val 1000 [ 1649.337202][T20143] pwc: recv_control_msg error -32 req 04 val 1300 [ 1649.615553][T20143] pwc: recv_control_msg error -32 req 04 val 1400 [ 1649.622826][T20143] pwc: recv_control_msg error -32 req 02 val 2000 [ 1649.630209][T20143] pwc: recv_control_msg error -32 req 02 val 2100 [ 1649.637306][T20143] pwc: recv_control_msg error -32 req 04 val 1500 [ 1649.679630][T31110] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1649.846402][T20143] pwc: recv_control_msg error -32 req 02 val 2400 [ 1649.852444][T31110] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.859711][T20143] pwc: recv_control_msg error -32 req 02 val 2600 [ 1649.865502][T31110] usb 2-1: config 128 has no interfaces? [ 1649.878348][T31110] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1649.890193][T31110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.898393][T31110] usb 2-1: Product: syz [ 1649.909499][T20143] pwc: recv_control_msg error -32 req 02 val 2900 [ 1649.938823][T31110] usb 2-1: Manufacturer: syz [ 1649.940007][T20143] pwc: recv_control_msg error -32 req 02 val 2800 [ 1649.968343][T31110] usb 2-1: SerialNumber: syz [ 1650.183035][T31110] usb 2-1: USB disconnect, device number 58 [ 1650.239214][T20143] pwc: recv_control_msg error -32 req 04 val 1100 [ 1650.256172][T20143] pwc: Registered as video103. [ 1650.268487][T20143] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input73 [ 1650.336078][T32458] could not allocate digest TFM handle hmac(sha256-ce) [ 1650.434159][ T30] audit: type=1326 audit(1755802797.306:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1650.460361][T32432] Bluetooth: hci1: command 0x0406 tx timeout [ 1650.463959][ T43] usb 6-1: USB disconnect, device number 108 [ 1650.466500][T32432] Bluetooth: hci4: command 0x0406 tx timeout [ 1650.493057][ T5865] Bluetooth: hci6: command 0x0406 tx timeout [ 1650.523235][ T30] audit: type=1326 audit(1755802797.306:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1650.630148][ T30] audit: type=1326 audit(1755802797.306:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1650.895802][ T30] audit: type=1326 audit(1755802797.306:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1650.918205][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.940351][ T30] audit: type=1326 audit(1755802797.306:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1650.970403][ T30] audit: type=1326 audit(1755802797.306:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1651.071124][ T30] audit: type=1326 audit(1755802797.306:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1652.169250][ T30] audit: type=1326 audit(1755802797.306:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1652.253088][T32495] macvlan0: entered promiscuous mode [ 1652.270147][T32495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7560'. [ 1652.279140][ T30] audit: type=1326 audit(1755802797.306:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1652.279178][ T30] audit: type=1326 audit(1755802797.306:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32470 comm="syz.8.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f372338ebe9 code=0x7ffc0000 [ 1652.302111][ C0] vkms_vblank_simulate: vblank timer overrun [ 1653.162931][ T5920] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1653.559718][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1654.236706][T32525] : entered promiscuous mode [ 1654.801416][T32533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7570'. [ 1654.847264][T32533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7570'. [ 1654.907948][T32533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7570'. [ 1655.580164][T32476] Bluetooth: hci0: command 0x0406 tx timeout [ 1655.789826][T32515] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1657.899926][T32476] Bluetooth: hci0: command 0x0406 tx timeout [ 1657.917851][T32515] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 1658.960297][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1658.980050][ T5920] usb 2-1: no configurations [ 1664.192556][ T5920] usb 2-1: can't read configurations, error -22 [ 1669.104735][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.126480][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1804.029052][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1804.036116][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P32540/1:b..l [ 1804.044102][ C0] rcu: (detected by 0, t=10503 jiffies, g=241333, q=1998402 ncpus=2) [ 1804.052269][ C0] task:syz.5.7568 state:R running task stack:25992 pid:32540 tgid:32526 ppid:31085 task_flags:0x400040 flags:0x00004006 [ 1804.065759][ C0] Call Trace: [ 1804.069077][ C0] [ 1804.072012][ C0] __schedule+0x1798/0x4cc0 [ 1804.076524][ C0] ? __pfx___schedule+0x10/0x10 [ 1804.081367][ C0] ? swake_up_one+0x78/0x140 [ 1804.085962][ C0] ? rcu_preempt_deferred_qs_irqrestore+0xa11/0xce0 [ 1804.092645][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1804.097757][ C0] preempt_schedule_notrace+0xd1/0x110 [ 1804.103208][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1804.109287][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1804.114500][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 1804.120398][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1804.125511][ C0] rcu_is_watching+0x7f/0xb0 [ 1804.130106][ C0] lock_acquire+0x5f/0x360 [ 1804.134537][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.139386][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1804.144518][ C0] ? lock_release+0x4b/0x3e0 [ 1804.149121][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.153894][ C0] ? deref_stack_reg+0x19f/0x230 [ 1804.158836][ C0] ? arch_stack_walk+0xe4/0x150 [ 1804.163678][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1804.168798][ C0] unwind_next_frame+0xc2/0x2390 [ 1804.173743][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1804.178867][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1804.183970][ C0] ? __unwind_start+0xf8/0x760 [ 1804.188756][ C0] __unwind_start+0x5b9/0x760 [ 1804.193528][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1804.199776][ C0] arch_stack_walk+0xe4/0x150 [ 1804.204466][ C0] ? arch_stack_walk+0xe4/0x150 [ 1804.209408][ C0] stack_trace_save+0x9c/0xe0 [ 1804.214100][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1804.219499][ C0] save_stack+0xf5/0x1f0 [ 1804.223748][ C0] ? __pfx_save_stack+0x10/0x10 [ 1804.228611][ C0] ? lock_release+0x4b/0x3e0 [ 1804.233205][ C0] ? page_ext_get+0x22/0x2f0 [ 1804.237825][ C0] __reset_page_owner+0x71/0x1f0 [ 1804.242755][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1804.247872][ C0] __folio_put+0x21b/0x2c0 [ 1804.252274][ C0] ? __pfx___folio_put+0x10/0x10 [ 1804.257217][ C0] ? folio_unlock+0x101/0x160 [ 1804.261904][ C0] hpage_collapse_scan_file+0x4749/0x4fa0 [ 1804.267675][ C0] ? hpage_collapse_scan_file+0x197/0x4fa0 [ 1804.273571][ C0] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 1804.279662][ C0] ? mt_find+0x46f/0x5f0 [ 1804.283940][ C0] ? mt_find+0x15c/0x5f0 [ 1804.288638][ C0] ? __pfx_mt_find+0x10/0x10 [ 1804.293238][ C0] ? collapse_pte_mapped_thp+0xec2/0xf70 [ 1804.298889][ C0] ? shmem_huge_global_enabled+0x95/0x3a0 [ 1804.304627][ C0] ? shmem_allowable_huge_orders+0x406/0x420 [ 1804.310626][ C0] ? __pfx___up_read+0x10/0x10 [ 1804.315402][ C0] ? lock_release+0x4b/0x3e0 [ 1804.320005][ C0] madvise_collapse+0x45b/0xa40 [ 1804.324872][ C0] madvise_vma_behavior+0xec8/0x3af0 [ 1804.330167][ C0] ? rcu_read_lock_held+0xa/0x50 [ 1804.335114][ C0] ? __page_table_check_zero+0xba/0x530 [ 1804.340807][ C0] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1804.346617][ C0] ? post_alloc_hook+0x253/0x2a0 [ 1804.351551][ C0] ? get_page_from_freelist+0x21e4/0x22c0 [ 1804.357276][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1804.362484][ C0] ? __kernel_text_address+0xd/0x40 [ 1804.367686][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1804.373830][ C0] ? arch_stack_walk+0xfc/0x150 [ 1804.378693][ C0] ? mtree_range_walk+0x6a7/0x840 [ 1804.383726][ C0] ? mas_prev_slot+0xb31/0xbb0 [ 1804.388500][ C0] ? find_vma_prev+0xfc/0x170 [ 1804.393167][ C0] ? __pfx_find_vma_prev+0x10/0x10 [ 1804.398295][ C0] ? __folio_batch_add_and_move+0x20a/0xd20 [ 1804.404314][ C0] ? pfn_valid+0xba/0x490 [ 1804.408652][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.413414][ C0] madvise_walk_vmas+0x51c/0xa30 [ 1804.418370][ C0] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1804.423841][ C0] ? blk_start_plug+0x6f/0x1b0 [ 1804.428618][ C0] madvise_do_behavior+0x38e/0x550 [ 1804.433733][ C0] ? madvise_lock+0x14c/0x2d0 [ 1804.438520][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.443294][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1804.448942][ C0] ? down_read+0x1ad/0x2e0 [ 1804.453351][ C0] do_madvise+0x1bc/0x270 [ 1804.457696][ C0] ? __pfx_do_madvise+0x10/0x10 [ 1804.462563][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.467333][ C0] __x64_sys_madvise+0xa7/0xc0 [ 1804.472096][ C0] do_syscall_64+0xfa/0x3b0 [ 1804.476661][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.482743][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1804.487702][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.493584][ C0] RIP: 0033:0x7fa84fb8ebe9 [ 1804.498004][ C0] RSP: 002b:00007fa8509f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1804.506419][ C0] RAX: ffffffffffffffda RBX: 00007fa84fdb6180 RCX: 00007fa84fb8ebe9 [ 1804.514379][ C0] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 1804.522358][ C0] RBP: 00007fa84fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1804.530344][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1804.538408][ C0] R13: 00007fa84fdb6218 R14: 00007fa84fdb6180 R15: 00007fa84fedfa28 [ 1804.546489][ C0] [ 1804.549501][ C0] rcu: rcu_preempt kthread starved for 9062 jiffies! g241333 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1804.560696][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1804.570668][ C0] rcu: RCU grace-period kthread stack dump: [ 1804.576561][ C0] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1804.590052][ C0] Call Trace: [ 1804.593358][ C0] [ 1804.596326][ C0] __schedule+0x1798/0x4cc0 [ 1804.600852][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.605729][ C0] ? __pfx___schedule+0x10/0x10 [ 1804.610664][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1804.616574][ C0] ? schedule+0x91/0x360 [ 1804.620824][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.625757][ C0] ? lock_release+0x4b/0x3e0 [ 1804.630348][ C0] schedule+0x165/0x360 [ 1804.634518][ C0] schedule_timeout+0x12b/0x270 [ 1804.639380][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1804.644758][ C0] ? rcu_is_watching+0x15/0xb0 [ 1804.649509][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1804.654798][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1804.665124][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1804.669977][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1804.676148][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1804.681440][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1804.686649][ C0] rcu_gp_kthread+0x99/0x390 [ 1804.691229][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1804.696438][ C0] ? __kthread_parkme+0x7b/0x200 [ 1804.701380][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1804.706412][ C0] kthread+0x70e/0x8a0 [ 1804.710477][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1804.715687][ C0] ? __pfx_kthread+0x10/0x10 [ 1804.720287][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1804.725515][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1804.730704][ C0] ? __pfx_kthread+0x10/0x10 [ 1804.735306][ C0] ret_from_fork+0x3f9/0x770 [ 1804.740120][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1804.745242][ C0] ? __switch_to_asm+0x39/0x70 [ 1804.750021][ C0] ? __switch_to_asm+0x33/0x70 [ 1804.754879][ C0] ? __pfx_kthread+0x10/0x10 [ 1804.759476][ C0] ret_from_fork_asm+0x1a/0x30 [ 1804.764261][ C0] [ 1804.767398][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1804.773804][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1804.779023][ C1] NMI backtrace for cpu 1 [ 1804.779040][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1804.779057][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1804.779068][ C1] RIP: 0010:debug_check_no_obj_freed+0x212/0x470 [ 1804.779110][ C1] Code: c0 0f 84 45 02 00 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 74 08 4c 89 ff e8 c1 d7 52 fd 49 8b 07 <48> 89 44 24 18 4d 8d 67 18 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 [ 1804.779124][ C1] RSP: 0018:ffffc90000a08050 EFLAGS: 00000046 [ 1804.779140][ C1] RAX: ffff88805ea697a8 RBX: 0000000000000080 RCX: dffffc0000000001 [ 1804.779152][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a07f40 [ 1804.779163][ C1] RBP: ffff8880a7a76050 R08: 0000000000000003 R09: 0000000000000004 [ 1804.779174][ C1] R10: dffffc0000000000 R11: fffff52000140fe8 R12: ffff88803cab9ad0 [ 1804.779187][ C1] R13: ffff8881d7051300 R14: 1ffff1100bd4d2fc R15: ffff88805ea697e0 [ 1804.779200][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1804.779214][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1804.779226][ C1] CR2: 00007f17bc200218 CR3: 000000004d00e000 CR4: 00000000003526f0 [ 1804.779241][ C1] Call Trace: [ 1804.779248][ C1] [ 1804.779262][ C1] ? skb_release_data+0x62d/0x7c0 [ 1804.779279][ C1] kmem_cache_free+0x113/0x400 [ 1804.779302][ C1] skb_release_data+0x62d/0x7c0 [ 1804.779321][ C1] consume_skb+0x9e/0xf0 [ 1804.779341][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 1804.779362][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1804.779380][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1804.779398][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1804.779418][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1804.779437][ C1] ? rcu_is_watching+0x15/0xb0 [ 1804.779452][ C1] ? ktime_get+0x3e/0x1f0 [ 1804.779472][ C1] nft_do_chain+0x409/0x1920 [ 1804.779489][ C1] ? ktime_get+0x3e/0x1f0 [ 1804.779505][ C1] ? ktime_get+0x3e/0x1f0 [ 1804.779521][ C1] ? rcu_is_watching+0x15/0xb0 [ 1804.779538][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1804.779565][ C1] ? chacha_block_generic+0x53/0xc80 [ 1804.779584][ C1] nft_do_chain_inet+0x25d/0x340 [ 1804.779601][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1804.779620][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1804.779640][ C1] ? rcu_is_watching+0x15/0xb0 [ 1804.779655][ C1] ? lock_acquire+0x5f/0x360 [ 1804.779676][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1804.779692][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1804.779709][ C1] nf_hook_slow+0xc2/0x220 [ 1804.779732][ C1] NF_HOOK+0x206/0x3a0 [ 1804.779752][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1804.779773][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1804.779791][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1804.779810][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1804.779832][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1804.779853][ C1] ? skb_dst+0x4f/0xd0 [ 1804.779872][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1804.779893][ C1] NF_HOOK+0x30c/0x3a0 [ 1804.779913][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1804.779933][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1804.779952][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1804.779970][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1804.779990][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1804.780013][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1804.780032][ C1] __netif_receive_skb+0x143/0x380 [ 1804.780053][ C1] ? process_backlog+0x2d5/0x14f0 [ 1804.780074][ C1] process_backlog+0x60e/0x14f0 [ 1804.780100][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1804.780124][ C1] __napi_poll+0xc7/0x360 [ 1804.780142][ C1] ? rcu_is_watching+0x15/0xb0 [ 1804.780158][ C1] net_rx_action+0x707/0xe30 [ 1804.780178][ C1] ? rcu_is_watching+0x15/0xb0 [ 1804.780198][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1804.780231][ C1] handle_softirqs+0x283/0x870 [ 1804.780248][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1804.780265][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1804.780282][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1804.780302][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1804.780317][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1804.780340][ C1] irq_exit_rcu+0x9/0x30 [ 1804.780354][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1804.780374][ C1] [ 1804.780379][ C1] [ 1804.780386][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1804.780403][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1804.780423][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1804.780436][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1804.780450][ C1] RAX: f4414f8caaec2d00 RBX: ffffffff819683b8 RCX: f4414f8caaec2d00 [ 1804.780462][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 1804.780474][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 1804.780487][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38330 [ 1804.780500][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 1804.780513][ C1] ? do_idle+0x1e8/0x510 [ 1804.780529][ C1] ? do_idle+0x1e8/0x510 [ 1804.780544][ C1] default_idle+0x13/0x20 [ 1804.780557][ C1] default_idle_call+0x74/0xb0 [ 1804.780572][ C1] do_idle+0x1e8/0x510 [ 1804.780588][ C1] ? __pfx_do_idle+0x10/0x10 [ 1804.780609][ C1] cpu_startup_entry+0x44/0x60 [ 1804.780624][ C1] start_secondary+0x101/0x110 [ 1804.780645][ C1] common_startup_64+0x13e/0x147 [ 1804.780671][ C1] [ 1805.410164][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1805.424417][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1806.611521][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1806.625909][ T1303] ieee802154 phy1 wpan1: encryption failed: -22