last executing test programs: 5.726505775s ago: executing program 1 (id=65): r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000040)=0x10000, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000300)={0x3000000000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000000)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r7}) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r10, r9, r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000005de0c8b52700d2f99e2b5b45ad460000000000005fc700000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="000021db161f9dc6e804000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000007d000000b7000000000000009500000000000000702d89cc0261d64a388d4e63244430c1128a20fb5a96a3cf87dab4cbf17ed1e0b5f437c5062f360489b49b80759be7e3815988e729743fada5011c3fbc65d920f7fcfc7faa4aba869e7c714fea35010728afe65976680999"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 5.503506162s ago: executing program 1 (id=66): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$video(0x0, 0x7, 0xc83c2) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000001c0)={0x8, {0x1, 0x5, 0x64f, 0x4}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f00000015c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000380)=""/5, 0x5}], 0x2, &(0x7f00000005c0)=""/4096, 0x1000}, 0x31122) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000400)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x4000000, 0x0, 0x80000000, 0x0, 0x200, 0x0, 0xc}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r9}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.404930721s ago: executing program 1 (id=70): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x101040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010427bd70000a0000002e00000008000300", @ANYRES32=r3, @ANYBLOB="05003400000000000c0049"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x4d}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2004000c) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmsg$inet6(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000600)="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", 0x101}, {&(0x7f00000009c0)="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", 0x345}], 0x2}, 0x2400c81d) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c68ed8d2c09c9e07268eb06fa261b4820000010000000000280012800b00010067726574617000001800028004001200050009000900000005000a000000000008001f0009000000717a3a3203fdaa2cbcb5e37925e7ae197ade512a3e421b197c5a112253454de532f5038d0adff978b37e3501a18ae6676ff94242af5af10f13a7d3cf0800000000000000b800b0942d570ae3157ec1e86f614a4496e09173d73128bcc600"/181], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x1, 0x300, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@ssrr={0x89, 0x3, 0x29}, @generic={0x44, 0x2}]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x4, 0x503200) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.102540945s ago: executing program 1 (id=72): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, 0x0, 0x0, 0x6c, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x70}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000001080000", @ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') (async) preadv(r0, 0x0, 0x0, 0x6c, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x70}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000001080000", @ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 4.102159404s ago: executing program 4 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x54}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x0, 0x4, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x6) 4.01404256s ago: executing program 4 (id=74): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 3.969755488s ago: executing program 4 (id=75): time(0xfffffffffffffffc) ftruncate(0xffffffffffffffff, 0x1) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x4, 0x80000001) r3 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={@mcast1, 0x16}) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x4, 0x42}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x8, "3ad38eff230c00000000202900000004100000410000000000000300", 0x3436324d}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x4, r4, 0xf, {0x100, 0x1}, 0x8}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) 3.590235234s ago: executing program 2 (id=79): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_ACT={0x64, 0x9, 0x0, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x6, 0x2, 0x6, 0x800}, 0x6}}, @TCA_SKBMOD_DMAC={0xffffff5e, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004010}, 0x40080) 3.222389218s ago: executing program 2 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@empty, @in6=@empty, 0x4e23, 0x1, 0x4e23, 0xf, 0xa, 0x80, 0xa0, 0x5e, 0x0, r8}, {0x5, 0xffffffffffffff70, 0xffffffff, 0x10, 0x800, 0x1, 0x7, 0x5}, {0x5, 0x0, 0x6, 0x10001}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in=@loopback, 0x4d2, 0xad8cf54fd9fc3037}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3505, 0x4, 0x1, 0xf8, 0x6, 0x4, 0x1e}}, 0xe8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x2, 0x0, 0x6000) 2.621155106s ago: executing program 3 (id=85): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.471379363s ago: executing program 3 (id=87): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x3c}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}, 0x1000, 0x4000000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 2.312882254s ago: executing program 3 (id=88): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000007000000004000000018060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b70200000000f3ff7baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800008a5000000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.191147878s ago: executing program 3 (id=90): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xe) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000800)=0x10001) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x3d, 0x0}) r6 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x8000200f}) epoll_pwait(r6, &(0x7f00000003c0), 0x0, 0x65e, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x0, 0x4, {0xa, 0x4e21, 0x8f, @remote, 0x23bfc973}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="71320eb5596ec3b386f7d4b33b445d3320e6addaf168ac7aeb177416a6855f4628193653084c166d5d884179f22f86319c1f3e2f307e2e5cc8b9f1fc77c919b289c248c7e535e1da05823d8877df418a9308669055e86210c7b7c0dec790e9f96b2b9e6790e6bfadfe9738e9bda5c122481bf39f18c43d0758f07c63218311b1ab0d8d82820f04fa06062b005b9deca1a58d89926c2a684d361b9b4526f15523161a89cc0e0a376187f536", 0xab}, {&(0x7f0000000500)="bd602ff30d27", 0x6}, {&(0x7f0000000540)="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", 0xfa}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/960], 0x3c0}}], 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3300202010000004704000001ed00007b1300fe000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000001dc"], 0x60}, 0x1, 0x400000000000000}, 0x40010) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) 2.179187213s ago: executing program 2 (id=91): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) readv(r2, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/101, 0x65}, {0x0}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x7, 0xffffffffffffffff}, './file0\x00'}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0xfffffd09}, 0x0) syz_emit_ethernet(0x38, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}, {"8000"}}}}}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000007c0)=0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040)={r10, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000680)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x2, 0x4, 0x5, 0x6, 0x1, 0x9f36, 0x80000001, 0xb3, 0x7, 0x8001, 0x8000, 0x5, 0x0, 0x9, 0x5]}, &(0x7f0000000780)=0x100) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) fanotify_init(0x200, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x7d04, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0x40000f, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.973636006s ago: executing program 2 (id=92): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x1, 0x8}) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001240)=[0x0], &(0x7f0000001280)=[0x0], 0x0, 0x3e, &(0x7f00000012c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0x42, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x401}}]}, {0x0, [0x2e, 0x30, 0x30, 0x0, 0x30, 0x61, 0x4f]}}, &(0x7f0000001540)=""/180, 0x39, 0xb4, 0x1, 0x1}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x9, 0x0, 0x8000, 0x1a818, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x1b, 0x9, 0x6, 0x1, 0x200, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xd, 0x8, &(0x7f0000001180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f00000011c0)='syzkaller\x00', 0xc31, 0x0, 0x0, 0x41000, 0x6d, '\x00', r4, @sock_ops, r5, 0x8, &(0x7f0000001640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x5, 0xc, 0x2c, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000018c0)=[0x1, r6, 0xffffffffffffffff, r7, r8, r9], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000019c0)={r10, r6}, 0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a40)={0x200, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x14}, 0x40800) recvfrom(r0, &(0x7f0000001cc0)=""/106, 0x6a, 0x10001, &(0x7f0000001d40)=@pptp={0x18, 0x2, {0x2, @private=0x5}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r7, {0x0, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000002dc0)=0x1, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000002e00)={0x0, @in6={{0xa, 0x4e23, 0x926, @empty, 0x10001}}, 0x82e3, 0x2}, 0x90) r12 = syz_clone(0x8006a100, &(0x7f0000002ec0)="5ce782b734c5e5cccf23b519d6f51fc9b2127da02aac13311cf97c936e3c137958f922fd6337070d892146b9701b864fc8e26cb4e71919069119a69fca154390b5a7b6c34d2e086e0ad602e875a4255356add6aad16bb85d2b887f86334f03002c818bf030ce5e22c6b4786aab7ccdebaca6", 0x72, &(0x7f0000002f40), &(0x7f0000002f80), &(0x7f0000002fc0)="9d00ac67e4f004b228f961ad3358f3807348919dcc64acf36b834b710f140d8bae74405e5e4914eedcd5fb4a1707847f77d6ed740506ea823a6fce816b2947ddd363aae3a58dfaa35809f3fbf761efc12409840f886be949681ddf0950f8a3e3302e520964d1e0c4575ca43c8328c0aff0dc74bb405331f0a0f70991d7809380837a22f0c88a7f486ee3d4b12dfe53ac2cac410ec679bf4bb240dc408f3672d8655214183f2f5f7770b94481f81837494bfa864abc6b929587834053b6805a76d5caaff0ffe1f6089f6e20d6d628985f09b6669eeb73275ffddc3702693964c9c0e4bb56a883f42159767e1701c97ca9d269f9ebf41cfc42595032f89ce892725bec2db622f3471eee11c44e0fb3f629d55d4e02e8d522021e032e2d4fb94c7bbe9d2976a14dc1602a4b5e99681a9eaaaff8551271b3b4771fd523b61592082e188a6d08cb9560d371033c73970a23fc5f33c64bea3ee098347340a80997644797cc25d31f119d4400ad923e0e9b30e8de32e3d7d42fe7e2852f63d2bf89139ac2a9b2883c61caf72440622ba48f66c66314d833b905876851e81f7d87a9be083dbec07a86296fdf4b2fa99ee48edf698167d36feb1f67c4c5480c973c5fd14989ee6c8d8e4fe0ce3a8971cd99ad665e2feb79b28b2cf41654067fa1e485bf1e9641e778a967cd5194b34f94eaecf0988fa6b18b7a5d9dcb167940312a7f69a755e59a15e470af6b7f6cca8bf1bfe6f6a962f9b6d769acb83975618d317c67dd43ef63e01c8f75ed176194e4d4067c9aa9c70c344ca4363605509fb5463fc56f156855819af13ae7c723d65038a08238fd77ac33bc44ff0c503eeee9195a52c1fd0b9aab3ceff0089296207300fc17d88f2869f237cb0508c84b1ea1531c26de5d1f914220e81dc3b7817a7ad943088b70b01eb88f26e30566f3c1cd55ec6d39290df77dc0b4a9df7244e416df776ae312c1cd48e67073d7fd2a39fa9788720f97d4713840cbe4bf206a8590bffd0fc125fdaaace0bf3f81c5441b484e2d2ee9d952dc423c0a7463f929b7aca03832eccbd84fadf269b2809271f4deca5dc456eba3bef1bad9d50d845bfa394962c9b4a1dc2f5781760637efbfc0800c4c36bbc05853f897ce724b26594b37b5c9db7194a98d4f5443ef73c94f64fe1d39cf3d7e651eb4b740c58fad8367a17ec2e897d90f534a9d97349338fa1b7338ca13de242a2dcf270362ee1d148dfe9c1083271e4c0e83815ef20f0cc0c3702c4d78d675b99f0b40f92c2f5426e587bbf2c6d6d7b23103f5d5603d98db378f0de2722115deb8ea4deffa5508a26759d878e8cc6df059e2bca14ddd52b2ededad43bf02af3894ec5a84b4738490694896c87150427bab456727ad69ef843c4419d397d26bd886e60eabb664c12770bfd7b4f391feb2859648c372c64b18a63f555e416faa8b52d5d66149feb03b10d96caac646bebf12a910229d9b5690f237991bab53a30e69bea6614441c0608d592e72ab65a6390ade258ce4c752a5fb30bd75e772b27b2237b62195842619e34eea0ed25ee330f09812540cdc08edb49220e86a3d7c742537bb4d03b30002850d321ec1bc411de00438d4bb9b637ea2bf7a03eec716822c2a13f64c0971a0a59877a9e7219d82eeebaf762f317ff4db2cc68062dc3e2c34ccf42fbc27606e2b6f308f1a6f98c211742e4dfc4a94f78c80b32a39e6d8079b95d2ada9df737325edeac51c4f2a182accb85f8d7cbfa331bd64bca7ce6fd3becc2e85ea65ea69ff1688215e08828a90150df2b11d5883f5c5ab44ed1c9ff62f464af2a3e40a2f2f85b7c041533178d439454a394629e936a761deba5e1a2ff75374f5e2be05dc20b235a8ddd1514dbb4a7de6e30a85dba9db865d5c85b8837c47e99aefdef00a519b68ef61b34a022915a069a227f51af7aeabaf65bd02a221aa72e76290370326fef4e99c0b19accba6aec284f272c083915969da8115941678d3ab20e1f5afb6578856748271a4d1816e02691659d59ec2d247e66686bb36a52c7505dcb5e79559eeaf183beb9277d16328c3f5217ce2643a446e3f9ac5923978903c1a5f22f5289137525832e68b1cf4c4bdb6a037e4523b629b9209ca236ac5e58fe1a3a52aedaf2b937e80a0d6b3a18ec2834022f90cf8fa4274e63a74de050747b9c0bfdcce3e94115a0cf8d9ece797cff596f71ddcc977c2f08bc6652ebdfabdbdd69332cd70d22efcd9c6755f7a225ed14341213986cd7a49a9d733c9f6334ba432f69b808f79ef5b373e19c40a5c603bf6974aa7faa95e0b3e9dd80076e967526306f3635972f5237c144c32cd1082b8202a3bc019a03d3f1a836a7208f3034553ff19b20405cf81bb20723c04b7727287f0df73cc70c827fd93db88a20387902f3c2489d0a4a6ca97765448fa38510eca6a79b54159ed94b010ca331f67dbc3f8a6891583fc00af5d7acacb0e332b9f9901e1702c7ffe69da5f119f1340ce2e5645d05bfb23843914f7b6d3e0f5160ed57ed1f16e1107d1abb46ccae35eb523f26c922a9c136adb37f8afa22c0152dcb14c4090f9777aea62a88eab9991764369bce508a2e6c6ec09b6921d8e4a777d610850978a17a09ecf9792a4e46587493b4257a95be5d6fcd33aed40bba750a32828bc47c57d958e51668463b6ad416b6a251d02673bfd8f8412d61e4aaf30913c99ae554213d00f537467c127afcf879541dd7068f7718e8dd5cee759ebfd8921fcdba00f608a870438675bd6f495627dd98c47622d24132926a87cf1452b7daa26ebd0383561a86cb921c7305cc98911f1686d9fde6407417bb778f5a3594e847c38e37e5d7d164374f39d762e15204e4f596ac6a1016f0dace080a27c572704f508a2a2e28a0bf44a9ce248e6d2ccf56ad8c0a1864df2632286d0f3a754d79fd4d0cd6e0a5304a1c9322733681bb2fea674d1c74bd0acd0eec4826f5647177b4d0e216b3e78d0b72d2158021d2c1a228bf600c21d95213ea64b3432a7e9c76c354e50a49e5abd374819f3480361116304f6fadcd7d8a2872a536cfa86a3d8638802e779292c8956e9419418076d06246e671e277110aad6c9d4e2e3868113c9b67a633ee2401b65c19fc41ba490307fbc7d6b19febcc1c61dfc72b8372f8cfac78086f1c13962b001261f6658978e839e8a44422e59debcb9ebeed7b314e9b34db1820ddc1e7f8aabeec06cf8e9ad4e9d2f3ce94ddf3937b5b0f755e8a19d112dc225db8fc8ff03e9348384290c8664287ed94748ad21824993961b99f49c366f201a198e1bfd032d56a537cf6a4d7e28e953c96fb9b07f6b94405b5e08b4b3e016a051c6b5aa0ce28dd7c23e849e5c4ca90a44ef778cc76d00024e192b0299f37d6411c9ee40d6ab702f93e8cadb33ff5feb630f7991b5e6eb45f59bdf125da394ef7256c13b4a15d6ecfd71ca0c944990a5cd4016353fe906cfdf9085ce0f7506f135c80fe041696db9476ad0bc552160d54914df145653025a6c6c47b8583c0442e8af8d0d284a81b320f9a29ab217c9e8c1ee51bd74871f70cf96e9d32831f4cd58133ead53247a139ea73ba92a91be197a7f6aac54599347ac6a810aa9293d3e9d73d5e3719e1187ebeb4b1e769d752553ffa2f226ac6626c8afa6b7ad4ff9b70fa9f019dba310c4f3e522068e9fddc0f97d955c79bba64b49911deec9b60c67b14786fc2572090b6e717f57040d4add415235c257ec6230541a65899365ef4cedcffa6cd7645049e820e5216d71b31eeb5fbc52635d7c64d6e7c06ab004cccef5b6131a5be80e1eae104ddeb9d1755c3b420392290f9846434488465aa36afbe34510cd62614209ec0baaa85a0575c90ecae94e868d9da06031323df1a4710573a3d1165d6f464a5ecd7daabd4f36e01ac15215387bb77b39c3d10522b5fe4311ee77a7a7b51c38783c9d0e428f4f1c3f68bd147628065d9a1fba0460a5f5fcfbba9bd06df41dafeb3c9a01c72694573d59359b016e11cabe1b7745e5f72466e78d6153f44dcbcc7e5f3d2a5638943be56887add2c692e87708ced6533f21eb9c18fd2008677b1243323e6c8cf8f2f5b59081bdb2d6695ff30f0f9085c732256c0a5139ac8b6fe75960a0c9b1123e36949af17db66afb6ce3ddbd1c908d8ccdac075cc080b902b43340343e939a58963eaf679285f0286a7db6c500bed072c622f0ed0f75b7e75b84c8e2e59203aeafeb5bd1d83a63639023180e439cd86a8793fd0ac0faf7bc30882b0c663c518fd514ec3487fd48b53be63ee0da4e523ea937dcfc9c2b0e68b4ec04d0664fb25acb832823b790ad85fbc8fe0bac83498084e44f48ff7de3e14ec86adc1026c07b3e11dacff1246f4f8a1c33f5f33dcb697d07cb665ee6822231c361b52a5cafdfe655384bd6db13be9b626833655b4a05ed4f2415dbd14dda3190b2b2f96811589c6a07c451799caf277cc53ce896ca3790698a74f35cc45d554a3e2e862efaec86250efc78e512b2389600184e19abca4ddf85b4cc21c62eee5106e34cbb6e4d854b4264d67b27044c45512ffef59f020addc4ab8c058ffb97dcfc0dca0d09adb41958b344fcd8e73b75e951764a814f9b7ee5c7a83c8bac4cb108397bb550f655e64f4f6e1d775b93184895bd6a0920858c2707906f0c67634c331c99acc4ae7aeb3a6e26acc354abf8754a2b09b9ae3d1193f58619d2b7710773a765b1f8128e4fce9ecf8c1b84427ffaa7ceb497c5efe1e2f12c616abaad5799deb24274ac843e59e09fd99dfd5bf59467d7df5bf2f1d4cde0f28cf74c37d7ff7776f4ab6644550c388c03d7aa74504ab7129e5d0e545606d83145974c9b6417c7030e2a2175e99e2576616d8e1c70c283137d5261d3148762f0c5b1de3098d32a6e86ade6b0b567338793b4afa6f61fdc378bdd59ea9e48626c3ef63a487e84bdbcf6e795b79b5f825e626eefeea7eb8c9291402f19be6b915fd06cbf419c15b3038989b7e4366f637d1338f78f2a6f25ca09411da35c4310d0271f2b8ed34d872857c29f5e34f3ba8d809877e4191233db6a1e8ad06ad94ae4dd931ed973db5bdc2fb7689999e26b30ea7d63da8a15b6433e1b80a58b5a8e98c6494b0c6d8c60e41f446ddadc166aee7416a6a0eb38742c04811de3603bf60bad4251ea60c6fab68a39267519f88571a011f31435e3abfabf74304b949e0bb670e52572df2d5bddd31a9b1f2f25f7fca1942168ce590a04cf78a8284150fc0bf8839f517d26ece0c35d38b70c5f5e3d04834c4099cc3986b98c9b35d4cb4204d46de53f58a8194449e479c4f16299db09ed1eb60ebb6c53862e78fe410f52de23c0c4392dd572ba8d7dc75428bae3777182a45542b464ccae53d6976aea3b8444422748950ebbe03857c768e6c0198bf72c6b71df034b7cc859cc7d23e080bf1c7c2f53e027dc41e417d2a4291d1e46bcc5ce93c2c551a55e7f53e67f618ba8bb96ca14e3c3906c93357167f5dbc8ab1021dc64550349cbed3fc9f902e3a6dafadb79f3d308d121f1b3fb091dcf61a2cf02ee4a60aaf2046f397738090f7e9e435783fa87dc495df3d2037f19326d98d1f427a56d87fb107598097d02215258675b427902ac0b4c787bfce78221efd6a9f6df94e6e5fecb3bb54f0c84ec51ea3450ba244011422d3120d1f0420c5846dc7ee2368a0fbbb8a15739d0cac994df73558882ced5be7b7ea8a4619c6785b44cb1dc35fcb0e9ef0dee51dbdb8aaba82950b33d296c23ea7a95038cff9d71cf38f3e81e67724546bd924165b0482d58") timer_create(0x2, &(0x7f0000003fc0)={0x0, 0xe, 0x0, @tid=r12}, &(0x7f0000004000)=0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000041c0)={r11, &(0x7f0000004040)="b96d821331910fba7defb27b076aa975c8da2e16648956e2de9ee1b226f484088e9aaeb1d9cdaa05acf0cb3bb0b0b1dc2ca08d8d9efeedbc70277271c0920507e33c407b8465e268b33f35eddb6125bb8721bcd8d2101a7540681ba7320d103e20877873778ed9a7ca33e21d01", &(0x7f00000040c0)=""/205}, 0x20) r14 = msgget$private(0x0, 0x10e) msgctl$IPC_RMID(r14, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000043c0)={r6, &(0x7f0000004200)="ec8ed23d7669f6c1c6357494bd57dbd8d98ef327d0e5b199737e37eb035a5be890ac4d45a65e3a39c7af2b76914d0962f3dd7615cad75842a2453c1e3341c781b78e2b375633c84a243745a1e983a562f14571dc5b52772f8461a3f34598abb12747eb4a67594bf232ef7157d1491f0d42762e05aece74916723e008fabc033fe9c7f17619bf8ec490a41c37ac90b4fd58f4fa5a0bc1de6e7c8da3a2c5a0b9e249c753131fad8301ae6f0503819e277761e6a010be5271a61dfcffe5bc16d1a1aab4bce9da6c6aa252da55bf8156987a98595a1edc75c83a470aa3e801cf368398cac3c99f", &(0x7f0000004300)=""/133, 0x4}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000004400)={0x0, 0x4}, &(0x7f0000004440)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000004480)={0x2, 0x8203, 0x80000001, 0x3ff, r15}, 0x10) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f00000044c0)) timer_getoverrun(r13) 1.914207687s ago: executing program 2 (id=93): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002"], 0x64}}, 0x40110) io_uring_setup(0x7, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18}}], 0x30}}], 0x1, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002"], 0x64}}, 0x40110) (async) io_uring_setup(0x7, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) (async) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18}}], 0x30}}], 0x1, 0x20000000) (async) 1.853494912s ago: executing program 2 (id=94): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) 1.510419786s ago: executing program 4 (id=95): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1974}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@broadcast]}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x54}}, 0x0) 1.253309531s ago: executing program 4 (id=96): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x1000000}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) r3 = userfaultfd(0x1) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = io_uring_setup(0x220c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x40, 0x10000003, 0x6f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000580)=[@ioring_restriction_sqe_op={0x1, 0xc}], 0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) 1.035454584s ago: executing program 1 (id=97): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 909.263354ms ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x2c}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES64], 0x0) syz_usb_ep_write(r1, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 758.211547ms ago: executing program 0 (id=99): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000880)={0x1, [{0x3, 0x0, 0x101, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x507c, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x2e7, 0x0}, {0x0, 0x0, 0x2b4f, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xf0, 0x0}, {0x0, 0x0, 0x8000, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x20, 0x9, &(0x7f0000000740)="939c7864"}, {0x1, 0x0, 0x4, 0x0}]}) unshare(0x8000000) (async) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) (async) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) socket$unix(0x1, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x2, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = memfd_create(&(0x7f0000000a40)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r8) (async) r9 = dup(r8) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c464a030101050000000000000002000300040000003e03000038000000d600000097700000fe03200005"], 0x58) (async) write$binfmt_elf32(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c464a030101050000000000000002000300040000003e03000038000000d600000097700000fe03200005"], 0x58) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x8001030, r9, 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xfff2, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xfff2, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 502.39461ms ago: executing program 0 (id=100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000007000000004000000018060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b70200000000f8ff7baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800008a5000000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 434.744688ms ago: executing program 0 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) (async) write(r3, &(0x7f00000002c0)="04", 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async) close(r3) socket$kcm(0x29, 0x1, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x9c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x87, 0xd, 0x1, 0x0, "c93d6e755305e6e3f6edc8dd6c19e46669a596b484e22389b446490721356f4068c2271d7cb41c636eaf809f14fa67e7bedd1bd5eba3b0fa22676bdfa250f58e4aca30c0e317bacbe8c2268dc8aeab598ca321f16e16c4576919dfbee4538bf5057d9795ce2f7ab482e1ef84b87da473430e51ee118f41b018b5974a9afba99debfaeb"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0xc004) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x9, 0x1}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={r5, 0x23e1, 0x3, [0x4, 0x5, 0xf]}, 0xe) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x7, 0x100000008, 0x7, 0x1, 0xfffffffffffffffd, 0x2, 0xfffffffffffff804, 0x0, 0x400000000, 0x0, 0x7d, 0x5, 0x2, 0x1, 0x44319784], 0xa000, 0xcd3d0}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x57) ioctl$KVM_RUN(r6, 0xae80, 0x0) 306.464745ms ago: executing program 4 (id=102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "56939e4a"}]}}, 0x0}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x30, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c044000"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000000), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) (async) dup3(0xffffffffffffffff, r4, 0x80000) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) r7 = inotify_init() poll(&(0x7f0000000000)=[{r7, 0xd408}], 0x1, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000540)={0x4, 0x6, 0x0, 0x4, 0x15, "1c702ac6c98ad9decfa06e24b787a55737a502"}) (async) ioctl$TIOCNOTTY(r4, 0x5422) (async) read(r4, &(0x7f00000005c0)=""/228, 0xe4) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000023c0)=0x2) (async) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) file_getattr(r8, 0x0, &(0x7f0000006040), 0x27, 0x1000) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$uac2(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x870599de3dd7247, 0x11, 0x1d, "6886d9e454ad526ae3e2fec81d8c105ef493bdccb8bcb35c524c20c923"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000006c0)=ANY=[@ANYBLOB="2001a3000000c8e7d0d6f32c88f5bee4182c7e6df833cc63d8f0d1ef66243fa457ff550e1bf27ec610f9b9b1ddd0db4706b234c3f909cfd6a1c1f01e4b244455bf5ea5349fd1d22eee11ce9b226884aecff609d2dc8c3e3c936d3b14f70e7c1d7a35d6ba59b65ec97b4c2f61daf40863c272c13af5fa08102b6fee9bd4195d149d61e8adca1e3edc4cb9151766f1bcc877445113266b474f6803dcf77b31e00198cc15c476a1f70c7c7a46c6f1980eb0a9c2"], 0x0}) syz_usb_control_io$printer(r1, &(0x7f00000004c0)={0x14, 0x0, 0x0}, 0x0) 232.895185ms ago: executing program 0 (id=103): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000006f80)={0x0, 0x0, &(0x7f0000006f40)={&(0x7f0000000a80)=@newchain={0x58, 0x64, 0xd00, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x3, 0x4}, {0x1, 0xe}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}, @f_tcindex={{0xc}, {0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x800) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 179.947142ms ago: executing program 0 (id=104): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000340)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff01000000083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ff01f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590677ff9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d1c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f390003dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073084d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369d0a0000007d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dccebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b515c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26295eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406b76b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997ca15c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13baadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) write(r1, &(0x7f0000000040)="1c0000001a", 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000003680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003640)={&(0x7f00000032c0)=ANY=[@ANYBLOB="201b4000", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf256d0000000c0099000100000034000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000001480)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000180)="8bba0a76e7ccee53100079a67928e87582ce663bc976fc48e69e60a35c4f30827722b0fc4d25a5a2536b495a53ea689488c498b7cbd01c671a907c6e6d166f62905de4bc04e0f59d11308d2b3627350cf95cd30a6305adda22615e1e6e233d6fcdd2d94665b0169d507d7722fd1d626d670133f56f3e9ad160f59aadda7dc0f3b7b1d2c739a94915831cb84807fb324761f9e2e8c38ddbfd0dfba96b04aba22a503d757d03ff1d7c7b27efe47fc5751b99df6e64f6690f2d97d808351a29e83f9d65c134d8", 0xc5}, {&(0x7f0000001380)="92ae64b071f336f06ebd27dd777466d65770beea197e8f0a9ff460548a0af4d692ce383f025b32cf43a8ff824b8ba9c62663e4e8d67c9401e31a04d7916fe5dc7f94f7ffaf60085204b24df7a36444c00e38b321572b61abfe55c65b761b3393364676fa4a8c7c540cbbbbf9222421f7723a7fc5d4b19700446fffe1fe6f447053761a673f32bc8e10296860a9855f56e2de2acabde71543191158a6eaed9b3942767e97ed812c67de6002f9c405765d4416d2d28e843df6ec932139753af282b52bb3266dcc1507950e87959db180f87ca9497f98d07b01b592cbb9310d3cae0a1143b29eecab82ddc84d5d6fea22", 0xef}, {&(0x7f0000001480)}, {&(0x7f0000001540)="0e59ab666d00cf5a7e19f847491ba0502d97d96f565c84a3f3a55d9711804c211ce63582d8a21adae71d04a38a8e5d4f1f6aa7cac88e7125bcf719c5ba844aec0a91a20d13319a203cdc2fa56479cb8c75934f92280ad57fa6cedc755e899c2fbedee85e106930b1d6db5b7955b70fb30e8588720d61ba65d60649ce50d1c3715bf94b719761ff5312f920d505b2423c7ec5265365ccf2ccf97e76e4df126e24aabca97ee5359502e4ffe28782250e2dc538d5799d7bccef0d743c10b20a140effabac1637726960a4ab9ec66251d142e1800e", 0xd3}, {&(0x7f0000001640)="1b8cdde6b57a004d19c7e18a704c1f91523e83d4f23470df295daf73d4c22ebbf88330bbd9cbe68aad1849d14bdb4e1b77052d246d063553cfd143f4352afb64ff7ebb876bfcf9961243b47157e7a80a7edbcf55515cecd8dcc23d507a6bc94e", 0x60}], 0x5, &(0x7f0000001740)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5cdbdf89}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8bfa}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x26ea}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001800)="001d3302433ada57b1d3b885e2cc88df3448e914fc3561710a38ab4e7c009c4a876c202700b5e48d47e0edffbda3fcae4b8a9c75802c77aacc9f31e66bb48f29e833ee9082c050d0837e18e7c8bf10043470cb74c3d9deb42872870f4c7368b008a28ec1ff7e4165264d53b1c921d6b05e68bb61cce401616afa745275fb761ecaaff6bb1aa2c59aa544b6ade960", 0x8e}, {&(0x7f00000018c0)="f7a4a6", 0x3}, {&(0x7f0000001900)="fe204898c830b50e93963a645620fea39fac9af0dc313196164eae43c7c99238490436dda9202b4fcd0fc3c363d1d031c07c5bc06eaffe254a23266feea2fd3a2c03af04292c99a933f9e3b2f9704755758d75a308b56ff5538717f24c40b45b6f1c070cea44408ef4f6c938c5532276d2d94c6d", 0x74}, {&(0x7f0000001980)="cdc837a7d13d604fab5afa04f14002dab7baac5e14ca4d5b8f31366bc4494fcc642faf19bd733c91e6aed22ef25979eadfb513da8a7e19447b1dbfdabe0e4a09d7785f849103a059d621cb690a77144213aaa225846cd380e3d568041a9caf97053184a1a51279042fedc87d58e73245abf76f8514b71ed05a300b21afafd8429dc7d4c76b7d8b2686db788e106ce0b742808f0c1ff345df682778f43ae5021c834f74e18d1a", 0xa6}, {&(0x7f0000001a40)="91b1a32c95f842cae05211e5c04df640bda10c9398b69741af5b1d2bce", 0x1d}, {&(0x7f0000001a80)="ba1ecd54e249ba8888e7454d814f047ab52138260720ffa69a2447d069d833b0d4f5d2429e5e493a4a6eb3d07863d2ed4a0cd0c51e892140fb5295169ce8bea63f6954ce4bad47051251b71b139f7a53f3ae40db4538600f7120f6bb63cc43dfbcca10bfbdb48f9b3109232b925d6e0138836496ae6a6f7196e59bf7e596441a091edd0dc15284e32f29333c17e66de2b65513531f7449a485b5dbd0d2e8d31d2e5dd424419c647c9278648ea4cf1d01de395319cd675ebd56c30fb7fa22d36084193e0f3f3199926e4b52df53464a378b0fe8598530ba95f6a902942f", 0xdd}], 0x6, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xbc3e}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0xb0000000}}, @txtime={{0x18, 0x1, 0x3d, 0x265400000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xf2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xf0}}, {{&(0x7f0000001d00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d80)="22a4150a68f181844fa4917a998f21bb5ad09429ef59530078ad56844be6e3f0628fc4bdedab82311601bb443f382486ec92f2d5b67fb585ff969ac4183c393243e1020cfe68ea0b4d102f16d79dfcf62f4c9c5b028de6446f31094ac287100971051845681f4d1bd6fb719d6691c8dcbb465456f92c0351e4caa51e2e7805539a211e730e01942bac36d8cb36b5cbd30c2bac93b84714d1314e8dd13f9ef0205ed84d5a490911f2f2dc5580ac1c6c03f51a606ec74365371b2d6f67b0248eb01c4ab63294ea", 0xc6}, {&(0x7f0000001e80)="1bd4ae43130ea84b480191d30dd4b3b15f04a408907a787f3700db91502032a3c01d5e003ed0530bce8252b2b43fc593c82423f61a2c8b0285429f98ab6e1727d5da36b6b99b7b6a4f390e4c32d1d3953565df71d94cc3c7ed684bc13009ae1ea47cebb529a002beb7710d7775336a7764820b49b9ed45bf129913d45c19d9cccfff73f7c9102e048680", 0x8a}, {&(0x7f0000001f40)="b359be1e8993e8c5e808c7f56a267d438838d986cdf10969c6795e4050c68c6d329ed2f20e1017b984771c978c8cb6099d24489f2d72610e34", 0x39}, {&(0x7f0000001f80)="dfd303aa329e4fd7c9353937ee4f38a3da17022addf96c2833241659a70ffe6c9a9fdf2d393b252ff43bed8fd3c1174839d4b76cc91a12ec00583bcd53eb84418b5397107d2b4619bfa4cc45f147fb651669f09064", 0x55}], 0x4, &(0x7f0000002040)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x480000}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002100)="dc9beb905d1c201b6d9a28de38d413ca3b1ba41f0c5f4ef17d34e191a65e1830b2e3ccadfcdc9a557a34105dc739a15c8fc23276a26199047d9b7dc19033d21a90e852d7bd03fd4f9922230a8042d85b1e597fd04400e6300b19d7ed59290922fd3e710e9f49a08d374e493b4071090f6c420c6b8f9dbae26446ae9b4178b16666de3ceeb580af7feea0d3352e1e9bd4fedda5e96f4d2b7573f6ab2663191516b102bf2c480f3697cc5acdb56c8f086b9e3300bbbeade4b80a2fd04120ed0da3b59a552b3c29611fe4", 0xc9}, {&(0x7f0000002200)="19fe73a8f8cfb0056195e7503a9ac56889736b05eac03b8616b048da03c080153bbefb9cd31bf6717fc616388fa8896bee50a75db81611d4d81effae0b58d2643ed2d5965aafa9c0440f7c25c0762ba357b80b13a6cc6cc451b01f6b507d72b2e5b12c9a8264970b7390a5bf78704f3de9cabfe3fc286ea08dca36733b3354193cfa820c28dd1a24ab5338622e0afc6fcd482f41a6e08a", 0x97}, {&(0x7f00000022c0)="a4631bc14378ef18e07a2f75b4a57916ad2299800737810084a322409f26455b6cba565b10bfc946fe31c8bc17ef47749e3813d666bb3ef51306fa7b202e2248d4f8667c5f72a0c15966dd3e6ff2cb1a0245a7e314522c892695f7553d9ee0074d122b6c3d04118448ed76b84488ca8b012b551d2d49e751a14dc0fbf98efecdbe1a7550f46d7787df05a5c9ed74c13cdf3c16f15053d7520735708b88bf8c92b31690ca76dc57739133b14f268eff1f37be53d79dc4ac3a38ebff4b400e590778d74c37df3f360e4881451bf02b30d63433cefab53b9221167f4d8fac42f43cb79e2456ae839a8f50410b1d1e028467264a3292cadba5d2c35fa8146d7841cc6fa5fd57e93444e1126b5d4aff97e8cc542297fd52e9d60749935efc22b081136b2757aadecf70235c136555b74187de60e955d31ca0f39c608f1a1a94d4f245c4375b36e1e6fd165132607a4c652f0879df123e6ab99baae457a44f4c0e3b6ba83993f11f55c3369993d704c0cc3b9beab159d9077f7dc3eaafcbb2a7fa08790befcb28535c678325a02b65e468db2a423211207757868c9e910865f53584f8d3ac97e4a7bde3e0bda6697146466d714bbd46610c96ca651647cd067b63b8613e1cb4ad6fb6c21fe330bab050a1a34058b37212a069b2a214324280a107db79b037f44e10f0fa8ebeea9a44002c090a744746adc29cd441ed08581cf1f720841531a204f708ae7a691d0e51d5b188bef12f1b28fa40ec4ff5b838c90f50480838a5a009af379b02a2ccf7f508964127d2e498a7e8c7993007593cd3f5440bbd519b1da9ec599a75a8896c353f40272ba7f34257a6ae2e2d58f812ea04cac7d46c95a055b659d17c2414cc58f4c524e88e42ba9b29a05548d9bcd4772a0528a755400d6999d1c57cf5b26be2a2ee6fa7b21fc632e492527a89201c4b9306b1af22a9af71921819e0f27ccf7757c150863d7a8fab36d4460a75b5fba60f264eba83762a84651e1a12528dff128e45eeb98c933ae2f65607646da32bb43e4f6f625bcd03667f17f192a8b9fb2ff46243bbb6c72944a2e74201c32e7522048cbebc210511bc891a0f66749e587fabf116584268093fc8a342e66669694f5f2eb800953e67fb68314f34d13ad329f440267c3b07a055454259b282f05ba338fcd2f8c5f63a472a8257ea7112765bd57aac3207842de785922c5dd4509ddaae810c96d0a54a2b8cea8f4199b5421182ed971cf60392f33f8d601b0f8310ef0976d99010e5ec986a9ac4b25c3e118bb9b1e48991ab132a098c6d260b10cd00b7953333de0d56a718e1a8a3ade99b68b1c30f2a8f34e7192a2ec2fe3796cb1c86922cf8c0d16caf00fa0adf9d4db9bb734ac1386cdc503103e3e105c11e40a60d97befaa958bc8d3e5ed92d059809101d1a79b2946cee7bbe06a48f23b01ef065785b16684dabd00186c700a82ca0bb6972fd097a67661e53537f26ad42a4d3e264535474f71678f68bc225172119b9f1036e10b3075007641bd4636613bb7530d0b9d7b32f56b04640d0179c1c345bd04207473f0ca4fce4ffc444f3c92f6852f6fec264a98824f0340c967be3a2738b363ffec6eccd456b793a85fad17f5262caf5cfc2960d422adb9003e7077918854a9dac75a88dd46004cacb0b981206d0c56e3524af550084a30215af77450d40dfc0db272165fc56470f019bbfd49f3278977bbf308a9e72fcabe71204efbfe2aa7abb3b7b6c95505642e39b71c4e3c19cf217787946e902c85fd7b82c01e3957c3e70196f8ba01f90d9634e21e49d16ceca9c5b43dd8193d8e6970bf32775b2b5ff9891f7f9e2a448903db5a3d3afe2b72c8180a4eccc3c6e65d2b4ad543318d11de0e8afd90dcffef030c943d657086065cadeb76ed01f55ad7c1d6242afd8738c709fdd74f89889419446113f39e88eff284c51c92d16f46539e24b48db5a684f412a6de951c8321b73ffe43302a14436d53c2de83677bbae0bbfcefb7492894631d662ec5284838d12f342abb115584263a3aff0b757b7ef3cde82f3e8817cf775b95296db92b001d7664d52f38e4c769181724cf1e7e689a8b7ded1578cca958d7e5223c92bd317bb6a22f4f835bb3b8aa02713d73014099e22acfd7d94a52584c28ca34f766fee6ae7852cb978c9b01d7d6f17a382c834864de989956025f959d0435c08b056d61e2ed60fae08dfaebf6afda6f9dcae272d8a6e5f46faa4ef995ed0d5efaf1e7427f1f45361cbd6cbc739a53d186ba82bf5c8d253f3728113fa36cc322cd6c3e5d12d3c52a8283389f4bd4aad767f6089eac0e6cda8abe6987990b36f1d81961a127c871f2a3fadbcc43841e5e0dc8a583295199e24061055eadd8d344d514b1e141e7a432b454c61fa612c133292559a2a2f289e7bf41c9f827047acd4b71cfbe3050dea45df7f3f5b1f4277860f9f467dbb09c0dd29ce4b3c7e4eb8b86a216b837a37303422819a57248b944ea4bbd6ffc2e43a7a42d368b0332efc74dcfae0143634b3cd4203db4a33188c27f379859de22d936c9839a4d73ee36c6deb92cad0452288bc0ef7a1b98a5be2cf045b3ee8231d96f159829ae93ad793f7501e92c39f4e5121e3edbc6812a4bad8b70ef52c54f2d7e9de0947e536c4465da8440c7a16ac6f6ac23c1d6e3d144dc605bd5bf1c555b2055e28cc1aecb72c51be0f9d3e8d9396b060d868181e7c7fab8be769cfbfd1bb37fb5d8ea573124eb5decdba21756b71a6846bda33a14c5e53a3ffc73c76612a1b9fd2bc00d7d525abbcd4e9e03c6e61870af345ecd43975c3c81c56de2e4ee944ad2ec06ac809933fb92a124662ee0b622160a4886966852f73182d2a5276abc3bd68b370b910de18d232cec9416d9650d284370b6023e6542bcb36be97291c344a3979959dcaf31ed8f550eceb342021b90eca254a8bd45353753b81ae17791586a3851f0bad250da21c16a90a1715ccad940d3b114eaec30b59bcb4709dcbe6c608717ff4b6f43048a679ddb181ab50b28e27c5544e68c925ddca5963a042cf90bb95eeb29a1cfd1ddbdc89c7d403bae40ce8361893b00800e63d27acedda90544f71c6e9f46c2ecaff0e5ac31332860ec724c74ab02bb95e0ac283f3c85ee32897661100d479341788d1f478c90a534f28c77a4b854ba40c45beaac709170d6da26dd69f4456f75ae32fd2664e7928f26af2f9abaee970ca115ca76000121172774a82159eb4d67a922d4ca595a1f1101f63149dcd43706e6c5cfdf1e0e98a6c7207a7530df79d7027ae3ccc816ffbb4899598d7145102bd1f730cf5ab124af0044b497402433f75bef8b6b8df4b9b9620fba9ab9ffcc9c9781bd98d459257a0154540690dc28abeeb6ef2e8236b0ee9a252a59780dee8aace445b0a44ee448a576666a8c0bb545bf0ad107beb5c50c731742049946921595bc3ffa75ec55c3d7ff6220dab8a012792a9dd76fe0ebd7d11b8846ba3cc233dbf2b624d9bfc119056ac5b8c900dd4fe6a84d82f6333201f4606a3264e9a7ef27279964a2bcf687b1b43b43178d609b4aa844c3d5dba77e5d6bb8b531ff0e2dec3b2efa321867486800f660cf964c73d8533d213d1a7977d4dabecce73f157d642cea4add0b140c4cd1f3be9c378ff45584d986b5367f37eb25fdbe0c9d0bfb9c606dd8ab5c61c2a74f35ea26b540b2dcf65d5fa010d34ab958cb4b0f931b758a2e94a2c64a309044a91b5b989b8cefc98415d47239564dcd721a5634f62ee56f5aa051c0558b5486237ef708a9eb6ddfbbb2f902b66a752547db0f17d140fc996725b27f400e2f44c517fcd6ea20b3e7004ce17bd2a73f04aba0771bc6f965ae3461a7a42e4d5c5ef90ac3b60d415cab69ddde3f8ecafa0b71b00a9f45933b1c9c3e7787133c3dcb534b83e434bb85acefb416b4de5b37463525b48e281d7f0f1d2313918ee0ec7579ca580bf4ebae2ed1d7603d6a8943caa48591637b3c2d2ff08279b71b4cf2fe35fabc048a808dfa737476eb82400698b476ac035688445030215a28360d596eb88ff1f37c02aa3e9996c2b03deb8871d6e9f0d8bdb1e1d8a77c5d60d1280abf617a25264d0ac4986ee8fe0cd56b328685e2f82fdfa263b5995333d30ad02d7e47e74b25becd216053176868c010c3fddfb0f04c28d5bd65007b0dba27657ac9e9ef2b235bd8acec24d2a3b72909703eff5fc1eca386c83594a9214a914ca88358a231534472d82c8d62f3ee550ce781895272c19487ee30e12a722d23d7606061ec3c16448b5235ed93fd3d5c2faf450d57e4da765a5131ecda39f31a922326b865f06d2e3a8699ace482f48d56c207fdb08484ce38c790e506a1100e738ebe805d4ea240bb22c56d8388ace92d415358785f95bc69a7a593d81723e20a01bac4079e3973f1c2fca5040725cfa45ab5177db1e101a9fed55d93c8db278643996837b98715319a4505c8a977da490cd56e2e61644bba6ee172b9c60910e1a8047a347f2fbfd3f7f88f20186a5242bb437c05f3d831ba6991ce2bc2c4da92b81333c9d7b58cdba2b3b2602b1e8d621ec39524eece4ec152db80d798fde7c94e195a5af86d6983504c5b691b5aa0ef1a2a9dbee7377239d232ccdf335969b9830b00805b2cbd026799e3da3d3897990cb84b70f41d674124c95ba0033d4b8b64645cfa3edefb3a31518ece560caa49a6ded72f81c76693e8cb0b4498a141e9b5bb02c17681d62ad4216ec3463fdaf87f006e9aec84357bd7bf03e51aabd916e894aeec6c845142069769aa9ce58f195046d08885c646f2f0d01fb8958606bc29c48f6f79b6dcafc8d0bcbdc123646b50e81ef99b34c332519ac77f7fc4c4cd4742c01a32ebf4c9a4e255e9a55849178a6c8b2647d5b804342819e9484e77bba173c36e097feadbe9032880ec00a063048f0d249285677ea44a301fc0fc469821703dca5b2bc90359c1c47ed47e592a4fc3fc427ad80fdd38e99f9f4c263ace6d6201d8d49604939a255a3547f37a3da762cbf0cc73f27a677814f184649e0262e69766a45fe6042d499c0f673c46bbba63b42ee6d265c37fc60aa018e75952ccff711872c63a4eb0662e0f22edbe296b3f1d75930b19b46bb55be0e06a074b68e0ecaab1311f87b1b542f11266cb785be5ec93c6e2eeb283f37193ada777b24008bcd0e5b3f0cd8c9dc492bd22ecc8b4278513f447ef9430add75dddcfa6e329d1455d9bdbefe607cf1e501c58f206209fcb2fbfff55ac7f38ca7d1d87524ac25e64195fcbc77af0d92c210f17f2c270c8e1855f0b19d9b14696e16c0396f3fc6cc6b6bbb7c701b3ba12e9979b45536d8faeaf2ea6e637e4dc7b9a87f550012eba087b722aabf7c5c809a8099e68e601d96805b106407e3558511cfa12862240db3c93a6595fa53e29e8301011c6acc5f80b8624e31148dfae21250d5ef584d504bebc9c4065b60fcb3f160ab9d6637d5abe584ff4f00c717d4561689c9741346bbf78a2401d815e5f9f9919880303f3a451e0b8187244411d65563e5de23fdcb8e02b62b21d100402b1c7a057e11e8117383e985c47d98897e25d43ff0c9283c6e8fba5ca62b3c5af712d9db8c825e3887c31e1d157b7950bb438fbf56fda9adf8c27b411316c33e8e35752aca0b291a2d6e9efa6beb85b0091c1b715d41c9700385b3c2baae2aa6df45814c07ee7ec1b6651eb7efa289c8b2982be5c688ca63da9d18b23608b1a4ac610e2c10cea6db9e050512a3ed02fefa151f6714a0a69d5476175abe229715dd94d2daa858ab14e0fdf2", 0x1000}, {&(0x7f0000003780)="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", 0x16e}, {&(0x7f0000003300)="9a93c66b9f81d03b266b1fde67b0aa42d059366793548d15739849c2d9e9faf6a7b4c357833d58f3392ee44988a31cba28d54d2ca4eb3f05c8bfca4ca74f9634123fda78a65ea8b1af630ae1c9f9ded1ccc927519ac9390e7c6fdd8858cd61eb2daaef9aaae1e022fbaf4c29b084fb6a7054af22867c1a13c7c06cf8ece692190518794f42106d0232d630169097ce7fcd69fc76dcbc08763430a92c3b55fa58c90feda5ee0bb4e73cc9de0644b561f934ef493ee98442c142ca31bbfeb9081cbd227bbb398c93169023ddb64f1e7badb45eba052992c615d69d0d0cfefc3d4b7d3a8351", 0xe4}], 0x5, &(0x7f0000003480)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1e000000}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xa8}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4fef}}], 0xc0}}], 0x4, 0x8080) (async, rerun: 32) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1, 0x0, r3}) (async) unshare(0x2c020400) (async, rerun: 64) r7 = msgget$private(0x0, 0x0) (async, rerun: 64) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(r7, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (rerun: 32) io_uring_enter(r6, 0x7b05, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) r8 = openat$cgroup_int(r4, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x27) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000003700)=@userptr={0xffffffff, 0xd, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x6, 0x3, 0xd, 0x7, "b024cf3c"}, 0x0, 0x2, {&(0x7f00000036c0)}, 0x5, 0x0, r1}) (async) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000000020104000000000000000002000000240002801400018008000100ac1414bb08004200ffffffff0c0002800500010000000000300003802c0001801400030000000000000000000000000000000000140004002001000000000000000000000000000104000180"], 0x6c}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r9}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) 57.49227ms ago: executing program 3 (id=105): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async, rerun: 64) r4 = mmap$IORING_OFF_CQ_RING(0x0, 0x0, 0x1000000, 0x80010, 0xffffffffffffffff, 0x8000000) (rerun: 64) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r4, 0x0, &(0x7f0000000100)={0x2e, 0xd, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbd1, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x4}}}, &(0x7f00000001c0)) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x6c6882, 0x114) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r8, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) close(r7) (rerun: 64) 16.384261ms ago: executing program 3 (id=106): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac2(0x3, 0x7b, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b1600000000000000000200000a3800048018000180080001006f7366000c000280080001400000000d1c0001800a00010071756575650000000c000280080004400003000f0900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$key(0xf, 0x3, 0x2) (async) syz_usb_connect$uac2(0x3, 0x7b, 0x0, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b1600000000000000000200000a3800048018000180080001006f7366000c000280080001400000000d1c0001800a00010071756575650000000c000280080004400003000f0900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) 0s ago: executing program 0 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000940)={{r0, &(0x7f0000000200)=':\x00', 0x200, &(0x7f0000000240)={@align=0xfff, {0x913a, 0x1000, 0x1, 0x82}}, 0x10000, &(0x7f0000000280), &(0x7f0000000340)}, 0x3, &(0x7f0000000800)=[{0x2, 0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480)="ed3bcdbc0b027f3b95462f8fdc137573d066799de50c5dc5e8424ae70846f5073c85a38da471370a51f41d92a7de9de795ddabd83db820c89f6689b5d19cb953017bd6c95a0e62885384bfaebc470917dc9f79f7f9cfda40f039bd819168d02e5dbf2fa824e7727ffec68e47c3a3e897aa7cb46333234256e0db6f67732c166aa6835e996b2ee180c03e1efb7ad54e5ce55e5124e119af4065966ec2f852770a6d0a13385994f54abebf3255e54806bdc924bda74da707cc4dbd06331dc078f149114c5564ff62f9cafd397c661e5b9850470f20fc65", 0xd6}, {0x2, 0x803, &(0x7f00000005c0)='/dev/nullb0\x00', &(0x7f0000000640)="bcbf2883cba1a140daf4dfe9b68a94cb43edc5bd", 0x14, 0x86ce1a02484b9fe8}, {0x2, 0x1, &(0x7f0000000680)='-\xb9\x00', &(0x7f00000007c0)="33a4376f6b53d9843c0e49fe2b5db60b", 0x10, 0x3a}]}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000340)={r4, 0xfffffffe, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000a80)={r4, 0x6, 0x6}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000200)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x6, 0x0, 0xdf4, "00000000a105"}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, 0xfffffffffffffffc}) write(0x1, &(0x7f0000000000)='\x00', 0x1) madvise(0xfffffffffffffffc, 0x2000, 0x14) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x800, 0x420102) madvise(0xfffffffffffffffc, 0x2000, 0x15) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x3, 0xd}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@deltaction={0x38, 0x31, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x24044801) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@gettaction={0x2c, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x161a02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r10, 0x0) r11 = userfaultfd(0x1) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r11, 0x8010aa01, &(0x7f0000000000)={&(0x7f00000cc000/0x4000)=nil, 0x4000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 74.913784][ T5614] cgroup: Unknown subsys name 'net' [ 75.043312][ T5614] cgroup: Unknown subsys name 'cpuset' [ 75.052600][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.697488][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.508574][ T4942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.531913][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.542234][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.550828][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.550876][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.560435][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.567107][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.575592][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.588199][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.595979][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.596875][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.611630][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.611637][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.612054][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.621321][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.627707][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.634702][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.641016][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.648189][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.655535][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.661871][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.672114][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.677659][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.684499][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.698200][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.744683][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.752194][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.759395][ T5645] bridge_slave_0: entered allmulticast mode [ 81.767034][ T5645] bridge_slave_0: entered promiscuous mode [ 81.812451][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.819839][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.826987][ T5645] bridge_slave_1: entered allmulticast mode [ 81.834340][ T5645] bridge_slave_1: entered promiscuous mode [ 81.921705][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.929015][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.936567][ T5647] bridge_slave_0: entered allmulticast mode [ 81.943615][ T5647] bridge_slave_0: entered promiscuous mode [ 81.993339][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.000613][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.007741][ T5647] bridge_slave_1: entered allmulticast mode [ 82.015084][ T5647] bridge_slave_1: entered promiscuous mode [ 82.025608][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.034869][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.042562][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.050091][ T5646] bridge_slave_0: entered allmulticast mode [ 82.057719][ T5646] bridge_slave_0: entered promiscuous mode [ 82.095117][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.105913][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.114242][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.121586][ T5646] bridge_slave_1: entered allmulticast mode [ 82.128726][ T5646] bridge_slave_1: entered promiscuous mode [ 82.142269][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.149430][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.156764][ T5648] bridge_slave_0: entered allmulticast mode [ 82.164004][ T5648] bridge_slave_0: entered promiscuous mode [ 82.222756][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.230067][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.237230][ T5648] bridge_slave_1: entered allmulticast mode [ 82.244714][ T5648] bridge_slave_1: entered promiscuous mode [ 82.254068][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.266969][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.281233][ T5645] team0: Port device team_slave_0 added [ 82.329709][ T5645] team0: Port device team_slave_1 added [ 82.337900][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.350219][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.359929][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.367104][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.374792][ T5649] bridge_slave_0: entered allmulticast mode [ 82.382108][ T5649] bridge_slave_0: entered promiscuous mode [ 82.432365][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.440015][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.447214][ T5649] bridge_slave_1: entered allmulticast mode [ 82.454823][ T5649] bridge_slave_1: entered promiscuous mode [ 82.464435][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.475946][ T5647] team0: Port device team_slave_0 added [ 82.513856][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.536891][ T5647] team0: Port device team_slave_1 added [ 82.543359][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.550576][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.576532][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.590245][ T5646] team0: Port device team_slave_0 added [ 82.627084][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.634638][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.660656][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.673409][ T5646] team0: Port device team_slave_1 added [ 82.682419][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.693748][ T5648] team0: Port device team_slave_0 added [ 82.728992][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.740731][ T5648] team0: Port device team_slave_1 added [ 82.747008][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.754043][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.780292][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.780396][ T5643] Bluetooth: hci1: command tx timeout [ 82.793872][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.797998][ T5631] Bluetooth: hci4: command tx timeout [ 82.804678][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.810362][ T5627] Bluetooth: hci3: command tx timeout [ 82.836541][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.842274][ T4942] Bluetooth: hci2: command tx timeout [ 82.853620][ T5631] Bluetooth: hci0: command tx timeout [ 82.916470][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.923758][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.949721][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.982392][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.989583][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.015893][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.037297][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.044357][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.070439][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.083564][ T5649] team0: Port device team_slave_0 added [ 83.099887][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.106950][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.133166][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.164529][ T5649] team0: Port device team_slave_1 added [ 83.175539][ T5645] hsr_slave_0: entered promiscuous mode [ 83.182087][ T5645] hsr_slave_1: entered promiscuous mode [ 83.200373][ T5647] hsr_slave_0: entered promiscuous mode [ 83.206944][ T5647] hsr_slave_1: entered promiscuous mode [ 83.213582][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 83.219365][ T5647] Cannot create hsr debugfs directory [ 83.292881][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.300005][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.325968][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.370109][ T5646] hsr_slave_0: entered promiscuous mode [ 83.376349][ T5646] hsr_slave_1: entered promiscuous mode [ 83.383145][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 83.388938][ T5646] Cannot create hsr debugfs directory [ 83.402080][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.409088][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.435203][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.452630][ T5648] hsr_slave_0: entered promiscuous mode [ 83.459087][ T5648] hsr_slave_1: entered promiscuous mode [ 83.465362][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 83.471146][ T5648] Cannot create hsr debugfs directory [ 83.658683][ T5649] hsr_slave_0: entered promiscuous mode [ 83.665260][ T5649] hsr_slave_1: entered promiscuous mode [ 83.672637][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 83.678418][ T5649] Cannot create hsr debugfs directory [ 84.084137][ T5647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.097178][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.105771][ T5647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.116147][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.124728][ T5647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.136770][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.144837][ T5647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.155126][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.238647][ T5645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.254916][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.263012][ T5645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.272628][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.280867][ T5645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.290768][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.309059][ T5645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.318511][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.409932][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.421427][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.429275][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.440462][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.463572][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.474622][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.483669][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.493412][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.579343][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.617503][ T5648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.627648][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.636350][ T5648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.648467][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.656622][ T5648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.666043][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.691120][ T5648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.701067][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.737322][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.777551][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.785314][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.846569][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.853731][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.863025][ T5649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.874834][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.888099][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.900382][ T5649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.911078][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.919080][ T5649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.926152][ T5643] Bluetooth: hci4: command tx timeout [ 84.926245][ T5639] Bluetooth: hci2: command tx timeout [ 84.926314][ T5631] Bluetooth: hci3: command tx timeout [ 84.930264][ T5639] Bluetooth: hci1: command tx timeout [ 84.940401][ T5631] Bluetooth: hci0: command tx timeout [ 84.958007][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.974348][ T5649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.984954][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.035882][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.072979][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.080216][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.100475][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.107597][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.183842][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.267350][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.333598][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.340838][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.365329][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.372495][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.384872][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.413044][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.457784][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.473980][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.492547][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.520441][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.527581][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.554312][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.561545][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.581538][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.597109][ T5646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.626805][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.633975][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.677404][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.684656][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.743493][ T5645] veth0_vlan: entered promiscuous mode [ 85.767571][ T5647] veth0_vlan: entered promiscuous mode [ 85.791945][ T5645] veth1_vlan: entered promiscuous mode [ 85.813397][ T5647] veth1_vlan: entered promiscuous mode [ 85.843549][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.928131][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.964632][ T5645] veth0_macvtap: entered promiscuous mode [ 85.988534][ T5647] veth0_macvtap: entered promiscuous mode [ 86.002641][ T5647] veth1_macvtap: entered promiscuous mode [ 86.016788][ T5645] veth1_macvtap: entered promiscuous mode [ 86.029000][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.067836][ T5646] veth0_vlan: entered promiscuous mode [ 86.100262][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.130409][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.145238][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.174812][ T5648] veth0_vlan: entered promiscuous mode [ 86.184070][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.205445][ T5646] veth1_vlan: entered promiscuous mode [ 86.240825][ T5648] veth1_vlan: entered promiscuous mode [ 86.308149][ T5649] veth0_vlan: entered promiscuous mode [ 86.345597][ T5649] veth1_vlan: entered promiscuous mode [ 86.381730][ T5646] veth0_macvtap: entered promiscuous mode [ 86.390651][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.427558][ T5646] veth1_macvtap: entered promiscuous mode [ 86.487997][ T5648] veth0_macvtap: entered promiscuous mode [ 86.488668][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.505902][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.510116][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.560353][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.577579][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.588583][ T5648] veth1_macvtap: entered promiscuous mode [ 86.598769][ T5649] veth0_macvtap: entered promiscuous mode [ 86.625840][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.631668][ T5649] veth1_macvtap: entered promiscuous mode [ 86.637658][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.647558][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.675254][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.769778][ T5645] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.803241][ T253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.807507][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.823193][ T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.844566][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.882209][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.928104][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.950430][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.989810][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.000473][ T5631] Bluetooth: hci0: command tx timeout [ 87.006045][ T5639] Bluetooth: hci1: command tx timeout [ 87.011838][ T5643] Bluetooth: hci3: command tx timeout [ 87.017866][ T5643] Bluetooth: hci2: command tx timeout [ 87.023302][ T5627] Bluetooth: hci4: command tx timeout [ 87.088815][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.210157][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.248580][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.277093][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.329992][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.371258][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.464478][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.473369][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.475790][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.501325][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.530078][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.570628][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.586619][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.610324][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.634436][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.784561][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.810473][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.974066][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.005438][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.039608][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.072258][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.098894][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.134025][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.172906][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.208341][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281911][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.329348][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.540549][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.630304][ T5358] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.677893][ T5745] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.759970][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.837750][ T5358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.874752][ T5358] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.914471][ T5358] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 88.936775][ T24] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 88.949767][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.967136][ T24] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 88.974215][ T5358] usb 5-1: config 0 descriptor?? [ 88.990184][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.007913][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 89.039119][ T24] usb 1-1: string descriptor 0 read error: -22 [ 89.048307][ T24] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 89.064312][ T5358] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 89.072883][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.082982][ T5643] Bluetooth: hci1: command tx timeout [ 89.083689][ T5639] Bluetooth: hci0: command tx timeout [ 89.088488][ T5643] Bluetooth: hci4: command tx timeout [ 89.094831][ T5631] Bluetooth: hci3: command tx timeout [ 89.100332][ T5643] Bluetooth: hci2: command tx timeout [ 89.160289][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 89.172635][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.186494][ T10] usb 3-1: config 0 has no interface number 0 [ 89.193276][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.204219][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 89.230187][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.260303][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.297624][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.315924][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.328542][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.344125][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.374042][ T10] usb 3-1: config 0 descriptor?? [ 89.422809][ T5751] usb 5-1: USB disconnect, device number 2 [ 89.439358][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 89.714401][ T5741] tap0: tun_chr_ioctl cmd 1074025677 [ 89.733661][ T5741] tap0: linktype set to 518 [ 89.787289][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x4 [ 89.807323][ T5745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.816508][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.841043][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.858688][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.881192][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.900898][ T5745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.910047][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.919655][ T5703] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.933366][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.954798][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.979839][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 90.000022][ T24] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 90.109819][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 90.141722][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.182061][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.236238][ T5703] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 61, changing to 9 [ 90.352385][ T5703] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.397605][ T24] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:20D6:CB17.0001/input/input5 [ 90.429122][ T5703] usb 4-1: config 1 interface 0 has no altsetting 0 [ 90.481927][ T5703] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 90.551216][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.581683][ T5703] usb 4-1: Product: syz [ 90.604370][ T5703] usb 4-1: Manufacturer: syz [ 90.642133][ T5703] usb 4-1: SerialNumber: syz [ 90.723901][ T24] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:20D6:CB17.0001/input/input6 [ 90.952569][ T24] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:20D6:CB17.0001/input/input7 [ 91.039035][ T5757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.155820][ T5757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.291874][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 91.339170][ T5766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.443468][ T5358] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 91.445372][ T24] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:20D6:CB17.0001/input/input8 [ 91.521769][ T5358] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 91.532746][ T5765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.600399][ T36] wlan1: authenticated [ 91.623811][ T5773] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.649655][ T253] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 91.710976][ T253] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 91.722452][ T5765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.741721][ T253] wlan1: associated [ 91.806597][ T24] hid-udraw 0003:20D6:CB17.0001: hidraw0: USB HID v0.02 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 92.021683][ T187] cfg80211: failed to load regulatory.db [ 92.171961][ T5703] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 92.223466][ T5703] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 92.248985][ T5703] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 92.335345][ T5703] usb 4-1: USB disconnect, device number 2 [ 92.492486][ T5751] usb 3-1: USB disconnect, device number 2 [ 92.553036][ T5751] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 92.718033][ T24] usb 1-1: USB disconnect, device number 2 [ 93.130163][ T5703] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.204038][ T5790] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 93.243850][ T5790] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.276614][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 93.354515][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 93.378729][ T5703] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.436112][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.472290][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.473245][ T5790] netlink: 'syz.1.18': attribute type 39 has an invalid length. [ 93.507902][ T5703] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.548576][ T5703] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.585432][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.857237][ T5703] usb 3-1: GET_CAPABILITIES returned 0 [ 93.880691][ T5703] usbtmc 3-1:16.0: can't read capabilities [ 94.133281][ T5787] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 94.227272][ T5632] usb 3-1: USB disconnect, device number 3 [ 94.251958][ T5791] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 94.259093][ T5791] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 94.429616][ T5718] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.600731][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 94.636341][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.719138][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.738286][ T5718] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 94.794613][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.882483][ T5718] usb 1-1: config 0 descriptor?? [ 96.106647][ T5838] misc userio: Begin command sent, but we're already running [ 96.147701][ T5838] Zero length message leads to an empty skb [ 96.780771][ T5854] fuse: Invalid gid '00000000000000000000005' [ 96.889633][ T5632] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 97.143331][ T5632] usb 4-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 97.219632][ T5632] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.231425][ T5632] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 97.240992][ T5632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.258932][ T5632] usb 4-1: SerialNumber: syz [ 97.320415][ T5632] usb 4-1: 0:2 : does not exist [ 97.351494][ T5632] usb 4-1: unit 220 not found! [ 97.611255][ T5718] usbhid 1-1:0.0: can't add hid device: -71 [ 97.655932][ T5718] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 97.669073][ T5632] usb 4-1: USB disconnect, device number 3 [ 97.694287][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.753585][ T5718] usb 1-1: USB disconnect, device number 3 [ 97.883754][ T5864] syzkaller0: entered promiscuous mode [ 97.913488][ T5864] syzkaller0: entered allmulticast mode [ 97.941944][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 97.975031][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.010075][ T24] usb 5-1: config 0 has no interface number 0 [ 98.036042][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 98.047502][ T5871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'. [ 98.067375][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.088393][ T24] usb 5-1: Product: syz [ 98.105927][ T24] usb 5-1: Manufacturer: syz [ 98.116243][ T24] usb 5-1: SerialNumber: syz [ 98.132180][ T5869] tipc: Started in network mode [ 98.140951][ T24] usb 5-1: config 0 descriptor?? [ 98.157097][ T5869] tipc: Node identity fa8a4eddefd6, cluster identity 4711 [ 98.171252][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 98.172704][ T5875] netlink: 'syz.0.35': attribute type 10 has an invalid length. [ 98.185821][ T5869] tipc: Enabled bearer , priority 0 [ 98.187205][ T5875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35'. [ 98.206194][ T5875] dummy0: entered promiscuous mode [ 98.217774][ T5863] tipc: Resetting bearer [ 98.270522][ T5863] tipc: Disabling bearer [ 98.300826][ T5874] dummy0: left promiscuous mode [ 98.334590][ T5874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.599323][ T24] gspca_spca1528: reg_w err -71 [ 98.622205][ T24] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 98.640174][ T24] usb 5-1: USB disconnect, device number 3 [ 98.655313][ T5884] process 'syz.0.38' launched './file0' with NULL argv: empty string added [ 99.089965][ T5886] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.39'. [ 99.127526][ T5886] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.39'. [ 99.148682][ T5886] netlink: 332 bytes leftover after parsing attributes in process `syz.1.39'. [ 100.565028][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 100.602276][ T5919] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 100.602301][ T5919] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.605214][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.47'. [ 100.644109][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 100.644134][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'. [ 100.644380][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 100.742236][ T5925] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 100.752012][ T5925] syzkaller0: entered promiscuous mode [ 100.752038][ T5925] syzkaller0: entered allmulticast mode [ 101.096974][ T5937] fuse: Bad value for 'fd' [ 101.270941][ T5718] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 101.389952][ T5628] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.419700][ T5718] usb 3-1: device descriptor read/64, error -71 [ 101.563357][ T5628] usb 2-1: Using ep0 maxpacket: 32 [ 101.576162][ T5628] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 101.586522][ T5628] usb 2-1: config 0 has no interface number 0 [ 101.597923][ T5628] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 101.607526][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.617103][ T5628] usb 2-1: Product: syz [ 101.621471][ T5628] usb 2-1: Manufacturer: syz [ 101.626249][ T5628] usb 2-1: SerialNumber: syz [ 101.638556][ T5628] usb 2-1: config 0 descriptor?? [ 101.679684][ T5718] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 101.696224][ T5966] netlink: 'syz.3.62': attribute type 21 has an invalid length. [ 101.705322][ T5966] netlink: 'syz.3.62': attribute type 4 has an invalid length. [ 101.713446][ T5966] netlink: 'syz.3.62': attribute type 5 has an invalid length. [ 101.819734][ T5718] usb 3-1: device descriptor read/64, error -71 [ 101.850481][ T5628] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 101.862424][ T5628] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 101.877965][ T5628] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 101.893611][ T5628] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 101.912544][ T5628] usb 2-1: USB disconnect, device number 2 [ 101.930207][ T5718] usb usb3-port1: attempt power cycle [ 101.961232][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.129835][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 102.147069][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.166458][ T30] audit: type=1400 audit(1786012366.455:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5974 comm="syz.0.64" [ 102.178186][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.221745][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.240809][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.264097][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.290796][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.317157][ T5718] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 102.317505][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.362119][ T5718] usb 3-1: device descriptor read/8, error -71 [ 102.398582][ T9] usb 4-1: Manufacturer: syz [ 102.433246][ T9] usb 4-1: config 0 descriptor?? [ 102.629555][ T5718] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 102.690886][ T5718] usb 3-1: device descriptor read/8, error -71 [ 102.750116][ T5632] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.836124][ T5718] usb usb3-port1: unable to enumerate USB device [ 102.849791][ T9] rc_core: IR keymap rc-hauppauge not found [ 102.868681][ T9] Registered IR keymap rc-empty [ 102.888522][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.922682][ T5632] usb 2-1: Using ep0 maxpacket: 8 [ 102.927832][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.952043][ T5632] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.970593][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 102.983915][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.000357][ T5632] usb 2-1: Product: syz [ 103.012233][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 103.025924][ T5632] usb 2-1: Manufacturer: syz [ 103.030753][ T5632] usb 2-1: SerialNumber: syz [ 103.040752][ T5632] usb 2-1: config 0 descriptor?? [ 103.058907][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.089927][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.129679][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.151550][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.189710][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.219947][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.239683][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.265486][ T5632] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.279786][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.309722][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.342471][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.384287][ T5632] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 103.413207][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 103.436771][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 103.460320][ T5632] usb 2-1: USB disconnect, device number 3 [ 103.545054][ T9] usb 4-1: USB disconnect, device number 4 [ 103.989609][ T5632] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.128205][ T5718] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.154344][ T5632] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.165789][ T5632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.179812][ T5632] usb 2-1: config 0 descriptor?? [ 104.197929][ T5632] cp210x 2-1:0.0: cp210x converter detected [ 104.296842][ T6030] __nla_validate_parse: 7 callbacks suppressed [ 104.296869][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 104.313740][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 104.323761][ T5718] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.337819][ T5718] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.351581][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.366305][ T5718] usb 5-1: Product: syz [ 104.378707][ T5718] usb 5-1: Manufacturer: syz [ 104.383956][ T5718] usb 5-1: SerialNumber: syz [ 104.394632][ T5718] usb 5-1: config 0 descriptor?? [ 104.405238][ T6015] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 104.416642][ T5718] hub 5-1:0.0: bad descriptor, ignoring hub [ 104.424101][ T5718] hub 5-1:0.0: probe with driver hub failed with error -5 [ 104.431409][ T5632] usb 2-1: cp210x converter now attached to ttyUSB0 [ 104.608746][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.631284][ T6032] tipc: Started in network mode [ 104.637567][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.648090][ T6032] tipc: Node identity de8523309f07, cluster identity 4711 [ 104.658925][ T6032] tipc: Enabled bearer , priority 0 [ 104.667481][ T6032] syzkaller0: entered promiscuous mode [ 104.676137][ T6032] syzkaller0: entered allmulticast mode [ 104.680278][ T6036] netlink: 172 bytes leftover after parsing attributes in process `syz.0.81'. [ 104.695690][ T6032] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 104.725983][ T6032] tipc: Resetting bearer [ 104.729785][ T5632] usb 5-1: USB disconnect, device number 4 [ 105.041821][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 105.079581][ T5632] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.249600][ T5632] usb 5-1: Using ep0 maxpacket: 32 [ 105.266115][ T5632] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.291107][ T6031] tipc: Resetting bearer [ 105.304190][ T5632] usb 5-1: string descriptor 0 read error: -22 [ 105.326705][ T5632] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.354953][ T6031] tipc: Disabling bearer [ 105.359212][ T5632] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.390315][ T5632] usb 5-1: config 0 descriptor?? [ 105.397928][ T6015] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 105.413527][ T5632] hub 5-1:0.0: bad descriptor, ignoring hub [ 105.431093][ T5632] hub 5-1:0.0: probe with driver hub failed with error -5 [ 105.443784][ T6056] netlink: 165 bytes leftover after parsing attributes in process `syz.3.87'. [ 105.653427][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.683881][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.819913][ T5632] usb 5-1: USB disconnect, device number 5 [ 105.879822][ T5628] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.924342][ T6072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.980137][ T5718] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.044665][ T5628] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 106.053067][ T5628] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 106.062298][ T5628] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 106.073278][ T5628] usb 1-1: config 220 has no interface number 2 [ 106.079708][ T5628] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 106.093075][ T5628] usb 1-1: config 220 interface 0 has no altsetting 0 [ 106.101154][ T5628] usb 1-1: config 220 interface 76 has no altsetting 0 [ 106.108036][ T5628] usb 1-1: config 220 interface 1 has no altsetting 0 [ 106.117537][ T5628] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.127350][ T5628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.137173][ T5628] usb 1-1: Product: syz [ 106.141422][ T5628] usb 1-1: Manufacturer: syz [ 106.146233][ T5628] usb 1-1: SerialNumber: syz [ 106.151025][ T5718] usb 4-1: Using ep0 maxpacket: 16 [ 106.157925][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.171921][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.182134][ T5718] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.195208][ T5718] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 106.204724][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.218160][ T5718] usb 4-1: config 0 descriptor?? [ 106.229621][ T5703] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.370582][ T5703] usb 3-1: device descriptor read/64, error -71 [ 106.389263][ T6082] bond1 (unregistering): Released all slaves [ 106.418244][ T5628] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 106.437854][ T6079] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 106.438883][ T5628] uvcvideo 1-1:220.0: No valid video chain found. [ 106.456111][ T6079] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 106.461155][ T5628] usb 1-1: selecting invalid altsetting 0 [ 106.470617][ T6078] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 106.486941][ T6078] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 106.493168][ T5628] usb 1-1: selecting invalid altsetting 0 [ 106.510052][ T5628] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 106.523964][ T5628] usb 1-1: USB disconnect, device number 4 [ 106.619777][ T5703] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.720715][ T5718] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input12 [ 106.758237][ T5628] usb 2-1: USB disconnect, device number 4 [ 106.764844][ T5703] usb 3-1: device descriptor read/64, error -71 [ 106.802449][ T5628] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 106.833617][ T5718] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 106.851543][ T5628] cp210x 2-1:0.0: device disconnected [ 106.882508][ T5703] usb usb3-port1: attempt power cycle [ 106.961270][ T6094] syz.3.90 uses obsolete (PF_INET,SOCK_PACKET) [ 107.136505][ T6098] tipc: Started in network mode [ 107.142300][ T6098] tipc: Node identity 6a37e7c22a97, cluster identity 4711 [ 107.150548][ T6098] tipc: Enabled bearer , priority 0 [ 107.157891][ T6098] syzkaller0: entered promiscuous mode [ 107.166371][ T6098] syzkaller0: entered allmulticast mode [ 107.177595][ T5632] usb 4-1: USB disconnect, device number 5 [ 107.216224][ T6097] tipc: Resetting bearer [ 107.237027][ T6097] tipc: Disabling bearer [ 107.242092][ T5703] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 107.270126][ T5703] usb 3-1: device descriptor read/8, error -71 [ 107.362822][ T5628] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.499618][ T5628] usb 2-1: device descriptor read/64, error -71 [ 107.510384][ T5703] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 107.540113][ T5703] usb 3-1: device descriptor read/8, error -71 [ 107.652293][ T5703] usb usb3-port1: unable to enumerate USB device [ 107.759549][ T5632] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.759652][ T5628] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.890460][ T5628] usb 2-1: device descriptor read/64, error -71 [ 107.914577][ T5632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.945883][ T5632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.969363][ T253] ------------[ cut here ]------------ [ 107.974982][ T253] !sta [ 107.975000][ T253] WARNING: net/mac80211/mlme.c:4898 at ieee80211_mgd_probe_ap_send+0x497/0x560, CPU#1: kworker/u8:6/253 [ 107.976608][ T5632] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 107.977758][ T253] Modules linked in: [ 108.002952][ T5632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.003621][ T253] CPU: 1 UID: 0 PID: 253 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 108.021222][ T253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.025691][ T5632] usb 5-1: config 0 descriptor?? [ 108.031352][ T253] Workqueue: events_unbound cfg80211_wiphy_work [ 108.031390][ T253] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560 [ 108.031420][ T253] Code: 4c 89 fe 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 6a 57 f6 e8 58 95 6b f6 90 0f 0b 90 e9 37 fc ff ff e8 4a 95 6b f6 90 <0f> 0b 90 e9 c0 fc ff ff e8 3c 95 6b f6 90 0f 0b 90 e9 3c ff ff ff [ 108.031438][ T253] RSP: 0018:ffffc90002e47a70 EFLAGS: 00010293 [ 108.031459][ T253] RAX: ffffffff8b5b7d46 RBX: ffff888057480ec0 RCX: ffff888020743e00 [ 108.031475][ T253] RDX: 0000000000000000 RSI: ffffffff8e4b425c RDI: ffff888020743e00 [ 108.031490][ T253] RBP: 0000000000000001 R08: ffff888020743e00 R09: 000000000000000c [ 108.102352][ T253] R10: 000000000000000c R11: 0000000000000000 R12: ffff888057481e70 [ 108.110461][ T253] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888057481920 [ 108.118474][ T253] FS: 0000000000000000(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 108.127536][ T253] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.134214][ T253] CR2: 00002000000002c0 CR3: 000000007508c000 CR4: 00000000003526f0 [ 108.142319][ T253] Call Trace: [ 108.145640][ T253] [ 108.148605][ T253] cfg80211_wiphy_work+0x29e/0x420 [ 108.153823][ T253] ? process_scheduled_works+0xa20/0x14e0 [ 108.159632][ T253] process_scheduled_works+0xa8e/0x14e0 [ 108.165250][ T253] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.171345][ T253] ? assign_work+0x3cf/0x5d0 [ 108.175994][ T253] worker_thread+0xa47/0xfb0 [ 108.180710][ T253] ? __kthread_parkme+0x71/0x1f0 [ 108.186460][ T253] kthread+0x388/0x470 [ 108.191129][ T253] ? __pfx_worker_thread+0x10/0x10 [ 108.196295][ T253] ? __pfx_kthread+0x10/0x10 [ 108.201316][ T253] ret_from_fork+0x514/0xb70 [ 108.206078][ T253] ? __pfx_ret_from_fork+0x10/0x10 [ 108.211280][ T253] ? __switch_to+0xc89/0x1420 [ 108.216006][ T253] ? __pfx_kthread+0x10/0x10 [ 108.220698][ T253] ret_from_fork_asm+0x1a/0x30 [ 108.225517][ T253] [ 108.228569][ T253] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.235874][ T253] CPU: 1 UID: 0 PID: 253 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 108.245270][ T253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.255356][ T253] Workqueue: events_unbound cfg80211_wiphy_work [ 108.261655][ T253] Call Trace: [ 108.264960][ T253] [ 108.267919][ T253] vpanic+0x56c/0xa60 [ 108.271956][ T253] ? __pfx__printk+0x10/0x10 [ 108.276582][ T253] ? __pfx_vpanic+0x10/0x10 [ 108.281179][ T253] ? is_bpf_text_address+0x292/0x2b0 [ 108.286505][ T253] ? is_bpf_text_address+0x26/0x2b0 [ 108.291759][ T253] panic+0xc5/0xd0 [ 108.295535][ T253] ? __pfx_panic+0x10/0x10 [ 108.300005][ T253] ? ret_from_fork_asm+0x1a/0x30 [ 108.304982][ T253] __warn+0x315/0x4c0 [ 108.308993][ T253] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 108.315021][ T253] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 108.321047][ T253] __report_bug+0x276/0x570 [ 108.325613][ T253] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 108.331639][ T253] ? __pfx___report_bug+0x10/0x10 [ 108.336717][ T253] ? kasan_quarantine_put+0xbb/0x1f0 [ 108.342056][ T253] ? lockdep_hardirqs_on+0x7a/0x110 [ 108.347304][ T253] ? netlink_broadcast_filtered+0xd9d/0xea0 [ 108.353241][ T253] ? kmem_cache_free+0x182/0x650 [ 108.358228][ T253] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 108.364260][ T253] report_bug+0x16a/0x220 [ 108.368636][ T253] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 108.374825][ T253] ? ieee80211_mgd_probe_ap_send+0x499/0x560 [ 108.380848][ T253] handle_bug+0x9c/0x200 [ 108.385137][ T253] exc_invalid_op+0x1a/0x50 [ 108.389699][ T253] asm_exc_invalid_op+0x1a/0x20 [ 108.394591][ T253] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560 [ 108.401219][ T253] Code: 4c 89 fe 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 6a 57 f6 e8 58 95 6b f6 90 0f 0b 90 e9 37 fc ff ff e8 4a 95 6b f6 90 <0f> 0b 90 e9 c0 fc ff ff e8 3c 95 6b f6 90 0f 0b 90 e9 3c ff ff ff [ 108.420855][ T253] RSP: 0018:ffffc90002e47a70 EFLAGS: 00010293 [ 108.426957][ T253] RAX: ffffffff8b5b7d46 RBX: ffff888057480ec0 RCX: ffff888020743e00 [ 108.434987][ T253] RDX: 0000000000000000 RSI: ffffffff8e4b425c RDI: ffff888020743e00 [ 108.442991][ T253] RBP: 0000000000000001 R08: ffff888020743e00 R09: 000000000000000c [ 108.450973][ T253] R10: 000000000000000c R11: 0000000000000000 R12: ffff888057481e70 [ 108.458961][ T253] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888057481920 [ 108.466943][ T253] ? ieee80211_mgd_probe_ap_send+0x496/0x560 [ 108.472954][ T253] cfg80211_wiphy_work+0x29e/0x420 [ 108.478089][ T253] ? process_scheduled_works+0xa20/0x14e0 [ 108.483859][ T253] process_scheduled_works+0xa8e/0x14e0 [ 108.489432][ T253] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.495435][ T253] ? assign_work+0x3cf/0x5d0 [ 108.500036][ T253] worker_thread+0xa47/0xfb0 [ 108.504648][ T253] ? __kthread_parkme+0x71/0x1f0 [ 108.509605][ T253] kthread+0x388/0x470 [ 108.513687][ T253] ? __pfx_worker_thread+0x10/0x10 [ 108.518889][ T253] ? __pfx_kthread+0x10/0x10 [ 108.523491][ T253] ret_from_fork+0x514/0xb70 [ 108.528101][ T253] ? __pfx_ret_from_fork+0x10/0x10 [ 108.533222][ T253] ? __switch_to+0xc89/0x1420 [ 108.537913][ T253] ? __pfx_kthread+0x10/0x10 [ 108.542519][ T253] ret_from_fork_asm+0x1a/0x30 [ 108.547297][ T253] [ 108.550481][ T253] Kernel Offset: disabled [ 108.554802][ T253] Rebooting in 86400 seconds..