last executing test programs: 2m27.427264392s ago: executing program 4 (id=786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24040088) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$sequencer(r4, &(0x7f0000000000), 0xca80) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.974647744s ago: executing program 4 (id=787): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xd0, 0xfd}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x4, 0x3, 0xf4, 0x20, 0x4}, 0x27, &(0x7f0000000180)={0x5, 0xf, 0x27, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x1, 0x0, 0xe, [0xf, 0xc00f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x64, &(0x7f0000000300)=@string={0x64, 0x3, "7ddab1012bc3b4d05489edc95fd285b72197c82f9119f433fbb184da6689389c2e0eaca7dc748be97add332cfa70ed423de175c59d65ffa0998523ada7e8937f3e999db86de3890065d7b1b9fc439d71a7db77859e76e6c607d59205c7acf29c96e2"}}, {0x4d, &(0x7f0000000380)=@string={0x4d, 0x3, "209ef01f22f9094330e7bb9ad5e92cbd98d1f98f06d7d34b0a24a19a3f69197d44b1cb80fdc84fb872b2655aedc84e882570ae4305f6b890f9b4496d1ca1a97746d30c6f6013bc6c1714ee"}}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) 2m19.736309735s ago: executing program 1 (id=798): socket(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x2}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x41) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x20040010) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 2m19.313238514s ago: executing program 32 (id=778): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r5 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r5, 0x567, 0x0, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000001c0)) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d520987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r9 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2m14.755437054s ago: executing program 33 (id=784): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc914, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x200, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000000040), 0x8003, 0x0) ioctl$TCSETS(r5, 0x5402, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) 2m11.701073132s ago: executing program 34 (id=787): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xd0, 0xfd}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x4, 0x3, 0xf4, 0x20, 0x4}, 0x27, &(0x7f0000000180)={0x5, 0xf, 0x27, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x1, 0x0, 0xe, [0xf, 0xc00f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x64, &(0x7f0000000300)=@string={0x64, 0x3, "7ddab1012bc3b4d05489edc95fd285b72197c82f9119f433fbb184da6689389c2e0eaca7dc748be97add332cfa70ed423de175c59d65ffa0998523ada7e8937f3e999db86de3890065d7b1b9fc439d71a7db77859e76e6c607d59205c7acf29c96e2"}}, {0x4d, &(0x7f0000000380)=@string={0x4d, 0x3, "209ef01f22f9094330e7bb9ad5e92cbd98d1f98f06d7d34b0a24a19a3f69197d44b1cb80fdc84fb872b2655aedc84e882570ae4305f6b890f9b4496d1ca1a97746d30c6f6013bc6c1714ee"}}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) 2m6.18425282s ago: executing program 7 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002640)={0x34, r9, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1378bb578bb11a3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) 2m4.248859501s ago: executing program 35 (id=798): socket(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x2}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x41) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x20040010) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 1m57.237976507s ago: executing program 36 (id=805): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r2) getpid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0xa, 0x2c57, 0x0, 'queue1\x00', 0x100000}) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m50.737452859s ago: executing program 37 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002640)={0x34, r9, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1378bb578bb11a3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) 1m50.197802755s ago: executing program 38 (id=811): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x2080, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xe) ioctl$TCXONC(r6, 0x5435, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 1m48.429908561s ago: executing program 8 (id=829): mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$can_bcm(0x1d, 0x2, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r7 = dup2(r6, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 1m46.318549597s ago: executing program 8 (id=832): keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008010200b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ba2000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r2 = syz_open_dev$video(&(0x7f00000008c0), 0x7, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000000)={0x1, 0x102, 0x3, {0x40, 0xffff, 0x5, 0xa}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f}, {0xa, 0x4e23, 0xfffffffc, @mcast2, 0x400}, 0xffffffffffffffff, 0x401}}, 0x48) 1m45.196415905s ago: executing program 8 (id=834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) keyctl$dh_compute(0x17, &(0x7f0000000380), &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000060000007f0000000500000001010000", @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="030001000000020000000000000000002000000000"], 0x50) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) 1m38.211982947s ago: executing program 39 (id=822): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb4c, 0x6, 0x6, 0xfffffffe, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad7", 0xb, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) close_range(r5, 0xffffffffffffffff, 0x0) 1m32.863218044s ago: executing program 4 (id=837): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2"], 0x14}}, 0x20008000) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, 0x8, 0x1) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 1m30.687041596s ago: executing program 40 (id=833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000040000010902"], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50) io_uring_enter(r4, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 1m29.576920146s ago: executing program 41 (id=834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) keyctl$dh_compute(0x17, &(0x7f0000000380), &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000060000007f0000000500000001010000", @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="030001000000020000000000000000002000000000"], 0x50) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) 1m28.858960823s ago: executing program 4 (id=844): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) recvfrom(r1, &(0x7f00000002c0)=""/187, 0xbb, 0x2102, &(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6600, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r7, 0x141601) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m20.999282486s ago: executing program 0 (id=853): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x7f}]}, 0x140}}, 0x844) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) close(r6) 1m20.686797016s ago: executing program 1 (id=842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xd228, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x8, 0x2, 0x3136564e, 0x9, 0x9, 0x2, 0x5, 0x5, 0x1, 0x2, 0x0, 0x3}}) 1m18.78327689s ago: executing program 0 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x410240, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280)) io_uring_enter(r5, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001200010400ffffffffffffffff00ffff", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x24046004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x13, 0x3, "91abc12404cf378042f26c43f91f68"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x90}}, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r8, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x5000}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000608000440000000140900010073797a30000000000900020073797a32"], 0xcb}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0xa2301) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r10, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) 1m18.294183011s ago: executing program 0 (id=858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock2(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000002c0)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x9c, 0x88, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) 1m17.873214008s ago: executing program 1 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m14.871009623s ago: executing program 1 (id=863): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x121301) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008044}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000640)={0x2, 0x12c, @ioapic={0x2000, 0x73, 0x2, 0x2a, 0x0, [{0x94, 0x4, 0x1, '\x00', 0x1}, {0x6, 0xe5, 0x3, '\x00', 0x5}, {0x4, 0x0, 0x4, '\x00', 0x2}, {0x97, 0xff, 0x8, '\x00', 0x4}, {0x0, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x1, 0xb, '\x00', 0x2}, {0x7, 0x40, 0x4, '\x00', 0x7f}, {0x6, 0xe, 0x2, '\x00', 0x8}, {0x21, 0x80, 0x1, '\x00', 0x7}, {0x9, 0x40, 0xd8, '\x00', 0x9}, {0x41, 0x3, 0x3, '\x00', 0xff}, {0x7, 0x8, 0x78, '\x00', 0x8}, {0xe6, 0xf0, 0x6, '\x00', 0x6c}, {0xba, 0x8, 0x77, '\x00', 0x7}, {0xf9, 0x90, 0xf1, '\x00', 0x8}, {0x9, 0xff, 0x4, '\x00', 0xd7}, {0xcd, 0x1, 0x0, '\x00', 0x8}, {0x53, 0x6, 0x80, '\x00', 0x7}, {0x6, 0x2, 0x0, '\x00', 0x2}, {0x4, 0x7, 0xff, '\x00', 0x8}, {0x5, 0x4, 0xfd}, {0x2, 0x3, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x64}, {0x8, 0x9}]}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 1m13.587082782s ago: executing program 42 (id=844): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) recvfrom(r1, &(0x7f00000002c0)=""/187, 0xbb, 0x2102, &(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6600, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r7, 0x141601) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m12.508960385s ago: executing program 1 (id=867): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x7f}]}, 0x140}}, 0x844) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) close(r6) 1m10.1710568s ago: executing program 1 (id=870): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) r5 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000003c0)=[@ioring_restriction_register_op={0x0, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_enter(r5, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2(&(0x7f0000001440), 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m6.734069585s ago: executing program 7 (id=865): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400fa001000f10000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540002100020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000abb89f8bcce5b60011f65bbeda27e33fd585514b8939b7997cbca96e1bf23a88ef24b7ab58c376fea9dc776f51eccf4160899550f4b1b29ecf042d6bea757f8d646016620e5b5d05afb4d687b9937620fe34b375b513316c7a61dba677a5c56c5eae05883eccca5cc9ac3caa0bd35f5bc"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x401}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x3}, 0xfffffe06) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602200000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m3.131945227s ago: executing program 43 (id=858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock2(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000002c0)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x9c, 0x88, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) 55.091352369s ago: executing program 44 (id=870): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) r5 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000003c0)=[@ioring_restriction_register_op={0x0, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_enter(r5, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2(&(0x7f0000001440), 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 53.584327783s ago: executing program 2 (id=892): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r5, 0x2000, '\x00', 0xa, 0xffffffffffff8003, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x9}}}}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r6, &(0x7f0000000480)=""/177, 0xb1, 0x21) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x220, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x840) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1}}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)}], 0x1, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 51.574610513s ago: executing program 45 (id=865): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400fa001000f10000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540002100020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000abb89f8bcce5b60011f65bbeda27e33fd585514b8939b7997cbca96e1bf23a88ef24b7ab58c376fea9dc776f51eccf4160899550f4b1b29ecf042d6bea757f8d646016620e5b5d05afb4d687b9937620fe34b375b513316c7a61dba677a5c56c5eae05883eccca5cc9ac3caa0bd35f5bc"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x401}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x3}, 0xfffffe06) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602200000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 50.781855679s ago: executing program 2 (id=895): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write(r0, &(0x7f0000000540)="87", 0x1) 50.282949656s ago: executing program 2 (id=896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000004) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r5, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 47.714613839s ago: executing program 2 (id=899): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r5, 0x0, 0x0, 0x26c) 43.154731936s ago: executing program 2 (id=902): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001580)=ANY=[@ANYRESDEC=r4, @ANYRES64=r3, @ANYRES8=r5, @ANYBLOB, @ANYBLOB="8458141fd960d81fccc41c63264321340efc56756cbf84755f7c8a7664b09b9f9b9ecef6ef6c0c862843c74afd18a9", @ANYBLOB="d9f0ab178d12a2171bd638ab248651b072be13d1ca9f87aecbae77bdafcfe86b98c932c988597f447141d1b61bb03b41118b7e66a49d24b42e0bf0b084be945d5c72b686fd3d86fa815e88c4c8328bf4a41e86d02165ead54c346f290cc22eea7a8da41664418c63fabfe20e43340732ec75ceb70d0c529f50ace5391c59130f2388ddd80385765c422b24cfdbb958a3b115edd0a9f391d7dc58e54dd3b32556836b748f007c89b6059c70fe1bf24b25a3b81c892927d85216aa18622cd84959e122627c4525413201eb090a4d9e7c2fbcd18dd6f6f97ab3fa37c34eb1d753b0f9448c9a59901a39f8266f4fff131fde486645f67f85f9c9ef4fb6c51423ae221850a010e63b820fd7eab3e49cfa84bf566cae34924b26a61ea071945f7c702975a3c92090c4e5db769fac6cd939fea68ceb5f3b4ec34afe27473e666b9dfb4d258fc8ee9e87158238739d50ea934db3261aa919402d71d931850cb8f7fd5510406158202c8e8a3185b0282c50c78c20711260eea72f8820d55c3e36a9aaaeb456b79b778abeb6bac7e3bba7db383d5a05144c6280ce635306c34ecc427d2b6d24536ac184e18de43b1d0957f60b643fde33d461cb58e03b4a44825d8912b72a3afb72d85c7989a9a2b3875e9eb27f51c4774c04795cd39997888ae4e0057c6104bf546ed9de9f5799423bf2d30aeb728a591dab671ead7e5f3c47a35dfb69954b08ebbb55fb0f6f2e9feb5560b2f1a512855d27392903cc0cef93567996488c67183f062d6e56ccd81aa98e9c6aa4483fdfaacc5a4f3ed700fd2386622417af0801ecd6c99d28852fca9d9402e5a59a84893f7658cd5dd6f17a2b29234e7f27a4d232372ce3458daf6a31313e49adc7cf533223c0b43d55e0fd6dd7fb393224e9a3dce8472673fa61a7125ae7e5ecbf40d51d3f14ae72e4c6b8943f656f9699cdbb9b499f06c9e5b18e8816fecd71d08baa238c276eb6da18aa47151a24f5decd834938a258bcdafb2c52c5919044a4a009b27fe5af19d95687eca3b8b1c2a2d9a250508af0b915c4bc58659d38a92e77f190fe626bb57caf7f8f0ea6f8606fdefee81d27f0d4b21acf3a6395a9210c4d689115e22e4e26194601182ea90cd3c87401a34c7a5c05b716fae1f4f6c5045df4ee35ffa72250049c685b65ef1b9d8dcc7a045d758937fd704d2399820360164ef76b5bc36617d5e58fb1b7b108bdeb249a26b2dbdd34c1a45ec724a70ed6935306c482528a632e21fe91adaf72236a9874c3e7a58fb3f48c6a4610f9dfbf1049df2aac92259b429f0d7df7e333124f09c3bcc62a31aa5763087fd3b323bdb377d5dc7711e0fb6abd47801453ddb231e4cb501ab19f3c8a41d797dca64466f12e71f1672b7892363963fc7040459b5b3b803d3d9c69e0bd112ec8dcf50cc7b72604d11eed43bfd912889ae3c9a6cd81e1b314dfef4ff09ab8d6851a0a383fa2b260b376072b1ef79d2cc4764dd45b07c040ed8e6bd7f0d9a0a59fcbadfbd04b14797bff2014f48d41fadae67157c9c4b163c8149ffebc923f8f3b655161a5f7aa77e1220af3e9734513aa1e02174f6801094d676b3295b7c03bf064a9561a43484bd350b6a7ea2455fad85d6d3376eed2593333d81f627ed7af9bfb52f7b2021564cf13257d90b11813cd6b28a9e8c0fc20a9c8d5175466df3410639c7db79b8f7f1c8a24002224838d2ccd52dac78fe6af01bfbc9e8f659cee86c9c21bac0664078b0457078039f718d2d10fcb2e0acd17b918db26da3949944ae25d008670797b95ecaf802f9851519437738eda835270a4d7e8d3f54e6129866754993177a46dda8296ca689be1cef1aa0fe905c3ecea030b32e2264b4a62be54bbf27464ba3f269da8452d77c6445d518e50d5739b64036bb835d9b0e6a79713909fcfbb54b0c533c91bae3b214e3534c6c040a4dfc79fd2f6bd0eb9aea8a954400f65b7f916eb7bb6914cdbb8d9699a707c1f8f44eb984dadbb5f001e36efce2372916bdc0858da562923fee632158a16ef857e7d19c2449d5d7b00fe3bac4f6e88bf36b8687b6c2feded3af590ecc26b5a68dc36b531f76758c1c7834bb1d4dc286d1b95ab3254491fccb1642d9c353be586457a28ee31940afc0ca43e29ccb0cedc78e9f7c34c3e77687a47c78b2d156f4f8f343641bf1d5ad893a1d024475b304252592ee7b5b7e33eb395e23eda4407cb1642f5888c22d254aa7279aa97ee76da3335dd522f84c41960ae46d2ff9a564db0e5f87cc20688023ea68e21525e5508fb776c83f1ae780feb38808b61b95d20b06e6890b583bab56712a768406c0663f205933da7fe15b5abe6721ff6289b1725f7e7a55752a66aed8158a4179541c73308bfebb962a149a1fbf81d6026ed3643cfa51cf7d912bb638d229867ecbce72ff55e3bcc3886d1c014a95aaf66bdf1c13f05d0e79fc4a4ad75e6f59619869db1280906e79f527d16c25ba91f0853174074c8de0b74ab9da460ff29ee2deee89ba9493b14ae24bc142071aa5275998fd89892c0986393dd48af582a28abcc0bdf0e51c066c03f7f5c20cd9e762223bf28025beea3534749daa21cab01f5f10d301ecef9df94a20c4cc2454aba631d80a84aeef62e565ffe63f4f92830ff20c7c72b7be42c43362154903bc694e139d95a6b1c446bc4a3c77115bfe7dffaead5c51e49eb2680ec5596350351782971c94fdd089f70892461ff0ea5c7dae99d00d2641e844d9d801e3031deaa32676ab463980b2ba4ef3b522f49920badfff5a88bf395d8e613874dddb1c3565e272c60c7f79531328a473f8069bdfd9abfcc74ead82b808678eb9f5d86df8065133815e29dc157b3a3ff529b4cb12acc9199bef449cda3353498aa84d776893fdeb26c65b56b8ed8722a25ba50cdc019da35d0474114feef8550cdd3d99b1a968214a94195404828be820702a7d2a27b9f8f3e54d434b037c320f8ad083e51e7e67b3687580d008eea90afb08bec12fb883f9569a00e3a34a5bfd9462a80273d9f4faffbfd6d3a01861bcac225b48321c4238c338952d1fc4f03565c5354992ce6c50118bba6d60df8d596c80fe09b40ee04a5fe2d30372435a3851045e1a46130364de6cae1e08bd6a0bfc5bf533109886f662cd01cfcd91cfe278aafd4f3c50b20a617f3834b5ca0c8ef5f851a03c3648b1f655a353c2f483ff225f288b42536d6f16cd27d83d32de3d820b62bf616a7db6b1da2887ab955eca04d946a1150b9c8dc8e9966c57c47f0fc38a76fdd76fcc6e262c4f138c65f44ea3964aa7c27d7ccf6104d12fb9eb32afe43b9ce32331c1fc5d14a9b28e87a3c98c95e50f1aaceb6d0b31db34024e361c559ac312d7fd5ce17e0d19422afb3a6a4cf22353e889418182efc60a69ec78207889e55a8d20aab2fbe4dbdd3fa410677ea90c42ba545844c8e8e77f6254398ddf879fe558e1ef3f61fe6b5866ab00422590e5a9afe5d6facf0ed245e8d83330779096e11a482f8fe7961ae0e24c2f7f54f0085e7134362cad1481588c17de36f3d4a97b4eeb0e0e6c561dfa9cb48f65f2463d6922d352edafd6efaa5c654aa3e01cbba629dc237a8558b56cb21544b140aff615d5e805b3e0429cd2c69f5a71ceae0a01711456253d023724cd80495cdadfcfece05a35c8dd9f7f523c30d9fc454f661453bf34cb7ce3bce987489528785223934456c32026292a14ecce7cdd7e57b881d83448daa1980c1e874bd8ee59cd036710c324134cc4c5f6d95d9d861f49ce34e19bd64605a42fb4f2cef9556e024b9eb2ae6b3ecc4fe95e6927d48081fbd323fcb3583d920c33fafb9463c46e537cbe53b0a557b4e2de74370fa5fb5ad452055233ef3d84cfe2758034c5d7931f930abb1f431f4fbe79cb0943f8cb91a0384a6ac36d09553241a11d7c4d440c291e3c49bb4b1f8a16c37eda2a0debf6f05fe168032db2c082da51fdb69d9ba84e26f1c93d4101d72376be2a1c11310d35d316ae6cee6870f2026a649671c32ccbfd4652232ec7947536eceeda0f3f452c700c13390c2c2e80f33246c0200c5b7dcab877b12e5b8894cbfa2c55862733db0184fdb20d850a4eb0c5ba4b9881b6c4f8dd8d64c211b4480453e2f64b9c68d0caead6dd214a3f8bd8525ccd9c411c59f190a25e5b374ad6c3e990256eed80faf56ed084aac843760277e61ce1511666fafdd0e810637f6d30364921a0b96f317654abb0a21354ce34f96f6179f2fd7e383a9e93b5621d5ada5c61f8654e61886a202b65c23ef41b9bb97f19ab7774adf2f29eb30835e24cb1b3f5570a2cdbac1e672e38faad1df56f2a19da7c237cec99ffc74efdfcb192c8b33a20e7053c3f2f3149e8cd28a7f21458fa499b76310584544ae4898b8d024a8e7242dd7597c6473c3150318b1da26fd3916e4001857295a2df6616bbf30e2b4f97816410190723f4849b3ba3a44df17e1f6116c6d739f0e77d0365fdc79711875504bd573fc0d679f1e399ff13fb6cc1e43c43267c38bdbb350ca5fee9beee148336b9e180827e454fe729c82b07c05b22355dd73fa49e39c593a4c0f17d9aff3652ea6fb8def8d32219c2c20b8b8bc78212000a8662a88727cfc3fee82ab50e46fce7994cbbb329d664e9cb063d0fcd1b6b4dc340ad172cce96948e8eed79f4e1439a3d7347c1ffa5f6f09a422637ad48591b7870585a7227c380af8fec799639cfd5d6f7def1ec33a67c82bca41848e800088a24df49ea408cf80ce721bd1dacf3053d26694fff17b7eddecdcea3580abf86e99ea5f290f77c7fbba1e1213a0d9f5a36f1e5640da5fd28e73edd6028f6352d1c5e4ff8ed31d5ad12d72b0c2b9a309213fcba409f445b7be6ffd9f1862dd6d7da132d17389d10bb3e7"], 0xa8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x80) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x2, @pix={0x4, 0xc1a3, 0xa0363159, 0x5, 0x5, 0x1, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x4) 40.839243648s ago: executing program 2 (id=905): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_create(0x0, 0x2) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x7ffffd, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x2002, &(0x7f0000000300)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01864c1, &(0x7f0000000980)={r6}) r7 = syz_io_uring_setup(0x835, &(0x7f00000009c0)={0x0, 0x679d, 0x400, 0x2000006, 0x368, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000340)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6821d1d51e1d3fcdcf25b03d68b17f4b45d689875d4b26bd64400a81cb500000000", 0x3a, 0x2400c0c7}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) accept$alg(r3, 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r10, 0x0) 40.657171171s ago: executing program 6 (id=906): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000011c0)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0x2}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x100, 0x31384142, 0x0, @stepwise={0x0, 0x400, 0x0, 0xc, 0xfffffffc}}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ff"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 38.578881904s ago: executing program 6 (id=907): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x490, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x438}, 0x0, 0x12f4c4729764ea1b, 0x1}) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4000010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 37.799111805s ago: executing program 9 (id=911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) lseek(0xffffffffffffffff, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x67, 0x0, @loopback, @private=0xa010102}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x8, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x6}, @cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r5 = getpid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r7, &(0x7f0000000000)={0x10}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') lseek(r8, 0x8001, 0x1) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r4}) 35.905185346s ago: executing program 9 (id=914): socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000019080)=ANY=[@ANYBLOB="000000000000000066cfcf58387764911252f4e373bd784fe3e8decd9a83801f29cf6110c6f1d421b2be71517a20eae6e55cc8291539e5df1c2241b069f66e37d3967c6b740468bde627cc0fc79a33428d50f9d31745746471d04d216ef98c841bc634d0c7672b75c7ef4f279a16494e025f0d00f5964bd0eb2b51e75880c171483493569bb0af8b3a207815ed0a5bb32b0a1e2482bf8d7f2c8fb40bd3636059004a00ea2d3f552b48475d761c2f3152b3c2147c26fa0f5e0893f4f22b03d62f1971092293f85baa008809f679930d4513713200e74122c9128b53ac1e2f485c04a32e0b8ff44da061b5545699af2a28923a7938f04986d163c1704340044fcc98"], 0x8) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x9, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 35.228793535s ago: executing program 6 (id=915): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000007110089600000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000500010000000500040001000000140003006272696467655f736c6176655f300000"], 0x60}}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r7, 0x29, 0x35, 0x0, &(0x7f0000000140)) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 33.573317555s ago: executing program 9 (id=916): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(0x0, 0x8001420, 0xffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0x12, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x5, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x80000001, 0x2, 0x3ff, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0x100000001, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0x8, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x7, 0x1b485fe1, 0x7, 0x7, 0x7, 0x9]}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000200), 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe040001000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000840)={0x7, 0x0, [{0x0, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x8001, 0x4}, {0x80000000, 0x4, 0x3, 0x10, 0x8000027, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffff7f, 0x5, 0x8}, {0xb, 0x12, 0x1, 0x7, 0x200df4, 0x401, 0x80000001}, {0x0, 0x2bb, 0x0, 0xa, 0x3, 0x3ffffe, 0x400}, {0x40000001, 0xa, 0x0, 0x5, 0x10000, 0x8, 0xf30b}, {0xd, 0x451, 0x1, 0x7ffe, 0xffffffff, 0xfffffffc, 0x4}]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x7ffffff3, 0x8000ffff, 0xa, 0x1ff, 0xc5}) socket$inet6_tcp(0xa, 0x1, 0x0) 33.514348432s ago: executing program 5 (id=917): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0xfffffffffffffe71) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0x400b601, 0x20, 0x5, 0x38f}, &(0x7f0000000240), &(0x7f0000000400)) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0xff, @dev={0xac, 0x14, 0x14, 0x2d}, 0x11e, 0x0, 'lc\x00', 0x6, 0xfffffffe, 0xfffffffc}, 0x2c) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x40000, 0x6, 0xffffffff, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x2, 0x0, 0x0, 0xff}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xffffffffffffffa0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 32.598903586s ago: executing program 6 (id=918): keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008010200b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ba2000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x1, 0x102, 0x3, {0x40, 0xffff, 0x5, 0xa}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r4, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f}, {0xa, 0x4e23, 0xfffffffc, @mcast2, 0x400}, r4, 0x401}}, 0x48) 31.590700683s ago: executing program 5 (id=920): openat$mice(0xffffff9c, &(0x7f00000002c0), 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 31.187191292s ago: executing program 9 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de2842110000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0xfffffffffffffff8, &(0x7f0000000140)={0x1b, 0x7, 0x80}) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000980)={@multicast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "4ed2ff", 0x10, 0x21, 0x0, @loopback, @local, {[], {{0x4e20, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x3, 0x3, "7f0066", 0x14, "398731"}}}}}}}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r8, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40c8001) 30.454303744s ago: executing program 9 (id=922): keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008010200b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ba2000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x1, 0x102, 0x3, {0x40, 0xffff, 0x5, 0xa}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r4, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f}, {0xa, 0x4e23, 0xfffffffc, @mcast2, 0x400}, r4, 0x401}}, 0x48) 30.251620719s ago: executing program 6 (id=923): r0 = socket(0x2b, 0x1, 0x1) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x98, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3c35}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/18, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x10f, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x200000ffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x3, 0x2000000000000013, 0x5], 0x80a0000, 0x2460d6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 29.327863124s ago: executing program 5 (id=924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 28.001997981s ago: executing program 9 (id=925): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) 27.816177373s ago: executing program 6 (id=926): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9, {0x36, 0x3, 0x400, 0xfffffede}, {0xfffffff7, 0x4, 0x8bb4d08f, 0xfdfd}, {0x2, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 25.52778335s ago: executing program 46 (id=905): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_create(0x0, 0x2) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x7ffffd, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x2002, &(0x7f0000000300)) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01864c1, &(0x7f0000000980)={r6}) r7 = syz_io_uring_setup(0x835, &(0x7f00000009c0)={0x0, 0x679d, 0x400, 0x2000006, 0x368, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000340)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6821d1d51e1d3fcdcf25b03d68b17f4b45d689875d4b26bd64400a81cb500000000", 0x3a, 0x2400c0c7}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) accept$alg(r3, 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r10, 0x0) 25.097759181s ago: executing program 5 (id=930): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x80000000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f00000024c0)=""/4132, 0x729, 0xd1) shutdown(r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_open_dev$radio(&(0x7f00000093c0), 0x1, 0x2) syz_emit_ethernet(0x1bb, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x1ad, 0xfffd, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa6}]}}, {"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"/377}}}}}}, 0x0) r5 = getpgid(0x0) syz_clone3(&(0x7f0000000500)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_pidfd_open(r5, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x2) landlock_restrict_self(r7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000400)) pidfd_send_signal(r6, 0x21, 0x0, 0x4) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000ec0003000b000000", 0x24) 24.711140334s ago: executing program 5 (id=932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="4c494e453120274d617361c0bfab97921570498274657220436170"], 0x33) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded', 0x141000, 0x41) read$watch_queue(r4, &(0x7f00000002c0)=""/37, 0x25) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0x932, 0x59565955, 0x9f71, 0x8, 0x2, @discrete={0x49, 0x6}}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) ioctl$BLKDISCARDZEROES(r4, 0x127c, &(0x7f00000000c0)) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0x80, 0x16, @MIDI_NOTEON=@special, 0xee, 0x8}) r6 = syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1}) r9 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x50, 0x0, @fd_index=0x6, 0x4, 0xffffffffffffffff, 0x2, 0x6, 0x1}) io_uring_enter(r6, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 22.39053348s ago: executing program 5 (id=934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd_index=0x6, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x2080, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$TCXONC(r8, 0x5435, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) 18.78715176s ago: executing program 8 (id=929): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x1, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00'], 0x2}) semtimedop(0x0, &(0x7f0000000240), 0x0, &(0x7f0000000780)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) readahead(0xffffffffffffffff, 0x100, 0x96) socket$packet(0x11, 0x3, 0x300) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f0000000280)=[{&(0x7f0000000140)='15', 0x2}], 0x1) 17.241627019s ago: executing program 8 (id=936): socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000019080)=ANY=[@ANYBLOB="000000000000000066cfcf58387764911252f4e373bd784fe3e8decd9a83801f29cf6110c6f1d421b2be71517a20eae6e55cc8291539e5df1c2241b069f66e37d3967c6b740468bde627cc0fc79a33428d50f9d31745746471d04d216ef98c841bc634d0c7672b75c7ef4f279a16494e025f0d00f5964bd0eb2b51e75880c171483493569bb0af8b3a207815ed0a5bb32b0a1e2482bf8d7f2c8fb40bd3636059004a00ea2d3f552b48475d761c2f3152b3c2147c26fa0f5e0893f4f22b03d62f1971092293f85baa008809f679930d4513713200e74122c9128b53ac1e2f485c04a32e0b8ff44da061b5545699af2a28923a7938f04986d163c1704340044fcc98"], 0x8) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x9, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.518520131s ago: executing program 8 (id=939): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)=@buf={0xf4, &(0x7f00000029c0)="aa2b740d6ca0906302e940664f2701a6d8473e3c84f9605557be64cca0de3571ea8495ce633fed72685c55ad647a833f464c0bb3699da37a66b15784e05157f2495218dfd7858ea1c388dc4b30a6d0c7059465c257149a2b7e315487b1cd6a9f63a9e2c0ef18c41a07325f8826324cafcc1739f23f44fab0ba4729e18f0c22da6626c64077d5fc8243d69feb0eacc9d49db8a43135fc362dff2a9ab34c39f5b9db2327d097b365163205e7f3bd3d666361182bfde3fc92ad2295367d01863453539fff221d433c235f9d3d318a9fd868aeb6ffdca5b13c625866b33730c4f1e38113904b3c7325529d44c3403f12e49796f4d059"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r4}, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x10000000009, 0xc, 0xb, 0x7e, 0xbc, 0x0, 0x10005, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x2, 0x6}, 0x6, 0x40}}}) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x8f).&{]{(#\x00', 0xfffffffffffffffd) 12.561174535s ago: executing program 47 (id=926): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9, {0x36, 0x3, 0x400, 0xfffffede}, {0xfffffff7, 0x4, 0x8bb4d08f, 0xfdfd}, {0x2, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 12.518321647s ago: executing program 48 (id=925): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) 11.22342799s ago: executing program 3 (id=943): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000574000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="66ba6100ecc4c3857b81a65b00000c44defac4c253f72a66470f3808cfc42391cf6000e16544812f00000000460fc7b47dd2000000430f01b5c04f000066b803008ed8", 0x43}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000980)={"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"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 9.535381963s ago: executing program 3 (id=944): socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000500), &(0x7f0000000080)=0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sysinfo(&(0x7f00000015c0)=""/4096) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@rand_addr=0x64010101, @remote, @empty}, 0xc) socket(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}]}}}]}, 0x44}}, 0x0) 7.965162227s ago: executing program 3 (id=945): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xd1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000300)={"597aebb3200720801b0e6ba1c3c9395fa6939c9dfe61db731224a32e0e42a97ae54fa5934b3561c8b03878ea755360e1f5398d1ba0cabf6cf8281c713f1e24f6703e7b2139576f37f3343e77d5a7cc22391cd2cdcb81ce51eebfc55762fb866b1c78576c01006aa946b4bc5c06fd6e52e796c7e52630b4abf83a601b07f7178f50c4c9c50a210675d61beb4e28c375f45f347b81fc61fc31b0d3b2bca1ddda53e9f1999cc99ba57f5f6f0674748cc787ecf4cc36db31b276f802c8fab94774fc2370e62ff40f62ba4d27133b1529efbfaea33f7e3c24b64c38b64c2002349c8a1e2dee73e24eb570aeeeba66d4d5f2ffe4b52bc0e341fd3772ac3e465da234d70e806555d345ac3b45dc1c229c8e127e1fe544b70bbad8f3b79e5c0562b10958531e17656b1ab6ef9c7352b709c2a19b3bdd33613c9ef2eeacafb51d090a45032a89ad46bd2859bce48ae4f90f977d83d39db160f6c075af0c77130e5429f8b5e31569d78aa49f670474a4430357acfe713640fdeed88971b78b69b1652bd6e1d6ef4c3d9eb2e32871efaa26bae28839c51799f881fbebd0dda92b58bff3429d89641d35c0d4818137038f7463ba658e8cfa8c504e9c0833d41ae483f2d64aa6ec60199e2eb121c90a8a4956b4121504a1913c2052b33500fc610ca396fd549de3462c2e6a7164c931fd7900707f8ab4498bbad75109d28f421fb7a1d276e15a497a385c23189b33d4e02efb94670e07a03a4908b990a925542154c86694d84c65bac5a0e9e2f2e36b95aac26d64447ffd828f831380bc6eece3db2c18693d29b59760ed2ebabd7b9bf874126a7f08205c81a0df5ff169b236cf3d05002f1798913f3f75292f1f1c42a9151170309d0bda87447719341e85b7aa07f07965205c37ea21b5504eb97eab44a70a7b2597ce0af2608c5cc2a85366ec11e47e2a197c6e038f6f9f4d1d25edb077f6d98d44305c4ebc803047409dfa8e6f93d9ce63ab434957924dbdefefc99bff0bb4a68142e04c7c20954541728ed4505377ba88ec208ce064e3c8a7943577e20804932e0571a902cf0c45c54dbacb9968ed15fee9234fff2f631990bf840f5693d285ecd94688c63a251dd2e2a7d0049ee2c45c1e695b87711cf5a6d31414d0f708e5d0fc03b2f37becf1e3267ff6b4d740c2b5d905ecf572d2c9f06b5da649af020b6931dfe057442e2cf12f28d93fd1b49f5716a0c2d773250c2caf8f52f2da9412ae377ed6f74a2f0123d6bb9fae78c37a88f029f1ecaf91d023bbf90a6110b21a015b3a6a4b5e54433c662e6162b114c128c158b8391eb5b57f8cdd4be5207bfbaded1a2063852f15fd2a9d00becc20d2432846c6254625d0af44119fd273ea85ccd4e18e47456bd72ea67a334d65368a8858322d8a1bd2786eb36138fa0b3600f44d03ba84615fcf998500"}) close_range(r0, 0xffffffffffffffff, 0x0) 7.005799433s ago: executing program 49 (id=934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd_index=0x6, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x2080, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$TCXONC(r8, 0x5435, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) 5.808423043s ago: executing program 3 (id=947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d6405000000000075040000f1ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x51, 0x0, @void}, 0x10) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) r8 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 5.538908186s ago: executing program 0 (id=942): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, 0x0) 3.689529157s ago: executing program 4 (id=941): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r7, 0x5452, &(0x7f00000013c0)) sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x426190cdb91ca185) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r5) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.484101616s ago: executing program 3 (id=948): openat$mice(0xffffff9c, &(0x7f00000002c0), 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.281353953s ago: executing program 0 (id=949): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000019080)=ANY=[@ANYBLOB="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"], 0x8) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x9, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.561301163s ago: executing program 3 (id=950): prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x274, 0x1e, 0x109, 0x100, 0x0, {}, [{0x140, 0x1, [@m_ctinfo={0x90, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x64, 0x6, "0bc408e4219bf6823f1b2fa51f5db228cd1d0ed0fd90f572632d4f4351a96b89fa261b46a121e28acbf8d7337a88a5d70e296d0dd8f82da5ec4a702068ab96c075f39365fc28af90f4ecaeb5b4c7b140206bee61483439c84113841a2d6c9f86"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xac, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x50, 0x6, "35026dd8fc7fcd97acd1f806de68c98b06d9539c66619cafe2c0c542579e547558cd697e12e6371dc21ec0c23b529d0d7a16f2956c7d618bba458a1c30a2e86f3ded4506de7ea6c499c407ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x120, 0x1, [@m_connmark={0x11c, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x200, 0x1, 0x7, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200000, 0x2, 0x4, 0x100, 0x9}, 0x4}}]}, {0xb4, 0x6, "9c0663ab5c836e1391f89043030182ba65173e9c449b97cc9460faae360d3464a0730fa96d0f7deb5f720ad4e2c5c34964fe0c24072db789abfe8e47d727bf6cc31e79d43a060515f2fde0f701e3ab6b917c09ea5fe4620344de417ae8ecfe2aa88a0a7f805c32d0c2c6e24340429007536d317d889426605d6aa261aa20f303ad7b9e31c10d544b9bff881d37925180a63a835d6151442aa593d33277c5743a61b6d39f0c4330ead540ff0016f34d49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x274}, 0x1, 0x2b1e}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r4 = io_uring_setup(0xe60, &(0x7f0000000000)={0x0, 0x6b7b, 0x1000, 0x0, 0x1bd}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000003080), 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 1.107891207s ago: executing program 0 (id=951): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x10000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="e2ef7b486e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x4000) close(r8) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 1.062367696s ago: executing program 4 (id=952): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20004ffc, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05400000000018"], 0x230) 0s ago: executing program 50 (id=939): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)=@buf={0xf4, &(0x7f00000029c0)="aa2b740d6ca0906302e940664f2701a6d8473e3c84f9605557be64cca0de3571ea8495ce633fed72685c55ad647a833f464c0bb3699da37a66b15784e05157f2495218dfd7858ea1c388dc4b30a6d0c7059465c257149a2b7e315487b1cd6a9f63a9e2c0ef18c41a07325f8826324cafcc1739f23f44fab0ba4729e18f0c22da6626c64077d5fc8243d69feb0eacc9d49db8a43135fc362dff2a9ab34c39f5b9db2327d097b365163205e7f3bd3d666361182bfde3fc92ad2295367d01863453539fff221d433c235f9d3d318a9fd868aeb6ffdca5b13c625866b33730c4f1e38113904b3c7325529d44c3403f12e49796f4d059"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r4}, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x10000000009, 0xc, 0xb, 0x7e, 0xbc, 0x0, 0x10005, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x2, 0x6}, 0x6, 0x40}}}) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x8f).&{]{(#\x00', 0xfffffffffffffffd) kernel console output (not intermixed with test programs): ng interface batadv_slave_0 (retrying later): interface not active [ 544.680169][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.680188][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.680211][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.736471][ T5836] Bluetooth: hci7: command tx timeout [ 544.752809][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 544.752842][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 544.873843][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 544.873888][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 544.876805][T11858] hsr_slave_0: entered promiscuous mode [ 544.877690][T11858] hsr_slave_1: entered promiscuous mode [ 544.878216][T11858] debugfs: 'hsr0' already exists in 'hsr' [ 544.878234][T11858] Cannot create hsr debugfs directory [ 544.986449][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 544.986484][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 545.104256][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 545.104299][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 545.213306][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 545.213446][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 545.322081][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 545.322124][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 545.434015][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 545.434062][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 545.542110][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 545.542158][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 545.662101][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 545.662147][ T796] dvb-usb: error -22 while querying for an remote control event. [ 545.675809][T11858] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 545.682588][ T5836] Bluetooth: hci6: command tx timeout [ 545.687942][T11858] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 545.719954][T11858] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 545.739781][T11858] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 545.773081][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 545.773126][ T796] dvb-usb: error -22 while querying for an remote control event. [ 545.882052][ T5920] dvb-usb: bulk message failed: -22 (4/0) [ 545.882097][ T5920] dvb-usb: error -22 while querying for an remote control event. [ 545.992105][ T5920] dvb-usb: bulk message failed: -22 (4/0) [ 545.992155][ T5920] dvb-usb: error -22 while querying for an remote control event. [ 545.999634][T11858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.028083][T11858] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.048234][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.048326][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.074621][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.074719][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.102413][ T5920] dvb-usb: bulk message failed: -22 (4/0) [ 546.102457][ T5920] dvb-usb: error -22 while querying for an remote control event. [ 546.222816][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 546.222863][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 546.332538][ T5920] dvb-usb: bulk message failed: -22 (4/0) [ 546.332584][ T5920] dvb-usb: error -22 while querying for an remote control event. [ 546.443008][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 546.443049][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 546.456245][ T5832] usb 7-1: USB disconnect, device number 2 [ 546.465880][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.590135][T11858] veth0_vlan: entered promiscuous mode [ 546.598847][ T5832] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 546.619233][T11858] veth1_vlan: entered promiscuous mode [ 546.681641][T11858] veth0_macvtap: entered promiscuous mode [ 546.699727][T11858] veth1_macvtap: entered promiscuous mode [ 546.736668][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.758700][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.802257][ T5836] Bluetooth: hci7: command tx timeout [ 547.169444][T12276] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 547.188273][T12276] batman_adv: batadv0: Adding interface: macsec1 [ 547.188297][T12276] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.188333][T12276] batman_adv: batadv0: Interface activated: macsec1 [ 547.217959][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.238636][ T104] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.238704][ T104] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.238732][ T104] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.458045][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.458076][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.578981][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.579013][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.762827][ T5836] Bluetooth: hci6: command tx timeout [ 548.093811][T12295] netlink: 'syz.7.806': attribute type 6 has an invalid length. [ 548.882448][ T5836] Bluetooth: hci7: command tx timeout [ 549.283032][ T1313] wlan0: Trigger new scan to find an IBSS to join [ 549.829490][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 549.831835][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 549.833049][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 549.835055][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 549.835690][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 550.267748][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.271859][T12310] chnl_net:caif_netlink_parms(): no params data found [ 550.503935][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.504136][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.504511][T12310] bridge_slave_0: entered allmulticast mode [ 550.506154][T12310] bridge_slave_0: entered promiscuous mode [ 550.508950][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.509087][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.509233][T12310] bridge_slave_1: entered allmulticast mode [ 550.510855][T12310] bridge_slave_1: entered promiscuous mode [ 550.569197][T12310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.573260][T12310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.611492][T12310] team0: Port device team_slave_0 added [ 550.614638][T12310] team0: Port device team_slave_1 added [ 550.645918][T12310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.645936][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.645964][T12310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.649102][T12310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.649117][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.649138][T12310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.703700][T12310] hsr_slave_0: entered promiscuous mode [ 550.704990][T12310] hsr_slave_1: entered promiscuous mode [ 550.706154][T12310] debugfs: 'hsr0' already exists in 'hsr' [ 550.706178][T12310] Cannot create hsr debugfs directory [ 550.964723][ T5835] Bluetooth: hci7: command tx timeout [ 550.968268][T12310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 550.975452][T12310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 550.978641][T12310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 550.983742][T12310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 551.030330][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.030455][T12310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.030650][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.030729][T12310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.099962][T12310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.111469][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.115012][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.123698][T12310] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.132959][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.133034][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.138236][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.138309][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.211305][T12310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.254256][T12310] veth0_vlan: entered promiscuous mode [ 551.260199][T12310] veth1_vlan: entered promiscuous mode [ 551.288830][T12310] veth0_macvtap: entered promiscuous mode [ 551.294962][T12310] veth1_macvtap: entered promiscuous mode [ 551.306974][T12310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.316747][T12310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.326961][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.327013][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.327051][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.327087][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.426605][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.426631][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.476113][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.476133][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.717215][T12594] bridge0: entered promiscuous mode [ 551.717383][T12594] macsec1: entered promiscuous mode [ 551.717547][T12594] macsec1: entered allmulticast mode [ 551.717563][T12594] bridge0: entered allmulticast mode [ 551.719382][T12594] bridge0: port 3(macsec1) entered blocking state [ 551.719584][T12594] bridge0: port 3(macsec1) entered disabled state [ 551.802442][T12598] Cannot find del_set index 2 as target [ 551.904990][T12594] bridge0: left allmulticast mode [ 551.905206][T12594] bridge0: left promiscuous mode [ 551.930431][ T5835] Bluetooth: hci8: command tx timeout [ 552.072044][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 552.276623][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18802, setting to 64 [ 552.276678][ T24] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 552.276698][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.283993][ T24] usb 7-1: config 0 descriptor?? [ 552.288666][T12598] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 552.830922][ T24] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 553.630855][T12620] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 553.630924][T12620] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 554.006775][ T5835] Bluetooth: hci8: command tx timeout [ 554.042112][ T24] usb 7-1: reset full-speed USB device number 3 using dummy_hcd [ 556.082847][ T5835] Bluetooth: hci8: command tx timeout [ 556.753408][T12641] loop7: detected capacity change from 0 to 7 [ 556.768398][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.768524][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.769752][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.769778][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.769934][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.769953][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.770074][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.770093][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.770234][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.770253][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.770395][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.770414][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.770641][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.770662][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.770722][ T5931] ldm_validate_partition_table(): Disk read failed. [ 556.770817][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.770837][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.771189][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.771212][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.771337][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.771356][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 556.771513][ T5931] Dev loop7: unable to read RDB block 0 [ 556.775004][ T5931] loop7: unable to read partition table [ 556.775190][ T5931] loop7: partition table beyond EOD, truncated [ 556.797149][T12641] ldm_validate_partition_table(): Disk read failed. [ 556.797639][T12641] Dev loop7: unable to read RDB block 0 [ 556.798060][T12641] loop7: unable to read partition table [ 556.798312][T12641] loop7: partition table beyond EOD, truncated [ 556.798373][T12641] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 556.833606][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.818'. [ 557.063745][ T5908] usb 7-1: USB disconnect, device number 3 [ 557.152954][T12657] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 557.165439][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 557.166945][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 557.168861][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 557.176047][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 557.187075][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 557.506141][ T5908] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 557.674972][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 557.744408][ T5908] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 557.744447][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.744471][ T5908] usb 7-1: Product: syz [ 557.744489][ T5908] usb 7-1: Manufacturer: syz [ 557.744506][ T5908] usb 7-1: SerialNumber: syz [ 557.783445][ T5908] usb 7-1: config 0 descriptor?? [ 558.166542][ T5835] Bluetooth: hci8: command tx timeout [ 558.451299][ T5908] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 558.451337][ T5908] pctv452e: pctv452e_power_ctrl: 1 [ 558.451337][ T5908] [ 558.451372][ T5908] usb 7-1: selecting invalid altsetting 3 [ 558.451384][ T5908] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 558.451384][ T5908] [ 558.451397][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 558.461335][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 558.462028][ T5908] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 558.462071][ T5908] usb 7-1: media controller created [ 558.462105][ T5908] dvb-usb: bulk message failed: -22 (8/0) [ 558.462118][ T5908] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 558.462157][ T5908] dvb-usb: MAC address reading failed. [ 558.476415][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.660934][ T5908] DVB: Unable to find symbol stb0899_attach() [ 558.660949][ T5908] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 558.744332][T12667] chnl_net:caif_netlink_parms(): no params data found [ 558.822650][ T5908] rc_core: IR keymap rc-tt-1500 not found [ 558.822673][ T5908] Registered IR keymap rc-empty [ 558.824414][ T5908] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 558.826571][ T5908] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input29 [ 558.837434][ T5908] dvb-usb: schedule remote query interval to 100 msecs. [ 558.837461][ T5908] pctv452e: pctv452e_power_ctrl: 0 [ 558.837461][ T5908] [ 558.837474][ T5908] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 558.947226][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 558.947268][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 559.052086][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 559.052117][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 559.162007][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 559.162054][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 559.202372][ T5835] Bluetooth: hci9: command tx timeout [ 559.272961][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 559.273014][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 559.382382][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 559.382412][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 559.434775][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.434870][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.435082][T12667] bridge_slave_0: entered allmulticast mode [ 559.437286][T12667] bridge_slave_0: entered promiscuous mode [ 559.446608][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.446686][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.446997][T12667] bridge_slave_1: entered allmulticast mode [ 559.450351][T12667] bridge_slave_1: entered promiscuous mode [ 559.492582][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 559.492610][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 559.520667][T12667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.532505][T12667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.602335][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 559.602372][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 559.609120][T12667] team0: Port device team_slave_0 added [ 559.614665][T12667] team0: Port device team_slave_1 added [ 559.712323][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 559.712364][ T24] dvb-usb: error -22 while querying for an remote control event. [ 559.726452][T12667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.726468][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.726489][T12667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.746864][T12667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.746891][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.746924][T12667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.823288][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 559.823329][ T24] dvb-usb: error -22 while querying for an remote control event. [ 559.914605][T12667] hsr_slave_0: entered promiscuous mode [ 559.935724][T12667] hsr_slave_1: entered promiscuous mode [ 559.936560][T12667] debugfs: 'hsr0' already exists in 'hsr' [ 559.936587][T12667] Cannot create hsr debugfs directory [ 559.938711][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 559.938756][ T24] dvb-usb: error -22 while querying for an remote control event. [ 560.042328][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 560.042370][ T24] dvb-usb: error -22 while querying for an remote control event. [ 560.152184][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 560.152219][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 560.262223][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 560.262269][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 560.372170][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 560.372214][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 560.482309][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 560.482343][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 560.510708][ T5908] usb 7-1: USB disconnect, device number 4 [ 560.657161][ T5908] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 560.785843][T12667] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 560.804050][T12667] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 560.839720][T12667] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 560.870244][T12667] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 561.194915][T12667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.215748][T12667] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.236610][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.236687][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.248648][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.248779][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.285277][ T5835] Bluetooth: hci9: command tx timeout [ 561.418008][T12667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.486977][T12667] veth0_vlan: entered promiscuous mode [ 561.498907][T12667] veth1_vlan: entered promiscuous mode [ 561.596550][T12667] veth0_macvtap: entered promiscuous mode [ 561.616894][T12667] veth1_macvtap: entered promiscuous mode [ 561.657411][T12667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.686428][T12667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.714478][ T1313] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.714526][ T1313] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.714559][ T1313] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.714590][ T1313] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.912366][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.912399][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.975707][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.975741][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.289413][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.289535][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.362765][ T5835] Bluetooth: hci9: command tx timeout [ 563.429072][T13026] netlink: 52 bytes leftover after parsing attributes in process `syz.8.824'. [ 563.608805][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 563.613689][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 563.615442][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 563.617853][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 563.618828][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 564.296263][ T5836] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 564.304532][ T5836] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 564.305987][ T5836] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 564.336805][ T5836] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 564.339687][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 564.621506][T13032] chnl_net:caif_netlink_parms(): no params data found [ 564.807134][T13133] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 565.129205][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.129340][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.130168][T13032] bridge_slave_0: entered allmulticast mode [ 565.132593][T13032] bridge_slave_0: entered promiscuous mode [ 565.135162][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.135237][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.135792][T13032] bridge_slave_1: entered allmulticast mode [ 565.137340][T13032] bridge_slave_1: entered promiscuous mode [ 565.391557][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.444312][ T5835] Bluetooth: hci9: command tx timeout [ 565.445843][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.626661][T13032] team0: Port device team_slave_0 added [ 565.671710][T13032] team0: Port device team_slave_1 added [ 565.684438][ T5835] Bluetooth: hci10: command tx timeout [ 565.728915][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.728944][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.728973][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.731398][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.731418][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.731444][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.752196][T13092] chnl_net:caif_netlink_parms(): no params data found [ 565.981419][T13032] hsr_slave_0: entered promiscuous mode [ 565.982893][T13032] hsr_slave_1: entered promiscuous mode [ 565.983670][T13032] debugfs: 'hsr0' already exists in 'hsr' [ 565.983694][T13032] Cannot create hsr debugfs directory [ 566.192599][T13092] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.193373][T13092] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.193610][T13092] bridge_slave_0: entered allmulticast mode [ 566.199829][T13092] bridge_slave_0: entered promiscuous mode [ 566.247155][T13092] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.247300][T13092] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.247623][T13092] bridge_slave_1: entered allmulticast mode [ 566.259975][T13092] bridge_slave_1: entered promiscuous mode [ 566.402814][ T5835] Bluetooth: hci11: command tx timeout [ 566.545204][T13392] netlink: 36 bytes leftover after parsing attributes in process `syz.9.831'. [ 566.598128][T13092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.627877][T13092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.824544][T13092] team0: Port device team_slave_0 added [ 566.830590][T13092] team0: Port device team_slave_1 added [ 566.928759][T13092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.928776][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.928797][T13092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.946883][T13092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.946899][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.946921][T13092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.029645][T13032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.305122][T13032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.427895][T13092] hsr_slave_0: entered promiscuous mode [ 567.428708][T13092] hsr_slave_1: entered promiscuous mode [ 567.429265][T13092] debugfs: 'hsr0' already exists in 'hsr' [ 567.429281][T13092] Cannot create hsr debugfs directory [ 567.459887][T13032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.609127][T13032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.763858][ T5835] Bluetooth: hci10: command tx timeout [ 568.260574][T13032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 568.282159][T13032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 568.289428][T13032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 568.320084][T13032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 568.418454][ T5903] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 568.446294][T13092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.484036][ T5835] Bluetooth: hci11: command tx timeout [ 568.573831][T13092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.586138][ T5903] usb 10-1: config 0 has no interfaces? [ 568.587324][ T5903] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 568.587357][ T5903] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 568.587381][ T5903] usb 10-1: Manufacturer: syz [ 568.602631][ T5903] usb 10-1: config 0 descriptor?? [ 568.709506][T13092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.820856][T13092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.877224][T13032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.918022][T13032] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.212663][ T5835] Bluetooth: hci10: command tx timeout [ 570.579670][ T5836] Bluetooth: hci11: command tx timeout [ 572.331671][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.331791][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.369700][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.369790][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.652370][ T5836] Bluetooth: hci10: command tx timeout [ 572.812888][T13032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.827649][T13092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 572.942865][T13092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 572.958323][T13092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 572.971976][T13092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 573.075275][T13032] veth0_vlan: entered promiscuous mode [ 573.089386][T13032] veth1_vlan: entered promiscuous mode [ 573.125498][T13032] veth0_macvtap: entered promiscuous mode [ 573.146599][T13032] veth1_macvtap: entered promiscuous mode [ 573.188676][T13032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.206431][T13092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.209144][T13032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.224206][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.225341][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.225408][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.225456][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.243196][T13092] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.256640][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.256741][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.284607][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.284713][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.393109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.393141][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.468485][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.468516][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.537013][T13092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.610597][T13092] veth0_vlan: entered promiscuous mode [ 573.619537][T13092] veth1_vlan: entered promiscuous mode [ 573.661789][T13092] veth0_macvtap: entered promiscuous mode [ 573.669769][T13092] veth1_macvtap: entered promiscuous mode [ 573.704077][T13092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.711305][T13092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.727051][ T104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.727107][ T104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.727136][ T104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.727163][ T104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.849704][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.849726][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.915991][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.916026][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.243106][ T5836] Bluetooth: hci11: command tx timeout [ 575.801310][T13730] openvswitch: netlink: Flow key attr not present in new flow. [ 575.809640][T13730] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 576.119879][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 576.124629][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 576.125837][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 576.127777][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 576.128503][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 576.835421][T13736] chnl_net:caif_netlink_parms(): no params data found [ 577.141685][T13736] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.144540][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.144926][T13736] bridge_slave_0: entered allmulticast mode [ 577.146435][T13736] bridge_slave_0: entered promiscuous mode [ 577.156917][T13736] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.157039][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.157311][T13736] bridge_slave_1: entered allmulticast mode [ 577.159376][T13736] bridge_slave_1: entered promiscuous mode [ 577.300697][T13736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.325593][T13736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.437962][T13736] team0: Port device team_slave_0 added [ 577.441255][T13736] team0: Port device team_slave_1 added [ 577.592182][T13736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.592199][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.592221][T13736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.598258][T13736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.598274][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.598295][T13736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.841068][T13736] hsr_slave_0: entered promiscuous mode [ 577.846818][T13736] hsr_slave_1: entered promiscuous mode [ 577.852255][T13736] debugfs: 'hsr0' already exists in 'hsr' [ 577.852276][T13736] Cannot create hsr debugfs directory [ 578.164272][ T5835] Bluetooth: hci12: command tx timeout [ 578.441144][T13736] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 578.619174][T13736] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 578.788272][T13736] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 578.961050][T13736] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 579.676433][T13736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.712657][T13736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.761126][T13736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.784174][T13736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.849639][T14022] netlink: 652 bytes leftover after parsing attributes in process `syz.3.840'. [ 579.849734][T14022] netlink: 120 bytes leftover after parsing attributes in process `syz.3.840'. [ 580.023017][T13736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.071204][T13736] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.078233][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.078333][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.091036][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.091169][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.248328][ T5835] Bluetooth: hci12: command tx timeout [ 580.291804][T13736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.461629][T13736] veth0_vlan: entered promiscuous mode [ 580.499712][T13736] veth1_vlan: entered promiscuous mode [ 580.544847][T13736] veth0_macvtap: entered promiscuous mode [ 580.576463][T13736] veth1_macvtap: entered promiscuous mode [ 580.623766][T13736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.630740][T13736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.649278][ T128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.649515][ T128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.655765][ T1313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.655803][ T1313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.822754][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.822782][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.928542][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.928568][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.373062][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 581.522500][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 581.531086][ T24] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 581.531128][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.536290][ T24] usb 5-1: config 0 descriptor?? [ 581.570027][ T24] as10x_usb: device has been detected [ 581.570808][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 581.611586][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 581.708126][ T24] as10x_usb: error during firmware upload part1 [ 581.708806][ T24] Registered device nBox DVB-T Dongle [ 581.735737][T14070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 581.788977][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 582.323205][ T5835] Bluetooth: hci12: command tx timeout [ 582.484776][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.975991][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 583.985043][ T5836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 583.990258][ T5836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 583.994744][ T5836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 583.995498][ T5836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 584.403026][ T5835] Bluetooth: hci12: command tx timeout [ 584.753625][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 584.756930][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 584.758056][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 584.759440][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 584.760394][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 585.015458][ T5903] usb 5-1: USB disconnect, device number 16 [ 585.137137][ T5903] Unregistered device nBox DVB-T Dongle [ 585.150334][ T5903] as10x_usb: device has been disconnected [ 585.340074][T14169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.360393][T14171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 585.668955][T14213] overlayfs: missing 'lowerdir' [ 585.673128][T14086] chnl_net:caif_netlink_parms(): no params data found [ 586.027049][ T796] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 586.093519][ T5835] Bluetooth: hci13: command tx timeout [ 586.202521][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 586.208339][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 586.210031][ T796] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 586.210070][ T796] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 586.217928][ T796] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 586.217957][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.217973][ T796] usb 4-1: Product: syz [ 586.217985][ T796] usb 4-1: Manufacturer: syz [ 586.217997][ T796] usb 4-1: SerialNumber: syz [ 586.584118][T14196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.585505][T14196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.944806][T14086] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.956124][T14086] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.956522][T14086] bridge_slave_0: entered allmulticast mode [ 586.974096][ T5835] Bluetooth: hci14: command tx timeout [ 586.974355][T14086] bridge_slave_0: entered promiscuous mode [ 586.983942][T14086] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.997726][T14086] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.998149][T14086] bridge_slave_1: entered allmulticast mode [ 587.007784][T14086] bridge_slave_1: entered promiscuous mode [ 587.118827][T14086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.128052][T14086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.235009][T14086] team0: Port device team_slave_0 added [ 587.246732][T14086] team0: Port device team_slave_1 added [ 587.339603][T14086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.339740][T14086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.339886][T14086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.341227][T14120] chnl_net:caif_netlink_parms(): no params data found [ 587.356535][T14086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.356625][T14086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.356649][T14086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.600158][T14086] hsr_slave_0: entered promiscuous mode [ 587.620287][T14086] hsr_slave_1: entered promiscuous mode [ 587.623316][T14086] debugfs: 'hsr0' already exists in 'hsr' [ 587.623341][T14086] Cannot create hsr debugfs directory [ 588.062771][T14120] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.062914][T14120] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.063567][T14120] bridge_slave_0: entered allmulticast mode [ 588.065804][T14120] bridge_slave_0: entered promiscuous mode [ 588.163191][ T5835] Bluetooth: hci13: command tx timeout [ 588.206687][T14120] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.206845][T14120] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.207306][T14120] bridge_slave_1: entered allmulticast mode [ 588.215908][T14120] bridge_slave_1: entered promiscuous mode [ 588.417573][T14120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.457206][T14120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.635201][T14086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.767070][T14120] team0: Port device team_slave_0 added [ 588.805572][T14086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.823591][ T796] usb 4-1: USB disconnect, device number 25 [ 588.868648][T14120] team0: Port device team_slave_1 added [ 589.033891][T14086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.052602][ T5835] Bluetooth: hci14: command tx timeout [ 589.084606][T14120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.084625][T14120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.084647][T14120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.086853][T14120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.086869][T14120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.086891][T14120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.145908][T14120] hsr_slave_0: entered promiscuous mode [ 589.147205][T14120] hsr_slave_1: entered promiscuous mode [ 589.149798][T14120] debugfs: 'hsr0' already exists in 'hsr' [ 589.149827][T14120] Cannot create hsr debugfs directory [ 589.196779][T14086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.027807][T14086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 590.130857][T14120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.166560][T14086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 590.173734][T14086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 590.193928][T14086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 590.242526][ T5835] Bluetooth: hci13: command tx timeout [ 590.301528][T14120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.557108][T14120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.801808][T14120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.921421][T14086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.989040][T14086] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.011237][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.011345][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.123319][ T5835] Bluetooth: hci14: command tx timeout [ 591.159429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.159515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.357730][T14120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 591.377864][T14120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 591.410955][T14120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 591.447521][T14120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 591.699655][T14086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.703320][T14725] tipc: Started in network mode [ 591.703364][T14725] tipc: Node identity b2a2ee134195, cluster identity 4711 [ 591.703662][T14725] tipc: Enabled bearer , priority 0 [ 591.705343][T14725] syzkaller0: entered promiscuous mode [ 591.705371][T14725] syzkaller0: entered allmulticast mode [ 592.026401][T14086] veth0_vlan: entered promiscuous mode [ 592.047149][T14086] veth1_vlan: entered promiscuous mode [ 592.234413][T14086] veth0_macvtap: entered promiscuous mode [ 592.250996][T14086] veth1_macvtap: entered promiscuous mode [ 592.273900][T14120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.323481][ T5835] Bluetooth: hci13: command tx timeout [ 592.360970][T14120] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.405984][T14086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.409267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.409377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.461192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.461312][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.478839][T14086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.524055][T14725] tipc: Resetting bearer [ 592.527505][T14724] tipc: Resetting bearer [ 592.561835][T14724] tipc: Disabling bearer [ 592.622391][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.624013][ T128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.653109][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.664468][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.678478][T14120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.917187][T14120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.950166][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.950195][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.129682][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.129702][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.203145][ T5835] Bluetooth: hci14: command tx timeout [ 593.262992][ T5884] IPVS: starting estimator thread 0... [ 593.337858][T14120] veth0_vlan: entered promiscuous mode [ 593.366063][T14761] IPVS: using max 29 ests per chain, 69600 per kthread [ 593.430947][T14120] veth1_vlan: entered promiscuous mode [ 593.735348][T14120] veth0_macvtap: entered promiscuous mode [ 593.781760][T14120] veth1_macvtap: entered promiscuous mode [ 593.911530][T14120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.936566][T14120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.001063][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.001546][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.001600][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.001653][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.641245][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.641277][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.011672][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.011711][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.272186][ T5908] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 595.424646][ T5908] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 595.424689][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.463254][ T5908] usb 4-1: config 0 descriptor?? [ 595.516319][ T5908] gspca_main: spca508-2.14.0 probing 8086:0110 [ 595.687438][ T5908] gspca_spca508: reg_read err -32 [ 595.984344][ T5908] gspca_spca508: reg_read err -71 [ 595.985356][ T5908] gspca_spca508: reg_read err -71 [ 595.985747][ T5908] gspca_spca508: reg_read err -71 [ 595.986127][ T5908] gspca_spca508: reg write: error -71 [ 595.986218][ T5908] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 595.996032][ T5908] usb 4-1: USB disconnect, device number 26 [ 597.477035][ T5884] IPVS: starting estimator thread 0... [ 597.562183][T14859] IPVS: using max 27 ests per chain, 64800 per kthread [ 600.723351][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 600.726141][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 600.726940][ T5836] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 600.727886][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 600.728482][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 601.932495][T14892] chnl_net:caif_netlink_parms(): no params data found [ 602.425657][T14892] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.434069][T14892] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.434342][T14892] bridge_slave_0: entered allmulticast mode [ 602.445305][T14892] bridge_slave_0: entered promiscuous mode [ 602.455883][T14892] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.464306][T14892] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.464643][T14892] bridge_slave_1: entered allmulticast mode [ 602.474710][T14892] bridge_slave_1: entered promiscuous mode [ 602.622728][T14892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.649373][T14892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.812069][ T5835] Bluetooth: hci15: command tx timeout [ 602.956575][T14892] team0: Port device team_slave_0 added [ 603.016777][T14892] team0: Port device team_slave_1 added [ 603.180632][T14892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.180655][T14892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.180919][T14892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.184050][T14892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.184065][T14892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.184086][T14892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.416695][T14892] hsr_slave_0: entered promiscuous mode [ 603.417609][T14892] hsr_slave_1: entered promiscuous mode [ 603.418169][T14892] debugfs: 'hsr0' already exists in 'hsr' [ 603.418184][T14892] Cannot create hsr debugfs directory [ 604.300804][T14892] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.519591][T14892] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.599219][T14892] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.649306][T11842] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 604.740922][T14892] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.852025][T11842] usb 4-1: Using ep0 maxpacket: 32 [ 604.857150][T11842] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 604.857176][T11842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.864902][T11842] usb 4-1: config 0 descriptor?? [ 604.884992][ T5835] Bluetooth: hci15: command tx timeout [ 604.920195][T11842] as10x_usb: device has been detected [ 604.924059][T11842] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 605.002862][T11842] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 605.026652][T11842] as10x_usb: error during firmware upload part1 [ 605.027072][T11842] Registered device nBox DVB-T Dongle [ 605.325576][T14892] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 605.338278][T14892] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 605.362026][T14892] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 605.488893][T14892] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 605.836027][T14892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.886465][T14892] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.897643][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.897726][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.920388][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.920501][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.080562][T14892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.199430][T14892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.309705][T14892] veth0_vlan: entered promiscuous mode [ 606.345427][T14892] veth1_vlan: entered promiscuous mode [ 606.491273][T14892] veth0_macvtap: entered promiscuous mode [ 606.525840][T14892] veth1_macvtap: entered promiscuous mode [ 606.608313][T14892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.639388][T14892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.663389][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.668759][ T104] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.669178][ T104] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.669234][ T104] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.972071][ T5835] Bluetooth: hci15: command tx timeout [ 606.974930][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.974948][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.105511][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.105538][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.836634][T15266] netlink: 'syz.7.865': attribute type 10 has an invalid length. [ 608.061019][ T6043] usb 4-1: USB disconnect, device number 27 [ 608.170250][ T6043] Unregistered device nBox DVB-T Dongle [ 608.186889][ T6043] as10x_usb: device has been disconnected [ 609.048400][ T5835] Bluetooth: hci15: command tx timeout [ 609.579077][T15295] netlink: 'syz.3.876': attribute type 10 has an invalid length. [ 609.607029][T15295] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 609.688077][T15295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.711170][T15320] bond_slave_0: entered promiscuous mode [ 609.711268][T15320] bond_slave_1: entered promiscuous mode [ 609.711329][T15320] syz_tun: entered promiscuous mode [ 609.712670][T15320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 609.713758][T15320] bond2: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 609.713787][T15320] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 609.717062][T15320] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 610.702406][T11842] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 610.865740][T11842] usb 3-1: Using ep0 maxpacket: 32 [ 610.871454][T11842] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 610.871514][T11842] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 610.871543][T11842] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.871573][T11842] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 610.883018][T11842] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 610.883055][T11842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.883079][T11842] usb 3-1: Product: syz [ 610.883096][T11842] usb 3-1: Manufacturer: syz [ 610.883113][T11842] usb 3-1: SerialNumber: syz [ 610.899568][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 610.963265][T11842] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input30 [ 611.133279][ T5836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 611.140414][ T5836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 611.143257][ T5836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 611.149356][ T5836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 611.150382][ T5836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 611.232307][T11842] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 611.232328][T11842] (id 0x00) [ 611.364198][T11842] rc_core: IR keymap rc-imon-pad not found [ 611.364228][T11842] Registered IR keymap rc-empty [ 611.364320][T11842] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 611.364342][T11842] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 611.433900][T11842] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 611.436836][T11842] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input31 [ 611.468562][T11842] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:19> initialized [ 612.090988][T15358] chnl_net:caif_netlink_parms(): no params data found [ 612.378564][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.378700][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.378955][T15358] bridge_slave_0: entered allmulticast mode [ 612.380455][T15358] bridge_slave_0: entered promiscuous mode [ 612.385467][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.385582][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.385984][T15358] bridge_slave_1: entered allmulticast mode [ 612.389262][T15358] bridge_slave_1: entered promiscuous mode [ 612.421055][ T5908] usb 3-1: USB disconnect, device number 19 [ 612.423418][T15483] imon:send_packet: error submitting urb(-19) [ 612.443615][T15483] imon:vfd_write: send packet #2 failed [ 612.508293][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.510983][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.627407][T15358] team0: Port device team_slave_0 added [ 612.646182][T15358] team0: Port device team_slave_1 added [ 612.734822][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.734839][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.734860][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.738539][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.738555][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.738577][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.860024][T15358] hsr_slave_0: entered promiscuous mode [ 612.860981][T15358] hsr_slave_1: entered promiscuous mode [ 612.861566][T15358] debugfs: 'hsr0' already exists in 'hsr' [ 612.861583][T15358] Cannot create hsr debugfs directory [ 613.169405][T15635] netlink: 'syz.3.881': attribute type 7 has an invalid length. [ 613.205765][ T5835] Bluetooth: hci16: command tx timeout [ 613.293106][T15635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.881'. [ 613.405367][T15358] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.488196][T15358] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.648188][T15358] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.727587][T15358] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.224781][T15358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 614.236441][T15358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 614.251857][T15358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 614.316737][T15358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 614.489394][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 614.781709][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.806992][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.820246][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.820510][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.839923][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.839999][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.979897][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.032785][T15358] veth0_vlan: entered promiscuous mode [ 615.051426][T15358] veth1_vlan: entered promiscuous mode [ 615.088814][T15358] veth0_macvtap: entered promiscuous mode [ 615.096016][T15358] veth1_macvtap: entered promiscuous mode [ 615.157054][T15682] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 615.229414][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.243990][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.257141][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.257297][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.257338][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.257372][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.284088][ T5835] Bluetooth: hci16: command tx timeout [ 615.412997][T15358] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 615.526980][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.527008][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.559148][T15358] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 615.687313][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.687339][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.973018][T15709] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 615.973051][T15709] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 616.841511][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 617.362285][ T5835] Bluetooth: hci16: command tx timeout [ 617.927099][T15728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.195731][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 619.365694][ T5836] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 619.368318][ T5836] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 619.369225][ T5836] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 619.370309][ T5836] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 619.370928][ T5836] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 619.442110][ T5835] Bluetooth: hci16: command tx timeout [ 619.557387][T15772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.568696][ T30] audit: type=1326 audit(1773045632.028:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.569027][ T30] audit: type=1326 audit(1773045632.028:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.569686][ T30] audit: type=1326 audit(1773045632.028:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.569942][ T30] audit: type=1326 audit(1773045632.028:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.570317][ T30] audit: type=1326 audit(1773045632.028:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.570717][ T30] audit: type=1326 audit(1773045632.028:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.570980][ T30] audit: type=1326 audit(1773045632.028:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.571424][ T30] audit: type=1326 audit(1773045632.028:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.571962][ T30] audit: type=1326 audit(1773045632.028:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 619.572711][ T30] audit: type=1326 audit(1773045632.038:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 620.343963][T15774] chnl_net:caif_netlink_parms(): no params data found [ 620.795014][T15774] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.795171][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.795325][T15774] bridge_slave_0: entered allmulticast mode [ 620.796678][T15774] bridge_slave_0: entered promiscuous mode [ 620.799711][T15774] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.799874][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.800084][T15774] bridge_slave_1: entered allmulticast mode [ 620.839924][T15774] bridge_slave_1: entered promiscuous mode [ 620.930426][T15774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.933949][T15774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.011144][T15774] team0: Port device team_slave_0 added [ 621.022661][T15774] team0: Port device team_slave_1 added [ 621.137814][T15774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.137833][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.137856][T15774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.165869][T15774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.165887][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.165909][T15774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.433987][T15774] hsr_slave_0: entered promiscuous mode [ 621.440031][T15774] hsr_slave_1: entered promiscuous mode [ 621.442919][ T5835] Bluetooth: hci17: command tx timeout [ 621.450760][T15774] debugfs: 'hsr0' already exists in 'hsr' [ 621.450797][T15774] Cannot create hsr debugfs directory [ 622.485287][T15774] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.855102][T15774] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.131194][T15774] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.237960][ T5836] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 623.245458][ T5836] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 623.249355][ T5836] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 623.250673][ T5836] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 623.251362][ T5836] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 623.515120][T15774] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.532677][ T5835] Bluetooth: hci17: command tx timeout [ 624.181719][T15774] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 624.251560][T15774] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 624.286387][T15774] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 624.315498][T15774] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 624.497811][T16063] chnl_net:caif_netlink_parms(): no params data found [ 624.756267][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.756478][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.186137][T16063] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.186316][T16063] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.186635][T16063] bridge_slave_0: entered allmulticast mode [ 625.200311][T16063] bridge_slave_0: entered promiscuous mode [ 625.226586][T16063] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.306627][T16063] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.307002][T16063] bridge_slave_1: entered allmulticast mode [ 625.308542][T16063] bridge_slave_1: entered promiscuous mode [ 625.364417][ T5835] Bluetooth: hci18: command tx timeout [ 625.549556][T16216] netlink: 'syz.3.898': attribute type 2 has an invalid length. [ 625.578710][T16063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.592426][T15774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.600935][T16063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.613377][ T5835] Bluetooth: hci17: command tx timeout [ 625.862568][ T5916] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 625.909435][T15774] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.965812][T16063] team0: Port device team_slave_0 added [ 625.967628][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.967723][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.012075][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 626.021172][ T5916] usb 4-1: config index 0 descriptor too short (expected 36, got 35) [ 626.021205][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.021252][ T5916] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 626.021277][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.030198][ T5916] usb 4-1: config 0 descriptor?? [ 626.084166][T16063] team0: Port device team_slave_1 added [ 626.140700][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.140824][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.432990][T16063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.433018][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.433050][T16063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.493028][T16063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.493067][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.493102][T16063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.617428][T16274] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 626.617486][T16274] PM: Image not found (code -6) [ 626.899447][T16063] hsr_slave_0: entered promiscuous mode [ 626.900605][T16063] hsr_slave_1: entered promiscuous mode [ 626.901283][T16063] debugfs: 'hsr0' already exists in 'hsr' [ 626.901301][T16063] Cannot create hsr debugfs directory [ 626.962813][T11842] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 627.126996][T11842] usb 3-1: Using ep0 maxpacket: 8 [ 627.242788][T15774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.278567][T15774] veth0_vlan: entered promiscuous mode [ 627.288203][T15774] veth1_vlan: entered promiscuous mode [ 627.454589][ T5835] Bluetooth: hci18: command tx timeout [ 627.486314][T11842] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 627.486391][T11842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.486419][T11842] usb 3-1: Product: syz [ 627.486438][T11842] usb 3-1: Manufacturer: syz [ 627.486458][T11842] usb 3-1: SerialNumber: syz [ 627.491773][T11842] usb 3-1: config 0 descriptor?? [ 627.497321][T11842] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 627.497389][T11842] pctv452e: pctv452e_power_ctrl: 1 [ 627.497389][T11842] [ 627.497520][T11842] usb 3-1: selecting invalid altsetting 3 [ 627.497535][T11842] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 627.497535][T11842] [ 627.497549][T11842] dvb-usb: bulk message failed: -22 (5/0) [ 627.505236][T11842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 627.506100][T11842] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 627.506197][T11842] usb 3-1: media controller created [ 627.506235][T11842] dvb-usb: bulk message failed: -22 (8/0) [ 627.506247][T11842] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 627.506285][T11842] dvb-usb: MAC address reading failed. [ 627.521235][T11842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.605963][T11842] DVB: Unable to find symbol stb0899_attach() [ 627.605979][T11842] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 627.683171][ T5835] Bluetooth: hci17: command tx timeout [ 627.700820][T15774] veth0_macvtap: entered promiscuous mode [ 627.705843][T16274] dvb-usb: bulk message failed: -22 (7/0) [ 627.705890][T16274] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 627.740549][T15774] veth1_macvtap: entered promiscuous mode [ 627.767333][T15774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.774736][T11842] rc_core: IR keymap rc-tt-1500 not found [ 627.774755][T11842] Registered IR keymap rc-empty [ 627.776336][T11842] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 627.782300][T11842] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input32 [ 627.786758][T11842] dvb-usb: schedule remote query interval to 100 msecs. [ 627.786777][T11842] pctv452e: pctv452e_power_ctrl: 0 [ 627.786777][T11842] [ 627.786787][T11842] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 627.855692][T15774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.892034][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 627.892075][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 628.014218][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 628.014247][ T796] dvb-usb: error -22 while querying for an remote control event. [ 628.122196][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 628.122236][ T796] dvb-usb: error -22 while querying for an remote control event. [ 628.232257][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 628.232296][ T796] dvb-usb: error -22 while querying for an remote control event. [ 628.233920][T16063] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.342867][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 628.342897][ T796] dvb-usb: error -22 while querying for an remote control event. [ 628.385882][ T104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.385965][ T104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.386023][ T104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.386061][ T104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.464172][T11842] dvb-usb: bulk message failed: -22 (4/0) [ 628.464215][T11842] dvb-usb: error -22 while querying for an remote control event. [ 628.574921][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 628.574949][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 628.692451][T11842] dvb-usb: bulk message failed: -22 (4/0) [ 628.692510][T11842] dvb-usb: error -22 while querying for an remote control event. [ 628.778520][ T5916] usb 4-1: string descriptor 0 read error: -71 [ 628.784436][ T5916] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 628.814685][T11842] dvb-usb: bulk message failed: -22 (4/0) [ 628.814713][T11842] dvb-usb: error -22 while querying for an remote control event. [ 628.815322][ T5916] usb 4-1: USB disconnect, device number 28 [ 628.884252][T16063] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.923455][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 628.923484][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 629.043404][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 629.043433][ T796] dvb-usb: error -22 while querying for an remote control event. [ 629.077166][T16063] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.124288][T15774] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 629.152534][ T5916] dvb-usb: bulk message failed: -22 (4/0) [ 629.152563][ T5916] dvb-usb: error -22 while querying for an remote control event. [ 629.262421][T11842] dvb-usb: bulk message failed: -22 (4/0) [ 629.262462][T11842] dvb-usb: error -22 while querying for an remote control event. [ 629.327885][T16063] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.374704][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 629.374733][ T796] dvb-usb: error -22 while querying for an remote control event. [ 629.495961][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 629.496016][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 629.497549][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.497572][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.526755][T15774] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht' [ 629.533102][ T5835] Bluetooth: hci18: command tx timeout [ 629.604440][ T796] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 629.613597][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 629.613634][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 629.722070][T11842] dvb-usb: bulk message failed: -22 (4/0) [ 629.722109][T11842] dvb-usb: error -22 while querying for an remote control event. [ 629.805288][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.805352][ T796] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 629.805378][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.833241][T11842] dvb-usb: bulk message failed: -22 (4/0) [ 629.833360][T11842] dvb-usb: error -22 while querying for an remote control event. [ 629.848911][ T796] usb 6-1: config 0 descriptor?? [ 629.943496][ T796] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 629.949508][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 629.949548][ T796] dvb-usb: error -22 while querying for an remote control event. [ 629.983651][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.983679][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.052197][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 630.052235][ T796] dvb-usb: error -22 while querying for an remote control event. [ 630.163138][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 630.163177][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 630.272363][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 630.272389][ T796] dvb-usb: error -22 while querying for an remote control event. [ 630.294622][T16063] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 630.366216][T16063] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 630.383130][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 630.383157][ T796] dvb-usb: error -22 while querying for an remote control event. [ 630.429743][T16063] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 630.451573][T16063] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 630.494623][ T796] dvb-usb: bulk message failed: -22 (4/0) [ 630.494660][ T796] dvb-usb: error -22 while querying for an remote control event. [ 630.612527][ T5832] dvb-usb: bulk message failed: -22 (4/0) [ 630.612563][ T5832] dvb-usb: error -22 while querying for an remote control event. [ 630.613023][T14735] usb 3-1: USB disconnect, device number 20 [ 630.847975][T16063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.890875][T16063] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.914017][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.914094][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.948014][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.948092][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.140843][T16063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.258260][T14735] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 631.326488][T16063] veth0_vlan: entered promiscuous mode [ 631.333212][T16464] xt_NFQUEUE: number of total queues is 0 [ 631.431139][T16063] veth1_vlan: entered promiscuous mode [ 631.612539][ T5835] Bluetooth: hci18: command tx timeout [ 631.684727][T16063] veth0_macvtap: entered promiscuous mode [ 631.716190][T16063] veth1_macvtap: entered promiscuous mode [ 631.841107][T16063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.857658][T16063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.877370][ T1159] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.877548][ T1159] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.877662][ T1159] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.877963][ T1159] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.575615][T16063] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 632.764002][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.764028][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.769579][ T796] usb 6-1: USB disconnect, device number 2 [ 632.841022][T16063] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 632.998414][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.998441][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.281589][T16500] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 633.576778][T16514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.906'. [ 635.747419][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'. [ 635.747486][T16537] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 635.759207][T16537] netlink: 76 bytes leftover after parsing attributes in process `syz.5.908'. [ 635.908084][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.9.909'. [ 636.157197][T16550] Cannot find add_set index 0 as target [ 638.412387][ T796] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 638.592285][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 638.596364][ T796] usb 4-1: config 0 has no interfaces? [ 638.603030][ T796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 638.603058][ T796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 638.603074][ T796] usb 4-1: Manufacturer: syz [ 638.617326][ T796] usb 4-1: config 0 descriptor?? [ 639.183260][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.915'. [ 640.882639][T16603] IPVS: set_ctl: invalid protocol: 255 172.20.20.45:286 [ 641.080612][ T5908] usb 4-1: USB disconnect, device number 29 [ 642.473035][T16623] netlink: 2908 bytes leftover after parsing attributes in process `syz.3.919'. [ 642.490008][T16623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 642.490041][T16623] PM: Image not found (code -6) [ 642.746140][ T5908] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 642.760376][T16635] syzkaller1: entered promiscuous mode [ 642.760395][T16635] syzkaller1: entered allmulticast mode [ 642.768053][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.768400][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.855906][T16635] netlink: 48 bytes leftover after parsing attributes in process `syz.9.921'. [ 642.942171][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 642.968741][ T5908] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 642.968774][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.968789][ T5908] usb 4-1: Product: syz [ 642.968801][ T5908] usb 4-1: Manufacturer: syz [ 642.968812][ T5908] usb 4-1: SerialNumber: syz [ 642.974519][ T5908] usb 4-1: config 0 descriptor?? [ 643.003851][ T5908] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 643.003885][ T5908] pctv452e: pctv452e_power_ctrl: 1 [ 643.003885][ T5908] [ 643.003917][ T5908] usb 4-1: selecting invalid altsetting 3 [ 643.003929][ T5908] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 643.003929][ T5908] [ 643.003941][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 643.012851][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 643.013611][ T5908] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 643.020434][ T5908] usb 4-1: media controller created [ 643.020472][ T5908] dvb-usb: bulk message failed: -22 (8/0) [ 643.020484][ T5908] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 643.020522][ T5908] dvb-usb: MAC address reading failed. [ 643.053517][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.265550][ T5908] DVB: Unable to find symbol stb0899_attach() [ 643.265570][ T5908] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 643.271018][T16623] dvb-usb: bulk message failed: -22 (7/0) [ 643.271043][T16623] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 643.505918][ T5908] rc_core: IR keymap rc-tt-1500 not found [ 643.505943][ T5908] Registered IR keymap rc-empty [ 643.506894][ T5908] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 643.518725][ T5908] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input33 [ 643.527144][ T5908] dvb-usb: schedule remote query interval to 100 msecs. [ 643.527170][ T5908] pctv452e: pctv452e_power_ctrl: 0 [ 643.527170][ T5908] [ 643.527185][ T5908] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 643.644148][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 643.644186][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 643.752493][T14735] dvb-usb: bulk message failed: -22 (4/0) [ 643.752524][T14735] dvb-usb: error -22 while querying for an remote control event. [ 643.862079][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 643.862126][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 643.972170][T14735] dvb-usb: bulk message failed: -22 (4/0) [ 643.972217][T14735] dvb-usb: error -22 while querying for an remote control event. [ 644.035809][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.923'. [ 644.035873][T16667] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 644.084343][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 644.084378][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 644.131714][T16667] netlink: 76 bytes leftover after parsing attributes in process `syz.6.923'. [ 644.201750][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 644.201808][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 644.302325][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 644.302373][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 644.412788][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 644.412823][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 644.534617][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 644.534653][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 644.647614][T14735] dvb-usb: bulk message failed: -22 (4/0) [ 644.647673][T14735] dvb-usb: error -22 while querying for an remote control event. [ 644.752132][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 644.752175][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 644.863300][T14735] dvb-usb: bulk message failed: -22 (4/0) [ 644.863340][T14735] dvb-usb: error -22 while querying for an remote control event. [ 644.972051][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 644.972092][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 645.105036][T14735] dvb-usb: bulk message failed: -22 (4/0) [ 645.105092][T14735] dvb-usb: error -22 while querying for an remote control event. [ 645.213943][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 645.213984][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 645.322160][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 645.322204][ T29] dvb-usb: error -22 while querying for an remote control event. [ 645.432235][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 645.432278][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 645.545269][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 645.545310][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 645.652304][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 645.652333][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 645.762783][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 645.762831][ T5908] dvb-usb: error -22 while querying for an remote control event. [ 645.872204][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 645.872253][ T29] dvb-usb: error -22 while querying for an remote control event. [ 645.982180][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 645.982233][ T29] dvb-usb: error -22 while querying for an remote control event. [ 646.092152][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 646.092196][ T29] dvb-usb: error -22 while querying for an remote control event. [ 646.202068][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 646.202121][ T29] dvb-usb: error -22 while querying for an remote control event. [ 646.215439][ T29] usb 4-1: USB disconnect, device number 30 [ 646.509208][T16726] loop7: detected capacity change from 0 to 7 [ 646.510827][ T29] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 646.522696][ C1] blk_print_req_error: 26 callbacks suppressed [ 646.522715][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.522742][ C1] buffer_io_error: 25 callbacks suppressed [ 646.522750][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.525247][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.525280][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.525490][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.525511][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.525647][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.525666][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.529741][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.529773][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.532618][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.532658][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.533566][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.533591][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.533659][T16726] ldm_validate_partition_table(): Disk read failed. [ 646.533769][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.533797][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.533925][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.533945][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.534077][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.534096][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 646.534407][T16726] Dev loop7: unable to read RDB block 0 [ 646.534933][T16726] loop7: unable to read partition table [ 646.535104][T16726] loop7: partition table beyond EOD, truncated [ 646.535157][T16726] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 646.570901][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.927'. [ 649.106069][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.930'. [ 649.287623][ T5836] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 649.292716][ T5836] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 649.313729][ T5836] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 649.317358][ T5836] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 649.318018][ T5836] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 649.674443][T16768] loop5: detected capacity change from 0 to 7 [ 649.687271][T13629] Dev loop5: unable to read RDB block 7 [ 649.687323][T13629] loop5: unable to read partition table [ 649.687517][T13629] loop5: partition table beyond EOD, truncated [ 649.723298][T16768] Dev loop5: unable to read RDB block 7 [ 649.723342][T16768] loop5: unable to read partition table [ 649.723626][T16768] loop5: partition table beyond EOD, truncated [ 649.723644][T16768] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 650.359114][T16768] cgroup: fork rejected by pids controller in /syz5 [ 650.605912][T16765] chnl_net:caif_netlink_parms(): no params data found [ 651.103780][T16765] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.110870][T16765] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.111281][T16765] bridge_slave_0: entered allmulticast mode [ 651.125597][T16765] bridge_slave_0: entered promiscuous mode [ 651.132201][T16765] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.132312][T16765] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.132732][T16765] bridge_slave_1: entered allmulticast mode [ 651.134430][T16765] bridge_slave_1: entered promiscuous mode [ 651.361461][T16765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.384551][T16765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.443220][ T5835] Bluetooth: hci19: command tx timeout [ 651.596323][T16765] team0: Port device team_slave_0 added [ 651.600196][T16765] team0: Port device team_slave_1 added [ 651.676546][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 651.676576][ T30] audit: type=1326 audit(1773045664.138:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.683471][ T30] audit: type=1326 audit(1773045664.148:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.692235][ T30] audit: type=1326 audit(1773045664.158:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.692890][ T30] audit: type=1326 audit(1773045664.158:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.693121][ T30] audit: type=1326 audit(1773045664.158:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.693737][ T30] audit: type=1326 audit(1773045664.158:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.694003][ T30] audit: type=1326 audit(1773045664.158:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.694274][ T30] audit: type=1326 audit(1773045664.158:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.694684][ T30] audit: type=1326 audit(1773045664.158:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.695468][ T30] audit: type=1326 audit(1773045664.158:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc359c799 code=0x7ffc0000 [ 651.733239][T16765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.733260][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.733282][T16765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.740908][T16765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.740929][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.740951][T16765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.129627][T16765] hsr_slave_0: entered promiscuous mode [ 652.130795][T16765] hsr_slave_1: entered promiscuous mode [ 652.133975][T16765] debugfs: 'hsr0' already exists in 'hsr' [ 652.133995][T16765] Cannot create hsr debugfs directory [ 652.883312][T16765] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.351090][T16765] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.523929][ T5835] Bluetooth: hci19: command tx timeout [ 653.847903][T16765] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.930383][T16765] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.168941][T16765] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 654.176439][T16765] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 654.195474][T16765] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 654.206630][T16765] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 654.379934][T16765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.418970][T16765] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.436695][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.436775][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.445782][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.445859][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.611077][T16765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.700479][T16765] veth0_vlan: entered promiscuous mode [ 654.709506][T16765] veth1_vlan: entered promiscuous mode [ 654.751122][T16765] veth0_macvtap: entered promiscuous mode [ 654.767296][T16765] veth1_macvtap: entered promiscuous mode [ 654.795077][T16765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.819931][T16765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.845036][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.845162][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.845273][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.845393][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.910844][T16765] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 654.950347][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.950366][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.959774][T16765] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht' [ 655.026127][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.026151][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.420090][T17227] syz.8.929 (17227): /proc/17223/oom_adj is deprecated, please use /proc/17223/oom_score_adj instead. [ 655.603121][ T5835] Bluetooth: hci19: command tx timeout [ 657.546639][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 657.687350][ T5836] Bluetooth: hci19: command tx timeout [ 658.435030][T17254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.165825][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.166373][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.174767][T17268] bond_slave_0: left promiscuous mode [ 660.174869][T17268] bond_slave_1: left promiscuous mode [ 660.706363][T17268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.733583][T17268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.535183][T11221] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 661.537759][T11221] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 661.539237][T17274] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 661.556986][T11221] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 661.557542][T11221] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 661.577361][T11221] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 661.580405][T11221] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 661.583167][T11221] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 661.584123][T11221] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 661.584718][T11221] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 661.877659][ T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.877709][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.877737][ T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.877765][ T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.268327][T17282] chnl_net:caif_netlink_parms(): no params data found [ 662.487758][T17282] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.487928][T17282] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.488383][T17282] bridge_slave_0: entered allmulticast mode [ 662.490771][T17282] bridge_slave_0: entered promiscuous mode [ 662.497878][T17282] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.498041][T17282] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.498411][T17282] bridge_slave_1: entered allmulticast mode [ 662.500789][T17282] bridge_slave_1: entered promiscuous mode [ 662.530866][T17285] chnl_net:caif_netlink_parms(): no params data found [ 662.658389][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 662.708855][T17282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.726303][T17282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.856857][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.857038][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.857273][T17285] bridge_slave_0: entered allmulticast mode [ 662.879733][T17285] bridge_slave_0: entered promiscuous mode [ 662.922834][T17282] team0: Port device team_slave_0 added [ 662.923099][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.923203][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.923424][T17285] bridge_slave_1: entered allmulticast mode [ 662.926234][T17285] bridge_slave_1: entered promiscuous mode [ 662.971411][T17282] team0: Port device team_slave_1 added [ 663.066977][T17548] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 663.095297][T17285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.096138][T17282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.096158][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.096189][T17282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.114306][T17285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.120203][T17282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.120228][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.120256][T17282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.324644][T17285] team0: Port device team_slave_0 added [ 663.388789][T17282] hsr_slave_0: entered promiscuous mode [ 663.391063][T17282] hsr_slave_1: entered promiscuous mode [ 663.395455][T17282] debugfs: 'hsr0' already exists in 'hsr' [ 663.395479][T17282] Cannot create hsr debugfs directory [ 663.416814][T17285] team0: Port device team_slave_1 added [ 663.602352][T17274] Bluetooth: hci20: command tx timeout [ 663.605899][T17285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.605924][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.605977][T17285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.684940][T17274] Bluetooth: hci21: command tx timeout [ 663.736809][T17285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.736830][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.736852][T17285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.019212][T17285] hsr_slave_0: entered promiscuous mode [ 664.022946][T17285] hsr_slave_1: entered promiscuous mode [ 664.023694][T17285] debugfs: 'hsr0' already exists in 'hsr' [ 664.023714][T17285] Cannot create hsr debugfs directory [ 664.264387][T17282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.439367][T17282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.518898][T17282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.679213][T17282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.448619][T17282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 665.472934][T17282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 665.487051][T17282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 665.637473][T17285] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.669299][T17282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 665.694955][ T5836] Bluetooth: hci20: command tx timeout [ 665.762339][ T5836] Bluetooth: hci21: command tx timeout [ 665.768122][T17285] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.901364][T17285] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.041426][T17285] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.309683][T17285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 666.384125][T17282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.384801][T17285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 666.390948][T17285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 666.415489][T17285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 666.428505][T17282] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.476487][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.476573][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.496871][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.496958][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.858742][T17282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.929711][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.026503][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.064090][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.064197][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.124247][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.124352][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.126395][T17282] veth0_vlan: entered promiscuous mode [ 667.220497][T17282] veth1_vlan: entered promiscuous mode [ 667.379551][T17282] veth0_macvtap: entered promiscuous mode [ 667.416039][T17282] veth1_macvtap: entered promiscuous mode [ 667.460827][T11221] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 667.476550][T17282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.491038][T17282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.507657][T11221] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 667.513402][T11221] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 667.518460][T11221] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 667.523104][T11221] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 667.609428][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.609499][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.609541][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.609580][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.767232][T11221] Bluetooth: hci20: command tx timeout [ 667.767279][T11221] Bluetooth: hci7: command 0x0406 tx timeout [ 667.797776][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.842795][T17274] Bluetooth: hci21: command tx timeout [ 667.901854][T17282] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht' [ 668.011332][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.011363][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.030066][T17282] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 668.199530][T17285] veth0_vlan: entered promiscuous mode [ 668.216416][T17285] veth1_vlan: entered promiscuous mode [ 668.221119][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.221149][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.284755][T17898] chnl_net:caif_netlink_parms(): no params data found [ 668.613843][T17285] veth0_macvtap: entered promiscuous mode [ 668.743487][T17285] veth1_macvtap: entered promiscuous mode [ 668.775758][T17898] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.775843][T17898] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.776257][T17898] bridge_slave_0: entered allmulticast mode [ 668.779176][T17898] bridge_slave_0: entered promiscuous mode [ 668.794245][T17898] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.794348][T17898] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.794865][T17898] bridge_slave_1: entered allmulticast mode [ 668.796921][T17898] bridge_slave_1: entered promiscuous mode [ 668.936037][T17285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.970009][T17898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.981401][T17898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.986302][T17285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.119587][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.119666][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.119695][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.119724][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.245921][T17898] team0: Port device team_slave_0 added [ 669.258371][T17898] team0: Port device team_slave_1 added [ 669.398476][T17898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.398499][T17898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.398526][T17898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.436160][T17898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.436177][T17898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.436200][T17898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.515828][T17285] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 669.602924][T17274] Bluetooth: hci22: command tx timeout [ 669.743112][T17898] hsr_slave_0: entered promiscuous mode [ 669.750987][T17898] hsr_slave_1: entered promiscuous mode [ 669.751734][T17898] debugfs: 'hsr0' already exists in 'hsr' [ 669.751752][T17898] Cannot create hsr debugfs directory [ 669.781684][T18048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.781714][T18048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.842627][T17274] Bluetooth: hci20: command tx timeout [ 669.869643][T17285] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht' [ 669.922378][T17274] Bluetooth: hci21: command tx timeout [ 670.086549][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.086569][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.568970][T17898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.795076][T17898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.877130][T18190] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 670.898714][T18190] team0: Port device batadv1 added [ 671.060493][T17898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.175771][T17898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.685683][T17274] Bluetooth: hci22: command tx timeout [ 671.724749][T17898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.754445][T17898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.801159][T17898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.806853][T17898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 672.432491][T17898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.503181][T17898] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.526304][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.526393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.547000][T18236] netlink: 'syz.3.950': attribute type 6 has an invalid length. [ 672.547048][T18236] netlink: 'syz.3.950': attribute type 7 has an invalid length. [ 672.547058][T18236] netlink: 'syz.3.950': attribute type 8 has an invalid length. [ 672.557851][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.557968][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.891817][T17274] Bluetooth: hci8: command 0x0406 tx timeout [ 673.762014][ T5836] Bluetooth: hci22: command tx timeout [ 674.643058][ T31] INFO: task syz.3.784:11068 blocked for more than 143 seconds. [ 674.643119][ T31] Tainted: G L syzkaller #0 [ 674.643135][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.643147][ T31] task:syz.3.784 state:D stack:27784 pid:11068 tgid:11059 ppid:5844 task_flags:0x400040 flags:0x00080002 [ 674.643230][ T31] Call Trace: [ 674.643242][ T31] [ 674.643282][ T31] __schedule+0x15dd/0x52d0 [ 674.643524][ T31] ? __pfx___schedule+0x10/0x10 [ 674.643598][ T31] ? schedule+0x90/0x360 [ 674.643635][ T31] schedule+0x164/0x360 [ 674.643673][ T31] schedule_preempt_disabled+0x13/0x30 [ 674.643706][ T31] __mutex_lock+0x7fe/0x1300 [ 674.643735][ T31] ? __mutex_lock+0x5ac/0x1300 [ 674.643772][ T31] ? tty_open+0x22d/0xd70 [ 674.644175][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 674.644217][ T31] ? __kmalloc_cache_noprof+0x31c/0x660 [ 674.644275][ T31] ? tomoyo_check_open_permission+0x38e/0x470 [ 674.644353][ T31] ? tty_open+0x10e/0xd70 [ 674.644371][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 674.644399][ T31] tty_open+0x22d/0xd70 [ 674.644434][ T31] ? __pfx_tty_open+0x10/0x10 [ 674.644460][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 674.644503][ T31] chrdev_open+0x4cd/0x5e0 [ 674.644552][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 674.644581][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 674.644624][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 674.644651][ T31] do_dentry_open+0x785/0x14e0 [ 674.644697][ T31] vfs_open+0x3b/0x340 [ 674.644724][ T31] ? path_openat+0x2df0/0x3860 [ 674.644753][ T31] path_openat+0x2e08/0x3860 [ 674.644795][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 674.644923][ T31] ? stack_depot_save_flags+0x33/0x810 [ 674.645025][ T31] ? __pfx_path_openat+0x10/0x10 [ 674.645049][ T31] ? __x64_sys_openat+0x138/0x170 [ 674.645080][ T31] ? do_syscall_64+0x14d/0xf80 [ 674.645132][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.645352][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.645392][ T31] do_file_open+0x23e/0x4a0 [ 674.645425][ T31] ? __pfx_do_file_open+0x10/0x10 [ 674.645474][ T31] ? _raw_spin_unlock+0x28/0x50 [ 674.645539][ T31] ? alloc_fd+0x64b/0x6c0 [ 674.645583][ T31] do_sys_openat2+0x113/0x200 [ 674.645616][ T31] ? __se_sys_futex+0x3a8/0x450 [ 674.645657][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.646140][ T31] ? rcu_is_watching+0x15/0xb0 [ 674.646186][ T31] __x64_sys_openat+0x138/0x170 [ 674.646225][ T31] do_syscall_64+0x14d/0xf80 [ 674.646248][ T31] ? trace_irq_disable+0x3b/0x150 [ 674.646298][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.646322][ T31] ? clear_bhb_loop+0x40/0x90 [ 674.646351][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.646380][ T31] RIP: 0033:0x7f04dbf9c799 [ 674.646452][ T31] RSP: 002b:00007f04dce45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.646508][ T31] RAX: ffffffffffffffda RBX: 00007f04dc216270 RCX: 00007f04dbf9c799 [ 674.646526][ T31] RDX: 0000000000008003 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 674.646542][ T31] RBP: 00007f04dc032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 674.646558][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.646573][ T31] R13: 00007f04dc216308 R14: 00007f04dc216270 R15: 00007f04dc33fa48 [ 674.646609][ T31] [ 674.646622][ T31] INFO: task syz.4.787:11126 blocked for more than 143 seconds. [ 674.646642][ T31] Tainted: G L syzkaller #0 [ 674.646655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.646667][ T31] task:syz.4.787 state:D stack:28160 pid:11126 tgid:11120 ppid:5845 task_flags:0x400040 flags:0x00080002 [ 674.646744][ T31] Call Trace: [ 674.646754][ T31] [ 674.646769][ T31] __schedule+0x15dd/0x52d0 [ 674.646827][ T31] ? __pfx___schedule+0x10/0x10 [ 674.646868][ T31] ? schedule+0x90/0x360 [ 674.646902][ T31] schedule+0x164/0x360 [ 674.646938][ T31] schedule_preempt_disabled+0x13/0x30 [ 674.646971][ T31] __mutex_lock+0x7fe/0x1300 [ 674.647000][ T31] ? __mutex_lock+0x5ac/0x1300 [ 674.647027][ T31] ? tty_open+0x22d/0xd70 [ 674.647052][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 674.647085][ T31] ? __kmalloc_cache_noprof+0x31c/0x660 [ 674.647112][ T31] ? tomoyo_check_open_permission+0x38e/0x470 [ 674.647140][ T31] ? tty_open+0x10e/0xd70 [ 674.647161][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 674.647190][ T31] tty_open+0x22d/0xd70 [ 674.647225][ T31] ? __pfx_tty_open+0x10/0x10 [ 674.647252][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 674.647283][ T31] chrdev_open+0x4cd/0x5e0 [ 674.647316][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 674.647344][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 674.647375][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 674.647403][ T31] do_dentry_open+0x785/0x14e0 [ 674.647449][ T31] vfs_open+0x3b/0x340 [ 674.647480][ T31] ? path_openat+0x2df0/0x3860 [ 674.647506][ T31] path_openat+0x2e08/0x3860 [ 674.647555][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 674.647584][ T31] ? stack_depot_save_flags+0x33/0x810 [ 674.647622][ T31] ? __pfx_path_openat+0x10/0x10 [ 674.647644][ T31] ? __x64_sys_openat+0x138/0x170 [ 674.647675][ T31] ? do_syscall_64+0x14d/0xf80 [ 674.647695][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.647727][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.647775][ T31] do_file_open+0x23e/0x4a0 [ 674.647807][ T31] ? __pfx_do_file_open+0x10/0x10 [ 674.647852][ T31] ? _raw_spin_unlock+0x28/0x50 [ 674.647882][ T31] ? alloc_fd+0x64b/0x6c0 [ 674.647925][ T31] do_sys_openat2+0x113/0x200 [ 674.647958][ T31] ? __se_sys_futex+0x3a8/0x450 [ 674.647988][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.648027][ T31] ? rcu_is_watching+0x15/0xb0 [ 674.648072][ T31] __x64_sys_openat+0x138/0x170 [ 674.648112][ T31] do_syscall_64+0x14d/0xf80 [ 674.648134][ T31] ? trace_irq_disable+0x3b/0x150 [ 674.648167][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.648191][ T31] ? clear_bhb_loop+0x40/0x90 [ 674.648220][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.648357][ T31] RIP: 0033:0x7f632659c799 [ 674.648387][ T31] RSP: 002b:00007f63247d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.648415][ T31] RAX: ffffffffffffffda RBX: 00007f6326816180 RCX: 00007f632659c799 [ 674.648432][ T31] RDX: 0000000000021800 RSI: 0000200000001840 RDI: ffffffffffffff9c [ 674.648451][ T31] RBP: 00007f6326632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 674.648466][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.648479][ T31] R13: 00007f6326816218 R14: 00007f6326816180 R15: 00007f632693fa48 [ 674.648514][ T31] [ 674.648688][ T31] [ 674.648688][ T31] Showing all locks held in the system: [ 674.648703][ T31] 3 locks held by kworker/u8:1/13: [ 674.648719][ T31] #0: ffff88801cb85948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 674.649047][ T31] #1: ffffc90000127c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 674.649134][ T31] #2: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd6/0x660 [ 674.649300][ T31] 3 locks held by kworker/1:0/24: [ 674.649315][ T31] 1 lock held by khungtaskd/31: [ 674.649329][ T31] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 674.649424][ T31] 6 locks held by kworker/u8:4/58: [ 674.649446][ T31] 3 locks held by kworker/u8:8/1313: [ 674.649459][ T31] #0: ffff888032099148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 674.649520][ T31] #1: ffffc900054ffc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 674.649586][ T31] #2: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 674.651212][ T31] 2 locks held by getty/5579: [ 674.651227][ T31] #0: ffff8880329860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 674.651507][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 674.651573][ T31] 3 locks held by kworker/0:3/5832: [ 674.651587][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 674.651653][ T31] #1: ffffc90003bf7c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 674.651719][ T31] #2: ffffffff8fee5aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 674.652285][ T31] 2 locks held by kworker/0:5/5916: [ 674.652304][ T31] 4 locks held by syz.0.778/10933: [ 674.652319][ T31] #0: ffff8880776ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 674.652388][ T31] #1: ffff8880776ac130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x211/0xa20 [ 674.652497][ T31] #2: ffff8880776ac2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1ec/0x12a0 [ 674.652558][ T31] #3: ffffc9000468b380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x6ae/0x12a0 [ 674.652619][ T31] 4 locks held by syz.3.784/11067: [ 674.652633][ T31] 1 lock held by syz.3.784/11068: [ 674.652647][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.652706][ T31] 1 lock held by syz.4.787/11126: [ 674.652720][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.652779][ T31] 1 lock held by syz.1.798/11208: [ 674.652793][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x108/0x340 [ 674.652895][ T31] 1 lock held by syz.2.805/11840: [ 674.652909][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.652972][ T31] 1 lock held by syz.7.806/12294: [ 674.652986][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653045][ T31] 1 lock held by syz.5.811/12300: [ 674.653059][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653120][ T31] 1 lock held by syz.6.822/12992: [ 674.653133][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x108/0x340 [ 674.653200][ T31] 1 lock held by syz.9.833/13624: [ 674.653213][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653272][ T31] 1 lock held by syz.8.834/13623: [ 674.653285][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653344][ T31] 1 lock held by syz.8.834/13626: [ 674.653357][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653419][ T31] 1 lock held by syz.4.844/14191: [ 674.653433][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x108/0x340 [ 674.653501][ T31] 1 lock held by syz.0.858/14835: [ 674.653515][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653573][ T31] 1 lock held by syz.0.858/14842: [ 674.653587][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653647][ T31] 1 lock held by syz.1.870/15185: [ 674.653661][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653726][ T31] 1 lock held by syz.2.905/16504: [ 674.653740][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653799][ T31] 1 lock held by syz.9.925/16706: [ 674.653813][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.653950][ T31] 1 lock held by syz.6.926/16728: [ 674.653967][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.654029][ T31] 1 lock held by syz.5.934/17103: [ 674.654043][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.654103][ T31] 1 lock held by syz.8.939/17263: [ 674.654181][ T31] #0: ffffffff8eff2fe8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 674.654439][ T31] 1 lock held by syz-executor/17898: [ 674.654457][ T31] #0: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 674.654537][ T31] 4 locks held by syz.3.950/18236: [ 674.654551][ T31] #0: ffffffff8fee5aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x19a/0x5a0 [ 674.654622][ T31] #1: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 674.654781][ T31] #2: ffff88808bf98788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1a8/0x1470 [ 674.654843][ T31] #3: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 674.654917][ T31] 1 lock held by syz.0.951/18261: [ 674.654932][ T31] 1 lock held by syz.4.952/18271: [ 674.654946][ T31] 2 locks held by syz-executor/18290: [ 674.654959][ T31] #0: ffff88804d6f5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 674.655129][ T31] #1: ffffffff8fee5aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 674.655201][ T31] [ 674.655208][ T31] ============================================= [ 674.655208][ T31] [ 674.655225][ T31] NMI backtrace for cpu 1 [ 674.655327][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 674.655354][ T31] Tainted: [L]=SOFTLOCKUP [ 674.655362][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.655374][ T31] Call Trace: [ 674.655383][ T31] [ 674.655392][ T31] dump_stack_lvl+0xe8/0x150 [ 674.655431][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 674.655515][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.655547][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 674.655577][ T31] sys_info+0x135/0x170 [ 674.655600][ T31] watchdog+0xfd9/0x1030 [ 674.655639][ T31] ? watchdog+0x21a/0x1030 [ 674.655678][ T31] kthread+0x388/0x470 [ 674.655700][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.655729][ T31] ? __pfx_kthread+0x10/0x10 [ 674.655751][ T31] ret_from_fork+0x51e/0xb90 [ 674.655782][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.655808][ T31] ? __switch_to+0xc7d/0x1450 [ 674.655853][ T31] ? __pfx_kthread+0x10/0x10 [ 674.655875][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.655921][ T31] [ 674.655929][ T31] Sending NMI from CPU 1 to CPUs 0: [ 674.655960][ C0] NMI backtrace for cpu 0 [ 674.655976][ C0] CPU: 0 UID: 0 PID: 5916 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.656001][ C0] Tainted: [L]=SOFTLOCKUP [ 674.656008][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.656020][ C0] Workqueue: events free_obj_work [ 674.656093][ C0] RIP: 0010:rcu_is_watching+0x35/0xb0 [ 674.656118][ C0] Code: 05 80 1e 71 11 e8 eb 4a 03 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 d7 1a 8e 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 9c 33 85 00 48 c7 c3 58 09 1d 93 [ 674.656134][ C0] RSP: 0018:ffffc900043b7948 EFLAGS: 00000802 [ 674.656149][ C0] RAX: 1ffffffff1c35af2 RBX: 0000000000000000 RCX: 0000000080000001 [ 674.656162][ C0] RDX: 0000000000000000 RSI: ffffffff8c27b360 RDI: ffffffff8c27b320 [ 674.656175][ C0] RBP: 0000000000000000 R08: ffffffff90118bb7 R09: 1ffffffff2023176 [ 674.656187][ C0] R10: dffffc0000000000 R11: fffffbfff2023177 R12: ffff8880ad6bc658 [ 674.656200][ C0] R13: 0000000000000000 R14: ffffffff8e1ad790 R15: dffffc0000000000 [ 674.656213][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 674.656229][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.656241][ C0] CR2: 0000200000108030 CR3: 0000000090010000 CR4: 00000000003526f0 [ 674.656257][ C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 674.656268][ C0] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 674.656281][ C0] Call Trace: [ 674.656288][ C0] [ 674.656296][ C0] trace_irq_disable+0x3b/0x150 [ 674.656328][ C0] kasan_quarantine_put+0x2f/0x1f0 [ 674.656358][ C0] kmem_cache_free+0x187/0x630 [ 674.656379][ C0] ? free_obj_work+0x391/0x4c0 [ 674.656400][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 674.656430][ C0] free_obj_work+0x391/0x4c0 [ 674.656454][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 674.656478][ C0] ? process_scheduled_works+0xa25/0x1830 [ 674.656501][ C0] ? process_scheduled_works+0xa25/0x1830 [ 674.656525][ C0] process_scheduled_works+0xb02/0x1830 [ 674.656562][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.656589][ C0] ? assign_work+0x3d5/0x5e0 [ 674.656613][ C0] worker_thread+0xa50/0xfc0 [ 674.656651][ C0] kthread+0x388/0x470 [ 674.656667][ C0] ? __pfx_worker_thread+0x10/0x10 [ 674.656690][ C0] ? __pfx_kthread+0x10/0x10 [ 674.656706][ C0] ret_from_fork+0x51e/0xb90 [ 674.656730][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 674.656760][ C0] ? __switch_to+0xc7d/0x1450 [ 674.656781][ C0] ? __pfx_kthread+0x10/0x10 [ 674.656798][ C0] ret_from_fork_asm+0x1a/0x30 [ 674.656832][ C0] [ 674.665718][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 674.665749][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 674.665783][ T31] Tainted: [L]=SOFTLOCKUP [ 674.665789][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.665799][ T31] Call Trace: [ 674.665806][ T31] [ 674.665813][ T31] vpanic+0x56c/0xa60 [ 674.665840][ T31] ? __pfx___schedule+0x10/0x10 [ 674.665865][ T31] ? __pfx_vpanic+0x10/0x10 [ 674.665905][ T31] panic+0xc5/0xd0 [ 674.665925][ T31] ? __pfx_panic+0x10/0x10 [ 674.665948][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 674.665994][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 674.666018][ T31] watchdog+0x1023/0x1030 [ 674.666046][ T31] ? watchdog+0x21a/0x1030 [ 674.666075][ T31] kthread+0x388/0x470 [ 674.666091][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.666113][ T31] ? __pfx_kthread+0x10/0x10 [ 674.666129][ T31] ret_from_fork+0x51e/0xb90 [ 674.666152][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.666171][ T31] ? __switch_to+0xc7d/0x1450 [ 674.666191][ T31] ? __pfx_kthread+0x10/0x10 [ 674.666207][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.666247][ T31] [ 674.666898][ T31] Kernel Offset: disabled