last executing test programs: 22m22.328445516s ago: executing program 1 (id=1961): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c478", 0x2}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I%', 0x2}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)}}], 0x3, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect$midi(0x0, 0x4f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000404104484240000102030109023d00010105800409040000030103000009050f03000202060b05250101b409050e03ff0303520805250111"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x80, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22m19.135136793s ago: executing program 1 (id=1968): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f0000000100)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x38d6, 0x68282) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000400)='./cgroup\x00', 0x101) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28040600) fchown(r1, 0xee00, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0x196, [0x0, 0x80000200, 0x80000336, 0x80000676], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x4a, 0xf8, 'veth1_to_team\x00', 'team_slave_1\x00', 'syzkaller1\x00', 'netpci0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x96, 0x106, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x4c, {{0xffffff18, 0x2, 0xffff, 0x1, 0x0, "306bebdfbedecbfda350624e999ca3b07699b038639f0aa2d9f2d196d5bf7702500dcb9491be48cd1bfa3f56469dbfe1509c5fc8d3c3616473a1a8bbba5a137e"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1e6) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x501242, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 22m18.54577084s ago: executing program 1 (id=1980): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) statx(0xffffffffffffffff, 0x0, 0x400, 0x7ff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x30) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x51, 0x2, 0x3, "bc5749000200000000000000000900", 0x30314142}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req={0x6, 0x8, 0x5, 0x4}, 0x10) r3 = socket(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f00008e7000/0x3000)=nil, 0x3000, 0x100000d, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 22m17.628687029s ago: executing program 1 (id=1973): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xd5, 0xc9}}}, 0x6) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)) r4 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, 0x0) preadv(r0, &(0x7f0000001340), 0x0, 0x5, 0x3) 22m16.676099379s ago: executing program 1 (id=1975): r0 = fsopen(&(0x7f0000001c80)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000001cc0)='noxattr', &(0x7f0000001d00)="a9", 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r2, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0xffffffffffffff9c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r3) ptrace(0x4208, r3) ptrace$peekuser(0x3, r3, 0x4) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') close(0x3) 22m15.593923973s ago: executing program 1 (id=1977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(&(0x7f0000001b40)={0x20001200, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x2}, &(0x7f0000000140)=""/156, 0x9c, &(0x7f0000000b00)=""/4096, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_setup(0x1028, 0x0) process_vm_writev(r3, &(0x7f0000000500), 0x0, &(0x7f0000002c80)=[{&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0x70000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x3, 0x6, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0xd000, 0xd, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 22m0.524752566s ago: executing program 32 (id=1977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(&(0x7f0000001b40)={0x20001200, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x2}, &(0x7f0000000140)=""/156, 0x9c, &(0x7f0000000b00)=""/4096, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_setup(0x1028, 0x0) process_vm_writev(r3, &(0x7f0000000500), 0x0, &(0x7f0000002c80)=[{&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0x70000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x3, 0x6, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0xd000, 0xd, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 21m35.066891085s ago: executing program 4 (id=2058): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0xc}}], 0xc, 0x8801}}], 0x1, 0x20004031) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') readv(r1, &(0x7f0000000200), 0x10000000000000d2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4075, 0xfeb}, {&(0x7f0000000200)=""/2, 0x2}], 0x2}, 0x2}], 0x1, 0x40010100, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) getrusage(0x0, &(0x7f0000000000)) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x3, 0x6371, 0x335, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendfile(r3, r2, 0x0, 0xffba83) 21m34.73092622s ago: executing program 4 (id=2059): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x5, r6, r5}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000100000000008000240000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x68, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, '{>C!'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x80c0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r3}) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000100)={r7}) 21m31.273871581s ago: executing program 4 (id=2068): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x56, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa1", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x4c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x3, r4, 0x1, 0x3a, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0x9}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0x7e3, @mcast1, 0x5}}, 0x7fffffff, 0x2, 0x80, 0x5, 0x72, 0x81, 0xcb}, 0x9c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000280), 0x8200, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000300)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010429bd700000000000006f0000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600400012800b00010067656e657665000030000280080001000100000005000c000000000014000700fc02000000000000000000000000000105000a00010000001400030067656e6576653100"], 0x74}}, 0x2000000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x2, 0x13, 0x76, 0x6, 0x3, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x17, 0xc5, 0x6}]}, 0x18}}, 0x400c000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfffffffffffffe6c, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 21m28.012293334s ago: executing program 4 (id=2073): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000f3ffffffffffffff00000000002001000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000001000044000500ac1414aa000000000000000000000000000000003c00000000000000e00000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2101) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000100)={0x1, 0x1, [0x7, 0x101, 0x5, 0x7, 0x5, 0x0, 0x9, 0x7]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000ac0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r9}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4888) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r10, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000040)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199bf0dde5, 0xdd1, 0x4005, 0xf, 0x800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x7, 0x1, 0x0, {0x5, 0x0, 0xe418000000, 0x80000005, 0x4, 0x1, 0x9e9, 0xfffffffe, 0xb876, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x1, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) 21m25.145894111s ago: executing program 2 (id=2077): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0x5, 0xc, 0x400001}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xe, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10008840}, 0x800) 21m23.143560232s ago: executing program 4 (id=2079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0x7, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0xfffff000, 0x31, 0xab3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400d8}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, 0x0, 0x4005) 21m20.141256431s ago: executing program 3 (id=2084): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000400)={r1, 0x3, 0x80, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) r6 = dup2(r4, r4) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r10, 0x29, 0x1e, &(0x7f0000000040), 0x4) 21m17.481945732s ago: executing program 4 (id=2089): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r6, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x10, 0x4, 0x0, 0x3c, 0x6c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xb, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xc8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @loopback, @remote]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 21m14.983557917s ago: executing program 2 (id=2095): r0 = socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x12f9, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000010000", @ANYRES32], 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x94, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x34, 0x68, 0x6, 0x8}}}]}, 0x94}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x5d, 0x35, 'dummy0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0xfff8}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000003c0), 0x31, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 21m12.525923436s ago: executing program 2 (id=2101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086201, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = dup(r5) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3c00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48095) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x18000}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000004000300"/28], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) syz_usb_control_io$hid(r7, 0x0, 0x0) fstat(r2, &(0x7f0000000480)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r10}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r10}, 0x38) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xfffffec4, &(0x7f0000000400)=ANY=[@ANYRES8=r9]) 21m8.393944322s ago: executing program 3 (id=2108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) capget(&(0x7f0000000040)={0x20071026}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$kcm(0xa, 0x3, 0x73) epoll_create(0x5) r4 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000003780)=""/4096, 0x1000}], 0x1, 0x163, 0x0) 21m2.43617055s ago: executing program 33 (id=2089): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r6, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x10, 0x4, 0x0, 0x3c, 0x6c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xb, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xc8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @loopback, @remote]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 21m1.184731805s ago: executing program 2 (id=2114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0x7, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0xfffff000, 0x31, 0xab3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400d8}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)}, 0x4005) 20m58.296973181s ago: executing program 2 (id=2118): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) set_mempolicy(0x2002, 0x0, 0x200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xff, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001"], 0xdc}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x25dfdbfc, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e21}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r3], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, &(0x7f00000000c0)="c9", 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0xff, 0x0, 0xb}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61920b55f6f876b2ff"}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000004c0)="a1bc16bf171257469e902d48903b428afcf7e5fcc32950bfb75bd65d3b21408921caf0c5f3f357fd3e21b7c294af755d7e4ef4913c6c22d8d007758959f3d0fe5ecaa67b3498c71b98046a655a7d87d0713bdd16a0fb86fe0db678dabdb3030000008c54e984fbe202d20e2d433e6fc12915d1d73b9e34dff4de4a912ad5f2d35fc0f35413e36c3f9afa0ca88f5e3b4daa94dc69d27ab6fbefd9c9633fa69c693d8359da4425bb5b0070fd1ce2fd9566f5c5098ebb769b84bf4c5c746d835289b0aadbd5d5e4e3632a25ef356bdb051a3313c7a85571c744f402e36d21b9ff5b1d068a9525ce9e0f4c74331710e730401bfe657c8efdb86be0d230210cd8a788e2709542fec36b88a72b3b43b710abed5933e9", 0x113, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 20m56.741647665s ago: executing program 3 (id=2121): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x80a40) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)}, 0xc044) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) sendfile(r4, r4, 0x0, 0x1002000ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_cancel(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000000500), 0x0, 0x4, 0x0, 0x1}, &(0x7f0000000600)) 20m53.768648404s ago: executing program 3 (id=2124): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) fchdir(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x2}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) 20m53.017193608s ago: executing program 2 (id=2126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000002780)=""/3, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000180)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) syz_usb_connect$uac1(0x5, 0x81, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x9, 0x40, 0xc0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x5, 0x2, {0x7, 0x25, 0x1, 0xc, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0xfa, 0x3}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7f, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x6, 0x5, {0x7, 0x25, 0x1, 0x8, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 20m50.199680322s ago: executing program 3 (id=2129): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xffff0f45, 0x1}, 0x10) write(r0, &(0x7f0000001dc0)="240000001a005f0214f9f407000904001f00000000040000000000000800040001000000", 0x24) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x0, 0x58) socket$netlink(0x10, 0x3, 0xa) getdents(r1, 0x0, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f0904"], 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) r5 = openat$vcs(0xffffff9c, 0x0, 0x10001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0xa}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900024073797a32000000000900010073797a30000000000800054000200003600000000c0a01020000000000000000010000000900020073797a32000000003400038030000080080006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xe4}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0xb7, 0x1000) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x1c) write(r7, 0x0, 0x0) 20m43.17814605s ago: executing program 3 (id=2137): inotify_init() open(0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {0x1}, 0xfe}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x81, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0x7f}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x6, {0x4, 0x4, 0xd, 0x8, 0xfffb, 0x100, 0x7ff, 0xfff, 0x2, 0x7, 0xc1, 0xfffffffb, 0x3ff, 0x400, "10490f216a3665015361919205a0768c8794f1ec3a1e6d18a2fa50d133aefe2e"}}) sendfile(r4, r5, 0x0, 0x20000023893) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/64, 0x40}], 0x1, 0x8001, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 20m37.734934418s ago: executing program 34 (id=2126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000002780)=""/3, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000180)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) syz_usb_connect$uac1(0x5, 0x81, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x9, 0x40, 0xc0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x5, 0x2, {0x7, 0x25, 0x1, 0xc, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0xfa, 0x3}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7f, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x6, 0x5, {0x7, 0x25, 0x1, 0x8, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 20m27.729810157s ago: executing program 35 (id=2137): inotify_init() open(0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {0x1}, 0xfe}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x81, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0x7f}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x6, {0x4, 0x4, 0xd, 0x8, 0xfffb, 0x100, 0x7ff, 0xfff, 0x2, 0x7, 0xc1, 0xfffffffb, 0x3ff, 0x400, "10490f216a3665015361919205a0768c8794f1ec3a1e6d18a2fa50d133aefe2e"}}) sendfile(r4, r5, 0x0, 0x20000023893) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/64, 0x40}], 0x1, 0x8001, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1m15.433445752s ago: executing program 8 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) sendfile(r3, r2, 0x0, 0x200000) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket(0x1, 0x5, 0x0) sendto$inet(r1, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0xc3) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r12, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 1m14.068543359s ago: executing program 8 (id=4344): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaaf25) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80104132, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}, {&(0x7f0000006d40)="cd", 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 1m13.113537036s ago: executing program 8 (id=4346): socket$unix(0x1, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000280)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x10, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) 1m9.679834641s ago: executing program 8 (id=4350): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaaf25) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80104132, &(0x7f0000000140)) writev(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x2, 0xc, 0x5, 0xfffffffe, 0xfffffffd, 0x2]}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r9, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 1m8.847953332s ago: executing program 8 (id=4353): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x4c, 0x0, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setpriority(0x2, 0x0, 0xd2f4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x142000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x5, 0x4, 0x0, 0x3, 0xd71c, 0x2, 0x81, 0x4, 0x5, 0x10000, 0x5, 0x6, 0xc, 0x6, 0x12, 0x34, {0xf, 0x1ff}, 0x1, 0x1}}) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(0x0, 0x80140, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) 1m2.733445935s ago: executing program 8 (id=4365): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r6, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 47.455353357s ago: executing program 36 (id=4365): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r6, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 26.573462477s ago: executing program 5 (id=4418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) creat(0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb4}}, 0x8004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r5, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x3, 0x200000, 0x2000, &(0x7f0000003000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 24.667218017s ago: executing program 5 (id=4421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 22.704487975s ago: executing program 0 (id=4424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x80400, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_setup(0x937, 0x0) r5 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x15) preadv(r5, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000540)=ANY=[], 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_vhci(0x0, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) ioctl$FE_SET_PROPERTY(r9, 0x40086f52, &(0x7f0000000500)={0x6, &(0x7f0000000400)=[{0x3, '\x00', @buffer={"650de984923dee544a6fc39fa0ceab95bf2b18124097fb938a0b99a0294c3e59", 0x20}, 0x10}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=r10], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) 21.332155109s ago: executing program 7 (id=4425): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xf, 0x5, 0x12, 0x9, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x1}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e26, 0xfffffffc, @loopback}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x400000ff, 0x2, 0x4, 0x0, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f0000000100)={0x2, 0x20, 0x2, 0x4000}) r6 = gettid() r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf"], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r9, 0xc0045520, &(0x7f00000001c0)=0x9) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000080)={0x5, 0xa, 0x2, 0x0, 0x4}) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r11, 0x40045613, &(0x7f0000000000)=0xff) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x11, 0x0, 0xb}]}) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ptrace$ARCH_SET_CPUID(0x1e, r6, 0x1, 0x1012) 20.001636587s ago: executing program 5 (id=4428): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c1405386bab9074b6", 0x58}], 0x2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r5 = socket(0x11, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmmsg(r5, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can={0x1d, r7}, 0x80, 0x0}}], 0x1, 0x8010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 19.100797344s ago: executing program 7 (id=4430): socketpair(0x1, 0x5, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x564) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x0, 0x0, 0x0, 0x6, 0x29, &(0x7f0000000200)=""/41, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = creat(&(0x7f0000000140)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)) r5 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, 0x0, 0x0, 0xffffffffffffff9c) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 17.281083981s ago: executing program 0 (id=4431): io_setup(0x2278, &(0x7f0000000180)=0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x51ad96a181f630bf, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002880)=@generic={0x0, r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x27dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8881}, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000580)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x20000400) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}}, 0x4000050) io_submit(r0, 0x2, &(0x7f0000000140)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x4, r4, 0x0}]) 15.374979737s ago: executing program 5 (id=4433): creat(0x0, 0xd931d3864d39ddd8) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = getpgid(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x21, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a140000000b0a010200000000000000c4bd00000214000000110001000000000000000000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip6_mr_vif\x00') fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) r5 = socket$rds(0x15, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xfffffff7}, 0x0, 0x0, 0x8, 0x1, 0x72b, 0x4, 0x9, 0x3}}], 0x58}, 0x0) 12.702058032s ago: executing program 0 (id=4436): r0 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800fbdbdf2508004a00c70000000000e6ff000000000000920fc2e0ea8eafd8209dccfe87610a927e672d6c3e573ece6c88ebfd3817c3f7408295636c24"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000007c0)={r5, 0x1, 0x6}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40020}, 0x4000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r8 = io_uring_setup(0x3c17, &(0x7f0000000200)={0x0, 0x0, 0x100}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000001b00)={0x0, 0x2000000, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname$packet(r9, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, r7, 0x303, 0x0, 0x25dfdbfd, {0x13}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="040028bd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080009faff00000008000100ff63690011000200040030303a30303a31302e300000000008000300020000000800ac0900030000000e0001006e6574788d0005696d0000000f0002006e657464657673696d30000008000300020000000800090003000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4005}, 0x20008841) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={'sha384\x00'}}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x4, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 11.432796471s ago: executing program 6 (id=4437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r7, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11.39927216s ago: executing program 9 (id=4438): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaaf25) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80104132, &(0x7f0000000140)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x2, 0xc, 0x5, 0xfffffffe, 0xfffffffd, 0x2]}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r9, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 11.297162448s ago: executing program 7 (id=4439): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da80006800400038008000200"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x40004) syz_emit_ethernet(0x6e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r0, 0x0) 10.259629397s ago: executing program 9 (id=4440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002300)={&(0x7f00000000c0)=[{0x90, 0x1011, 0x0, &(0x7f0000000080)}], 0x1}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0xa96) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf1, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3e, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0x3, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x10, 0x7, 0x2, 0x8, 0xb}, 0xe5, &(0x7f0000000200)={0x5, 0xf, 0xe5, 0x6, [@ptm_cap={0x3}, @generic={0x49, 0x10, 0x4, "a42c504364fc2b9b4c3f06e928ac0fdf30fbd704c22e5724ccc64b2733a9391a18adf231a04ce8fa3469171a944b7cd8255dc8842f6dd78a5928391f182bc5d02b80d9c775b5"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "c9c08f6f785eb5a7c7f949b60ce15b7c"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x4, 0xff00, 0x8, [0xff3f60, 0x0, 0x30, 0x30]}, @generic={0x59, 0x10, 0xa, "bc6eae3e35a258c2b1ce19387349c5a289d2847356d638cde670cf2b4b44ab90184cfadcfb9fa80cceb2baeff168770eb2f1fb569c5bf695f048199b3f67f9180289042777c5c65231f295e5cf8cbd0c72324a06f9b4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x3, 0x2, 0xfe}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2409}}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2421}}, {0x51, &(0x7f0000000440)=@string={0x51, 0x3, "6f85c9ae4357c3a22a8578095b8cb00ae7149881571adc7870ac7d72397356197219238539f8bd3228ad617cae633edc51d682de176febc8dd12c54e14e040c86c49eb89127093e55bead935f9e924"}}]}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000038c0)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000000740)="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", 0x1000}, {0x0}], 0x4, 0x0, 0x0, 0x4008000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000055}}, {{&(0x7f0000002280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002140)="6584091e306b93663bb4a66b2716a2824895aae52a7255308fe84472aff5c9326328e031a6a748982ab93b4d9d45663ab4aeef72f00c8e5a2d753bfe4314a9eb29bf9ce175fbe76f93785fc853df70508ed66df275d9d6e861b1e3bfa03a2d832a6a4ea800a868", 0x67}], 0x1}}, {{&(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002280)}, {&(0x7f0000002340)="035f93714c71f021c1be4cf10261c6a08934340fd3aaa5915826315ba9bb43efa7583e9fda2d68665a323a9f0e75285d3a71248766957b40f7ee59c792b12833a5", 0x41}], 0x2, &(0x7f0000003840)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r3, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x74, 0x8000}}], 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ustat(0x7f, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000180)="f466b9ea02000066b80d00000066ba000000000f30660f38219b0048ed0fc7a900000fc75853360f300f883400f3786a440f20c066350c000000440f22c0", 0x3e}], 0x1, 0x30, &(0x7f0000001d80)=[@cr0={0x0, 0x40000}], 0x1) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 9.616867201s ago: executing program 0 (id=4441): r0 = socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0xb, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='permprofile &&'], 0xff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x60, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x60}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) syz_emit_ethernet(0x8a, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x54, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9"}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f010081a7390e0401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139f", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) 8.053585813s ago: executing program 6 (id=4442): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a01010000000000040000010000000900030073797a32000000001c000000060a010300000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r6, 0x29, 0x6, &(0x7f0000000080)=0x45, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r4, 0x0, 0x47, 0x9, 0x5, 0x8}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x2b8, 0x25c, 0x160, 0x7, 0x228, 0x3a8, 0x3a8, 0x228, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0xf8, 0x160, 0xa010000, {}, [@common=@ipv6header={{0x28}, {0x81}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x3, 0x1, 'pptp\x00', 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 6.950790499s ago: executing program 9 (id=4443): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x25, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1281, 0x0, 0x40000332, 0x0, r4}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket(0xf, 0x3, 0x2) write(r5, &(0x7f0000a97ff0)="020baf0102", 0x5) syz_emit_ethernet(0x1d7, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 5.689702311s ago: executing program 7 (id=4444): socket$inet6(0xa, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) socket(0x2b, 0x80801, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5368, &(0x7f0000000100)={0x0, 0x2503, 0x2, 0x2, 0x31a}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x80, 0x0, 0x55}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001880)={{r2}, "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"}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x440) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000844) pselect6(0x40, &(0x7f0000001380)={0x6, 0x9b, 0x9, 0x5d7, 0x40000000000006, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 5.689171915s ago: executing program 6 (id=4445): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x80000000000009, 0x14d080) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x404883, 0x0) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r6, &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 5.554413484s ago: executing program 9 (id=4446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x801, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000799000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xfffffffa, "b777b3d4a28b0a0b58b69017ba04cddf"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x7, 0x1, 0x0, 0x6, 0x9}}, {0x4}}]}]}, 0x6c}}, 0x40000) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb397054e89dc5deb, 0x5d031, 0xffffffffffffffff, 0x0) 3.678773568s ago: executing program 6 (id=4447): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4810) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x21d0, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a01010000000000040000010000000900030073797a32000000001c000000060a010300000000000000000100000108000b400000000014000000110001000000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYBLOB="ff72ba8a89d88671a6389a9e4f111618588538353151c9b13c6064ca4781"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r6, 0x29, 0x6, &(0x7f0000000080)=0x45, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r4, 0x0, 0x47, 0x9, 0x5, 0x8}, &(0x7f0000000280)=0x14) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x2b8, 0x25c, 0x160, 0x7, 0x228, 0x3a8, 0x3a8, 0x228, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0xf8, 0x160, 0xa010000, {}, [@common=@ipv6header={{0x28}, {0x81}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x3, 0x1, 'pptp\x00', 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 3.589616153s ago: executing program 5 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r7, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.469300601s ago: executing program 0 (id=4449): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaaf25) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80104132, &(0x7f0000000140)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 3.452688699s ago: executing program 7 (id=4450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0xa2c65) r6 = getpgrp(0x0) sched_getattr(r6, &(0x7f0000000180)={0x38}, 0x38, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.950222961s ago: executing program 9 (id=4451): r0 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800fbdbdf2508004a00c70000000000e6ff000000000000920fc2e0ea8eafd8209dccfe87610a927e672d6c3e573ece6c88ebfd3817c3f7408295636c24"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000007c0)={r5, 0x1, 0x6}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40020}, 0x4000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r8 = io_uring_setup(0x3c17, &(0x7f0000000200)={0x0, 0x0, 0x100}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000001b00)={0x0, 0x2000000, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname$packet(r9, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, r7, 0x303, 0x0, 0x25dfdbfd, {0x13}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="040028bd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080009faff00000008000100ff63690011000200040030303a30303a31302e300000000008000300020000000800ac0900030000000e0001006e6574788d0005696d0000000f0002006e657464657673696d30000008000300020000000800090003000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4005}, 0x20008841) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={'sha384\x00'}}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x4, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 2.600512328s ago: executing program 5 (id=4452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x41, '\x00', @local}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f80, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x41) openat$null(0xffffff9c, &(0x7f0000000100), 0x101800, 0x0) 2.288874902s ago: executing program 9 (id=4453): socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r2, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='changehat 8x0000000000000000^'], 0x1d) connect$pppoe(r9, 0x0, 0x0) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.140934464s ago: executing program 7 (id=4454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000e62b000000000000000500010007000000"], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x60046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.157175778s ago: executing program 0 (id=4455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x40004) syz_emit_ethernet(0x6e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r0, 0x0) 665.02689ms ago: executing program 6 (id=4456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000006000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000050) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cuse(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002500)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x5, 0x80000004, 0x8}, 0x14) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) close(0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xfffd, 0xfffffffd, 0x7, 0x1, 0xfefffffd}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r8], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x2000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0x1, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xeffd, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xdddd0000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x9, 0x1, 0xf, 0xb}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x2, 0x5462a0, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x200000000003, 0x3]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xf, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0x5000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0xfc, 0x7, 0x10}, {0xeeee8000, 0x8000000, 0x9, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 0s ago: executing program 6 (id=4457): pipe(&(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x97) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = getpid() syz_pidfd_open(r5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) kernel console output (not intermixed with test programs): 382.107:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22275 comm="syz.5.3742" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1687.158928][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3746'. [ 1687.176497][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3746'. [ 1688.106240][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3750'. [ 1688.419674][T22310] netlink: 'syz.6.3750': attribute type 1 has an invalid length. [ 1688.429117][T22310] netlink: 'syz.6.3750': attribute type 2 has an invalid length. [ 1691.795151][T22327] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3754'. [ 1691.895454][T22327] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1692.310235][T22332] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3755'. [ 1696.264794][T18713] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1696.440238][T18713] usb 8-1: Using ep0 maxpacket: 32 [ 1696.512382][T18713] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1696.632753][T18713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1696.683200][T18713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1696.717306][T18713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1696.744719][T18713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1696.822128][T18713] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1696.852267][T18713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.871174][T18713] usb 8-1: Product: syz [ 1696.896147][T18713] usb 8-1: Manufacturer: syz [ 1696.915215][T18713] usb 8-1: SerialNumber: syz [ 1696.948309][T18713] usb 8-1: config 0 descriptor?? [ 1697.569256][T22370] trusted_key: encrypted_key: master key parameter '' is invalid [ 1697.652984][T22385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.856136][T22385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.045686][T18713] iforce 8-1:0.0: usb_submit_urb failed: -110 [ 1698.073277][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1698.129889][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1698.175334][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1698.218773][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1698.246317][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1698.273908][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1698.326301][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1698.379940][T22385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.575835][T22385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.395153][T18713] iforce 8-1:0.0: usb_submit_urb failed: -110 [ 1699.428377][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.471142][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.503230][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.532262][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.568223][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.597377][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.629615][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.683005][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.721851][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.781669][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.821842][T18713] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 1699.857341][T18713] input input90: Timeout waiting for response from device. [ 1700.107825][T22394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3769'. [ 1700.205188][T22394] netlink: 'syz.6.3769': attribute type 1 has an invalid length. [ 1700.223011][T22394] netlink: 'syz.6.3769': attribute type 2 has an invalid length. [ 1700.302801][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3770'. [ 1701.089739][T18713] usb 8-1: USB disconnect, device number 35 [ 1702.623337][T22423] loop9: detected capacity change from 0 to 4096 [ 1702.667189][T22423] netlink: 16003 bytes leftover after parsing attributes in process `syz.6.3778'. [ 1702.711969][T22423] netlink: 'syz.6.3778': attribute type 10 has an invalid length. [ 1702.729080][T22423] team0 (unregistering): Port device team_slave_0 removed [ 1702.737914][T18713] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1702.750258][T22423] team0 (unregistering): Port device team_slave_1 removed [ 1702.897305][T18713] usb 6-1: Using ep0 maxpacket: 16 [ 1702.932684][T18713] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1702.969463][T18713] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1702.992509][T18713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.021285][T18713] usb 6-1: Product: syz [ 1703.038620][T18713] usb 6-1: Manufacturer: syz [ 1703.056109][T18713] usb 6-1: SerialNumber: syz [ 1703.083912][T18713] usb 6-1: config 0 descriptor?? [ 1703.757903][T22439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'. [ 1703.789726][T22439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'. [ 1703.905057][T12994] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1704.071385][T12994] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1704.085246][T12994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.094917][T12994] usb 9-1: Product: syz [ 1704.099730][T12994] usb 9-1: Manufacturer: syz [ 1704.106335][T12994] usb 9-1: SerialNumber: syz [ 1704.126864][T12994] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1704.148862][T18711] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1705.135172][T22447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1705.170163][T12994] usb 9-1: USB disconnect, device number 44 [ 1705.187742][T22448] kvm: apic: phys broadcast and lowest prio [ 1705.242399][T18711] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1705.252000][T18711] ath9k_htc: Failed to initialize the device [ 1705.265467][T12994] usb 9-1: ath9k_htc: USB layer deinitialized [ 1706.439067][T18713] usb 6-1: USB disconnect, device number 51 [ 1706.929496][T22461] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1708.199031][T22469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3788'. [ 1708.249442][T22469] netlink: 'syz.5.3788': attribute type 1 has an invalid length. [ 1708.258433][T22469] netlink: 'syz.5.3788': attribute type 2 has an invalid length. [ 1708.522339][T22476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1708.644863][T18713] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1708.796947][T18713] usb 8-1: Using ep0 maxpacket: 32 [ 1708.811429][T18713] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1708.828498][T18713] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.863174][T18713] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1708.888995][T18713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.900860][T18713] usb 8-1: Product: syz [ 1708.910174][T18713] usb 8-1: Manufacturer: syz [ 1708.918940][T18713] usb 8-1: SerialNumber: syz [ 1709.464856][T18713] usb 8-1: Cannot retrieve CPort count: -110 [ 1709.473801][T18713] usb 8-1: Cannot retrieve CPort count: -110 [ 1709.480940][T18713] es2_ap_driver 8-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 1709.870200][T22485] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1) [ 1711.500319][T12994] usb 8-1: USB disconnect, device number 36 [ 1712.154781][T12994] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1712.366144][T12994] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.389639][T12994] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1712.400384][T12994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.410902][T12994] usb 8-1: Product: syz [ 1712.416681][T12994] usb 8-1: Manufacturer: syz [ 1712.421723][T12994] usb 8-1: SerialNumber: syz [ 1712.436080][T18711] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1712.452627][T12994] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1712.599515][T18711] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1712.610730][T18711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.649523][T18711] usb 9-1: config 0 descriptor?? [ 1713.170747][T12994] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1713.276848][T12994] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1713.318768][T18711] usb 9-1: Cannot set autoneg [ 1713.346649][T18711] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1713.359534][T12994] usb 8-1: media controller created [ 1713.426504][T18711] usb 9-1: USB disconnect, device number 45 [ 1713.436347][T12994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1713.772134][T12994] usb 8-1: USB disconnect, device number 37 [ 1714.247091][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1714.247124][ T30] audit: type=1326 audit(1783220412.417:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22516 comm="syz.7.3801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af0ec code=0x0 [ 1714.425668][ T30] audit: type=1326 audit(1783220412.587:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22516 comm="syz.7.3801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af0ec code=0x0 [ 1715.111696][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3804'. [ 1715.461924][T22538] netlink: 'syz.6.3804': attribute type 1 has an invalid length. [ 1715.499012][T22538] netlink: 'syz.6.3804': attribute type 2 has an invalid length. [ 1715.802889][T22542] netlink: 'syz.8.3805': attribute type 10 has an invalid length. [ 1715.822068][T22542] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3805'. [ 1716.550598][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3805'. [ 1718.019150][T22557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1718.055492][T22559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1719.386448][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3809'. [ 1720.164747][T18713] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1720.315611][T18713] usb 8-1: Using ep0 maxpacket: 8 [ 1720.327079][T18713] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.338122][T18713] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1720.349313][T18713] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1720.379289][T18713] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1720.401900][T18713] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1720.415925][T18713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.424121][T18713] usb 8-1: Product: syz [ 1720.429710][T18713] usb 8-1: Manufacturer: syz [ 1720.438978][T18713] usb 8-1: SerialNumber: syz [ 1720.459367][T18713] usb 8-1: config 0 descriptor?? [ 1720.495766][T18713] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 1720.532866][ T30] audit: type=1326 audit(1783220418.697:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1720.564708][T22579] netlink: 'syz.5.3813': attribute type 11 has an invalid length. [ 1720.595356][ T30] audit: type=1326 audit(1783220418.747:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1720.688351][ T30] audit: type=1326 audit(1783220418.747:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1720.734130][ T30] audit: type=1326 audit(1783220418.747:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1720.798368][ T30] audit: type=1326 audit(1783220418.747:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1720.845503][T18713] snd_usb_toneport 8-1:0.0: cannot get proper max packet size [ 1720.864855][T18713] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 1720.888937][T18713] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1720.913515][ T30] audit: type=1326 audit(1783220418.747:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1720.962500][ T30] audit: type=1326 audit(1783220418.747:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1720.996758][T18713] usb 8-1: USB disconnect, device number 38 [ 1721.042292][ T30] audit: type=1326 audit(1783220418.747:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1721.133858][ T30] audit: type=1326 audit(1783220418.747:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1721.202270][ T30] audit: type=1326 audit(1783220418.967:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.3811" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1722.149219][T22592] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1722.237389][T22592] bond3: (slave lo): Enslaving as an active interface with an up link [ 1722.279862][T22592] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1724.739554][T22605] vivid-006: disconnect [ 1725.918018][T22605] vivid-006: reconnect [ 1727.064947][T18713] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1727.322160][T18713] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 1727.334922][T18713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.362707][T18713] usb 6-1: config 0 has no interface number 0 [ 1727.384070][T18713] usb 6-1: config 0 interface 205 has no altsetting 0 [ 1727.428025][T18713] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1727.454955][T18711] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1727.467080][T18713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.475958][T18713] usb 6-1: Product: syz [ 1727.480478][T18713] usb 6-1: Manufacturer: syz [ 1727.486929][T18713] usb 6-1: SerialNumber: syz [ 1727.505497][T18713] usb 6-1: config 0 descriptor?? [ 1727.530275][T18713] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1727.555303][T18713] dvb-usb: bulk message failed: -22 (3/0) [ 1727.592822][T18713] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1727.625592][T18713] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1727.651771][T18713] usb 6-1: media controller created [ 1727.674029][T18713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1727.703983][T18713] dvb-usb: bulk message failed: -22 (6/0) [ 1727.712912][T18713] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1727.733926][T18711] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.772446][T18713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input92 [ 1727.783894][T18711] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.811631][T18713] dvb-usb: schedule remote query interval to 150 msecs. [ 1727.823356][T18713] dvb-usb: bulk message failed: -22 (3/0) [ 1727.838592][T22618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.847492][T18711] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1727.867399][T18713] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1727.965289][T22618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.974576][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1727.980833][T18713] dvb-usb: error while querying for an remote control event. [ 1727.995946][T18711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.105411][T18711] usb 9-1: config 0 descriptor?? [ 1728.164475][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1728.181206][T18713] dvb-usb: error while querying for an remote control event. [ 1728.354678][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1728.362436][T18713] dvb-usb: error while querying for an remote control event. [ 1728.544513][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1728.550604][T18713] dvb-usb: error while querying for an remote control event. [ 1728.609241][T18711] hid_parser_main: 23 callbacks suppressed [ 1728.609281][T18711] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 1728.739277][T18711] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1728.764458][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1728.781833][T18713] dvb-usb: error while querying for an remote control event. [ 1728.857167][T18711] cp2112 0003:10C4:EA90.0036: Part Number: 0xE1 Device Version: 0x47 [ 1728.964683][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1728.979552][T18713] dvb-usb: error while querying for an remote control event. [ 1729.121383][T22632] cp2112 0003:10C4:EA90.0036: pid 22632 passed too short report [ 1729.168421][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1729.181379][T18713] dvb-usb: error while querying for an remote control event. [ 1729.205829][T18711] cp2112 0003:10C4:EA90.0036: error requesting SMBus config [ 1729.301776][T18711] cp2112 0003:10C4:EA90.0036: probe with driver cp2112 failed with error -32 [ 1729.354746][T18713] dvb-usb: bulk message failed: -22 (1/0) [ 1729.408018][T18713] dvb-usb: error while querying for an remote control event. [ 1729.533729][T18713] usb 6-1: USB disconnect, device number 52 [ 1729.711809][T18713] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1730.038268][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3826'. [ 1730.107970][T22639] netlink: 'syz.7.3826': attribute type 1 has an invalid length. [ 1730.134608][T18713] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1730.240221][T22639] netlink: 'syz.7.3826': attribute type 2 has an invalid length. [ 1730.304563][T18713] usb 6-1: Using ep0 maxpacket: 16 [ 1730.340840][T18713] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1730.351557][T18713] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1730.365487][T18713] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1730.382493][T18713] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1730.398026][T18713] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1730.410168][T18713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.427308][T18713] usb 6-1: Product: syz [ 1730.432567][T18713] usb 6-1: Manufacturer: syz [ 1730.442605][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.449105][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.457899][T18713] usb 6-1: SerialNumber: syz [ 1730.720111][T18713] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1730.802950][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3828'. [ 1730.837404][T18713] usb 9-1: USB disconnect, device number 46 [ 1731.014270][T22647] netlink: 'syz.6.3828': attribute type 1 has an invalid length. [ 1731.023530][T22647] netlink: 'syz.6.3828': attribute type 2 has an invalid length. [ 1731.136358][T18713] usb 6-1: USB disconnect, device number 53 [ 1731.159501][T18713] usblp0: removed [ 1733.981888][T22680] netlink: 'syz.8.3834': attribute type 1 has an invalid length. [ 1734.016067][T22680] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.3834'. [ 1735.824611][T18713] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1735.973435][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1735.973457][ T30] audit: type=1804 audit(1783220434.137:1302): pid=22691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3837" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=103498 res=1 errno=0 [ 1736.032097][T18713] usb 9-1: Using ep0 maxpacket: 8 [ 1736.045237][T18713] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1736.061324][T22691] fuse: Unknown parameter '' [ 1736.078075][T18713] usb 9-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 1736.096012][T18713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.117545][T18713] usb 9-1: Product: syz [ 1736.130625][T18713] usb 9-1: Manufacturer: syz [ 1736.147747][T18713] usb 9-1: SerialNumber: syz [ 1736.452037][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3838'. [ 1736.732438][T22699] netlink: 'syz.6.3838': attribute type 1 has an invalid length. [ 1736.747499][T22698] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1736.762944][T22699] netlink: 'syz.6.3838': attribute type 2 has an invalid length. [ 1736.788042][T22698] bond5 (unregistering): Released all slaves [ 1737.029361][T22704] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1737.190606][T22704] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1737.222114][T22705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3839'. [ 1737.288706][T22705] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3839'. [ 1738.056500][T18713] usbhid 9-1:1.0: can't add hid device: -71 [ 1738.091669][T18713] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1738.109160][T18713] usb 9-1: USB disconnect, device number 47 [ 1739.022001][T22718] binder: 22708:22718 ioctl c0306201 800003c0 returned -14 [ 1739.142915][T22721] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3843'. [ 1740.938415][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3845'. [ 1741.029877][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3847'. [ 1741.175902][T22741] netlink: 'syz.8.3847': attribute type 1 has an invalid length. [ 1741.234051][T22741] netlink: 'syz.8.3847': attribute type 2 has an invalid length. [ 1742.944969][T18711] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1742.956586][T22752] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1742.991036][T22754] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1743.018472][T22754] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1743.038278][T22754] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3850'. [ 1743.053166][T22754] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3850'. [ 1743.058754][T22752] bond2: (slave lo): Enslaving as an active interface with an up link [ 1743.091289][T22752] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1743.183362][T18711] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.197510][T18711] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1743.216940][T18711] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1743.263054][T18711] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1743.274582][T18711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.285491][T18711] usb 8-1: Product: syz [ 1743.291886][T18711] usb 8-1: Manufacturer: syz [ 1743.306373][T18711] usb 8-1: SerialNumber: syz [ 1743.317738][T18711] usb 8-1: config 0 descriptor?? [ 1743.329144][T22749] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1743.344057][T18711] usb 8-1: ucan: probing device on interface #0 [ 1743.353876][T18711] usb 8-1: ucan: invalid EP count (1) [ 1743.363280][T18711] usb 8-1: ucan: probe failed; try to update the device firmware [ 1743.426871][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3852'. [ 1743.446187][T22761] netlink: 'syz.8.3852': attribute type 1 has an invalid length. [ 1743.455140][T22761] netlink: 'syz.8.3852': attribute type 2 has an invalid length. [ 1744.892191][T22776] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1) [ 1745.650497][T18713] usb 8-1: USB disconnect, device number 39 [ 1748.978739][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1749.175632][T22799] netlink: 'syz.0.3861': attribute type 1 has an invalid length. [ 1749.185400][T22799] netlink: 'syz.0.3861': attribute type 2 has an invalid length. [ 1749.548970][T22809] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1749.612409][T22809] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1749.661165][T22809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1749.690419][T22809] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1751.371113][T22816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.394323][T22816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.529804][T22816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1751.552440][T22816] kvm: apic: phys broadcast and lowest prio [ 1753.724885][T22829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3880'. [ 1753.819382][T22831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3880'. [ 1753.989136][T22832] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1) [ 1754.098742][T22837] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1754.148435][T22837] bond3: (slave lo): Enslaving as an active interface with an up link [ 1754.163829][T22837] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1757.055086][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3878'. [ 1757.109950][T22862] netlink: 'syz.7.3878': attribute type 1 has an invalid length. [ 1757.128237][T22862] netlink: 'syz.7.3878': attribute type 2 has an invalid length. [ 1757.453499][T22868] bond3: option mode: unable to set because the bond device has slaves [ 1758.560117][ T30] audit: type=1326 audit(1783220456.697:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.0.3882" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 1758.941316][ T30] audit: type=1326 audit(1783220457.107:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.0.3882" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 1759.301239][T22887] bond3: option mode: unable to set because the bond device has slaves [ 1761.402991][T22898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1762.648071][T22903] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3888'. [ 1762.681503][T22903] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3888'. [ 1763.535653][T22912] binder: 22904:22912 ioctl c0306201 800003c0 returned -14 [ 1766.034110][T22936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3894'. [ 1769.712320][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3897'. [ 1770.056029][T18711] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1770.225054][T18711] usb 8-1: Using ep0 maxpacket: 8 [ 1770.238584][T18711] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1770.250189][T18711] usb 8-1: config 179 has no interface number 0 [ 1770.260901][T18711] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1770.284535][T18711] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1770.319304][T18711] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1770.338235][T18711] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1770.372847][T18711] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1770.429531][T18711] usb 8-1: config 179 interface 65 has no altsetting 0 [ 1770.452868][T18711] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1770.479538][T18711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.582833][T18711] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input93 [ 1770.664902][ T4977] input input93: unable to receive magic message: -110 [ 1770.720608][ T4977] input input93: unable to receive magic message: -32 [ 1770.805427][ T4977] input input93: unable to receive magic message: -32 [ 1770.838560][ T4977] input input93: unable to receive magic message: -32 [ 1770.868361][ T4977] input input93: unable to receive magic message: -32 [ 1770.911519][T22964] netlink: 'syz.8.3902': attribute type 16 has an invalid length. [ 1770.923484][ T4977] input input93: unable to receive magic message: -32 [ 1770.928998][T22964] netlink: 'syz.8.3902': attribute type 3 has an invalid length. [ 1770.945418][T22964] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3902'. [ 1771.193418][T22951] input input93: unable to receive magic message: -32 [ 1771.270618][T18711] usb 8-1: USB disconnect, device number 40 [ 1771.270705][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1771.338288][T22970] bond3: option mode: unable to set because the bond device has slaves [ 1771.872325][T22977] bond3: option mode: unable to set because the bond device has slaves [ 1776.246256][T23004] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 1776.266222][T23004] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 1776.280072][T23004] kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 1776.296855][T23004] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1776.318411][T23004] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 1776.345678][T23004] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 1776.365567][T23004] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 1776.388549][T23004] kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 1776.410202][T23004] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 1776.806695][T23017] ipip0: entered promiscuous mode [ 1776.822066][T23017] ipip0: entered allmulticast mode [ 1777.351027][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3912'. [ 1777.424705][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3912'. [ 1778.137732][T23030] netlink: 'syz.0.3916': attribute type 16 has an invalid length. [ 1778.152204][T23030] netlink: 'syz.0.3916': attribute type 3 has an invalid length. [ 1778.160452][T23030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1779.044483][T18714] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1779.210940][T18714] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1779.248294][T18714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.264878][T18714] usb 6-1: Product: syz [ 1779.269288][T18714] usb 6-1: Manufacturer: syz [ 1779.277734][T18714] usb 6-1: SerialNumber: syz [ 1779.308300][T18714] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1779.385673][T18713] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1780.462331][T18714] usb 6-1: USB disconnect, device number 54 [ 1780.517627][T18713] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1780.553104][T18713] ath9k_htc: Failed to initialize the device [ 1780.573697][T18714] usb 6-1: ath9k_htc: USB layer deinitialized [ 1780.918784][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3919'. [ 1781.011391][T23045] netlink: 'syz.6.3919': attribute type 1 has an invalid length. [ 1781.026953][T23045] netlink: 'syz.6.3919': attribute type 2 has an invalid length. [ 1782.703945][T23068] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1782.781114][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1785.195433][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3927'. [ 1785.327590][T23104] netlink: 'syz.5.3927': attribute type 1 has an invalid length. [ 1785.339300][T23104] netlink: 'syz.5.3927': attribute type 2 has an invalid length. [ 1785.415263][T12995] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1785.574683][T12995] usb 8-1: Using ep0 maxpacket: 16 [ 1785.583523][T12995] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.637677][T12995] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1785.690210][T12995] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1785.722296][T12995] usb 8-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1785.765131][T12995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.869432][T12995] usb 8-1: config 0 descriptor?? [ 1785.936733][T12995] usbhid 8-1:0.0: can't add hid device: -22 [ 1785.991934][T12995] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 1786.932609][T23110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3930'. [ 1786.956836][T23110] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3930'. [ 1787.031112][T18713] usb 8-1: USB disconnect, device number 41 [ 1787.052677][T23110] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1788.150600][T23118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.173945][T23118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.760857][T23131] bond3: option mode: unable to set because the bond device has slaves [ 1791.723321][T23141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3937'. [ 1791.768828][T23141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3937'. [ 1791.890085][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.898818][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.484681][T12995] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1792.619785][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3938'. [ 1792.649524][T12995] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1792.692096][T23146] bond2: option mode: unable to set because the bond device has slaves [ 1792.696159][T23151] netlink: 'syz.6.3938': attribute type 1 has an invalid length. [ 1792.709731][T23151] netlink: 'syz.6.3938': attribute type 2 has an invalid length. [ 1792.723584][T12995] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.741295][T12995] usb 6-1: config 0 has no interfaces? [ 1792.792499][T12995] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1792.843131][T12995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.926952][T12995] usb 6-1: config 0 descriptor?? [ 1794.968620][T12995] usb 6-1: string descriptor 0 read error: -71 [ 1794.996110][T12995] usb 6-1: USB disconnect, device number 55 [ 1796.727691][T23166] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3941'. [ 1796.897765][T23166] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3941'. [ 1797.028521][T23166] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1797.390127][T23176] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3945'. [ 1797.494893][T18713] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1797.687512][T18713] usb 6-1: Using ep0 maxpacket: 16 [ 1797.711612][T18713] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.767771][T18713] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1797.809864][T18713] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1797.833771][T18713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.373934][T18713] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1799.774734][T18713] usb 6-1: reset high-speed USB device number 56 using dummy_hcd [ 1800.845049][T23214] bond3: option mode: unable to set because the bond device has slaves [ 1801.427661][T18714] usb 6-1: USB disconnect, device number 56 [ 1813.576307][T23284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.604195][T23284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.636656][T23288] tun0: tun_chr_ioctl cmd 1074025675 [ 1813.642008][T23288] tun0: persist enabled [ 1813.651307][T23288] tun0: tun_chr_ioctl cmd 1074025675 [ 1813.657391][T23288] tun0: persist disabled [ 1813.665554][T23288] netlink: 'syz.6.3963': attribute type 1 has an invalid length. [ 1813.673541][T23288] netlink: 'syz.6.3963': attribute type 2 has an invalid length. [ 1814.280793][T23298] bond3: option mode: unable to set because the bond device has slaves [ 1816.030470][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3970'. [ 1816.258116][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3970'. [ 1821.134698][T18714] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1821.296596][T18714] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1821.335192][T18714] usb 9-1: config 0 has no interface number 0 [ 1821.376351][T18714] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1821.419297][T18714] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.468490][T18714] usb 9-1: Product: syz [ 1821.500858][T18714] usb 9-1: Manufacturer: syz [ 1821.518562][T18714] usb 9-1: SerialNumber: syz [ 1821.547650][T18714] usb 9-1: config 0 descriptor?? [ 1821.585438][T18714] usb 9-1: selecting invalid altsetting 1 [ 1821.619501][T18714] dvb_ttusb_budget: ttusb_init_controller: error [ 1821.633372][T18714] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1821.908888][T18714] DVB: Unable to find symbol stv0299_attach() [ 1822.096056][T18714] DVB: Unable to find symbol tda8083_attach() [ 1822.102400][T18714] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1822.746163][T23346] wg1: entered promiscuous mode [ 1822.758092][T23346] wg1: entered allmulticast mode [ 1823.677093][T18714] usb 9-1: USB disconnect, device number 48 [ 1825.108375][T23370] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1832.235672][T23415] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3994'. [ 1832.308470][T23415] netlink: 'syz.8.3994': attribute type 1 has an invalid length. [ 1832.320990][T23415] netlink: 'syz.8.3994': attribute type 2 has an invalid length. [ 1835.122246][T23430] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3996'. [ 1835.277290][T23434] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3996'. [ 1835.366618][T23436] bond3: option mode: unable to set because the bond device has slaves [ 1838.230462][T23454] ipip1: entered promiscuous mode [ 1838.237108][T23454] ipip1: entered allmulticast mode [ 1838.537200][T23454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4003'. [ 1838.583253][T23454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4003'. [ 1839.261793][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'. [ 1839.532233][T23465] netlink: 'syz.0.4006': attribute type 1 has an invalid length. [ 1839.571536][T23465] netlink: 'syz.0.4006': attribute type 2 has an invalid length. [ 1842.224669][T18711] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1842.374858][T23499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4012'. [ 1842.389572][T18711] usb 6-1: config 0 has no interfaces? [ 1842.396207][T18711] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1842.407321][T18711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.443441][T18711] usb 6-1: config 0 descriptor?? [ 1842.550351][T23499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4012'. [ 1843.061424][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4015'. [ 1843.632645][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4014'. [ 1843.774044][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4014'. [ 1844.818816][T18714] usb 6-1: USB disconnect, device number 57 [ 1845.253161][ T30] audit: type=1326 audit(1783220543.417:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.5.4017" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1845.347660][ T30] audit: type=1326 audit(1783220543.457:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.5.4017" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1845.502142][ T30] audit: type=1326 audit(1783220543.667:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.5.4017" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1845.579944][ T30] audit: type=1326 audit(1783220543.667:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.5.4017" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1848.478362][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4022'. [ 1848.837907][T23551] netlink: 'syz.7.4022': attribute type 1 has an invalid length. [ 1848.853183][T23551] netlink: 'syz.7.4022': attribute type 2 has an invalid length. [ 1849.950633][T23558] bond3: option mode: unable to set because the bond device has slaves [ 1852.614536][T18714] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1852.783047][T18714] usb 8-1: config 0 has no interfaces? [ 1852.798556][T18714] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1852.829825][T18714] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.864177][T18714] usb 8-1: config 0 descriptor?? [ 1853.316724][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.323234][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.505046][T18714] usb 8-1: USB disconnect, device number 42 [ 1855.717948][T23604] bond3: option mode: unable to set because the bond device has slaves [ 1858.241527][T23624] bond3: option mode: unable to set because the bond device has slaves [ 1862.595974][T23664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.682045][T23669] bond3: option mode: unable to set because the bond device has slaves [ 1865.292838][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4048'. [ 1866.943277][T23690] bond3: option mode: unable to set because the bond device has slaves [ 1867.071755][ T30] audit: type=1326 audit(1783220565.227:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1867.144532][ T30] audit: type=1326 audit(1783220565.297:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1867.255786][ T30] audit: type=1326 audit(1783220565.307:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1867.347229][ T30] audit: type=1326 audit(1783220565.307:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1867.691775][ T30] audit: type=1326 audit(1783220565.747:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1867.869816][ T30] audit: type=1326 audit(1783220565.947:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1868.026755][ T30] audit: type=1326 audit(1783220565.967:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1868.143462][ T30] audit: type=1326 audit(1783220565.967:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1868.247832][ T30] audit: type=1326 audit(1783220566.097:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1868.277426][ T30] audit: type=1326 audit(1783220566.117:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23683 comm="syz.0.4051" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1868.615866][T23701] netlink: 16003 bytes leftover after parsing attributes in process `syz.8.4057'. [ 1868.732273][T23701] netlink: 'syz.8.4057': attribute type 10 has an invalid length. [ 1869.707905][T23701] tipc: Disabling bearer [ 1869.932689][T23703] netlink: 'syz.7.4058': attribute type 13 has an invalid length. [ 1870.047463][T23703] gretap0: refused to change device tx_queue_len [ 1870.105123][T23703] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1870.381061][T23700] loop9: detected capacity change from 0 to 4096 [ 1870.969499][T23718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4062'. [ 1871.123573][T23720] netlink: 'syz.5.4062': attribute type 1 has an invalid length. [ 1871.140204][T23720] netlink: 'syz.5.4062': attribute type 2 has an invalid length. [ 1873.329285][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4064'. [ 1873.400923][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4064'. [ 1874.474915][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4065'. [ 1874.520710][T23731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4065'. [ 1874.658403][T23740] bond3: option mode: unable to set because the bond device has slaves [ 1877.879236][T23763] bond3: option mode: unable to set because the bond device has slaves [ 1878.123067][T23768] bond2: option mode: unable to set because the bond device has slaves [ 1881.409383][T23808] bond3: option mode: unable to set because the bond device has slaves [ 1881.502477][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1881.553754][T23811] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1881.570202][T23811] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1883.588966][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4080'. [ 1885.157395][T23837] bond3: option mode: unable to set because the bond device has slaves [ 1885.625277][T18711] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1885.802658][T18711] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.822677][T18711] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1885.853846][T18711] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1885.890009][T18711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.918514][T18711] usb 9-1: config 0 descriptor?? [ 1886.207593][T18711] ath6kl: Failed to submit usb control message: -71 [ 1886.259323][T18711] ath6kl: unable to send the bmi data to the device: -71 [ 1886.296975][T18711] ath6kl: Unable to send get target info: -71 [ 1886.322538][T23848] netlink: 'syz.6.4087': attribute type 10 has an invalid length. [ 1886.335512][T18711] ath6kl: Failed to init ath6kl core: -71 [ 1886.388199][T23849] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1886.415342][T18711] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1886.442273][T23848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1886.641975][T18711] usb 9-1: USB disconnect, device number 49 [ 1886.649363][T23848] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1886.792278][T23849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1886.853463][T23849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1886.919316][T23849] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1886.976340][T23849] bond0 (unregistering): Released all slaves [ 1887.656233][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1890.534005][T23859] random: crng reseeded on system resumption [ 1890.680484][T23859] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 1890.694542][T23869] kAFS: unable to lookup cell '' [ 1890.712994][T23869] kAFS: unable to lookup cell '(,c' [ 1890.802830][T23872] bond2: option mode: unable to set because the bond device has slaves [ 1890.845409][T18714] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1891.004850][T18714] usb 9-1: Using ep0 maxpacket: 16 [ 1891.020124][T18714] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1891.030737][T18714] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1891.045868][T18714] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1891.063410][T18714] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1891.087352][T18714] usb 9-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1891.106259][T18714] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.117664][T18714] usb 9-1: Product: syz [ 1891.123243][T18714] usb 9-1: Manufacturer: syz [ 1891.138921][T18714] usb 9-1: SerialNumber: syz [ 1891.417584][T18714] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1891.729334][T18714] usb 9-1: USB disconnect, device number 50 [ 1891.755628][T18714] usblp0: removed [ 1892.183559][T23878] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4093'. [ 1892.194018][T23878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4093'. [ 1892.240060][T23881] bond3: option mode: unable to set because the bond device has slaves [ 1894.249469][T23900] bond2: option mode: unable to set because the bond device has slaves [ 1894.726767][T23908] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4103'. [ 1894.738054][T23908] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4103'. [ 1895.574902][T18714] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1895.746614][T18714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.764602][T18714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1895.788940][T18714] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1895.813502][T18714] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1895.827960][T18714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.870949][T18714] usb 6-1: Product: syz [ 1895.889523][T18714] usb 6-1: Manufacturer: syz [ 1895.896409][T18714] usb 6-1: SerialNumber: syz [ 1895.909387][T18714] usb 6-1: config 0 descriptor?? [ 1895.918783][T18714] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1896.156041][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 1896.169574][T23910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4104'. [ 1896.450509][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1896.450528][ T30] audit: type=1804 audit(1783220594.617:1331): pid=23902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4099" name="bus" dev="ramfs" ino=111428 res=1 errno=0 [ 1896.493599][T23922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1896.600188][ T30] audit: type=1804 audit(1783220594.767:1332): pid=23902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4099" name="bus" dev="ramfs" ino=111428 res=1 errno=0 [ 1896.764727][T18714] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1896.918370][T18713] usb 6-1: USB disconnect, device number 58 [ 1896.927513][T18714] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.000668][T18714] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.070189][T18714] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1897.139541][T18714] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1897.191951][T18714] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.259761][T18714] usb 9-1: config 0 descriptor?? [ 1897.745188][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1897.783514][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1897.810677][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1897.836940][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1897.860520][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1897.893402][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1897.947343][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1897.996127][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1898.037178][T23922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.053017][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1898.083236][T23922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.094897][T18714] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1898.167007][T18714] kovaplus 0003:1E7D:2D50.0038: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.8-1/input0 [ 1898.293796][T18714] usb 9-1: USB disconnect, device number 51 [ 1898.559852][T23936] fido_id[23936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1900.037015][T18714] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1900.192319][T23958] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4119'. [ 1900.208086][T18714] usb 6-1: Using ep0 maxpacket: 8 [ 1900.226112][T18714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.240388][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4119'. [ 1900.240695][T18714] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1900.270572][T18714] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1900.297779][T18714] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1900.316378][T18714] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1900.356824][T18714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.387097][T18714] usb 6-1: Product: syz [ 1900.405030][T18714] usb 6-1: Manufacturer: syz [ 1900.414117][T18714] usb 6-1: SerialNumber: syz [ 1900.460357][T18714] usb 6-1: config 0 descriptor?? [ 1900.508557][T18714] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1900.738299][T18714] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 1900.780161][T18714] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1900.855963][T18714] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1901.080948][T18714] usb 6-1: USB disconnect, device number 59 [ 1901.311390][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.546147][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.453533][ T30] audit: type=1326 audit(1783220600.617:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1902.528599][ T30] audit: type=1326 audit(1783220600.617:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1902.606458][ T30] audit: type=1326 audit(1783220600.667:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1902.741981][ T30] audit: type=1326 audit(1783220600.907:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1902.843209][ T30] audit: type=1326 audit(1783220600.907:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1902.930537][ T30] audit: type=1326 audit(1783220601.097:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1902.969708][ T30] audit: type=1326 audit(1783220601.097:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1903.024820][ T30] audit: type=1326 audit(1783220601.097:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1903.075230][ T30] audit: type=1326 audit(1783220601.127:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1903.138191][ T30] audit: type=1326 audit(1783220601.127:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23969 comm="syz.6.4122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1903.347022][T23981] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4124'. [ 1903.365965][T23981] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4124'. [ 1903.486951][T18714] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1903.685824][T18714] usb 6-1: Using ep0 maxpacket: 16 [ 1903.704034][T18714] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1903.721075][T18714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.752796][T18714] usb 6-1: Product: syz [ 1903.767825][T18714] usb 6-1: Manufacturer: syz [ 1903.781316][T18714] usb 6-1: SerialNumber: syz [ 1903.808404][T18714] usb 6-1: config 0 descriptor?? [ 1903.964093][T23988] bond2: option mode: unable to set because the bond device has slaves [ 1904.098934][T18714] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 1904.141946][T18714] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1904.181412][T18714] usb 6-1: USB disconnect, device number 60 [ 1904.932508][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4129'. [ 1905.168124][T24002] netlink: 'syz.8.4129': attribute type 1 has an invalid length. [ 1905.192373][T24002] netlink: 'syz.8.4129': attribute type 2 has an invalid length. [ 1905.443450][T24008] netlink: 'syz.5.4131': attribute type 10 has an invalid length. [ 1905.501832][T24009] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4131'. [ 1905.530285][T24008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1905.551816][T24008] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1905.619973][T24009] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1905.770309][T24009] bond0 (unregistering): Released all slaves [ 1906.513282][T24008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4131'. [ 1907.084329][T24018] netlink: 220 bytes leftover after parsing attributes in process `syz.8.4133'. [ 1907.118457][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4133'. [ 1907.594842][T18714] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1907.777464][T18714] usb 8-1: Using ep0 maxpacket: 32 [ 1907.809602][T18714] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 1907.847848][T18714] usb 8-1: config 1 has no interface number 0 [ 1907.862953][T18714] usb 8-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1907.886343][T18714] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1907.911204][T18714] usb 8-1: config 1 interface 236 has no altsetting 0 [ 1907.932937][T18714] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 1907.951805][T18714] usb 8-1: config 1 has no interface number 0 [ 1907.970286][T18714] usb 8-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1907.995344][T18714] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1908.007323][T18714] usb 8-1: config 1 interface 236 has no altsetting 0 [ 1908.046328][T18714] usb 8-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1908.096594][T18714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.117081][T18714] usb 8-1: Product: syz [ 1908.127504][T18714] usb 8-1: Manufacturer: syz [ 1908.137629][T18714] usb 8-1: SerialNumber: syz [ 1908.158685][T18714] ti_usb_3410_5052 8-1:1.236: TI USB 5052 2 port adapter converter detected [ 1908.224724][T18713] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1908.388362][T18713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.409311][T18713] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1908.440140][T18713] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1908.461249][T18713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.500676][T18713] usb 6-1: config 0 descriptor?? [ 1908.772059][T18713] ath6kl: Failed to submit usb control message: -71 [ 1908.801511][T18713] ath6kl: unable to send the bmi data to the device: -71 [ 1908.828661][T18713] ath6kl: Unable to send get target info: -71 [ 1908.898959][T18713] ath6kl: Failed to init ath6kl core: -71 [ 1908.912836][T18713] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1908.966698][T18713] usb 6-1: USB disconnect, device number 61 [ 1909.693326][T24041] bond3: option mode: unable to set because the bond device has slaves [ 1910.289943][T18711] usb 8-1: USB disconnect, device number 43 [ 1910.390658][T24048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4140'. [ 1910.421490][T24048] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4140'. [ 1911.236414][T24064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4143'. [ 1911.416511][T24064] netlink: 'syz.8.4143': attribute type 1 has an invalid length. [ 1911.438275][T24064] netlink: 'syz.8.4143': attribute type 2 has an invalid length. [ 1914.756861][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.766331][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.896501][T24085] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4148'. [ 1914.919226][T24085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4148'. [ 1915.844788][T18713] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1916.026130][T18713] usb 6-1: Using ep0 maxpacket: 32 [ 1916.058494][T18713] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 1916.091287][T18713] usb 6-1: config 1 has no interface number 0 [ 1916.113343][T18713] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1916.147841][T18713] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1916.182171][T18713] usb 6-1: config 1 interface 236 has no altsetting 0 [ 1916.217077][T18713] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 1916.256089][T18713] usb 6-1: config 1 has no interface number 0 [ 1916.299484][T18713] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1916.360853][T18713] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1916.410453][T18713] usb 6-1: config 1 interface 236 has no altsetting 0 [ 1916.447461][T18713] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1916.468754][T18713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.492048][T18713] usb 6-1: Product: syz [ 1916.502195][T18713] usb 6-1: Manufacturer: syz [ 1916.519579][T18713] usb 6-1: SerialNumber: syz [ 1916.564077][T18713] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected [ 1916.583496][T24105] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1916.612136][T24105] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1918.525470][T18713] usb 6-1: USB disconnect, device number 62 [ 1919.551928][T24123] kAFS: unable to lookup cell '' [ 1919.567007][T12995] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1919.768832][T12995] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 1919.789053][T12995] usb 8-1: config 0 has no interface number 0 [ 1919.804812][T12995] usb 8-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30 [ 1919.820796][T24129] kAFS: unable to lookup cell '(,c' [ 1919.901572][T12995] usb 8-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 1920.000511][T12995] usb 8-1: config 0 interface 231 has no altsetting 0 [ 1920.070572][T12995] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1920.113370][T12995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.154858][T12995] usb 8-1: Product: syz [ 1920.171178][T12995] usb 8-1: Manufacturer: syz [ 1920.197037][T12995] usb 8-1: SerialNumber: syz [ 1920.292519][T12995] usb 8-1: config 0 descriptor?? [ 1921.892688][T12995] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1921.926996][T12995] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1921.949346][T12995] sq905c 8-1:0.231: Get version command failed [ 1921.959511][T12995] sq905c 8-1:0.231: probe with driver sq905c failed with error -71 [ 1921.986440][T12995] usb 8-1: USB disconnect, device number 44 [ 1923.222296][T24150] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4165'. [ 1923.293680][T24150] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4165'. [ 1924.738682][T24160] binder_alloc: 24154: binder_alloc_buf, no vma [ 1924.857278][T24165] binder_alloc: 24154: binder_alloc_buf, no vma [ 1925.361254][T24174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4171'. [ 1925.543411][T24176] netlink: 'syz.8.4171': attribute type 1 has an invalid length. [ 1925.554834][T24176] netlink: 'syz.8.4171': attribute type 2 has an invalid length. [ 1928.301950][T24190] netlink: 'syz.0.4175': attribute type 10 has an invalid length. [ 1928.333951][T24190] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4175'. [ 1929.593087][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4175'. [ 1932.142126][T24216] random: crng reseeded on system resumption [ 1932.230729][T24216] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 1934.067898][T24234] binder_alloc: 24229: binder_alloc_buf, no vma [ 1934.098332][T24235] binder_alloc: 24229: binder_alloc_buf, no vma [ 1934.908374][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4189'. [ 1935.142036][T24244] netlink: 'syz.7.4189': attribute type 1 has an invalid length. [ 1935.153298][T24244] netlink: 'syz.7.4189': attribute type 2 has an invalid length. [ 1935.401794][T24248] bond2: option mode: unable to set because the bond device has slaves [ 1936.102127][T24256] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1936.126814][T24256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1937.402262][T24259] netlink: 'syz.7.4193': attribute type 10 has an invalid length. [ 1937.433857][T24259] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4193'. [ 1937.641920][T24264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4204'. [ 1937.757017][T24264] netlink: 'syz.5.4204': attribute type 1 has an invalid length. [ 1937.768195][T24264] netlink: 'syz.5.4204': attribute type 2 has an invalid length. [ 1938.328965][T24269] vhci_hcd vhci_hcd.0: port 0 already used [ 1938.549181][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4193'. [ 1938.584519][T18713] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1938.727986][T24275] bond3: option mode: unable to set because the bond device has slaves [ 1938.767191][T18713] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1938.801355][T18713] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1938.836608][T18713] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1938.851953][T18713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.877961][T18713] usb 9-1: Product: syz [ 1938.891615][T18713] usb 9-1: Manufacturer: syz [ 1938.905978][T18713] usb 9-1: SerialNumber: syz [ 1938.927509][T18713] usb 9-1: config 0 descriptor?? [ 1938.945034][T24269] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1939.412820][T18713] powermate: unknown product id 0240 [ 1939.447368][T18713] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1939.491646][T18713] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input96 [ 1939.557145][ C0] powermate: config urb returned -71 [ 1939.563429][ C0] powermate: config urb returned -71 [ 1939.569136][ C0] powermate: config urb returned -71 [ 1939.575138][ C0] powermate: config urb returned -71 [ 1939.621365][T18713] usb 9-1: USB disconnect, device number 52 [ 1939.621425][ C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1939.641150][T24284] netlink: 'syz.6.4199': attribute type 13 has an invalid length. [ 1939.655605][T24284] gretap0: refused to change device tx_queue_len [ 1939.677856][T24284] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1942.043453][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4205'. [ 1942.278638][T24309] netlink: 'syz.5.4205': attribute type 1 has an invalid length. [ 1942.300604][T24309] netlink: 'syz.5.4205': attribute type 2 has an invalid length. [ 1944.539131][T24327] bond3: option mode: unable to set because the bond device has slaves [ 1944.707304][T24330] bond2: option mode: unable to set because the bond device has slaves [ 1945.561130][T24336] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4214'. [ 1948.050260][T24362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4219'. [ 1948.167000][T24362] netlink: 'syz.5.4219': attribute type 1 has an invalid length. [ 1948.179862][T24362] netlink: 'syz.5.4219': attribute type 2 has an invalid length. [ 1951.631815][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1951.631836][ T30] audit: type=1804 audit(1783220649.787:1401): pid=24379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4223" name="/newroot/517/file1" dev="tmpfs" ino=2756 res=1 errno=0 [ 1951.874348][T24386] bond3: option mode: unable to set because the bond device has slaves [ 1952.724506][T18713] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1952.874663][T18713] usb 6-1: Using ep0 maxpacket: 8 [ 1952.884712][T18713] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1952.930779][T18713] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1952.972627][T18713] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1953.002397][T18713] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1953.045759][T18713] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1953.070209][T18713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.353403][T24392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.406932][T24392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1953.469457][T18713] usb 6-1: GET_CAPABILITIES returned 0 [ 1953.494154][T18713] usbtmc 6-1:16.0: can't read capabilities [ 1953.575063][T22965] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 1953.722989][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1953.771915][T22965] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 1953.784241][T22965] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 1953.797224][T22965] usb 8-1: config 0 has no interface number 0 [ 1953.811361][T18713] usb 6-1: USB disconnect, device number 63 [ 1953.823895][T22965] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1953.838307][T22965] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1953.850618][T22965] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1953.861115][T22965] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.904015][T22965] usb 8-1: config 0 descriptor?? [ 1954.343826][T22965] usb 8-1: USB disconnect, device number 45 [ 1954.549593][T24401] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4230'. [ 1955.577730][T24419] binder_alloc: 24412: binder_alloc_buf, no vma [ 1955.709763][T24424] binder_alloc: 24412: binder_alloc_buf, no vma [ 1956.456550][T24434] kAFS: unable to lookup cell '' [ 1956.541900][T24435] kAFS: unable to lookup cell '(,c' [ 1956.874904][T18713] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1957.054522][T18713] usb 6-1: Using ep0 maxpacket: 16 [ 1957.084300][T18713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.123868][T18713] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1957.142176][T18713] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1957.180052][T18713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1957.218081][T18713] usb 6-1: SerialNumber: syz [ 1957.242218][T18713] usb 6-1: 0:2 : does not exist [ 1958.417651][T24438] netlink: 'syz.8.4237': attribute type 13 has an invalid length. [ 1958.451956][T24438] gretap0: refused to change device tx_queue_len [ 1958.466992][T24438] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1959.580571][T18713] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1959.611538][T18713] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1959.636476][T18713] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1959.665567][T18713] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1959.706465][T18713] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1959.831045][T18713] usb 6-1: USB disconnect, device number 64 [ 1959.906323][T23927] udevd[23927]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1960.083439][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4241'. [ 1960.226732][T24451] netlink: 'syz.8.4241': attribute type 1 has an invalid length. [ 1960.245633][T24451] netlink: 'syz.8.4241': attribute type 2 has an invalid length. [ 1960.734715][T18713] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1960.884477][T18713] usb 8-1: Using ep0 maxpacket: 16 [ 1960.906804][T18713] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1960.958101][T18713] usb 8-1: config 251 has an invalid interface number: 95 but max is 0 [ 1960.988839][T18713] usb 8-1: config 251 has no interface number 0 [ 1961.002559][T18713] usb 8-1: config 251 interface 95 has no altsetting 0 [ 1961.021824][T18713] usb 8-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 1961.038478][T18713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.057360][T18713] usb 8-1: Product: syz [ 1961.070679][T18713] usb 8-1: Manufacturer: syz [ 1961.083262][T18713] usb 8-1: SerialNumber: syz [ 1961.445538][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4243'. [ 1961.527597][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4243'. [ 1962.481529][T18713] mos7840 8-1:251.95: required endpoints missing [ 1962.545473][T18713] usb 8-1: USB disconnect, device number 46 [ 1962.894674][T22965] usb 9-1: new low-speed USB device number 53 using dummy_hcd [ 1962.950986][T24478] bond3: option mode: unable to set because the bond device has slaves [ 1963.070568][T22965] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1963.098698][T22965] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1963.112496][T22965] usb 9-1: config 0 has no interface number 0 [ 1963.146982][T22965] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1963.164789][T22965] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1963.204341][T22965] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1963.225218][T22965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.258069][T22965] usb 9-1: config 0 descriptor?? [ 1963.795645][T22965] usb 9-1: USB disconnect, device number 53 [ 1964.022051][T24486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4249'. [ 1964.100080][T24473] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4246'. [ 1964.634903][T24491] netlink: 'syz.6.4250': attribute type 13 has an invalid length. [ 1964.664864][T24491] gretap0: refused to change device tx_queue_len [ 1964.672231][T24491] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1965.234588][T12995] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1965.394561][T12995] usb 9-1: Using ep0 maxpacket: 8 [ 1965.417841][T12995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1965.434891][T12995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1965.446689][T12995] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1965.457835][T12995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1965.472610][T12995] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1965.485156][T12995] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1965.498228][T12995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.518823][T12995] usb 9-1: config 0 descriptor?? [ 1965.529450][T24493] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1965.991016][T12995] usb 9-1: USB disconnect, device number 54 [ 1966.000350][T12006] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1966.301901][T24503] bond3: option mode: unable to set because the bond device has slaves [ 1966.710892][T24506] kAFS: unable to lookup cell '' [ 1966.841794][T24507] kAFS: unable to lookup cell '(,c' [ 1967.344930][T18713] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1967.415132][T12995] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1967.530747][T18713] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1967.555685][T18713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.574943][T12995] usb 8-1: Using ep0 maxpacket: 16 [ 1967.581574][T18713] usb 9-1: Product: syz [ 1967.594302][T18713] usb 9-1: Manufacturer: syz [ 1967.610403][T12995] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.623729][T18713] usb 9-1: SerialNumber: syz [ 1967.634034][T12995] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1967.660439][T18713] usb 9-1: config 0 descriptor?? [ 1967.683988][T24512] input: syz1 as /devices/virtual/input/input99 [ 1967.702824][T12995] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1967.713304][T12995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1967.728694][T12995] usb 8-1: SerialNumber: syz [ 1967.792234][T12995] usb 8-1: 0:2 : does not exist [ 1968.181721][T24514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.323105][T24514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.714342][T18713] usb 9-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 1969.158760][T18713] usb 9-1: f81604_read: reg: 200e failed: -EPROTO [ 1969.180828][T18713] usb 9-1: USB disconnect, device number 55 [ 1969.237338][T18713] usb 9-1: f81604_read: reg: 100f failed: -ENODEV [ 1969.317143][ T5287] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 1969.375556][T18713] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 1969.595529][T12995] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1969.621991][T12995] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1969.661142][T12995] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1969.683561][T12995] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 1969.785310][T12995] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1969.878707][T24520] bond3: option mode: unable to set because the bond device has slaves [ 1970.013109][T12995] usb 8-1: USB disconnect, device number 47 [ 1970.265338][T24527] netlink: 'syz.8.4257': attribute type 1 has an invalid length. [ 1970.278453][T24527] netlink: 'syz.8.4257': attribute type 2 has an invalid length. [ 1973.325511][T18713] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1973.505100][T18713] usb 9-1: Using ep0 maxpacket: 16 [ 1973.518331][T18713] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1973.536847][T18713] usb 9-1: config 251 has an invalid interface number: 95 but max is 0 [ 1973.553608][T18713] usb 9-1: config 251 has no interface number 0 [ 1973.564856][T18713] usb 9-1: config 251 interface 95 has no altsetting 0 [ 1973.581686][T18713] usb 9-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 1973.593838][T18713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.606887][T18713] usb 9-1: Product: syz [ 1973.617177][T18713] usb 9-1: Manufacturer: syz [ 1973.626069][T18713] usb 9-1: SerialNumber: syz [ 1973.878936][T24544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4264'. [ 1973.926481][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4264'. [ 1973.994584][T18713] mos7840 9-1:251.95: required endpoints missing [ 1974.033067][T18713] usb 9-1: USB disconnect, device number 56 [ 1974.695152][T24555] syzkaller0: entered promiscuous mode [ 1974.724003][T24555] syzkaller0: entered allmulticast mode [ 1974.793380][T24555] bond3: (slave lo): Releasing backup interface [ 1974.811911][T24555] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1974.833518][T24555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1975.072789][T24558] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1975.090494][T24558] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1975.458496][T24569] netlink: 'syz.0.4269': attribute type 1 has an invalid length. [ 1975.477561][T24569] netlink: 'syz.0.4269': attribute type 2 has an invalid length. [ 1976.155036][T24575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1976.231618][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.239775][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.268297][T24576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1978.522482][T24596] netlink: 'syz.5.4274': attribute type 1 has an invalid length. [ 1978.532050][T24596] netlink: 'syz.5.4274': attribute type 2 has an invalid length. [ 1980.871663][T24608] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1980.974245][T24608] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1983.076365][T18713] hid_parser_main: 176 callbacks suppressed [ 1983.076388][T18713] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1983.237178][T18713] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1985.787923][T24644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4286'. [ 1985.889737][T24644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1985.927682][T12995] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1985.975626][T24644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1986.097053][T12995] usb 6-1: Using ep0 maxpacket: 16 [ 1986.122197][T12995] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1986.164262][T12995] usb 6-1: config 251 has an invalid interface number: 95 but max is 0 [ 1986.181575][T12995] usb 6-1: config 251 has no interface number 0 [ 1986.193828][T12995] usb 6-1: config 251 interface 95 has no altsetting 0 [ 1986.204575][T18713] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 1986.219340][T24648] [U]  [ 1986.226881][T12995] usb 6-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 1986.238425][T12995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.248626][T12995] usb 6-1: Product: syz [ 1986.254877][T12995] usb 6-1: Manufacturer: syz [ 1986.261626][T12995] usb 6-1: SerialNumber: syz [ 1986.350663][T24648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4288'. [ 1986.376796][T18713] usb 9-1: not running at top speed; connect to a high speed hub [ 1986.391905][T18713] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1986.420196][T18713] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1986.431369][T18713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.475316][T18713] usb 9-1: Product: 鶕뮄娭膪ﭓ映庅궳ꢚᗴથ᫑຅髸亾뀧쒓ꨑ鵷ᯖ㙋㇄ﶠꮡ╇赞⏾モ磽竰䜿术큩灚ᆹ댠傄㿷ປ뮍ࣛ頖狤䥟焆솻쭼܃죦蟖枼덷阝渗車㨐캷缚朎㵁褉휅㤨簏摊턋䋋跥電감厌 [ 1986.537543][T24643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4287'. [ 1986.548448][T18713] usb 9-1: Manufacturer: 冻㋤⅀ํ扚嗵蔸Ⲍ灼 [ 1986.559855][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4287'. [ 1986.572610][T18713] usb 9-1: SerialNumber: ⡭崋ⰒȠ轎톮趰뽰咽╖렎쎧ම鐕쮈䶔蹡奐ᥩ讥Ⰽ벵鬽訉䤄 [ 1986.611802][T24638] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1986.619035][T12995] mos7840 6-1:251.95: required endpoints missing [ 1986.648137][T12995] usb 6-1: USB disconnect, device number 65 [ 1986.743725][ T30] audit: type=1804 audit(1783220684.907:1402): pid=24631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4281" name="/newroot/756/file1" dev="tmpfs" ino=4039 res=1 errno=0 [ 1987.041701][T24638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1987.074842][T24638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1987.112119][T24638] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1987.136344][T18713] cdc_ncm 9-1:1.0: bind() failure [ 1987.153612][T18713] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1987.178552][T18713] cdc_ncm 9-1:1.1: bind() failure [ 1987.194185][T18713] usb 9-1: USB disconnect, device number 57 [ 1987.579118][T24663] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1987.591549][T24663] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1987.924827][T24668] netlink: 'syz.7.4292': attribute type 1 has an invalid length. [ 1987.953812][T24668] netlink: 'syz.7.4292': attribute type 2 has an invalid length. [ 1988.456369][T24676] netlink: 'syz.5.4294': attribute type 1 has an invalid length. [ 1988.493654][T24676] netlink: 'syz.5.4294': attribute type 2 has an invalid length. [ 1990.140102][T24684] bond2: option mode: unable to set because the bond device has slaves [ 1993.418887][T24708] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1995.867001][T24730] syzkaller1: entered promiscuous mode [ 1995.890268][T24730] syzkaller1: entered allmulticast mode [ 1999.201154][T24750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4314'. [ 1999.275669][T24754] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4314'. [ 1999.290255][T24754] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4314'. [ 2000.431720][T24762] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.4316'. [ 2000.459607][T24762] veth0_to_bond: default FDB implementation only supports local addresses [ 2001.214816][T22707] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2001.354598][T22707] usb 9-1: device descriptor read/64, error -71 [ 2001.422751][T24768] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 2001.457632][T24768] netlink: 'syz.0.4318': attribute type 2 has an invalid length. [ 2001.594740][T22707] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2001.682866][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4319'. [ 2001.734890][T22707] usb 9-1: device descriptor read/64, error -71 [ 2001.847343][T22707] usb usb9-port1: attempt power cycle [ 2002.194592][T22707] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2002.225199][T22707] usb 9-1: device descriptor read/8, error -71 [ 2002.515845][T22707] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2002.558310][T22707] usb 9-1: device descriptor read/8, error -71 [ 2002.701049][T22707] usb usb9-port1: unable to enumerate USB device [ 2003.783847][T24791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.843902][T24791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.934520][T22707] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2004.106582][T22707] usb 9-1: Using ep0 maxpacket: 32 [ 2004.124127][T22707] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 2004.146481][T22707] usb 9-1: config 0 has no interface number 0 [ 2004.166712][T22707] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2004.193962][T22707] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2004.227340][T22707] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 2004.252668][T22707] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2004.290874][T22707] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2004.321856][T22707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.349274][T22707] usb 9-1: Product: syz [ 2004.360271][T22707] usb 9-1: Manufacturer: syz [ 2004.370456][T22707] usb 9-1: SerialNumber: syz [ 2004.401653][T22707] usb 9-1: config 0 descriptor?? [ 2004.419636][T24800] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2004.481089][T22707] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input101 [ 2004.630946][ C0] bcm5974 9-1:0.119: trackpad urb failed: -1 [ 2006.751550][T22707] usb 9-1: USB disconnect, device number 62 [ 2007.158382][T24839] netlink: 'syz.8.4335': attribute type 1 has an invalid length. [ 2007.182415][T24839] netlink: 'syz.8.4335': attribute type 2 has an invalid length. [ 2009.251937][ T30] audit: type=1326 audit(1783220707.387:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24846 comm="syz.8.4337" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2009.346471][ T30] audit: type=1326 audit(1783220707.507:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24846 comm="syz.8.4337" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2009.408656][ T30] audit: type=1326 audit(1783220707.547:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24846 comm="syz.8.4337" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2009.508819][ T30] audit: type=1326 audit(1783220707.567:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24846 comm="syz.8.4337" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2010.942274][T24856] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4339'. [ 2010.954748][T24856] netlink: 11 bytes leftover after parsing attributes in process `syz.8.4339'. [ 2012.177328][T24870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4342'. [ 2015.902745][T24907] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4348'. [ 2015.971282][T24907] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4348'. [ 2018.601722][T24928] bond2: option mode: unable to set because the bond device has slaves [ 2020.150411][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4355'. [ 2020.402306][T24948] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2020.441766][T24948] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2022.871642][T24961] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2022.996640][T24961] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2023.038999][T24961] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4360'. [ 2023.075138][T24961] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4360'. [ 2023.115373][T24961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4360'. [ 2024.024158][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4361'. [ 2024.522865][T24977] netlink: 'syz.5.4364': attribute type 13 has an invalid length. [ 2024.598052][T24977] gretap0: refused to change device tx_queue_len [ 2024.631094][T24977] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2024.735764][T12995] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2024.895220][T12995] usb 8-1: Using ep0 maxpacket: 16 [ 2024.950562][T12995] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2024.972055][T12995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.998226][T12995] usb 8-1: Product: syz [ 2025.012497][T12995] usb 8-1: Manufacturer: syz [ 2025.027768][T12995] usb 8-1: SerialNumber: syz [ 2025.043574][T24982] fuse: Bad value for 'fd' [ 2025.067061][T12995] usb 8-1: config 0 descriptor?? [ 2025.102805][T12995] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 2025.594581][T22965] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2025.770603][T22965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.783558][T12995] usb 8-1: clie_3_5_startup: get interface number failed: -71 [ 2025.795552][T12995] visor 8-1:0.0: probe with driver visor failed with error -71 [ 2025.803842][T22965] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2025.879736][T12995] usb 8-1: USB disconnect, device number 48 [ 2025.910544][T22965] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2026.029819][T22965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.055672][T22965] usb 6-1: Product: syz [ 2026.060873][T22965] usb 6-1: Manufacturer: syz [ 2026.065528][T22965] usb 6-1: SerialNumber: syz [ 2026.132001][T22965] usb 6-1: config 0 descriptor?? [ 2027.271052][T24996] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2027.281869][T24996] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2028.201364][T22707] usb 6-1: USB disconnect, device number 66 [ 2028.611684][T25015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2028.622024][T25015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2030.212343][T25021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4373'. [ 2032.288768][T25035] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4375'. [ 2032.329682][T25035] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4375'. [ 2033.883223][T25041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.900004][T25041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.570303][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4379'. [ 2034.641140][T25052] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4379'. [ 2037.636950][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.644139][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.711351][T25074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 2037.811231][T25074] netlink: 'syz.0.4384': attribute type 1 has an invalid length. [ 2037.824869][T25074] netlink: 'syz.0.4384': attribute type 2 has an invalid length. [ 2038.053848][T18711] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 2038.218678][T18711] usb 6-1: not running at top speed; connect to a high speed hub [ 2038.288710][T18711] usb 6-1: config 45 has an invalid interface number: 2 but max is 0 [ 2038.298125][T18711] usb 6-1: config 45 has no interface number 0 [ 2038.312416][T18711] usb 6-1: config 45 interface 2 has no altsetting 0 [ 2038.329264][T18711] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 2038.340533][T18711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.351745][T18711] usb 6-1: Product: syz [ 2038.357593][T18711] usb 6-1: Manufacturer: syz [ 2038.405313][T18711] usb 6-1: SerialNumber: syz [ 2039.557417][T18711] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 2039.576382][T18711] dvb-usb: bulk message failed: -22 (3/0) [ 2039.594000][T18711] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2039.605352][T18711] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 2039.617839][T18711] usb 6-1: media controller created [ 2039.623782][T18711] dvb-usb: bulk message failed: -22 (5/0) [ 2039.630488][T18711] dvb-usb: MAC address reading failed. [ 2039.639116][T18711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2039.664050][T18711] dvb-usb: bulk message failed: -22 (6/0) [ 2039.670699][T18711] dvb-usb: bulk message failed: -22 (6/0) [ 2039.678199][T18711] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 2039.691611][T18711] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input103 [ 2039.711649][T18711] dvb-usb: schedule remote query interval to 100 msecs. [ 2039.723945][T18711] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 2039.740267][T18711] usb 6-1: USB disconnect, device number 67 [ 2039.839224][T18711] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 2040.127883][T15333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2040.146045][T15333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2040.160937][T15333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2040.177211][T15333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2040.186122][T15333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2040.248322][T12006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2040.259111][T12006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2040.269641][T12006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2040.278856][T12006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2040.290855][T12006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2041.157405][T25091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.192520][T25091] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.203132][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4389'. [ 2041.215464][T25091] bridge_slave_0: entered allmulticast mode [ 2041.230499][T25091] bridge_slave_0: entered promiscuous mode [ 2041.253480][T25091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.265870][T25091] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.283555][T25091] bridge_slave_1: entered allmulticast mode [ 2041.298853][T25091] bridge_slave_1: entered promiscuous mode [ 2041.628540][T25091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.693950][T25091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.793416][T25091] team0: Port device team_slave_0 added [ 2042.162001][T25114] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2042.183332][T25091] team0: Port device team_slave_1 added [ 2042.237327][T25091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.248710][T25091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.292016][T25091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.318242][T25091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.328531][T25091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.362389][T12006] Bluetooth: hci0: command tx timeout [ 2042.398760][T25091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2042.557260][T25091] hsr_slave_0: entered promiscuous mode [ 2042.569524][T25091] hsr_slave_1: entered promiscuous mode [ 2042.582651][T25091] debugfs: 'hsr0' already exists in 'hsr' [ 2042.593550][T25091] Cannot create hsr debugfs directory [ 2043.232755][T18111] vhci_hcd: connection reset by peer [ 2043.251934][T18276] vhci_hcd vhci_hcd.8: stop threads [ 2043.265588][T18276] vhci_hcd vhci_hcd.8: release socket [ 2043.279163][T18276] vhci_hcd vhci_hcd.8: disconnect device [ 2043.351228][ T5696] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2043.960379][T25091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2044.007958][T25091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2044.025785][T25091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2044.053871][T25091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2044.063907][T25091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2044.113777][T25091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2044.147670][T25091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2044.190354][T25091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2044.435877][T12006] Bluetooth: hci0: command tx timeout [ 2044.510178][T25091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2044.600153][T25091] 8021q: adding VLAN 0 to HW filter on device team0 [ 2044.654454][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.661700][ T8190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2044.779912][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.787261][T11360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2045.249567][T25091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2045.499499][T25091] veth0_vlan: entered promiscuous mode [ 2045.568032][T25091] veth1_vlan: entered promiscuous mode [ 2045.754826][T25091] veth0_macvtap: entered promiscuous mode [ 2045.802013][T25091] veth1_macvtap: entered promiscuous mode [ 2045.942472][T25091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2046.003807][T25091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2046.106012][T20440] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.136220][T20440] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.176882][T20440] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.208070][T20440] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.526070][T12006] Bluetooth: hci0: command tx timeout [ 2046.670777][T11360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2046.701285][T11360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2046.781027][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2046.832651][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2047.257386][T25153] kAFS: unable to lookup cell '' [ 2047.286094][T25150] binder: 25142:25150 ioctl c0306201 800003c0 returned -14 [ 2047.525882][T25152] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4395'. [ 2047.931838][T25154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.042151][T25162] input: syz0 as /devices/virtual/input/input104 [ 2048.093290][T25162] input: syz0 as /devices/virtual/input/input105 [ 2048.594473][T12006] Bluetooth: hci0: command tx timeout [ 2048.707292][T25166] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2049.655671][T25186] netlink: 'syz.6.4402': attribute type 13 has an invalid length. [ 2049.800436][T25176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.808262][T25176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.600735][T25176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2050.719758][T25176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2052.212680][T25186] gretap0: refused to change device tx_queue_len [ 2052.228836][T25186] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2052.246324][T24034] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 2052.264835][ T8188] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.287179][T11360] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.444489][T11360] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.471126][T11360] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.482245][T24034] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2052.508032][T24034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.523987][T24034] usb 8-1: Product: syz [ 2052.537335][T24034] usb 8-1: Manufacturer: syz [ 2052.549818][T24034] usb 8-1: SerialNumber: syz [ 2052.587656][T24034] usb 8-1: config 0 descriptor?? [ 2052.687559][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4404'. [ 2052.715955][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4404'. [ 2052.747956][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4404'. [ 2053.114672][T25208] syz_tun: entered allmulticast mode [ 2053.154961][T25208] ip6gre0: entered allmulticast mode [ 2056.049979][T25226] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4409'. [ 2056.700581][T18711] usb 8-1: USB disconnect, device number 49 [ 2056.916367][T25234] input: syz0 as /devices/virtual/input/input106 [ 2056.960941][T25234] input: syz0 as /devices/virtual/input/input107 [ 2058.876232][T25254] netlink: 'syz.6.4415': attribute type 13 has an invalid length. [ 2059.006710][T25254] gretap0: refused to change device tx_queue_len [ 2059.029740][T25254] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2060.413630][T24987] syz_tun (unregistering): left allmulticast mode [ 2061.013318][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4418'. [ 2063.852768][T25294] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4422'. [ 2063.862320][T25294] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4422'. [ 2064.244545][T18713] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 2064.446326][T18713] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 2064.475856][T18713] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.532717][T18713] usb 10-1: config 0 has no interfaces? [ 2064.656309][T18713] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2064.699391][T18713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.806635][T18713] usb 10-1: config 0 descriptor?? [ 2066.083285][ T8200] bond1 (unregistering): Released all slaves [ 2066.293052][ T8200] bond2 (unregistering): Released all slaves [ 2066.406723][ T8200] bond3 (unregistering): Released all slaves [ 2066.473843][ T8200] bond0 (unregistering): Released all slaves [ 2066.532201][ T8200] bond4 (unregistering): Released all slaves [ 2066.627575][ T8200] bond5 (unregistering): Released all slaves [ 2066.697216][ T8200] bond6 (unregistering): Released all slaves [ 2066.768798][ T8200] bond7 (unregistering): Released all slaves [ 2066.917462][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2067.295892][T25312] ip6erspan0: entered allmulticast mode [ 2067.623061][T18713] usb 10-1: string descriptor 0 read error: -71 [ 2067.678628][T18713] usb 10-1: USB disconnect, device number 2 [ 2067.738053][ T8200] tipc: Left network mode [ 2068.192539][T25332] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 2071.125577][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2071.515611][T25354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.541462][T25359] loop7: detected capacity change from 0 to 16384 [ 2072.219017][T25359] loop7: detected capacity change from 16384 to 16383 [ 2072.247355][ T30] audit: type=1326 audit(1783220770.407:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2072.365486][T25354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2072.531245][ T30] audit: type=1326 audit(1783220770.417:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2072.950855][ T30] audit: type=1326 audit(1783220770.437:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2073.004153][T25359] Dev loop7: unable to read RDB block 8 [ 2073.023518][T25359] loop7: unable to read partition table [ 2073.076321][ T8200] hsr_slave_0: left promiscuous mode [ 2073.106344][ T8200] hsr_slave_1: left promiscuous mode [ 2073.106708][T25359] loop_reread_partitions: partition scan of loop7 (() failed (rc=-5) [ 2073.152565][ T30] audit: type=1326 audit(1783220770.447:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2073.426014][ T30] audit: type=1326 audit(1783220770.447:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2073.537169][ T30] audit: type=1326 audit(1783220770.477:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2073.719957][ T30] audit: type=1326 audit(1783220770.477:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2073.880252][ T30] audit: type=1326 audit(1783220770.477:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2074.059797][ T30] audit: type=1326 audit(1783220770.477:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2074.168417][ T30] audit: type=1326 audit(1783220770.477:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4433" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 2075.821098][T25384] bond3: option mode: unable to set because the bond device has slaves [ 2075.840300][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2076.567977][ T8200] IPVS: stop unused estimator thread 0... [ 2076.705039][T25405] netlink: 'syz.0.4436': attribute type 13 has an invalid length. [ 2076.778867][T25405] gretap0: refused to change device tx_queue_len [ 2076.986849][T25405] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2077.180745][T25418] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2077.231342][T25418] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2077.466426][T22707] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2077.503407][T25418] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4439'. [ 2077.513318][T25418] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4439'. [ 2077.634522][T22707] usb 10-1: Using ep0 maxpacket: 32 [ 2077.649690][T22707] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2077.675957][T22707] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.716209][T22707] usb 10-1: Product: syz [ 2077.741408][T22707] usb 10-1: Manufacturer: syz [ 2077.760031][T22707] usb 10-1: SerialNumber: syz [ 2077.789374][T22707] usb 10-1: config 0 descriptor?? [ 2077.824769][T22707] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2077.851072][T22707] dvb-usb: bulk message failed: -22 (4/0) [ 2077.866761][T22707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2077.916146][T22707] dvb-usb: bulk message failed: -22 (5/0) [ 2077.943337][T22707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2078.040475][T22707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2078.075571][T22707] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2078.084976][T22707] usb 10-1: media controller created [ 2078.110260][T22707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2078.237263][T22707] usb 10-1: selecting invalid altsetting 3 [ 2078.266111][T22707] ttusb2: set interface to alts=3 failed [ 2078.459156][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2078.613341][T22707] DVB: Unable to find symbol tda10086_attach() [ 2078.659828][T22707] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2078.708665][T22707] dvb-usb: bulk message failed: -22 (4/0) [ 2078.732278][T22707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2078.775378][T22707] dvb-usb: bulk message failed: -22 (5/0) [ 2078.798394][T22707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2078.838419][T22707] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2080.060552][T25447] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4441'. [ 2080.262127][T22707] usb 10-1: USB disconnect, device number 3 [ 2080.396265][T22707] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2081.869088][T25458] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2084.598204][T25489] netlink: 'syz.9.4451': attribute type 13 has an invalid length. [ 2084.650991][T25489] gretap0: refused to change device tx_queue_len [ 2084.702569][T25489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2085.540491][T25501] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4453'. [ 2085.676572][T25501] AppArmor: change_hat: Invalid input '8x0000000000000000^' [ 2086.258774][T25507] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2086.836665][T25507] bond2: (slave lo): Enslaving as an active interface with an up link [ 2086.871066][T25507] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2087.019792][T25509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2087.793280][T25517] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2088.338608][T25529] lo: entered allmulticast mode [ 2088.429694][T25517] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2088.811530][T25517] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4455'. [ 2089.041634][T25517] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4455'. [ 2089.054209][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4455'. [ 2090.247416][T25550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4461'. [ 2090.309817][T25551] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4460'. [ 2090.580200][T25553] netlink: 'syz.6.4461': attribute type 1 has an invalid length. [ 2090.659795][T25553] netlink: 'syz.6.4461': attribute type 2 has an invalid length. [ 2090.705541][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2090.705561][ T30] audit: type=1326 audit(1783220788.867:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.7.4459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 2091.352081][ T30] audit: type=1326 audit(1783220789.517:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.7.4459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 2091.485705][ T30] audit: type=1326 audit(1783220789.517:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.7.4459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 2091.579119][ T30] audit: type=1326 audit(1783220789.517:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.7.4459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 2091.762713][ T30] audit: type=1326 audit(1783220789.517:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.7.4459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 2099.077087][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.086394][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.517130][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.534226][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.600424][T12006] Bluetooth: hci0: command 0x0406 tx timeout [ 2221.957297][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.964043][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.715543][ T31] INFO: task kworker/0:4:5688 blocked for more than 143 seconds. [ 2227.723445][ T31] Tainted: G L syzkaller #0 [ 2227.729999][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2227.739208][ T31] task:kworker/0:4 state:D stack:16616 pid:5688 tgid:5688 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2227.751335][ T31] Workqueue: usb_hub_wq hub_event [ 2227.756672][ T31] Call Trace: [ 2227.759977][ T31] [ 2227.763017][ T31] __schedule+0x17d9/0x56c0 [ 2227.768891][ T31] ? __pfx___schedule+0x10/0x10 [ 2227.773900][ T31] ? schedule+0x90/0x2b0 [ 2227.778269][ T31] schedule+0x164/0x2b0 [ 2227.782478][ T31] usb_kill_urb+0x1cf/0x2f0 [ 2227.787294][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2227.792383][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2227.798943][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 2227.804102][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2227.809754][ T31] usb_control_msg+0x234/0x3e0 [ 2227.814644][ T31] hub_port_init+0xb0b/0x28c0 [ 2227.819401][ T31] hub_event+0x24e8/0x4d30 [ 2227.823841][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 2227.829692][ T31] ? __pfx_hub_event+0x10/0x10 [ 2227.834532][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2227.840306][ T31] ? rcu_is_watching+0x15/0xb0 [ 2227.845236][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2227.851037][ T31] process_scheduled_works+0xa8e/0x14e0 [ 2227.856975][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2227.863123][ T31] ? assign_work+0x3cf/0x5d0 [ 2227.867813][ T31] worker_thread+0xa47/0xfb0 [ 2227.872451][ T31] ? __kthread_parkme+0x71/0x1f0 [ 2227.877726][ T31] kthread+0x388/0x470 [ 2227.881860][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2227.887607][ T31] ? __pfx_kthread+0x10/0x10 [ 2227.892262][ T31] ret_from_fork+0x514/0xb70 [ 2227.897429][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2227.902593][ T31] ? __switch_to+0xc89/0x1420 [ 2227.907624][ T31] ? __pfx_kthread+0x10/0x10 [ 2227.912544][ T31] ret_from_fork_asm+0x1a/0x30 [ 2227.917694][ T31] [ 2227.920839][ T31] INFO: task kworker/1:7:5748 blocked for more than 143 seconds. [ 2227.928919][ T31] Tainted: G L syzkaller #0 [ 2227.935681][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2227.944861][ T31] task:kworker/1:7 state:D stack:21048 pid:5748 tgid:5748 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 2227.957156][ T31] Workqueue: usb_hub_wq hub_event [ 2227.962260][ T31] Call Trace: [ 2227.965597][ T31] [ 2227.968557][ T31] __schedule+0x17d9/0x56c0 [ 2227.973281][ T31] ? __pfx___schedule+0x10/0x10 [ 2227.978502][ T31] ? schedule+0x90/0x2b0 [ 2227.982829][ T31] schedule+0x164/0x2b0 [ 2227.987191][ T31] usb_kill_urb+0x1cf/0x2f0 [ 2227.991737][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2227.996914][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2228.003488][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 2228.009019][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2228.014708][ T31] usb_control_msg+0x234/0x3e0 [ 2228.019530][ T31] hub_port_init+0xb0b/0x28c0 [ 2228.024252][ T31] hub_event+0x24e8/0x4d30 [ 2228.028799][ T31] ? __pfx_hub_event+0x10/0x10 [ 2228.033589][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2228.039955][ T31] ? rcu_is_watching+0x15/0xb0 [ 2228.044970][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2228.050737][ T31] process_scheduled_works+0xa8e/0x14e0 [ 2228.056631][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2228.062670][ T31] ? assign_work+0x3cf/0x5d0 [ 2228.068078][ T31] worker_thread+0xa47/0xfb0 [ 2228.072833][ T31] ? __kthread_parkme+0x71/0x1f0 [ 2228.077848][ T31] kthread+0x388/0x470 [ 2228.081949][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2228.087169][ T31] ? __pfx_kthread+0x10/0x10 [ 2228.091801][ T31] ret_from_fork+0x514/0xb70 [ 2228.096812][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2228.101991][ T31] ? __switch_to+0xc89/0x1420 [ 2228.106740][ T31] ? __pfx_kthread+0x10/0x10 [ 2228.111363][ T31] ret_from_fork_asm+0x1a/0x30 [ 2228.116454][ T31] [ 2228.119657][ T31] [ 2228.119657][ T31] Showing all locks held in the system: [ 2228.127708][ T31] 1 lock held by khungtaskd/31: [ 2228.132664][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2228.143008][ T31] 1 lock held by klogd/4981: [ 2228.147683][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 2228.158568][ T31] 2 locks held by getty/5383: [ 2228.163269][ T31] #0: ffff888032b890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2228.173127][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2228.183524][ T31] 5 locks held by kworker/0:4/5688: [ 2228.189332][ T31] #0: ffff8880222f2140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2228.201794][ T31] #1: ffffc900050afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2228.254480][ T31] #2: ffff88802bca31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2228.263519][ T31] #3: ffff88802bca1568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2228.273954][ T31] #4: ffff88802bbc1a60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2228.284110][ T31] 2 locks held by kworker/1:6/5747: [ 2228.289552][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2228.300695][ T31] #1: ffffc90005407c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2228.313172][ T31] 5 locks held by kworker/1:7/5748: [ 2228.318487][ T31] #0: ffff8880222f2140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2228.329969][ T31] #1: ffffc90005467c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2228.344195][ T31] #2: ffff88802bd381d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2228.353691][ T31] #3: ffff88802bd95568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2228.374520][ T31] #4: ffff88802bbe6a60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2228.388031][ T31] [ 2228.390400][ T31] ============================================= [ 2228.390400][ T31] [ 2228.399405][ T31] NMI backtrace for cpu 0 [ 2228.399441][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2228.399465][ T31] Tainted: [L]=SOFTLOCKUP [ 2228.399472][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2228.399484][ T31] Call Trace: [ 2228.399491][ T31] [ 2228.399499][ T31] dump_stack_lvl+0xe8/0x150 [ 2228.399542][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2228.399636][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2228.399667][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2228.399690][ T31] sys_info+0x135/0x170 [ 2228.399741][ T31] watchdog+0xfd7/0x1030 [ 2228.399771][ T31] ? watchdog+0x1c7/0x1030 [ 2228.399799][ T31] kthread+0x388/0x470 [ 2228.399825][ T31] ? __pfx_watchdog+0x10/0x10 [ 2228.399846][ T31] ? __pfx_kthread+0x10/0x10 [ 2228.399872][ T31] ret_from_fork+0x514/0xb70 [ 2228.399900][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2228.399926][ T31] ? __switch_to+0xc89/0x1420 [ 2228.399951][ T31] ? __pfx_kthread+0x10/0x10 [ 2228.399978][ T31] ret_from_fork_asm+0x1a/0x30 [ 2228.400012][ T31] [ 2228.400020][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2228.517536][ C1] NMI backtrace for cpu 1 [ 2228.517558][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2228.517581][ C1] Tainted: [L]=SOFTLOCKUP [ 2228.517588][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2228.517599][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2228.517696][ C1] Code: dc 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ca 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2228.517713][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 2228.517763][ C1] RAX: 000000000cac5755 RBX: ffffffff819ab3f0 RCX: 0000000080000001 [ 2228.517775][ C1] RDX: 0000000000000001 RSI: ffffffff8e229c33 RDI: ffffffff8c4bd380 [ 2228.517788][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 2228.517801][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 2228.517813][ C1] R13: 1ffff11003c50000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 2228.517826][ C1] FS: 0000000000000000(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 [ 2228.517841][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2228.517852][ C1] CR2: 00007ffea2efef52 CR3: 000000000e946000 CR4: 00000000003526f0 [ 2228.517868][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2228.517878][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2228.517889][ C1] Call Trace: [ 2228.517897][ C1] [ 2228.517903][ C1] default_idle+0x9/0x20 [ 2228.517928][ C1] default_idle_call+0x72/0xb0 [ 2228.517953][ C1] do_idle+0x2e0/0x540 [ 2228.517977][ C1] ? __pfx_do_idle+0x10/0x10 [ 2228.518002][ C1] cpu_startup_entry+0x43/0x60 [ 2228.518023][ C1] start_secondary+0x101/0x110 [ 2228.518046][ C1] common_startup_64+0x13e/0x157 [ 2228.518073][ C1] [ 2228.703570][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2228.710440][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2228.721134][ T31] Tainted: [L]=SOFTLOCKUP [ 2228.725459][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2228.735610][ T31] Call Trace: [ 2228.738888][ T31] [ 2228.741818][ T31] vpanic+0x56c/0xa60 [ 2228.745807][ T31] ? __pfx___schedule+0x10/0x10 [ 2228.750660][ T31] ? __pfx_vpanic+0x10/0x10 [ 2228.755185][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 2228.761444][ T31] panic+0xc5/0xd0 [ 2228.765199][ T31] ? __pfx_panic+0x10/0x10 [ 2228.769638][ T31] ? preempt_schedule_common+0x82/0xd0 [ 2228.775119][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 2228.780492][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 2228.786650][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2228.792807][ T31] watchdog+0x1030/0x1030 [ 2228.797145][ T31] ? watchdog+0x1c7/0x1030 [ 2228.801568][ T31] kthread+0x388/0x470 [ 2228.805739][ T31] ? __pfx_watchdog+0x10/0x10 [ 2228.810418][ T31] ? __pfx_kthread+0x10/0x10 [ 2228.815013][ T31] ret_from_fork+0x514/0xb70 [ 2228.819612][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2228.824736][ T31] ? __switch_to+0xc89/0x1420 [ 2228.829423][ T31] ? __pfx_kthread+0x10/0x10 [ 2228.834018][ T31] ret_from_fork_asm+0x1a/0x30 [ 2228.838791][ T31] [ 2228.842126][ T31] Kernel Offset: disabled [ 2228.846462][ T31] Rebooting in 86400 seconds..