last executing test programs: 17.457412912s ago: executing program 2 (id=7): r0 = socket(0x80000000000000a, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000540)={0x7fffffff, r0, 0x2}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dabfc54c2c0e1f532d95a1a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00"/400], 0x18c) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x10000, 0x87) unlinkat(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) unshare(0x1e028180) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000240)=0x7, 0x4) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x191, 0x240, 0xa0, 0x80, 0x408, 0x1, 0x20, 0x0, {0x0, 0x0, 0xfffffffa}, {0x0, 0xffffffff, 0x1}, {0x0, 0x6, 0xfffffffe}, {0x6, 0x4}, 0x0, 0x100, 0x0, 0x100, 0x0, 0x1001, 0xfffffffe, 0x6, 0x26, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) getsockname(r10, &(0x7f00000003c0)=@l2tp, &(0x7f00000000c0)=0x80) 14.933971019s ago: executing program 2 (id=10): r0 = socket(0x80000000000000a, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000540)={0x7fffffff, r0, 0x2}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dabfc54c2c0e1f532d95a1a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00"/400], 0x18c) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x10000, 0x87) unlinkat(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) unshare(0x1e028180) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000240)=0x7, 0x4) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x191, 0x240, 0xa0, 0x80, 0x408, 0x1, 0x20, 0x0, {0x0, 0x0, 0xfffffffa}, {0x0, 0xffffffff, 0x1}, {0x0, 0x6, 0xfffffffe}, {0x6, 0x4}, 0x0, 0x100, 0x0, 0x100, 0x0, 0x1001, 0xfffffffe, 0x6, 0x26, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, 0x0, &(0x7f0000000180)) getsockname(r10, &(0x7f00000003c0)=@l2tp, &(0x7f00000000c0)=0x80) 14.077978707s ago: executing program 4 (id=11): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 12.869279425s ago: executing program 0 (id=14): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) 12.784248594s ago: executing program 2 (id=15): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581260000000000090582020002000000090503"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120061ff80aa431d6d54f606cb91746ac8fffa7bc6c1e3bc7bba60d540154188e51da5a3cd3617c16a8455f5777081a47889dfa43d74baa0eed16835ffba44cfb131c95450f664180f84c12c92b506c06a7932ceaedf7b850cdc825d254b1a871ad1167c5e150f4e9b03c0b99a3255b23bc54cd76b063d15a4aa09fa20c55944c74b527c383e8156695f49a9f8cd1e01df0046f1600567eb7e500ae219d6a24f73082dc400"], 0x64}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x9c, 0x8, 0xffffffffffffff6c, 0x0}}, 0x10) r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r4, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) shutdown(r3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) 11.67454469s ago: executing program 4 (id=17): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581260000000000090582020002000000090503"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120061ff80aa431d6d54f606cb91746ac8fffa7bc6c1e3bc7bba60d540154188e51da5a3cd3617c16a8455f5777081a47889dfa43d74baa0eed16835ffba44cfb131c95450f664180f84c12c92b506c06a7932ceaedf7b850cdc825d254b1a871ad1167c5e150f4e9b03c0b99a3255b23bc54cd76b063d15a4aa09fa20c55944c74b527c383e8156695f49a9f8cd1e01df0046f1600567eb7e500ae219d6a24f73082dc400"], 0x64}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x9c, 0x8, 0xffffffffffffff6c, 0x0}}, 0x10) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) shutdown(r3, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000280)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r7 = socket(0x1000000010, 0x80802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES16=r9], 0x21c}, 0x1, 0x0, 0x0, 0x200c4034}, 0x20000014) io_uring_enter(r5, 0xd89, 0x3ffb, 0xd, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r12, 0x10040) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r1, @ANYRES32=r13, @ANYRESOCT=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 9.531780288s ago: executing program 0 (id=19): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 9.275765742s ago: executing program 3 (id=20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) 9.214568396s ago: executing program 1 (id=21): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000240)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x108, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x283b}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x7fff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffc00}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x10000}, {0x5, 0x14, 0x1}}]}, 0x108}}, 0x8000) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r7 = socket(0x1000000010, 0x80802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES16=r9], 0x21c}, 0x1, 0x0, 0x0, 0x200c4034}, 0x20000014) io_uring_enter(r5, 0xd89, 0x3ffb, 0xd, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r12, 0x10040) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r1, @ANYRES32=r13, @ANYRESOCT=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 7.891990177s ago: executing program 1 (id=22): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00'}) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x40014) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x101, 0x404040) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x203d) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x400, {0x1, 0x400000, 0x2, 0x105, 0x3fa, 0x5, {0x9, 0x10003, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffe7, 0x8000, 0x6, 0x4, 0xa000, 0x2000007, r5, 0x0, 0x27, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xb}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xba, 0x0, 0x40f5ec93, 0x2}, &(0x7f0000000400)=0x18) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r11, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) 7.815354933s ago: executing program 4 (id=23): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) write$sndseq(r6, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 7.688808734s ago: executing program 2 (id=24): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581260000000000090582020002000000090503"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120061ff80aa431d6d54f606cb91746ac8fffa7bc6c1e3bc7bba60d540154188e51da5a3cd3617c16a8455f5777081a47889dfa43d74baa0eed16835ffba44cfb131c95450f664180f84c12c92b506c06a7932ceaedf7b850cdc825d254b1a871ad1167c5e150f4e9b03c0b99a3255b23bc54cd76b063d15a4aa09fa20c55944c74b527c383e8156695f49a9f8cd1e01df0046f1600567eb7e500ae219d6a24f73082dc400"], 0x64}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x9c, 0x8, 0xffffffffffffff6c, 0x0}}, 0x10) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) shutdown(r3, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x3) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0x5], [0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x8000004]], '\x00', [{}, {0x0, 0x40000005}, {0xaf5, 0xaf6}, {0x3fc}, {0x0, 0x5b2c5934}, {0x200}, {0x0, 0x3}, {0x10}, {0x0, 0x8}, {0x4, 0xffffff30}, {0x40000}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) 7.203840682s ago: executing program 1 (id=27): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581260000000000090582020002000000090503"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120061ff80aa431d6d54f606cb91746ac8fffa7bc6c1e3bc7bba60d540154188e51da5a3cd3617c16a8455f5777081a47889dfa43d74baa0eed16835ffba44cfb131c95450f664180f84c12c92b506c06a7932ceaedf7b850cdc825d254b1a871ad1167c5e150f4e9b03c0b99a3255b23bc54cd76b063d15a4aa09fa20c55944c74b527c383e8156695f49a9f8cd1e01df0046f1600567eb7e500ae219d6a24f73082dc400"], 0x64}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x9c, 0x8, 0xffffffffffffff6c, 0x0}}, 0x10) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) shutdown(r3, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) 5.55240375s ago: executing program 4 (id=29): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'hsr0\x00', @broadcast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x391442, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') lseek(r8, 0x1000000, 0x0) 5.418311759s ago: executing program 3 (id=30): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) 4.253067303s ago: executing program 4 (id=31): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) listen(r3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0x5], [0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x8000004]], '\x00', [{}, {0x0, 0x40000005}, {0xaf5, 0xaf6}, {0x3fc}, {0x0, 0x5b2c5934}, {0x200}, {0x0, 0x3}, {0x10}, {0x0, 0x8}, {0x4, 0xffffff30}, {0x40000}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) 3.723835084s ago: executing program 3 (id=32): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 2.835420423s ago: executing program 0 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="bf6ab12051dc6238cf8cf41dd780a7b48f0b5907a9cc504dcd9b41b2b2cb3d57af387f6707880423fefa1f998269ad32c0754f30b2222cbd29afcffb60a78117d6b592eeabbeaac239702043e558b69dc2e5600cffdaa359429bfc094d7fcfc8f78d1674d65090f8c05501e5e4d064442e26d926396bf0fa42ad2d91fe8c", 0x7e}, {&(0x7f0000000b80)="81e0c3623afccff9e74478ec17761c1d38d69033284db42c08d79f46e641d7948bdf784bc58a6c9686e0f3ba2d0281f7812ffbe172d0a5cbdb447b8b81210dee138c52a80c14cf51741a11efb71845b791eb6c816815a62b1021a651b12d1c8756e0ce2563e3b22966c207847b7c9cc0ab54884e29253a326674700437af9d316875c0f4d30d62", 0x87}, {&(0x7f0000000c40)="62cb1643cd668f928eef138b467cdbe945f2821fc4dc7ee26ff54804c171b11c8c158aefa571c79a25d7d8d80c083a26c5c64957fd06da5aecfe32617cf3c27324da367e2736b8455ddf1ec46464cefd94d735c0e3ae315f200bd3a823aa704d34c30b0c5bba0033e9967d19fb5065c0c7f922aa13ff1953fac86519d51667914cc79ff0e1d4b5b5093ef908a378f9ab52047843acb32ec31cb70c687ac275d9e8269f416b69c3152b2add017797397e7a678d35ec79de5378cd5732ae810032cab3a063eedadb6efd63c977fdfb78a2", 0xd0}, {&(0x7f00000007c0)="4d1d855e55684e8c0667d94bf22b6fba34046235b7fbc0ee3bbe45f3d8934198c5a5207393", 0x25}], 0x4, &(0x7f0000002d80)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x50, 0x2040800}}, {{&(0x7f0000002e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002e80)="e9ad4bc999c2bb92bdabfcbf54dea57c16244172b855dc156bb7e0e3825d5011f313f090c8dfda1517a434d2f70fa579a3b8e31460aad807617c1ddd7a81eb3aa943b472c6efcfb71f11671a4be0eb4489c15e201b86ee99f6035fa6c847cdac0d608cf69b587ad9da7f02970f1f9c7f83a50237fdad52091da78996574ee0732667751bce2476c8a9c588d36fd99f", 0x8f}, {&(0x7f0000002f40)="43c7cfd0762e51f01d9226db78388aefa6d4832e5e3e134ba7aa521c35c48c89a45b46e33b48387d711605f80a3d287270ed7edc", 0x34}, {&(0x7f0000002f80)="8c4c2011112d14c66b9dc437f03347969e7e101b63f34232755121392d6ace6995b626288d611885f5dfd17d674dcdf2fd9367dcedfa5ad04892f2a025c4ddca4002106b9092f4072c59fef85dde739f2626bf352dc7cc1c5790ab35ce8106f26d2e781c01d8b89e28ff696e1b58a86c4a52b5d32ada591a06a7bdefcea83b", 0x7f}, {&(0x7f0000003000)="18551d53216954a4a09d25842dffb25c6e208211ceae67eed484e52c1b0d43ffdc041f0edd1ba6a73cd4cefd4e68e19bcec0fd403255a8f21fbd5c03ba57aaaef170a3400ce3e09c797e04db71899800461862b13220f0f9e9e7426496dbce52a2584e6c5d27c0deaac60edfb80678f452d5cc682a29921edcee", 0x7a}, {&(0x7f0000003080)="6f06d0ef94ad082ee5dcb102d55773ffc4d6203d79fde64193b1bb8ccb70fa20a2b7143dfd3e63f2439531e45ba168dd690badac9526d092bfdb616820c66d6ac21540184d3fdeeea3870e2a5944868cc6868316a9a8223caf1d33eb123320d5cf05d13c7eb4532fc283908a2b6ebbfec1c830fb113b652384708c12bd73a93c66bebfae64655b320a38f117798f9fe09b694b5f5846ac3dceb41e3d6259b842d9fc71b04dc6ff28f3efd9a72961fa98d2ed278239553001f10b36701cafe415f39db393dd6676e3ea38bc52ca95646437758829735b", 0xd6}], 0x5, 0x0, 0x0, 0x804}}, {{&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000032c0)="e8342c4611577c066113758d061fc7061913a79428d6bde9a84ce16bdc467ab6744e16eca071f786a513a5cab7963c259477ee58897254ea18644209790b409b3afa269b9b5ebf2c7a9d2a913c3d6c6a219e7ab6f0eb3ab36927b3169a41cd5768ffbca7dd15921b7f839a0f75ab68ec0501654483110ecf2af075a58b7557505f455386beb8bf91ea91f6ac2172d1353eb28dde46c67c473ff438f088ed7bbbaddf5fd2cf38", 0xa6}, {&(0x7f0000003380)="e25395fa9bf1ea9e99167a39f804162065f18c49008f519bd4d6d000b2a4a195c24c86788cfbbcf62cea0ccb7e81040f32d4768303bda9b5c593c2f2c84bfc306fc060cdc1d87a1a6263a28985d29eaec09530c3f272e5f41d648acc31f515ef393f24027a337fadb823c1f4198562e312164be57a1e8bdc395020920f18519a64d9acdbd6661d6e888c132b03633b1bd6f8006b2074a6304124847f5a0513c67acd62", 0xa3}, {&(0x7f0000003440)="03b17a1373da7a4d63b488c783d6c3ca32f1a4b5245f1327e9d19d13c64abb169d5d3a3b3a5b3145549f100ec67d30a92ab436fd767fe934923fb703321834b1bd0f1ef3b7ec1aeacac9dba86f3cc1536c9f8912e624f3034bfc5d329b49402f54b81f90ac98cf60c5447d897df7f434c3d7c51c50", 0x75}, {&(0x7f00000034c0)="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", 0xfa}], 0x4, 0x0, 0x0, 0x810}}, {{&(0x7f0000003740)=@abs={0x1}, 0x6e, &(0x7f0000003940)=[{&(0x7f00000037c0)="8edea8514be701c69fde4fe41d489240709862f01c0d6130079f64b95e91705fbc45a32c6b303d2bd3bed361f9b1", 0x2e}, {&(0x7f0000003800)="6dc4324306958451cca2de003ab3fd0f7a968842927e3040ca1f9ff0881cb8ff78398ba230e2fc9c2978ddd610", 0x2d}, {&(0x7f0000003840)}, {0x0}, {&(0x7f0000003900)="b43c9ace0d6f1713d1d04fe3eb65043868f8c3f76007b68c3a377db51219d430950ea895", 0x24}], 0x5, &(0x7f0000003e00)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r5, r1, r4, r0, r5, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0xa8, 0x1}}], 0x4, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf8, 0x0, 0xe4}]}, 0x8) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d44f163a6e1268808908540969fef64837c1c98f595e4e6c4d0167879320c7196661e64a8a7a4a0aa159496216536ecba5fb", 0x32}, {&(0x7f0000000e00)="e86ff15ea97eeb4d37f3f102c972d4f5d21874d4a429af6ec2c81b87a6718d17ad276fef25a19438482f4c4cd14f4058f069eddb9525fd2a52870ae137ea846dfd213d24edd39291cb56f74dec1a6366954e264039fa8b43d97998c9ab64643d5a4466a6992a86e451188616f45460d3ad0eae62e98bef55709677e6b6ae02cd966009bebe2ac7caa50abf10b2fe3d14ff184dfc185a348c612fea55705dbd19b4db7b3b1c78b1984d2267fcc1b524af22adfc4486ff801ee65576cd5dd57965e66a810f97e6467d430e49f547c1cd66fae6985a910737d05e94ff266d3f7f081dd22036d9a91b767a25041a7a58b6358f3dfc59b3e36f6a399e21d1842f4c4bb5701d151d8aa20182fa749617140ef3e94005116a03a0e86b1a5b3ee65716c1d3ff2ff8b399b8fd8db93baae96498bc64f2b158e4c4217fdc83417a2167cd34a3ae48f195035073e067b1e07aede0c001712fee38e7672eec74b09c6c1963e03a431c9a9ac752f4192558325079180157ef8669371d36126d937ed88f668db63bb6ae31aff217f3d92d94848cc34d5618f9134f727dafea447a653ada88aeb030379ebf9aba55dfe62527801330fd59435d70c907c0ddc6d28028ae35036227afc9f3de853923c9c56a1f6a2d03ce9eac560446056d2f84e81609964d5adadee092277d40a67f97d5d946080bdd68b34c7239efb883b05d274aeace1cee55f5270300c5ce10a860fa503fe09e721a26178961f0faf0d264d6d110ae042a7c8e7df1940e7b68f9e81fd27c418970d160cb7459785bcaed26cc32b5872ca29c3bb3579bf2e5518d7ffef8ab84338761513bfa87736586e0ea19e5c5224a76e1c930f2cfd96d24359f22dd76790e400e35f9af18c0c34a3514bc35adffa4de90c628c7deac0bcb557f42b9df5028cfbf7d2028914456ad1d6a7be30ecb6f11314a78551d0022040e7b403bc751543eee43ff5677d8b926fe2e587feed3e4786d589eaa0409f38da42ede58971c0395d70f365e2bdc6a748f94603c50d61930d165ffb615c271cd37d48fa826bb948b6ed9f62d8f3fd87433e0c7c02fb766c9f71d8ec8ae5568691bfd808f46ab83419d77a2234786c54e2e8fb6711d9cb617d800919999f8d6406d157320c65870d2917774154c2616b339577c1ff8ea800879ee33ecab33217640674bd14d2fe0e2d72c79b0b04ed654bbc71e20ca30b380d216c25910a4fd078862e48e7cdd36586aca09350439dc0d0ca1b97d1c5cd02402e23528a8cb5a7b48c3cef7df97633c9af5b8da1fc3702d4a3102833301b8f503622b691a2747a620fdd12dc488b94fd132bca84455e88a32faeff0d7336bb71e29871bf0129f0c1a1754b1b23f4cfd79c44725143b262aa011c25d312683904c12c5e48fdbce826868c1f4c1dd9a6687e95e1205873f20b77b4ff4e20143433b9e1095ec2af92d531906ef4043e764233b7bfe92b515452fee7ea93d7cafe5694d419502cdc0e917f4f9d5db4ba084b6855796e09e6506c5562c7cb614b24ab171099b938ccc964a0f31c32703c8e9bbc6606cdc63b6d2d467b1369f6a1d36d8fe2f79767f5f7eb4b6175d0169a3cda7eaa023490b95d06b5e34f53d8107b3e7e7bb9d4480a2d5f52b7336bea5cda185ce578ea0039647a214f6837f0b3a00774e4c54cc0514feac492aae08678819473f5db3dc80ad28913ae3974f0fff9a1902258b81b1791e2954d8666ae57479ed17d8a0dcb45cd520d74c01b0561dddc3a18b26d120067ca9e2caa1ad59f6420e6d3b5729e588ebece44cd0c030efcbb0003f7b13288b4e9bf7b71646373f32863bf5886ea650f85cac99f4c225bb55bcc1e57f088543ba740e4715c5401286f5a0ac6d726c414f7d77304aacf57c72e9b63b6c58516c9cda54fe53384b9f2024a79f99da6b00ff7712cf617a8ecdbf074a8e0fc244cdd1cf55f6f8e222acbbae7a2277003ccd8d0d6a2735fab7807bce39833a1c204c02e6df7ffb4dad54992a5bfc07c45b33dc2d724a6c203ead4690b8bb02c1c27ad6afeee543b260ee122cf1fffda3a259d0c5cb69f5dfbbe85b3009986e58da87358b76c95f7486686965223729c55dbf86bfe3d1f4c33a0a775c223f816c3630a498eecf2c991392b8d37c7cabe9414d51adab66fea3664ffaa53ad6567f708ca9e9be1110587980c1fd6ca884d0fbb3be488be88e4ab1ef5e5b0e56e59b0db26b0fb05d4b330f23341a04e6faba2fb0e4cb366b783c49d15e99bb853b4841efaab73f6cf228465b045b48c841f4987123182949e1547c8fdbbf353d8cc3d49954197d0110a562f2f0fa824921c5d88afdc04dfe347492081509ef102444c025e581074003809b3c370026cf63d982261158125c350ffff8050b34f78f9490f17eeb5f357270e828690df125986678944f3e602485aed096c6115b6a757d02210e87dc286b5e82898f45d02de279edaaf394c06b06e07c3a4f5021bf7ba96833b4b1331a909a91dc9046b3b1e085027ed2b98f724f37d3140a0720d149b0fe3ffa9bd85a6e662c7f963902edb2d62c991de3cc566020581499c323f829364a19dd1321f25274be2bdc7534ae329af7e3d3435cb20ea151ede7d6a62bb71ac1ab59c796d819d2328cdfccd513ae21d02ddc8e030f2c2217110c049bc3dc6980e60d1bcf408f1894ae1616b5bdab3314ccf500b371c43660b7afb1e00151a70892ff0b0763c4748719feb5b65c82918610a35db252ecf8fd0d26ee3b9328b4451e006657659481af201dacaacdd1fb94906890bbc1b0003da82fb49c00e7dd344964a4355906a85a8c444133d26ab24b902e79af122222dffd57c9c90a4902c5f090d213bbb9b4341665ab4c2984d6dc446027fca03ace47d86c4901b573a3ffd92dc09fd225af26e540fb061e75ec0acf04c505cd392a4e88afa0d270458d5e622594ac2ccae789c17abcfa4cbe87f5d1d9c0e515b68d7f3687ffb4b51a69ca9c7cc212894c22340ac064525114f9671259042e957c7f212c3119a22b921fae7a169a9f1468a6a3d80f79ac2094d71d3e2f99035e8a4107f20a246d9a58b9e57fdca65efea5d35994d1b498dabc8157ed5e35767fa00d46e5b2ba3af1a5c38030c7e3caa47a335401696eb67c87c12668372ab038ba11108be052ea3791a694e8aae692cb6612f32ea3b1fdbdc5bf67310ab2a369ce99b06f96345157172bd8311235b9b392bd5e17fe7d992de4cc28d749a32e49cbb9ad392199a2dcbd14c75b30c05d6e1023f6b1e55e6e9a1ceb384e178ee52480f545edf79b657c9b770d1856e1ed702bbcb3decd80ceb5e9333752f7e5ffb30c4721d9119b7c75f627baaa820ddb75b047690f7c3ab0953a1de79c560b3461c020363e11e1359b02123961ae315f9dfba9feb86633075502bfb8cc5de3f00035c0ba3d9c3271d656dff1fa52508b55d2496ce4683ed39f35509cb9c339596ca0f6c0406b77df50f47d2cb0b4f50e9052d39925b288cde91376f05cbecbf2f6c792446105043192e607a73483066a40514ec026a29510966aa5728ae95d575602c6c9a3df83b34f64ce52673c111667de55b2af254c91d3e99d3b7b8ec488a6ab90cb84053911c1e129eb293ea008c3cb7ad9cae6cb6774d851a530ebeb810d6f4ecc2665815e557750359cf34ce8ecccdb828a2e2a6ed02ee7083b9106f310920aba0ba7978b18b7af24c8250ba0b867415d87845ec4004cd36c1bd27fad1644f71fd6587ef024383af6155df6de5911e706763917ffaa870ce23e26b3fe99c74a31ae5838a44de36122dd600a10bbe7bf8134f9967f305d4cb0cbbb386641e3527ff3e31df3ed08ffed187bd5c2a58ed50181a5bdc9f4495c9085b5e28a8b0f7300cb3f54b36008c2f007f75ee05b9c6b6b54dab225c56a0346d7cd8764f5815841ca4b0f30694f4f244f31475cfd295b5b9b58785e6fd0bbbbb09db391b774243b6569603e37976ace035e596902d9009134f2bbb6988208922254efd9c2d5dc06ba1dd002f81a6d3a4f167db7e820637c6fd7623e2415df813f4f96b6b6857d4a18bf7f8286fb06181a714bb986cdf121b88940c46fe4e0876d6b54556b71147b7e21263b8114142e9cdb2feebe393ba80434c7190c0f70890da4421b5f4f57d4fd129f949b229525381f13232a557b28ff2e26ed8e801bb319c360be1d03099893d0750c755718f733d896ae16894c62fc2d94b22e0af09c4424b03783c5c4131262da59cc0782bd3eb7147f86340e2c66fe46aab61fc18e4eebe75e161b57a907874c897ca45cfe982859dd373eed3ca9081eaf65baec09e8888ab3fdf4ea9cc61237c853edfc6c6fa5ab43e38a0e4aeded364952ad88c68dcf514f31951e619739244e9d9f2a3c1529bf2f2a119503a8502d676d9d8cf723ac6ed3b9afea075cf28bb1a3f26747bd5165fd940b372c706451536b233782a7dff9f16516987526f29a02a698cf09c50e741721e64bdf624a889a13d3b9451a885d3d5e0d06610e85931d915c450d7c5a8c2fe83ad1e202278170c2822ad0b63f1224b6340f86d096b93ea53ea4e3d8256319255e60901cf194755949c333c9b285acf20ea823ba7a1db8eb680005f93a020a486acb3a4d2a6285e1d8e9c1e4f1b5ad47d066bc859fa3938d17429eef58fba346d59d8ca29e067ce7c95527b9d18e9bc08abde120c7fc0cb765a80585bd4a2f42d2f56c4184dc2b12af7e822152303752578ad98942a19651149d90beebafacec9d01723b495ee9b9a1e601099d8eb4b18353604fb88097b6bcc2db296b096bfd150b855fd551fa825fae18e470e21c72b9469c96d0a288ead5f23ae10048fcca65a8cd68e2a93285ae2af15eb4e837edfdec06fc334d81b4800d095b983f455ec189753971c4b73270de845c131142b46584eaa181a9076bc99b444201f899f2a756c810115a282385c5124f2c7ace8a3adadfb2432c168a6d77600ef9a144e62eb7ac5882942ac85bf10eaa3c5561599f3ec84decbefea876fe22e0f815df02c2f965eaac8d3114a8ca5c614f1618a6506d305d17aa7cd4ffc088ff507fa5240decba0eb5792a17a701ec2935f5cdf506e607cf1cdea833956dbd3935d2b76b6083f1d8d0ed57b612a3eb7ca64ac6c8444609fa87d3da8e159f7f29637ac6f29ec0fd696d67e651a3c6aa64b31f065fe8b1d298969da4e87ecb1ebe90b4c6a78104338acc19f435739c7f0932507a92e8c73f068c3046d2afeb401b1de41348820195562a9abb1f417831b5ca6cf9f448c8e668c42267aa9ab79cd5c211a64eec92f54ef3d5152ba34b42233cf35db08b1c7cbbaa1300c1f28f8a20c3449bb5d6193c2a3ade40e943b291e86c36ff51ec90c532eb9f25870d686e69366b3d9b2b8141f0ce5c8180d347b461f31ccb141249c9fca3eb326fb98ca381c5683c7707e18a22f18d03c598338a3b85fc72b4cc30a7352c6e649217adfa262b3f3e38c041343131a2bf801c5651aeefe31987d21c09907b637a6ff8b192447749909b65d1e8a70104baa3e43c5950b8fe3a50b080e1c465791f4bfaa84b68aee361d95554f35674c2b0546601ec70efc7061d315b8d752b636b09d3035a6bb9df3d18935b02896476eae7b9b1f4dda9d195969ce3504dd7c25177e21da19dbf36690effce27bbb9bfa5c659b39c0db8de845f948929c5f17bbfeb1ddd2d436c39bdc35858855f64dd98afebe4ed3f09fa3199a1dc166f78bb92c0f74c0e2a28b195c1db61ca36f7a3d2956592c5827a7920a3201523c39ad5c8", 0x1000}, {&(0x7f0000000040)="8ab6598c0e736adb59da56cc0eb835cbdccffc94f37652e6", 0x18}, {&(0x7f0000000880)="0817713df84283dcc9e2a06b798929c95636c0842657377b8d98dd77898e21f02f4a367f3e3749c4cfe5dc813707b51dad7823395413e25b90efe109962e00527ed8b9646c3ca9cf5d22483c6a8fc64de6d2805e7cd868c05c240f351cf545c1233a2242a63367a122335d62821a7dacbe7f00b57fa7815e9c568a5c3f04ff8738da57586fc43456994cbeb4be14f43e8d8154bcc69652bfd167be595da7239277712cc17e850563c813f6dfe6b132879ce76093e7cba68a985e1190aab0489a2cff0a231c43b49a3633400933dbd4392902", 0xd2}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x2090) sendto$inet(r5, &(0x7f0000000d40)="3d12c01caa0fbe8a17e7b733cef070bf8ae0fc7b2f4845344ef9050e7569ac4ad93240ef643d8aa367e4590166d1de84c0fe5609e91dacca9858a8e959d519e33f3483decd0f415f0fbef54bb07b75537702ffd6baa66916d8b561065b1a248ac64155d39cc4b9900e8ab1bef732fd327c17523cb778dd1805d6c02f43801f3cc37fb346a84c5dd787edbd7728b3aa7cfb219cbe68a16d700b2a212cad740a83b18022366c", 0xa5, 0x0, 0x0, 0x0) 2.642034058s ago: executing program 1 (id=34): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120061ff80aa431d6d54f606cb91746ac8fffa7bc6c1e3bc7bba60d540154188e51da5a3cd3617c16a8455f5777081a47889dfa43d74baa0eed16835ffba44cfb131c95450f664180f84c12c92b506c06a7932ceaedf7b850cdc825d254b1a871ad1167c5e150f4e9b03c0b99a3255b23bc54cd76b063d15a4aa09fa20c55944c74b527c383e8156695f49a9f8cd1e01df0046f1600567eb7e500ae219d6a24f73082dc400"], 0x64}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x9c, 0x8, 0xffffffffffffff6c, 0x0}}, 0x10) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) shutdown(r3, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000300)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) pipe(&(0x7f00000001c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 1.476646852s ago: executing program 3 (id=36): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) listen(r3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0x5], [0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x8000004]], '\x00', [{}, {0x0, 0x40000005}, {0xaf5, 0xaf6}, {0x3fc}, {0x0, 0x5b2c5934}, {0x200}, {0x0, 0x3}, {0x10}, {0x0, 0x8}, {0x4, 0xffffff30}, {0x40000}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) 937.117235ms ago: executing program 4 (id=37): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) 847.393727ms ago: executing program 0 (id=38): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) 59.214191ms ago: executing program 2 (id=39): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x3) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0x5], [0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x8000004]], '\x00', [{}, {0x0, 0x40000005}, {0xaf5, 0xaf6}, {0x3fc}, {0x0, 0x5b2c5934}, {0x200}, {0x0, 0x3}, {0x10}, {0x0, 0x8}, {0x4, 0xffffff30}, {0x40000}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) 0s ago: executing program 1 (id=40): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 66.245719][ T5807] cgroup: Unknown subsys name 'net' [ 66.360827][ T5807] cgroup: Unknown subsys name 'cpuset' [ 66.369855][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.780193][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.690148][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.705514][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.716412][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.720598][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.727486][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.732791][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.739579][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.746485][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.753351][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.760413][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.767768][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.774131][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.780766][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.795671][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.804481][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.812842][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.820278][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.828533][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.860971][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.881541][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.897802][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.917602][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.925362][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.933350][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.941090][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.377925][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 70.491508][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.555273][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.606269][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.613924][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.621633][ T5833] bridge_slave_0: entered allmulticast mode [ 70.628793][ T5833] bridge_slave_0: entered promiscuous mode [ 70.637831][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.645047][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.652641][ T5833] bridge_slave_1: entered allmulticast mode [ 70.659695][ T5833] bridge_slave_1: entered promiscuous mode [ 70.765458][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.791180][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.826201][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.907766][ T5833] team0: Port device team_slave_0 added [ 70.939673][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.946959][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.954266][ T5838] bridge_slave_0: entered allmulticast mode [ 70.961309][ T5838] bridge_slave_0: entered promiscuous mode [ 70.970508][ T5833] team0: Port device team_slave_1 added [ 70.976234][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.983609][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.990924][ T5838] bridge_slave_1: entered allmulticast mode [ 70.998177][ T5838] bridge_slave_1: entered promiscuous mode [ 71.010002][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.021333][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.028568][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.035738][ T5837] bridge_slave_0: entered allmulticast mode [ 71.042932][ T5837] bridge_slave_0: entered promiscuous mode [ 71.080251][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.087707][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.094882][ T5837] bridge_slave_1: entered allmulticast mode [ 71.102154][ T5837] bridge_slave_1: entered promiscuous mode [ 71.175583][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.182806][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.209425][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.224660][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.237619][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.282461][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.289646][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.296792][ T5839] bridge_slave_0: entered allmulticast mode [ 71.304076][ T5839] bridge_slave_0: entered promiscuous mode [ 71.312480][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.320195][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.351152][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.351834][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.368709][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.387422][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.405963][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.416225][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.424286][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.431646][ T5839] bridge_slave_1: entered allmulticast mode [ 71.438736][ T5839] bridge_slave_1: entered promiscuous mode [ 71.512179][ T5838] team0: Port device team_slave_0 added [ 71.539122][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.554834][ T5833] hsr_slave_0: entered promiscuous mode [ 71.561643][ T5833] hsr_slave_1: entered promiscuous mode [ 71.571191][ T5838] team0: Port device team_slave_1 added [ 71.587546][ T5837] team0: Port device team_slave_0 added [ 71.604473][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.633805][ T5837] team0: Port device team_slave_1 added [ 71.647789][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.655177][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.662898][ T5835] bridge_slave_0: entered allmulticast mode [ 71.669970][ T5835] bridge_slave_0: entered promiscuous mode [ 71.695658][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.702901][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.729869][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.742516][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.749764][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.776025][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.796243][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.803664][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.810933][ T5835] bridge_slave_1: entered allmulticast mode [ 71.817961][ T5825] Bluetooth: hci2: command tx timeout [ 71.818699][ T5835] bridge_slave_1: entered promiscuous mode [ 71.879708][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.886719][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.913539][ T5825] Bluetooth: hci1: command tx timeout [ 71.913856][ T5825] Bluetooth: hci0: command tx timeout [ 71.919943][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.948153][ T5839] team0: Port device team_slave_0 added [ 71.976951][ T5825] Bluetooth: hci4: command tx timeout [ 71.977069][ T5824] Bluetooth: hci3: command tx timeout [ 71.997355][ T5838] hsr_slave_0: entered promiscuous mode [ 72.004648][ T5838] hsr_slave_1: entered promiscuous mode [ 72.011409][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 72.017566][ T5838] Cannot create hsr debugfs directory [ 72.023932][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.031553][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.059814][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.080400][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.091850][ T5839] team0: Port device team_slave_1 added [ 72.120977][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.128012][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.155960][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.172120][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.187907][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.194884][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.223382][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.356607][ T5835] team0: Port device team_slave_0 added [ 72.368727][ T5837] hsr_slave_0: entered promiscuous mode [ 72.375415][ T5837] hsr_slave_1: entered promiscuous mode [ 72.381843][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 72.387726][ T5837] Cannot create hsr debugfs directory [ 72.421571][ T5835] team0: Port device team_slave_1 added [ 72.444756][ T5839] hsr_slave_0: entered promiscuous mode [ 72.451628][ T5839] hsr_slave_1: entered promiscuous mode [ 72.458199][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 72.464330][ T5839] Cannot create hsr debugfs directory [ 72.516557][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.524149][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.553802][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.600730][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.607791][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.634171][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.821828][ T5835] hsr_slave_0: entered promiscuous mode [ 72.828992][ T5835] hsr_slave_1: entered promiscuous mode [ 72.835859][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 72.842496][ T5835] Cannot create hsr debugfs directory [ 73.005208][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.027638][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.048083][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.070704][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.163947][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.194848][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.226561][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.250002][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.314837][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.350410][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.381069][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.396094][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.476684][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.503040][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.510583][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.522499][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.558111][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.626098][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.654849][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.663525][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.674662][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.686242][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.712948][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.721044][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.780294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.787928][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.877968][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.898284][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.909918][ T5824] Bluetooth: hci2: command tx timeout [ 73.933579][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.977317][ T5824] Bluetooth: hci1: command tx timeout [ 73.977325][ T5825] Bluetooth: hci0: command tx timeout [ 74.002494][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.029308][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.036917][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.055236][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.063186][ T5824] Bluetooth: hci3: command tx timeout [ 74.067137][ T5825] Bluetooth: hci4: command tx timeout [ 74.076717][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.086780][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.094558][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.119959][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.127379][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.152312][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.159455][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.191033][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.198164][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.211261][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.218459][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.265533][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.302352][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.360960][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.384731][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.391887][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.432266][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.439416][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.494936][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.516291][ T5833] veth0_vlan: entered promiscuous mode [ 74.553394][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.569228][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.584012][ T5833] veth1_vlan: entered promiscuous mode [ 74.681699][ T5839] veth0_vlan: entered promiscuous mode [ 74.699095][ T5838] veth0_vlan: entered promiscuous mode [ 74.706457][ T5833] veth0_macvtap: entered promiscuous mode [ 74.729941][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.740858][ T5839] veth1_vlan: entered promiscuous mode [ 74.754696][ T5838] veth1_vlan: entered promiscuous mode [ 74.768945][ T5833] veth1_macvtap: entered promiscuous mode [ 74.818644][ T5837] veth0_vlan: entered promiscuous mode [ 74.849577][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.870145][ T5837] veth1_vlan: entered promiscuous mode [ 74.889805][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.912626][ T5838] veth0_macvtap: entered promiscuous mode [ 74.948674][ T194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.969940][ T5839] veth0_macvtap: entered promiscuous mode [ 74.983132][ T194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.993518][ T194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.007498][ T5838] veth1_macvtap: entered promiscuous mode [ 75.014204][ T194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.036680][ T5839] veth1_macvtap: entered promiscuous mode [ 75.044371][ T5835] veth0_vlan: entered promiscuous mode [ 75.053320][ T5837] veth0_macvtap: entered promiscuous mode [ 75.081982][ T5837] veth1_macvtap: entered promiscuous mode [ 75.112237][ T5835] veth1_vlan: entered promiscuous mode [ 75.128706][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.165903][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.181482][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.213593][ T194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.227659][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.234012][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.249482][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.253078][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.275295][ T3021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.285510][ T3021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309746][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.325181][ T5835] veth0_macvtap: entered promiscuous mode [ 75.348404][ T3021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.358707][ T3021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.398390][ T3021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.407730][ T3021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.433035][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.435143][ T5835] veth1_macvtap: entered promiscuous mode [ 75.442653][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.454544][ T3021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.464247][ T3021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.499980][ T3021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.520794][ T3021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.553108][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.572712][ T3021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.590202][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.614533][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.647799][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.683253][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.718326][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.726159][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.764518][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.765949][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.778144][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.874578][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.924251][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.944433][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.997031][ T5825] Bluetooth: hci2: command tx timeout [ 76.057228][ T5825] Bluetooth: hci0: command tx timeout [ 76.062976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.107039][ T5825] Bluetooth: hci1: command tx timeout [ 76.140614][ T5825] Bluetooth: hci3: command tx timeout [ 76.140832][ T5824] Bluetooth: hci4: command tx timeout [ 76.280372][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.290017][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.333314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.359593][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.486142][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.532526][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.602581][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.614230][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.699637][ T5920] hsr0: entered promiscuous mode [ 76.720517][ T5920] hsr0: entered allmulticast mode [ 76.725574][ T5920] hsr_slave_0: entered allmulticast mode [ 76.827047][ T5920] hsr_slave_1: entered allmulticast mode [ 76.983396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.193865][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.208947][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.291075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.490459][ T5931] QAT: failed to copy from user. [ 77.867181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.907939][ T5877] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.036933][ T796] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.048221][ T5943] QAT: failed to copy from user. [ 78.137567][ T5824] Bluetooth: hci2: command tx timeout [ 78.144017][ T5824] Bluetooth: hci1: command tx timeout [ 78.154246][ T5824] Bluetooth: hci0: command tx timeout [ 78.314935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.348053][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 78.358517][ T5825] Bluetooth: hci3: command tx timeout [ 78.362619][ T5824] Bluetooth: hci4: command tx timeout [ 78.369766][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 78.379335][ T796] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 78.390004][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.397266][ T796] usb 4-1: config 0 has no interface number 0 [ 78.406155][ T796] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.417265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 78.440434][ T5877] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 78.467361][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.508406][ T5877] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 78.524224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.566884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.576970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.587081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.598210][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.615701][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.626142][ T796] usb 4-1: config 0 interface 89 has no altsetting 0 [ 78.700043][ T796] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 78.771814][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.786966][ T796] usb 4-1: Product: syz [ 78.791282][ T796] usb 4-1: Manufacturer: syz [ 78.796001][ T796] usb 4-1: SerialNumber: syz [ 79.007877][ T5877] usb 2-1: SerialNumber: syz [ 79.044559][ T796] usb 4-1: config 0 descriptor?? [ 79.143965][ T5950] QAT: failed to copy from user. [ 79.164520][ T5877] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 79.425223][ T796] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 79.425259][ T796] em28xx 4-1:0.89: Video interface 89 found: [ 80.334324][ T796] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 80.431190][ T5964] QAT: failed to copy from user. [ 81.410919][ T5948] usb 2-1: USB disconnect, device number 2 [ 81.583967][ T1542] cfg80211: failed to load regulatory.db [ 81.955732][ T796] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 82.130134][ T796] em28xx 4-1:0.89: board has no eeprom [ 82.308307][ T796] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 82.344972][ T796] em28xx 4-1:0.89: analog set to bulk mode. [ 82.603361][ T5953] em28xx 4-1:0.89: Registering V4L2 extension [ 82.640974][ T796] usb 4-1: USB disconnect, device number 2 [ 82.656558][ T796] em28xx 4-1:0.89: Disconnecting em28xx [ 82.799436][ T5953] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 82.806677][ T5953] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 83.411200][ T5953] em28xx 4-1:0.89: No AC97 audio processor [ 83.428890][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.518459][ T5953] usb 4-1: Decoder not found [ 83.906916][ T5953] em28xx 4-1:0.89: failed to create media graph [ 83.913801][ T5953] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 84.129003][ T5953] em28xx 4-1:0.89: Registering snapshot button... [ 84.146930][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 84.191490][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.214975][ T5819] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 84.250313][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.372365][ T5819] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 84.507695][ T5953] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5 [ 84.587347][ T5953] em28xx 4-1:0.89: Remote control support is not available for this card. [ 84.660638][ T796] em28xx 4-1:0.89: Closing input extension [ 84.668358][ T5948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.682000][ T796] em28xx 4-1:0.89: Deregistering snapshot button [ 84.738505][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.793911][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.803902][ T796] em28xx 4-1:0.89: Freeing device [ 84.824310][ T5819] usb 3-1: SerialNumber: syz [ 84.856949][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 84.858342][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 84.891789][ T5819] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 84.908082][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 84.971677][ T6007] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 85.378005][ T5948] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.389745][ T5948] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 85.392600][ T5948] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.392622][ T5948] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 85.557791][ T5948] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.557812][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.557822][ T5948] usb 5-1: SerialNumber: syz [ 85.592475][ T5948] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 85.680784][ T796] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.494102][ T6017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21'. [ 86.507533][ T6017] Zero length message leads to an empty skb [ 86.559408][ T6021] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 87.322275][ T5899] usb 5-1: USB disconnect, device number 2 [ 87.419034][ T5819] usb 3-1: USB disconnect, device number 2 [ 87.521232][ T6023] fuse: root generation should be zero [ 87.581273][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 87.625312][ T6023] netlink: 'syz.1.22': attribute type 5 has an invalid length. [ 87.813904][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 87.869584][ T6028] netlink: 'syz.1.22': attribute type 5 has an invalid length. [ 87.883371][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 88.077336][ T5819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.438727][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 88.448190][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.460063][ T5819] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 88.603890][ T796] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.652420][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.747334][ T5819] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 88.793857][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.803594][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.884324][ T5819] usb 3-1: SerialNumber: syz [ 88.884329][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 89.026963][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.297083][ T796] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 89.315211][ T796] usb 1-1: config 0 has no interface number 0 [ 89.336328][ T796] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.340849][ T5819] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 89.438332][ T796] usb 1-1: config 0 interface 89 has no altsetting 0 [ 89.446983][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 89.457523][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.560184][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 89.573203][ T796] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 89.592126][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.609115][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.629861][ T796] usb 1-1: Product: syz [ 89.634071][ T796] usb 1-1: Manufacturer: syz [ 89.679029][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 89.698833][ T796] usb 1-1: SerialNumber: syz [ 89.725939][ T796] usb 1-1: config 0 descriptor?? [ 89.766574][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.821994][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.832234][ T796] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 89.861909][ T6051] hsr0: entered promiscuous mode [ 89.864418][ T24] usb 2-1: SerialNumber: syz [ 89.881259][ T796] em28xx 1-1:0.89: Video interface 89 found: [ 89.887683][ T6051] hsr0: entered allmulticast mode [ 89.887711][ T6051] hsr_slave_0: entered allmulticast mode [ 89.887725][ T6051] hsr_slave_1: entered allmulticast mode [ 89.895303][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'. [ 90.078710][ T24] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 90.623055][ T796] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 91.486893][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.677210][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 91.703017][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 91.714803][ T24] usb 5-1: config 0 has no interface number 0 [ 91.754893][ T24] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.784651][ T24] usb 5-1: config 0 interface 89 has no altsetting 0 [ 91.814229][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 91.841741][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.860700][ T24] usb 5-1: Product: syz [ 91.871680][ T24] usb 5-1: Manufacturer: syz [ 91.882849][ T24] usb 5-1: SerialNumber: syz [ 91.901238][ T24] usb 5-1: config 0 descriptor?? [ 91.925406][ T24] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 91.935872][ T24] em28xx 5-1:0.89: Video interface 89 found: [ 92.282158][ T796] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 92.316954][ T796] em28xx 1-1:0.89: board has no eeprom [ 92.360114][ T5899] usb 2-1: USB disconnect, device number 3 [ 92.423481][ T796] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 92.433166][ T796] em28xx 1-1:0.89: analog set to bulk mode. [ 92.443430][ T5953] em28xx 1-1:0.89: Registering V4L2 extension [ 92.464860][ T796] usb 1-1: USB disconnect, device number 2 [ 92.481448][ T796] em28xx 1-1:0.89: Disconnecting em28xx [ 92.554101][ T5948] usb 3-1: USB disconnect, device number 3 [ 92.603423][ T24] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 92.636595][ T5953] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 92.862113][ T5953] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 92.921187][ T5953] em28xx 1-1:0.89: No AC97 audio processor [ 92.952871][ T5953] usb 1-1: Decoder not found [ 92.987996][ T5953] em28xx 1-1:0.89: failed to create media graph [ 92.994341][ T5953] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 93.105665][ T5953] em28xx 1-1:0.89: Registering snapshot button... [ 93.458231][ T5953] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input9 [ 93.728842][ T5953] em28xx 1-1:0.89: Remote control support is not available for this card. [ 94.148310][ T24] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 94.218513][ T796] em28xx 1-1:0.89: Closing input extension [ 94.224379][ T796] em28xx 1-1:0.89: Deregistering snapshot button [ 94.231194][ T24] em28xx 5-1:0.89: board has no eeprom [ 94.364533][ T24] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 94.420971][ T24] em28xx 5-1:0.89: analog set to bulk mode. [ 94.600029][ T796] em28xx 1-1:0.89: Freeing device [ 94.612530][ T5948] em28xx 5-1:0.89: Registering V4L2 extension [ 94.784113][ T24] usb 5-1: USB disconnect, device number 3 [ 94.818311][ T24] em28xx 5-1:0.89: Disconnecting em28xx [ 94.862309][ T5948] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 94.878071][ T5948] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 94.985431][ T5948] em28xx 5-1:0.89: No AC97 audio processor [ 95.146663][ T5948] usb 5-1: Decoder not found [ 95.308167][ T5948] em28xx 5-1:0.89: failed to create media graph [ 95.329765][ T5948] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 95.364632][ T6095] ================================================================== [ 95.366908][ T5948] em28xx 5-1:0.89: Registering snapshot button... [ 95.372739][ T6095] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 95.386546][ T6095] Read of size 8 at addr ffff888029e1c748 by task v4l_id/6095 [ 95.393993][ T6095] [ 95.396330][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 95.396346][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.396358][ T6095] Call Trace: [ 95.396364][ T6095] [ 95.396369][ T6095] dump_stack_lvl+0xe8/0x150 [ 95.396386][ T6095] print_report+0xba/0x230 [ 95.396397][ T6095] ? v4l2_fh_open+0xac/0x420 [ 95.396409][ T6095] kasan_report+0x117/0x150 [ 95.396421][ T6095] ? v4l2_fh_open+0xac/0x420 [ 95.396433][ T6095] v4l2_fh_open+0xac/0x420 [ 95.396444][ T6095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.396457][ T6095] em28xx_v4l2_open+0x157/0x9a0 [ 95.396466][ T6095] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.396476][ T6095] v4l2_open+0x1bf/0x3a0 [ 95.396490][ T6095] chrdev_open+0x4cd/0x5e0 [ 95.396501][ T6095] ? __pfx_chrdev_open+0x10/0x10 [ 95.396511][ T6095] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 95.396522][ T6095] ? __pfx_chrdev_open+0x10/0x10 [ 95.396531][ T6095] do_dentry_open+0x785/0x14e0 [ 95.396547][ T6095] vfs_open+0x3b/0x340 [ 95.396558][ T6095] ? path_openat+0x2df0/0x3860 [ 95.396568][ T6095] path_openat+0x2e08/0x3860 [ 95.396580][ T6095] ? __pfx_stack_trace_save+0x10/0x10 [ 95.396590][ T6095] ? stack_depot_save_flags+0x33/0x810 [ 95.396605][ T6095] ? __pfx_path_openat+0x10/0x10 [ 95.396613][ T6095] ? __x64_sys_openat+0x138/0x170 [ 95.396625][ T6095] ? do_syscall_64+0x14d/0xf80 [ 95.396634][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.396644][ T6095] ? __lock_acquire+0x6b5/0x2cf0 [ 95.396658][ T6095] do_file_open+0x23e/0x4a0 [ 95.396668][ T6095] ? __pfx_do_file_open+0x10/0x10 [ 95.396681][ T6095] ? _raw_spin_unlock+0x28/0x50 [ 95.396688][ T6095] ? alloc_fd+0x64b/0x6c0 [ 95.396702][ T6095] do_sys_openat2+0x113/0x200 [ 95.396715][ T6095] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.396726][ T6095] ? exc_page_fault+0x6a/0xc0 [ 95.396737][ T6095] ? do_user_addr_fault+0xc6f/0x1340 [ 95.396749][ T6095] __x64_sys_openat+0x138/0x170 [ 95.396763][ T6095] do_syscall_64+0x14d/0xf80 [ 95.396772][ T6095] ? trace_irq_disable+0x3b/0x150 [ 95.396786][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.396794][ T6095] ? clear_bhb_loop+0x40/0x90 [ 95.396804][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.396817][ T6095] RIP: 0033:0x7f5b334a7407 [ 95.396839][ T6095] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 95.396849][ T6095] RSP: 002b:00007ffcef97b870 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 95.396865][ T6095] RAX: ffffffffffffffda RBX: 00007f5b33baa880 RCX: 00007f5b334a7407 [ 95.396875][ T6095] RDX: 0000000000000000 RSI: 00007ffcef97cf1d RDI: ffffffffffffff9c [ 95.396882][ T6095] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 95.396888][ T6095] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 95.396893][ T6095] R13: 00007ffcef97bac0 R14: 00007f5b33d11000 R15: 00005617080e94d8 [ 95.396903][ T6095] [ 95.396906][ T6095] [ 95.700165][ T6095] Allocated by task 5948: [ 95.704475][ T6095] kasan_save_track+0x3e/0x80 [ 95.709146][ T6095] __kasan_kmalloc+0x93/0xb0 [ 95.713730][ T6095] __kmalloc_cache_noprof+0x31c/0x660 [ 95.719103][ T6095] em28xx_v4l2_init+0x10b/0x2e70 [ 95.724046][ T6095] em28xx_init_extension+0x120/0x1c0 [ 95.729328][ T6095] process_scheduled_works+0xb6e/0x18c0 [ 95.734953][ T6095] worker_thread+0xa53/0xfc0 [ 95.739728][ T6095] kthread+0x388/0x470 [ 95.743784][ T6095] ret_from_fork+0x51e/0xb90 [ 95.748362][ T6095] ret_from_fork_asm+0x1a/0x30 [ 95.753386][ T6095] [ 95.755702][ T6095] Freed by task 5948: [ 95.759760][ T6095] kasan_save_track+0x3e/0x80 [ 95.764453][ T6095] kasan_save_free_info+0x46/0x50 [ 95.769471][ T6095] __kasan_slab_free+0x5c/0x80 [ 95.774226][ T6095] kfree+0x1c1/0x630 [ 95.778129][ T6095] em28xx_v4l2_init+0x1683/0x2e70 [ 95.783153][ T6095] em28xx_init_extension+0x120/0x1c0 [ 95.788446][ T6095] process_scheduled_works+0xb6e/0x18c0 [ 95.794680][ T6095] worker_thread+0xa53/0xfc0 [ 95.799296][ T6095] kthread+0x388/0x470 [ 95.803355][ T6095] ret_from_fork+0x51e/0xb90 [ 95.807943][ T6095] ret_from_fork_asm+0x1a/0x30 [ 95.812701][ T6095] [ 95.815143][ T6095] The buggy address belongs to the object at ffff888029e1c000 [ 95.815143][ T6095] which belongs to the cache kmalloc-8k of size 8192 [ 95.829277][ T6095] The buggy address is located 1864 bytes inside of [ 95.829277][ T6095] freed 8192-byte region [ffff888029e1c000, ffff888029e1e000) [ 95.843234][ T6095] [ 95.845546][ T6095] The buggy address belongs to the physical page: [ 95.851947][ T6095] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e18 [ 95.860706][ T6095] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.869192][ T6095] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.876854][ T6095] page_type: f5(slab) [ 95.880876][ T6095] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 95.889448][ T6095] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 95.898023][ T6095] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 95.906867][ T6095] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 95.915552][ T6095] head: 00fff00000000003 ffffea0000a78601 00000000ffffffff 00000000ffffffff [ 95.924460][ T6095] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.933832][ T6095] page dumped because: kasan: bad access detected [ 95.940777][ T6095] page_owner tracks the page as allocated [ 95.947680][ T6095] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5474, tgid 5474 (S30dbus), ts 40524100749, free_ts 40509717683 [ 95.969121][ T6095] post_alloc_hook+0x231/0x280 [ 95.973879][ T6095] get_page_from_freelist+0x24dc/0x2580 [ 95.979420][ T6095] __alloc_frozen_pages_noprof+0x18d/0x380 [ 95.985399][ T6095] allocate_slab+0x77/0x660 [ 95.989906][ T6095] refill_objects+0x331/0x3c0 [ 95.994588][ T6095] __pcs_replace_empty_main+0x2e6/0x730 [ 96.000124][ T6095] __kmalloc_cache_noprof+0x392/0x660 [ 96.005490][ T6095] tomoyo_init_log+0x112e/0x1fb0 [ 96.010472][ T6095] tomoyo_supervisor+0x353/0x1570 [ 96.015488][ T6095] tomoyo_env_perm+0x151/0x1f0 [ 96.020242][ T6095] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 96.025876][ T6095] tomoyo_bprm_check_security+0x11b/0x180 [ 96.031603][ T6095] security_bprm_check+0x85/0x240 [ 96.036622][ T6095] bprm_execve+0x896/0x1460 [ 96.041110][ T6095] do_execveat_common+0x50d/0x690 [ 96.046144][ T6095] __x64_sys_execve+0x97/0xc0 [ 96.050862][ T6095] page last free pid 5472 tgid 5472 stack trace: [ 96.057185][ T6095] __free_frozen_pages+0xc2b/0xdb0 [ 96.062317][ T6095] __slab_free+0x263/0x2b0 [ 96.066737][ T6095] qlist_free_all+0x97/0x100 [ 96.071342][ T6095] kasan_quarantine_reduce+0x148/0x160 [ 96.077818][ T6095] __kasan_slab_alloc+0x22/0x80 [ 96.082673][ T6095] __kmalloc_cache_noprof+0x2ba/0x660 [ 96.088073][ T6095] tomoyo_init_log+0x195/0x1fb0 [ 96.093013][ T6095] tomoyo_supervisor+0x353/0x1570 [ 96.098115][ T6095] tomoyo_path_permission+0x25a/0x380 [ 96.103737][ T6095] tomoyo_path_perm+0x3f3/0x560 [ 96.108580][ T6095] security_inode_getattr+0x12b/0x310 [ 96.113955][ T6095] __x64_sys_newfstat+0x13b/0x270 [ 96.119257][ T6095] do_syscall_64+0x14d/0xf80 [ 96.123837][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.129821][ T6095] [ 96.132144][ T6095] Memory state around the buggy address: [ 96.137843][ T6095] ffff888029e1c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.145906][ T6095] ffff888029e1c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.153959][ T6095] >ffff888029e1c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.162005][ T6095] ^ [ 96.168412][ T6095] ffff888029e1c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.176863][ T6095] ffff888029e1c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.184938][ T6095] ================================================================== [ 96.302297][ T6095] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.309636][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 96.318586][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.328920][ T6095] Call Trace: [ 96.332221][ T6095] [ 96.335155][ T6095] vpanic+0x56c/0xa60 [ 96.339153][ T6095] ? __pfx_vpanic+0x10/0x10 [ 96.343678][ T6095] panic+0xc5/0xd0 [ 96.347408][ T6095] ? __pfx_panic+0x10/0x10 [ 96.351840][ T6095] ? preempt_schedule_thunk+0x16/0x30 [ 96.357287][ T6095] ? preempt_schedule_thunk+0x16/0x30 [ 96.362683][ T6095] ? v4l2_fh_open+0xac/0x420 [ 96.367276][ T6095] check_panic_on_warn+0x89/0xb0 [ 96.372291][ T6095] ? v4l2_fh_open+0xac/0x420 [ 96.376877][ T6095] end_report+0x73/0x180 [ 96.381289][ T6095] ? v4l2_fh_open+0xac/0x420 [ 96.385863][ T6095] kasan_report+0x128/0x150 [ 96.390450][ T6095] ? v4l2_fh_open+0xac/0x420 [ 96.395037][ T6095] v4l2_fh_open+0xac/0x420 [ 96.399450][ T6095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.405422][ T6095] em28xx_v4l2_open+0x157/0x9a0 [ 96.410261][ T6095] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.415274][ T6095] v4l2_open+0x1bf/0x3a0 [ 96.419507][ T6095] chrdev_open+0x4cd/0x5e0 [ 96.424015][ T6095] ? __pfx_chrdev_open+0x10/0x10 [ 96.429044][ T6095] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 96.435380][ T6095] ? __pfx_chrdev_open+0x10/0x10 [ 96.440307][ T6095] do_dentry_open+0x785/0x14e0 [ 96.445094][ T6095] vfs_open+0x3b/0x340 [ 96.449183][ T6095] ? path_openat+0x2df0/0x3860 [ 96.453954][ T6095] path_openat+0x2e08/0x3860 [ 96.458564][ T6095] ? __pfx_stack_trace_save+0x10/0x10 [ 96.463930][ T6095] ? stack_depot_save_flags+0x33/0x810 [ 96.469393][ T6095] ? __pfx_path_openat+0x10/0x10 [ 96.474319][ T6095] ? __x64_sys_openat+0x138/0x170 [ 96.479337][ T6095] ? do_syscall_64+0x14d/0xf80 [ 96.484095][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.490149][ T6095] ? __lock_acquire+0x6b5/0x2cf0 [ 96.495079][ T6095] do_file_open+0x23e/0x4a0 [ 96.499569][ T6095] ? __pfx_do_file_open+0x10/0x10 [ 96.504583][ T6095] ? _raw_spin_unlock+0x28/0x50 [ 96.509415][ T6095] ? alloc_fd+0x64b/0x6c0 [ 96.513732][ T6095] do_sys_openat2+0x113/0x200 [ 96.518398][ T6095] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.523577][ T6095] ? exc_page_fault+0x6a/0xc0 [ 96.528233][ T6095] ? do_user_addr_fault+0xc6f/0x1340 [ 96.533501][ T6095] __x64_sys_openat+0x138/0x170 [ 96.538341][ T6095] do_syscall_64+0x14d/0xf80 [ 96.542915][ T6095] ? trace_irq_disable+0x3b/0x150 [ 96.547937][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.553983][ T6095] ? clear_bhb_loop+0x40/0x90 [ 96.558644][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.564517][ T6095] RIP: 0033:0x7f5b334a7407 [ 96.568937][ T6095] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 96.588550][ T6095] RSP: 002b:00007ffcef97b870 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 96.596961][ T6095] RAX: ffffffffffffffda RBX: 00007f5b33baa880 RCX: 00007f5b334a7407 [ 96.604930][ T6095] RDX: 0000000000000000 RSI: 00007ffcef97cf1d RDI: ffffffffffffff9c [ 96.612894][ T6095] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 96.621830][ T6095] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 96.629802][ T6095] R13: 00007ffcef97bac0 R14: 00007f5b33d11000 R15: 00005617080e94d8 [ 96.637768][ T6095] [ 96.641110][ T6095] Kernel Offset: disabled [ 96.645427][ T6095] Rebooting in 86400 seconds..