last executing test programs: 12.430084461s ago: executing program 4 (id=14): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {}, {0x5, 0x8, 0x0, 0x0, 0x4, 0x40}, 0x400, 0x1, {}, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc2c45513, &(0x7f0000000040)={0xb, 0x3, 0x1, 0x5, '\x00', 0x6}) syz_emit_ethernet(0x141, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x18, 0x13, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438"}]}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, &(0x7f0000000580)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000100)={{0x8, 0x5, 0x1000, 0x664, 'syz0\x00', 0x3}, 0x1, [0x4, 0xffff, 0x6, 0x5, 0x3, 0x9, 0x0, 0x0, 0x1, 0x3, 0x8001, 0x7, 0x4, 0x7fa, 0x100, 0x20dd, 0x4, 0x200, 0x4, 0x2, 0x9bb, 0x4, 0x7, 0x0, 0x7, 0x3, 0x6, 0xb8, 0xa, 0x1, 0x2000000, 0xffff, 0x7fffffff, 0x7ff, 0x7ff, 0x1, 0x1, 0x7, 0x6, 0x10, 0x2, 0xfffffff8, 0x2, 0x9, 0x8, 0x1, 0x1000, 0x1, 0x10, 0x6, 0xecc, 0x80, 0x5, 0x5, 0x2, 0x7ff, 0x4, 0xf85, 0x5, 0x6d18, 0x9, 0x3, 0x1, 0x3, 0x8, 0xe, 0x3, 0x95f2, 0x100, 0x5, 0x18, 0x6, 0x4, 0x1, 0x0, 0x7, 0x5, 0x8, 0xf492, 0xa278, 0x8, 0x1, 0x8, 0x42eb, 0x401, 0xf41, 0x7, 0x0, 0x713000, 0x6, 0x0, 0x800, 0x38, 0xfff, 0x2f, 0x1, 0x9, 0x3ff, 0x5, 0x361, 0x12, 0x8, 0x8, 0xaa, 0xfffffffe, 0x5, 0x1000, 0x25, 0x4, 0x9, 0x8, 0x7, 0x4, 0x4, 0x1, 0x4, 0x3, 0x9, 0x7fff, 0x4, 0x5, 0x1, 0x4, 0x10000, 0x2, 0x1, 0xf0, 0x5]}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.689441296s ago: executing program 0 (id=23): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) fgetxattr(r0, &(0x7f0000000140)=@random={'system.', '/dev/video36\x00'}, &(0x7f0000000180)=""/54, 0x36) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) unshare(0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700), &(0x7f0000000cc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1ad, 0x0, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a9c, 0x0, 0x2, 0x226}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x0, 0x0, 0x80000000}}], 0x1, &(0x7f0000000900)={0x2e, 0xe, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x64, 0x10000, 0x6, 0xfb7, 0x5, 0x5e64d927, 0x5, 0x3, 0x800}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) getsockopt$IP6T_SO_GET_REVISION_TARGET(r10, 0x29, 0x45, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008e4086301400001020301090269000301099001080b01e50002203e09040000000101200009240129000109000609040100000102200009040101010102200009050109ff03c209080825010233"], &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r13, &(0x7f0000000040)) r14 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r14, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r14, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3f7, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414a432487d00ffffffff14001f00fe8000000000000000000000000000bb"], 0x58}}, 0x4004000) 9.237066331s ago: executing program 4 (id=25): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x8, '\x00', @data=0x8b, 0xffff16c8}, {0x41, '\x00', @data=0x67, 0xfff}, {0x36, '\x00', @st={0x4, [{0x3, @svalue=0x101}, {0x2, @svalue=0x6}, {0x3, @svalue=0xffffffff80000000}, {0x3, @svalue=0x1}]}, 0x3}]}) mremap(&(0x7f00003b7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0xffffffffffffff38) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/19, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$key(0xf, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x111101, 0x28) fcntl$notify(r5, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) memfd_create(0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000002b4b00bd4d39badf45ac791986b0b6edeae1f55d791249c95853b29a24a93790340bd92abe35ba7b9f4d552f9c245249e9c6579f2cbb465a748b438a02b89a9c77c48f3d4546"], 0x50) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xe, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x7fff, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) 9.018243659s ago: executing program 3 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0x10000, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x5}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x23, 0xb, 0x8, '\x00', 0x1}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x9, 0x71, 0x8, '\x00', 0x8}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xa, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0xfe, '\x00', 0x80}, {0x0, 0x2, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x81, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd2, '\x00', 0x4}, {0xe2, 0x6d, 0xfa, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r3, 0xff7f0000, 0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325258, 0x3, [0x2], [0x80ffff, 0x4000, 0x2000000], [0x0, 0x0, 0x0, 0xff], [0x400000000000001]}) 7.286511301s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x3}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0xb, 0x0, 0x1, [@generic='\a']}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 7.207697388s ago: executing program 4 (id=30): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0xfffffffd, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2008404d) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xd1) readv(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r4, &(0x7f0000000080)='4', 0x1) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000d0a010800080000000000000300fffe0900010073797a30171c16ccdbe90d52"], 0x24}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x300, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) close(r8) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) 6.96751348s ago: executing program 0 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) unshare(0x20000400) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254, 0x0, r2}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x20fc, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x2034f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70fb, 0x200, 0x2, 0xa3, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.70332772s ago: executing program 2 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000109030000000000000000000a000006084006400000000108000540000000d434000640000000000900010073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="010008001200010000001000fedbdf25140000000c003500000000000000000004003500"], 0x24}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="4c000000028601030000000000000000059d08001400078008000840000000520800064000000006090002007325c3797a3100004989a70fa79600000500040000000000050005000a000000e9a72940aca3690e567d51a6c8a3c079c4b852b1124ffef864192f06245c33472f583ba95725ffe1b7986ad7c3de30478e6b9443186163a5efb47acf2e51b678c36a270080000000000000ab384302db6e63bfab86fc7d995461ab494f81d49e382b2622ec5125cc142fd8db950aea1b12ad64a45519c4326cc6901f4bd98a85abc690b1a86cd1d9ce599498b67bd75fba319514c474e31ee9ff"], 0x4c}}, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0x10000, 0x5, 0x50}, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000001300)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000009, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) fsopen(&(0x7f0000000300)='bpf\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcca0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x0) munlockall() 5.498694924s ago: executing program 0 (id=33): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) listen(r0, 0xd) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300ac1414b60800060003"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2000}}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r8 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', 0x0) r9 = socket(0x15, 0x5, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x8, 0x80000, r4}) r11 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r10, 0xc0401273, &(0x7f00000001c0)={'\x00', 0x2, 0x7, 0x8, 0x3000000, 0x5, r11}) connect$unix(r9, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname(r9, 0x0, &(0x7f0000000100)) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r8, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 4.762656189s ago: executing program 2 (id=35): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000009c0)={0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="200400000000000000856836c69e8608a0c25f1a5fed33ac31899da10251a4fd2ff918642a7f16a95f4ef95e48b75053d1270c493bf937a9818096b6921c70094d3d991b9449bd77586ddbd166bcfb2f6f49a21b18fcc697f1394366886d4958dd5ecc5638eb0ed3fee25783857e623e17f638f092b8ffbd9f682b18c399ea3650c22c4afcfa61d831160dc66d2662ed60086a"], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfef, &(0x7f0000002840)=""/4079, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe979}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r3, 0x4048aec9, &(0x7f0000000300)="01") ioctl(r4, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0xd, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0xd, 0x3, 0x9, 0x10001d, 0xc795, 0x8, 0x7fff, 0x10001, 0x7, 0x4, 0x1, 0x6, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x5, 0x5, 0x9, 0x5, 0x2, 0x6, 0x1, 0x8, 0x7, 0x4, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0xfffffffd, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x7, 0x8, 0x800, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xfffffffb, 0x1, 0x803, 0x4, 0x4d, 0x6, 0x0, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6], [0x0, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0x0, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x2, 0x6, 0x1, 0x9, 0x3, 0x709, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x7, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x40, 0x7, 0x7, 0x8, 0x12001, 0x4, 0xffff89a1, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0x4, 0xfffffff7, 0x9, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x40000, 0x1], [0x7, 0x8, 0x800, 0x789c, 0x40, 0x6, 0x1000, 0x8004, 0x2, 0x3, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0x1, 0x1, 0x3, 0x81, 0xff, 0xb6, 0x3, 0x9, 0x10, 0xa114, 0x3, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x4, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x9, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) pwritev2(0xffffffffffffffff, &(0x7f00000052c0)=[{&(0x7f0000000040)="cf7a3ba0d62bce985ed61dc524900adbef10bb44264b137a2cda4bc342bc89161fa198807013fcb7972b5756c24d200b59787b660eda4192ab1e", 0x3a}, {&(0x7f0000000080)="e58f6bb95d4039a81c7202f1f38ce365ae32f8d0d90fa162a4e42ee018fcc75075bdb60047c5ddf06c52e6ecc82360c62c1e104d49a4c80d02c67629001433da57c72a7e09316862d12d669d00948a046eb1cd50f425e5993cdfdb085bf03568d73dff6f73bed75b385f366a9ff4061b2db020f356bf50ff389bcada69297b69786f422c151b035b92c2c18eb5961ebddb640378de489f89b4eb2b585026f6b6f178c55c4c664cb7092aaf320a804f6dc71655d3051187c956735db3cc4da460134a6e67c559b9eb30ec7dd4e48cd08e", 0xd0}], 0x2, 0xffffffff, 0x0, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) read$char_usb(r1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004240), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000043c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004380)={&(0x7f0000004280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022bbd7000fddbdf250a00000008000400ff0000000800060006000000340003801400020070696d72656700000000000000000000080001000000000014003000"/76], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000001) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x14, r8, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) 4.736537957s ago: executing program 4 (id=36): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) creat(0x0, 0xecf86c37d53049cc) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x50, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.566481179s ago: executing program 1 (id=37): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffffff, 0x0, 0x40, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x24}}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x47) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r5, @ANYBLOB="7501b0808d001c8004008c80", @ANYBLOB="0800691b", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08009600", @ANYRES32=r1, @ANYBLOB="0800a100", @ANYRESHEX=r4, @ANYRES16=r2, @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x280}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x2e0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x1, {0x3, 0x2, 0x3d4, 0x3, 0x3}, 0x10000007}) r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r9, r10, 0x0) 2.988432709s ago: executing program 1 (id=38): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r3) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048840}, 0x40040d0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfeda, 0x10000, 0x0, 0x53}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r8, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)=[r3, r7, r7, r3, r2, r7, r2, r3, r2]}, 0x9) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140077bcc300001600010300000000fcdbdf2509"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = dup(r1) write$UHID_INPUT(r9, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) readahead(r0, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) 2.858491828s ago: executing program 4 (id=39): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) creat(0x0, 0xecf86c37d53049cc) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x50, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.517059936s ago: executing program 3 (id=40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f0000000300)="71e9", 0x2, 0x20008045, &(0x7f0000000340)={0xa, 0x2, 0x28, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.420841033s ago: executing program 3 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, "", [@generic='-']}, 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r10, 0xc038943b, &(0x7f0000000140)={0x2, 0x20, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 2.127161956s ago: executing program 0 (id=42): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x82, 0x9, 0xd8fb}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000100)={0x4, 0x0, 0x10001}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xec, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.073368022s ago: executing program 2 (id=43): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000940)={0x19c4, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x79a7}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x859, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x40}, @device_a, @device_b, @broadcast, {0x1, 0x4}, @device_a, @void, @value=@ver_80211n={0x0, 0x8d, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x112c, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4}, @initial, @broadcast, @random="9fb1707a97b9", {0x7, 0xc}}, @a_msdu=[{@device_b, @device_b, 0x1b, "5bdd50ca9d96571a1ac32b5c9a2987fb6657a473ac638b8bd2f5d5"}, {@broadcast, @device_a, 0xef, "f266221f747fa695592517d66f9cc54abb6655814b376138473eede97ed667ba621cd5c66a7b2dd7c569ae4c42460d1ba76576bdc10a958c2a7e9b4334afc4c4b83f70a07031b518054359558759b041c7f2200255559ba0757b711b2c432bf0adaa470d4242961f52c838bbdf5d12c07f58ac5a547e56444627d8ecee3fd5760dca5bff2bd0d2b02c83472088c885cd1ff5a53852662adcf5dd83550a6df0bd8f905306509f94e8bc5fdd2b5cea15b2ffbac97a8e450cbcd6696119ba79abb29c9d8966d9ce86c00e21a6de527a805a145d4606363bd34e6bf64b70132727a5d8013794f2480483edcff8dd54b80c"}, {@device_a, @broadcast, 0xf7, "ebc40d273af98bb171bfdf19f9ecd17deaaadabec8a9a51959b169354a29a75e8e1696b4280196c0f797796afd3e5c644ab83fc8300765f893230508711ca6bcb4bc7d4e1e0689f6a382a681a5ba045c2e5fc6f3988bf5c379bf87d1142dfae89a411e53155899dae8433be81066ca321632be94f4dc4b37f53b8bf037e46914d98b5565535ddeb36799a47de9fc4eab761516d5ebc94e508f866382149ab116d7b8c30ec0c1081711bfe9958d3a975618390a0b5a6887e04691368a3a65c0d9b6cccf954b86e15dfc0d8b1e3b946728f0f4b7363a9aa8c5b8ebccf2f955376a3ca08dce2a40ba4128670100a5a4e4664d62c744f1c917"}, {@device_b, @device_a, 0x6f, "c2637deb3b9ace36b866424627dc28e568f96e73c6dbbe6205c6746c4ab48dfa00cb136c66cb1f4bdc01074c6ff5d3744f50707d1aafa3c32b8f7dc329af64397473ae22227b93b0fa79f994c9c03f61e5c1e644530bd697114a6224202a7d0dd94a2db0bfbaea98e86d50e7aa3aaf"}, {@broadcast, @device_a, 0xbb, "77792c2f0876ad8ef64f66e71569776b06d2e1c6c90d5cf5ee0d0daad38f07621bcf01a921fa75b54be35fba0fb60ca24053870d8300534a1cc2843a21478cd0c9521a169070c200b187ae3cecacb3da8086cb83b3247281e3348172021c4dec215e8441c0bb0fce0b77e8eebba74639fd5e128697058e62dabc5455633a0f51b9517260430aad3420f54bdc37cd773ebd22751e21f7b147d103156ace8bcf838b9595919e313d8e289f3173fcb9d39794cc66df2ee5f5662a9889"}, {@device_b, @device_b, 0xd81, "ab07a16a26ff807ff2564e4dd59f693c84bad209613310909cfcd4e3ff4477faaac7185a9979b2428e86a9981370f9a3e094db84fef4ff790fed279ff0178b35abca31cda9409b0d37d959ed1365660ab3ca5e8f0c55812159f84ca3a1f75b05e7bbe86f7cff3acc494a864387255e49bc6cd56366e0e522ebf5ffd4abab111751e0531f6a47ce5cd10379efaf63b9c79d954c8d71b23f7e3c37a95a5f8db708c69465d0bd1b25c7ad63151d691176756d6b2c1bfe1e127b5a897202f442c25b8ca2f471d8839825a95665b22d3b8236c3ee219a5a64ce1177f38eacbd5bcabc075a63f17009d12f742b981ab2e85f80cff36e8dc8bbb66d28c507c2c8f0f58bb6fca4097f32f0d8d102c01b2dc317a0b896423c395db7e7c1397e2b76bb0762aaf880aec7c338d60409468870fa44420d172ee479e555b349daf69f6b87bf4a145dae8b28c2208ef7d317d603298cffe3ceecad60593b1407cca21a2c744b28f1f81e6a66a367cb847d187721aed0a532987ba35915e8a71c30f4c1f2015e95962bd4153ade591251f36bac62a2fb77ff664acb8a711ab0239b10d6e49d70c772712453ef8d8241285e321e0faa7016c2d64a7173fe6fadd43163696885d3fbaf8fb3b9ebc7712d92eaf93502a5c97198794ea84b580964a95d7ad834117004a9c50a6e877cc2525338ae9d7ac8d2b3abc201aa2a6e68e4b50b30267d8da4b4d5322e7ede820d28ce6bcfb5f7e9e54168eec91c473c5465f6f3fa7163fec62c0a862112bfc5f34d78606abbba9e5b38d6a7b154455c8f9eb633ee3cef9b92ce73fa521c70a752d993a4a1e6ee535954a1bb159c8a367c988e88be682b40643706853913ade1d92d6b561978b996b0d0e2c3017f9d763404c7586018bb98a97a6d4bf3151c0b57772ec6c80831eca43e2972b0d20a3957680078935bc4eed7a7413134f40b267e52897d88233c4aa82491d00030a970aedb3a7401d3166baf58d2aa45c771aecbb8f75a74ea8fc7ce906884f31999d1e95d2291bea5e114bd1b51eb99b9ef1ab5db67234c2a3cedd90e99f5537c21c7fbff8afc920d2a31d198471193bfc550361547cb299937f302121f024e2c9cf0fd67b2416dc4f8b94571e35c5fa29fe062febb5ca528ace5358a1b2b217c768ed66a41070c2717845b62933a98225d178b04ca4f4da1244e1b62c2e1881ad726147a9e9b666ad6e4de105145c494ce7a0e4d9a4ea3eb2c42e11cce49c1737164c89b67ea819034c1f95bc86372c942d64d380d0ee1d11300dab6929c2f6cfa71bfa15124653490f036b99bd8fdd8942bc74e3b174f978450edbb752ddf954d463b861f2c97b5988772991daf3a67d4103c335853ec2282e610e2f14e4d9edd5a55e7e8ec1c66ebed5c65bc3c9a2df8f2e43b518d3e2047dc8bbc819cb7242a0acad97778f930c8acb54b7fbe49430aa308235dbc1ba2b79b48936e928206be34fd0a47aa34911f0befb2a2d2bc3af40e1d9051ab767069c22addeb3104abfba8440c5b3534d9391ce9df50269aa8f839e129a2efa586f0ea38062595e4c391c6fc4110fa76ca2ec902f195f05f669ce54fe3e56e505d54bb2547fe1a610bd123df054094bf07eaf26feba3f05b803864b241fbd2a53b2e8ffacf037ab7b825d274046bfc4bd06ca6cf4db1e4b89f144c4b5245f30a5487e945d774b074870f11c356d7f97f7ad7e988f440ae418c772774a7dc39a5514b4957555d1e2ed8dd0815048cb96ba8ba2b617d2de4636aaa34d184aeb1f54d53902b86d76c0fa4664f5ae4b3e4e9020f1f83cceeb690c24aa95c5456009b357b70d1461c80eff3b4b87f43985f90310d67f41b3eb459f4b489edf565bb95c459ee9c583695ec550bdd6b3f221051578527dd7cc984ebf4c5b184ac2fa85f71c7122b83d4a3a3bb6ff3396c2635fdd0b8c2837f17b854aa13c7dc430c3994aebe31dc22f4e31dfc579a4c012453324817992d09a35dbd00eb34219b62e6bc6cec1f7d8a17c46dd20f0ecff34907fabdc089f28d099c9c15cfb1d63e53b99d701f8808912f39ff90c629c7eaedac5de13966f9961d384543011e5f5da47be5abbdb805573d0121b2f140c2dc915ec9da1244a420b8cfe871ae2b4122136d8a7fa895e2f31a5c515ddc69d623a814e6853e894ac75fd444a4cf2e9e96fb027b6e53fcdaf8facd4bdd09852f7b80edb533bdee09eef657e7c303f1ecd896848112171d49e6698b52364e0a71d6e2812281b1b5535895d0c2e448f018bccd6031993310e35f1880a815ff908afc2429d9271d7c5eaa411ee7ad5f7817972841d7b56c0155f2119abf12df11d223ee41cbb3baaee37ef4b01e110a742b9ead9bc49c0b4277183aa808b8a930407dd097bff689d6ffcdb0b26d650cf03871e2ee8eeba7f8901722ee602ddbccf2e739ca84cc3a227a9e818fa09c75150cad593e0ab29c5fadf8b17f441766e123a0f26382cf9e2ca4a94899825916a381bdae3799f7690d14a89a6f870d442330ad1f5f3ef72577e393d8d2fc65aa27bb1c16b3696d6f8361be78d35c53b5928476907b7d5357dcf01ba63b59c2047e2d0cb5263f017c1543670d2530c5cc19f57891022c3c3e799b76caccf6fc6b208e1f88d7cf7512dd3c2ac5a4752934a3d5cca0b66340b8b6dcd215a842f2bf5be4e0fcc05f5598efc27a2b31119b65debbaff7b973e41c601c93a66b8f749bcc0637de840524a156061a13e0052aef76b44daffef249c3e8be409c269dce692edd6f2530088708b459d371536ddd59465c5ea6e0be46ad2a78a8d0779874f4b80fff20ce7842fd16446e829e8cf736c21731008c87214bca6851566e7f304b887c8686aed06fef1bb6bc6eb56b9168e596cbc4a9f45a815c9a1d44378557bf1b628466bccf5e802e0813cdd862c28e7111a9c87394a3d469197ff7be175e7114f029f175263a0c5d332e1cc7ed4a02c65abe6a7e0052452135fc36f597def10d3b09e61c81d5d2206db5d31b2ad266414337346e5c0dff5ca59bff09494558d339d1cf1c25b73d93afd69f60864c78efd765ceb2f41c43a2ddb9d212f4158c52b6513378cb8b026646861ff8a2dd7e0ca3e8b90105b7daf5af9bead6c54e1a073281aee097265aa747d6c0453c9c5ef32a0299ff582603675e9bf25800cd5670dd859f7e952a48021c8a438f897885c6dbfe40eb8132f0e194391fa0af976c6161c4ccc5289263c2e3a2fa5f2629608b054d1d46a45945eee8676edb1b7782a05779b953949c531274bd0ca4656123b1029c4eea890a80fbcc8aa26e74d8d79a1e6be7d32631028161cbfe3bd57e3f95b4e28d7345c566b1067cc79f2104ee848409f604766a5f5acad06cbe03db0221ba5a682513a64db5b44588cf81d5f9225e59eb9ddccc90601b1d6f5b5dfed8dd49c94c4d707c932eae5512f9228bcaa5fb8d8c0eb371318709eade02d7c12e82cb485360b509049edd115215f50efd0d2c2bbf89761795162074406000f9f1f0d4d33812204fdd36795c7f0338fbf843d427c2f854f015c6e289cc03f466ac111fd43e1262b18b6496c2f5d20325448bfeba82460f2389f7fba81a25ca9e0d20af10c2be0fec7a220380c9972d8f573efb2a7e25cdad0d9fc25abbdcb974bddffefe5a789a42c7cbbb4434a4185a1933b1226ac62d8720c56a4e292f66ab9beecb1ff76ef571fc6ad3b7397d6c2106bc1b3b915de234e11d6d7432323189ea844f49b3eb5ef8c7f9770e08f115c2f665a52117388394d555c8821eeb910f460bcb27cd8040b035aadf13db86bacf13c8063b3f73877cdac75ccb1d004325522564650b8c60f993678440df76e1c9ce6a8cb164d535872a7154b02d7de75b50414460991c9676743ab21f7e89a558cd2ac1a4f05dc95ee38c0d19bc054fb0ead0a9a2dab6149793f27fb49cc11881b96263534d0a9e6517d2eab5bb98b08132e773b8bb88fee9193992e57fdf73e5a640a25ef059e46993c1f9c3c505348c8382409429d64cd0146c3ab4b2bca90fe49b649e7cefa3e245e355fed3be1c9d21f432f20eebf91e68b5ff89efd8c6d20dfcb398e520005834df0dcd165fa7ccac0b09398135b62823ca84dc504daab32941fe099c4887b20a3bb784b36d523974f901f30ca142048fa1e06bf092c469aa6576b2faf3b143329776de4fb005f964c8ab93ae8439ee2ee044236b3f0432a9d62f5b6a81f7bf535d38f0fee251e3ea89c5f4d7787c823ddfb7dc80ae52e17dae9a30fe76e827d79057217bdb887e3616f40ef160da5d8c92e12012df911a56e65d35b08e27461f9cdd5eb67482470384abb7b30314a203f4e33dcab1a6ae8f5e13334132a0940039add24680d964d57b13db7011a9c2a00d1e78c6fd002dd057aa028d7ec76196f7f607b8a62355210370a3b1dea12e46dba64bd0d6e361291faeb4381e0f8316635e19aeb977d3f3bc0c7556f40c7a7b375fd66544efff0aa836875f4ee3c4c7e62440b809c16892273f5881368a4e7dc57feb29ccc76b6d251c6bba3a2863caf9f0099a563e5f5876856e20ef65aead064faf5cbbd20bb680033cf091b91a0c9b5576569cc8eeb6f91fe246c979beb9cb6b40e114a548488fabdd2d5b0c51d80661d5c812bd99ec49d568b03f261ed2b7a333a835aa9b463c51338179ddb425e85dff205604e340bb4c69c21187bbaea3dcbcd4973d51b18f360f8ce88b3e1357a511bbb10df6efd4bfad50d8a814cfb2592b5cecd9a68f961f03393a6f8c4ead27db7e16aeebfd79fa84b9a2165a5416ab93c9d127dcb88457bead4f44b901319062e3805815499dd8693c370728bca849def9219f1e14961afdcf3b5ea03c74fb25db9ad173824b3d605eab1ff830029ad6fc"}]}}]}, 0x19c4}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {0xfff3, 0x5}, {0xffe0, 0xe}}}, 0x24}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000070000100000000000000000007000000", @ANYRES32=r9], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffb}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}]}, 0xc0}}, 0x8041) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r10, @ANYBLOB="cf042bbd7000ffdbdf251200000008000300", @ANYRES32=r11, @ANYBLOB="0600bd00020000000a00060008021100000000000600b500e7060000060014010600000006001000b1050000fc00ac00ab44e589cbb5c2a82f"], 0x14c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4084) r12 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r14 = socket$unix(0x1, 0x2, 0x0) r15 = socket$kcm(0x11, 0x3, 0x0) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r16) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r17, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4) 1.983939959s ago: executing program 1 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.736862403s ago: executing program 1 (id=45): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00f71db90aa021e4e6ae01acf9b5da6ecf49c4631b22932b797f191d2c17804d3f577db53ba201a932ad465af7c2460000000000000000000000257da5c3529ec0b83b056a584f4fd0e9b6a85bc5b31dfb473045ab6ece1aa0ece4bedb3269f91d901c34253c4cbf6bf91a96951f4b6c98d8a3c7e2f89fe784cf21e69f4a66831dcd049028efbffcd2973d266189f3719f6430ed54308712442422bad6499a024015f1bae68c41678ce5376da3c61806a9ec774cc42309500565a9ff3132603225a6a48dad8154d024d65c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0x3e8f, &(0x7f0000000000)={0x0, 0x3245, 0x20000, 0x3, 0x60}, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)) r1 = fsopen(&(0x7f0000000480)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aa00000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x4000000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x48, r4, 0x1, 0x70bd27, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44) syz_io_uring_setup(0x309, &(0x7f0000000240)={0x0, 0x336b, 0x800, 0x3, 0x4, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 1.631618984s ago: executing program 2 (id=46): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x7, &(0x7f0000000040)={0x16, "9989c68556dd9d6197a0cb7ca9cb879a05000000f50000004f9fce1aba72a7ca2d"}}) 1.522386829s ago: executing program 2 (id=47): syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0xffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) r6 = syz_io_uring_setup(0xebd, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x249}, &(0x7f00000002c0), &(0x7f0000000140), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000000180)="01090290a512", 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.412535476s ago: executing program 3 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x3}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 1.318902272s ago: executing program 3 (id=49): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x400470c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x10000, 0xf6695649376f40d7, 0x0, 0x1014}, 0x30, 0x0) landlock_restrict_self(r3, 0xa) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) 1.097634147s ago: executing program 0 (id=50): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) creat(0x0, 0xecf86c37d53049cc) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x50, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.05165279s ago: executing program 1 (id=51): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x600000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, '\x00', "17197bb86696ce1d27a0442d148a416e", "82028d89", "218c005d8ceddfc5"}, 0x28) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="8000ba060a000200aa10b668d4480000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r8, &(0x7f0000000280)=[{&(0x7f0000000080)=""/80, 0x50}, {&(0x7f0000000100)=""/35, 0x23}], 0x2) 859.07245ms ago: executing program 4 (id=52): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x7, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0xb, 0x7fff, 0x0, 0x0, 0x20, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') lseek(r4, 0x6, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 257.508548ms ago: executing program 2 (id=53): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x1, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x6b, 0xa, 0x7, 0x0, 0x0, 0x0, 0x4, 0x7, 0xd, 0xa0, 0x3, 0x5, 0x0, 0x2, 0x8, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x400007fc, 0xffffffffffffffff, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x1, 0x4, 0x0, 0x7, 0x7, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r6 = creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)) 241.077711ms ago: executing program 3 (id=54): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000080)={r7, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x2, r1, 0x7}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000002480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) membarrier(0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r10, 0x8138ae83, &(0x7f0000000200)) 0s ago: executing program 1 (id=55): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0xc09a090a, 0x110, "eb3804003e000000000000008b400400000000009a8afaea3096d9061a2df0c1", 0xfffffffffffffffe, 0x1, 0x4, 0x9, 0x1000, 0xc, 0x400008, 0x88, [0x2b8, 0x2, 0x4, 0xe]}) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ptrace(0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000fcfffffe0500000008000300", @ANYRES32=r4, @ANYBLOB="0800050007000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f0000000480)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x0, 0x1fff, r2, 0x0, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1, r5, &(0x7f00000003c0)="ff2d65459a885dc2d596c84ce7a4ef04cfb1f22ebf0d47b9a000c6bcb90ef21a953326b4fc65a68e86e53a4c942817fcaab499c6d8422c0c36397767c85cd160f2d1ba86feff9e3e71a8948d690476795de8e49388e31ecf1853ef07134818", 0x5f, 0x0, 0x0, 0x2, r6}]) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) flock(r1, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 73.246283][ T5604] cgroup: Unknown subsys name 'net' [ 73.331768][ T5604] cgroup: Unknown subsys name 'cpuset' [ 73.335069][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.956476][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.263949][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.266455][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.267377][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.272238][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.272544][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.273434][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.274285][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.275248][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.280224][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.281022][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.281596][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.284771][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.293731][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.293755][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.294048][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.294120][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.294725][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.300209][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.300696][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.301511][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.303523][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.311639][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.326555][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.378471][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.391051][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.454395][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.454564][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.454690][ T5633] bridge_slave_0: entered allmulticast mode [ 78.456479][ T5633] bridge_slave_0: entered promiscuous mode [ 78.511186][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.511299][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.511382][ T5633] bridge_slave_1: entered allmulticast mode [ 78.512735][ T5633] bridge_slave_1: entered promiscuous mode [ 78.555271][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.555452][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.555561][ T5632] bridge_slave_0: entered allmulticast mode [ 78.557234][ T5632] bridge_slave_0: entered promiscuous mode [ 78.626500][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.626626][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.626707][ T5632] bridge_slave_1: entered allmulticast mode [ 78.628667][ T5632] bridge_slave_1: entered promiscuous mode [ 78.655952][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.656068][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.656165][ T5634] bridge_slave_0: entered allmulticast mode [ 78.657610][ T5634] bridge_slave_0: entered promiscuous mode [ 78.711998][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.712125][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.712258][ T5634] bridge_slave_1: entered allmulticast mode [ 78.713997][ T5634] bridge_slave_1: entered promiscuous mode [ 78.734311][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.749438][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.753207][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.784076][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.784229][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.784309][ T5635] bridge_slave_0: entered allmulticast mode [ 78.785436][ T5635] bridge_slave_0: entered promiscuous mode [ 78.791824][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.819900][ T5632] team0: Port device team_slave_0 added [ 78.823443][ T5632] team0: Port device team_slave_1 added [ 78.836252][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.836365][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.836494][ T5635] bridge_slave_1: entered allmulticast mode [ 78.838752][ T5635] bridge_slave_1: entered promiscuous mode [ 78.890292][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.937074][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.940410][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.944320][ T5633] team0: Port device team_slave_0 added [ 78.944522][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.944622][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.944742][ T5637] bridge_slave_0: entered allmulticast mode [ 78.947706][ T5637] bridge_slave_0: entered promiscuous mode [ 78.951699][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.951712][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.951734][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.972593][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.990147][ T5633] team0: Port device team_slave_1 added [ 79.004865][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.004995][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.005437][ T5637] bridge_slave_1: entered allmulticast mode [ 79.009889][ T5637] bridge_slave_1: entered promiscuous mode [ 79.049725][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.049741][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.049763][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.085345][ T5635] team0: Port device team_slave_0 added [ 79.150004][ T5634] team0: Port device team_slave_0 added [ 79.169181][ T5635] team0: Port device team_slave_1 added [ 79.171822][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.175561][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.177162][ T5634] team0: Port device team_slave_1 added [ 79.178870][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.178883][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.178906][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.181633][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.181646][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.181667][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.316438][ T5637] team0: Port device team_slave_0 added [ 79.329499][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.329518][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.329543][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.336168][ T5632] hsr_slave_0: entered promiscuous mode [ 79.336933][ T5632] hsr_slave_1: entered promiscuous mode [ 79.342488][ T5637] team0: Port device team_slave_1 added [ 79.343538][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.343550][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.343571][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.345540][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.345552][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.345574][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.372404][ T5615] Bluetooth: hci0: command tx timeout [ 79.378509][ T5615] Bluetooth: hci1: command tx timeout [ 79.434866][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.434882][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.434905][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.444703][ T5624] Bluetooth: hci3: command tx timeout [ 79.444916][ T5615] Bluetooth: hci2: command tx timeout [ 79.480394][ T5633] hsr_slave_0: entered promiscuous mode [ 79.482124][ T5633] hsr_slave_1: entered promiscuous mode [ 79.482937][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 79.483005][ T5633] Cannot create hsr debugfs directory [ 79.483819][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.483831][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.483852][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.486140][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.486151][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.486173][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.532024][ T5615] Bluetooth: hci4: command tx timeout [ 79.666439][ T5635] hsr_slave_0: entered promiscuous mode [ 79.667583][ T5635] hsr_slave_1: entered promiscuous mode [ 79.668647][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 79.668666][ T5635] Cannot create hsr debugfs directory [ 79.733011][ T5634] hsr_slave_0: entered promiscuous mode [ 79.733899][ T5634] hsr_slave_1: entered promiscuous mode [ 79.734375][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 79.734395][ T5634] Cannot create hsr debugfs directory [ 79.742148][ T5637] hsr_slave_0: entered promiscuous mode [ 79.743230][ T5637] hsr_slave_1: entered promiscuous mode [ 79.743986][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 79.744004][ T5637] Cannot create hsr debugfs directory [ 80.262426][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.278838][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.279791][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.286049][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.298292][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.315844][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.329467][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.331894][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.417452][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.430612][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.431455][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.436716][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.461558][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.465306][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.467438][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.491696][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.580287][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.582487][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.585846][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.586875][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.600356][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.615780][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.623634][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.635053][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.649348][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.691369][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.711806][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.711900][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.762688][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.762823][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.793265][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.796034][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.796917][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.803266][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.805363][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.815717][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.816533][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.822662][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.979759][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.983209][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.984365][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.986806][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.019530][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.024836][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.050142][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.052909][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.089503][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.142672][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.158933][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.190983][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.208028][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.208126][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.230592][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.248040][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.248355][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.282945][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.297690][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.314685][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.314754][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.317457][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.317517][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.371097][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.371204][ T954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.406375][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.406440][ T954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.448406][ T5624] Bluetooth: hci0: command tx timeout [ 81.448495][ T5615] Bluetooth: hci1: command tx timeout [ 81.472450][ T5632] veth0_vlan: entered promiscuous mode [ 81.514009][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.533053][ T5624] Bluetooth: hci3: command tx timeout [ 81.533438][ T5615] Bluetooth: hci2: command tx timeout [ 81.538676][ T5632] veth1_vlan: entered promiscuous mode [ 81.601081][ T5615] Bluetooth: hci4: command tx timeout [ 81.604026][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.625395][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.660912][ T5632] veth0_macvtap: entered promiscuous mode [ 81.666113][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.666178][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.700026][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.700147][ T954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.704708][ T5632] veth1_macvtap: entered promiscuous mode [ 81.759802][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.809546][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.812968][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.864370][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.963323][ T5634] veth0_vlan: entered promiscuous mode [ 82.052859][ T5634] veth1_vlan: entered promiscuous mode [ 82.089203][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.089963][ T954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.090008][ T954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.090043][ T954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.142314][ T5633] veth0_vlan: entered promiscuous mode [ 82.239937][ T5635] veth0_vlan: entered promiscuous mode [ 82.244676][ T5633] veth1_vlan: entered promiscuous mode [ 82.312895][ T5634] veth0_macvtap: entered promiscuous mode [ 82.336261][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.336285][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.344761][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.365391][ T5635] veth1_vlan: entered promiscuous mode [ 82.379274][ T5634] veth1_macvtap: entered promiscuous mode [ 82.463200][ T5637] veth0_vlan: entered promiscuous mode [ 82.464414][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.464434][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.474300][ T5633] veth0_macvtap: entered promiscuous mode [ 82.480943][ T5633] veth1_macvtap: entered promiscuous mode [ 82.527177][ T5635] veth0_macvtap: entered promiscuous mode [ 82.549859][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.554381][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.556595][ T5637] veth1_vlan: entered promiscuous mode [ 82.594400][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.598990][ T5635] veth1_macvtap: entered promiscuous mode [ 82.623470][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.634108][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.665311][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.680113][ T5632] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.687174][ T5632] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 82.717961][ T5632] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 82.720353][ T5632] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 82.720877][ T5632] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 82.994191][ T5637] veth0_macvtap: entered promiscuous mode [ 83.059679][ T5637] veth1_macvtap: entered promiscuous mode [ 83.072633][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.072652][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.159614][ T5348] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 83.179998][ T5348] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.183700][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.195565][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.195583][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.215241][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.386488][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.386512][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.409516][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.414640][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.414998][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.415272][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.415811][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.468346][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.477089][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.477111][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.520012][ T5624] Bluetooth: hci0: command tx timeout [ 83.520928][ T5615] Bluetooth: hci1: command tx timeout [ 83.553561][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553642][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553679][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553715][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553751][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553787][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553823][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553858][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553894][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553929][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.609428][ T5624] Bluetooth: hci3: command tx timeout [ 83.609523][ T5615] Bluetooth: hci2: command tx timeout [ 83.680362][ T5615] Bluetooth: hci4: command tx timeout [ 83.706993][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.707007][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.870167][ T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.870182][ T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.006218][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.006235][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.162322][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.162346][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.347197][ T5728] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 84.890954][ T1218] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.051841][ T1218] usb 2-1: Using ep0 maxpacket: 16 [ 85.067480][ T1218] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 85.094025][ T5739] process 'syz.2.7' launched './file1' with NULL argv: empty string added [ 85.115313][ T1218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.115357][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.158973][ T1218] usb 2-1: config 0 descriptor?? [ 85.352467][ T5618] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.491389][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 85.510179][ T5618] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.511602][ T5618] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 85.511651][ T5618] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64 [ 85.511691][ T5618] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.517997][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 85.518033][ T5618] usb 1-1: Product: syz [ 85.518053][ T5618] usb 1-1: Manufacturer: syz [ 85.518067][ T5618] usb 1-1: SerialNumber: syz [ 85.589488][ T5618] usb 1-1: config 0 descriptor?? [ 85.592329][ T5618] hub 1-1:0.0: bad descriptor, ignoring hub [ 85.592355][ T5618] hub 1-1:0.0: probe with driver hub failed with error -5 [ 85.601897][ T5624] Bluetooth: hci0: command tx timeout [ 85.601992][ T5615] Bluetooth: hci1: command tx timeout [ 85.647266][ T5618] usb 1-1: selecting invalid altsetting 0 [ 85.678435][ T5624] Bluetooth: hci3: command tx timeout [ 85.678490][ T5615] Bluetooth: hci2: command tx timeout [ 85.760043][ T5615] Bluetooth: hci4: command tx timeout [ 85.926504][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.927631][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.991754][ T5618] usb 1-1: USB disconnect, device number 2 [ 86.847354][ T5618] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.940552][ T9] cfg80211: failed to load regulatory.db [ 87.021648][ T5618] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.025256][ T5618] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 87.026658][ T5618] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64 [ 87.026688][ T5618] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.074232][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.076332][ T5618] usb 1-1: Product: syz [ 87.076791][ T5618] usb 1-1: Manufacturer: syz [ 87.076957][ T5618] usb 1-1: SerialNumber: syz [ 87.109177][ T5618] usb 1-1: config 0 descriptor?? [ 87.126092][ T5618] hub 1-1:0.0: bad descriptor, ignoring hub [ 87.126132][ T5618] hub 1-1:0.0: probe with driver hub failed with error -5 [ 87.149289][ T5618] usb 1-1: selecting invalid altsetting 0 [ 87.487113][ T5721] syz.3.4 (5721): drop_caches: 2 [ 87.504143][ T5744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.504635][ T5744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.657561][ T5750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.658228][ T5750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.786453][ T5752] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 87.932449][ T1218] usbhid 2-1:0.0: can't add hid device: -71 [ 87.932564][ T1218] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 87.936982][ T1218] usb 2-1: USB disconnect, device number 2 [ 89.587041][ T5764] openvswitch: netlink: Unknown key attributes 20 [ 89.599178][ T5764] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.627637][ T9] usb 1-1: USB disconnect, device number 3 [ 89.824290][ T5764] input: syz1 as /devices/virtual/input/input6 [ 89.999627][ T5709] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.164273][ T5709] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 90.166511][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.166554][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 90.166597][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.291057][ T5709] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 90.643485][ T5777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 91.852115][ T5795] netlink: 17 bytes leftover after parsing attributes in process `syz.1.20'. [ 92.127621][ T5800] openvswitch: netlink: Unknown key attributes 20 [ 92.166792][ T5618] usb 5-1: USB disconnect, device number 2 [ 92.220467][ T5618] idmouse 5-1:1.0: disconnected [ 92.295818][ T5800] input: syz1 as /devices/virtual/input/input7 [ 92.947867][ T5618] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.118853][ T5618] usb 1-1: Using ep0 maxpacket: 8 [ 93.124235][ T5618] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.124293][ T5618] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 93.126309][ T5618] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 93.126335][ T5618] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.126397][ T5618] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 194, changing to 7 [ 93.164053][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.164082][ T5618] usb 1-1: Product: syz [ 93.164098][ T5618] usb 1-1: Manufacturer: syz [ 93.164113][ T5618] usb 1-1: SerialNumber: syz [ 93.337975][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.489777][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 93.491860][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.524668][ T9] usb 4-1: config 0 descriptor?? [ 93.605037][ T5804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 93.830979][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 93.956631][ T5618] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 94.037725][ T5812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25'. [ 94.115576][ T5618] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 94.135016][ T5618] usb 1-1: USB disconnect, device number 4 [ 94.206414][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 94.206443][ T9] [drm] Initialized udl on minor 1 [ 94.264787][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.412560][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 94.464437][ T5825] Zero length message leads to an empty skb [ 94.936263][ T5834] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 95.259111][ T5843] capability: warning: `syz.0.31' uses 32-bit capabilities (legacy support in use) [ 95.437177][ T5846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.32'. [ 95.728084][ T5618] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.877891][ T5618] usb 3-1: Using ep0 maxpacket: 32 [ 95.879367][ T5618] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 95.907237][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.907293][ T5618] usb 3-1: Product: syz [ 95.907304][ T5618] usb 3-1: Manufacturer: syz [ 95.907312][ T5618] usb 3-1: SerialNumber: syz [ 95.937922][ T5618] usb 3-1: config 0 descriptor?? [ 95.987642][ T5618] usb 3-1: selecting invalid altsetting 3 [ 95.987694][ T5618] comedi comedi5: could not set alternate setting 3 in high speed [ 95.987705][ T5618] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 96.026095][ T5618] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 96.566672][ T1218] usb 3-1: USB disconnect, device number 2 [ 96.834280][ T5870] fuse: Bad value for 'fd' [ 97.052373][ T5868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.052500][ T5868] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.090700][ T5868] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.121093][ T5868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.121246][ T5868] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.133923][ T5618] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.173779][ T5868] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.191911][ T5868] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 97.192731][ T5868] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 97.217455][ T5868] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 97.242989][ T5868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.244558][ T5868] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.257400][ T5868] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.287518][ T5868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.287657][ T5868] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.318923][ T5868] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.319974][ T5618] usb 1-1: Using ep0 maxpacket: 32 [ 97.321200][ T5618] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 97.323146][ T5618] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 97.323171][ T5618] usb 1-1: config 0 has no interface number 0 [ 97.370659][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.370686][ T5618] usb 1-1: Product: syz [ 97.370701][ T5618] usb 1-1: Manufacturer: syz [ 97.370715][ T5618] usb 1-1: SerialNumber: syz [ 97.401011][ T5618] usb 1-1: config 0 descriptor?? [ 97.608115][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.638164][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.771865][ T30] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.774610][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.774665][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.787939][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 97.789743][ T30] usb 5-1: config 0 descriptor?? [ 97.802144][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 97.817488][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.817566][ T25] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 97.819635][ T25] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 97.819657][ T25] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 97.819675][ T25] usb 3-1: config 14 has no interface number 0 [ 97.819689][ T25] usb 3-1: config 14 has no interface number 1 [ 97.819783][ T25] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 97.819804][ T25] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 97.819826][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 97.819874][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 97.819899][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 97.819922][ T25] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.819945][ T25] usb 3-1: config 14 interface 57 has no altsetting 0 [ 97.819960][ T25] usb 3-1: config 14 interface 228 has no altsetting 0 [ 97.824803][ T5618] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 97.824832][ T5618] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.875513][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.875568][ T25] usb 3-1: Product: syz [ 97.875582][ T25] usb 3-1: Manufacturer: syz [ 97.875594][ T25] usb 3-1: SerialNumber: syz [ 98.015405][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 98.099510][ T5618] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 98.100546][ T5618] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 98.276293][ T30] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.277468][ T30] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.292355][ T30] pwc: recv_control_msg error -32 req 02 val 2c00 [ 98.293725][ T30] pwc: recv_control_msg error -32 req 04 val 1000 [ 98.294842][ T30] pwc: recv_control_msg error -32 req 04 val 1300 [ 98.321463][ T25] legousbtower 3-1:14.57: interrupt endpoints not found [ 98.513600][ T30] pwc: recv_control_msg error -71 req 02 val 2000 [ 98.514252][ T30] pwc: recv_control_msg error -71 req 02 val 2100 [ 98.514711][ T30] pwc: recv_control_msg error -71 req 04 val 1500 [ 98.515194][ T30] pwc: recv_control_msg error -71 req 02 val 2500 [ 98.515770][ T30] pwc: recv_control_msg error -71 req 02 val 2400 [ 98.516367][ T30] pwc: recv_control_msg error -71 req 02 val 2600 [ 98.518205][ T30] pwc: recv_control_msg error -71 req 02 val 2900 [ 98.520382][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 98.523061][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 98.524715][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 98.569511][ T30] pwc: Registered as video103. [ 98.599669][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 98.677519][ T30] usb 5-1: USB disconnect, device number 3 [ 98.709081][ T25] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 98.721545][ T25] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 99.128138][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.128266][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.158202][ T5884] tipc: Enabling of bearer rejected, failed to enable media [ 99.198959][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 99.278220][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.296281][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 99.306834][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 99.330869][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 99.334273][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 99.334696][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 99.350086][ T5887] usb 3-1: LEGO USB Tower reset control request failed [ 99.357880][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.403611][ T30] usb 4-1: USB disconnect, device number 2 [ 99.478027][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.638765][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.639972][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.640024][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.644836][ T9] usb 5-1: config 0 descriptor?? [ 99.685576][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 99.720148][ T5892] bond1: entered allmulticast mode [ 99.721717][ T5892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.783441][ T30] usb 1-1: USB disconnect, device number 5 [ 99.812382][ T5892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.816477][ T5892] macvlan2: entered allmulticast mode [ 99.816499][ T5892] bond0: entered allmulticast mode [ 99.816512][ T5892] bond_slave_0: entered allmulticast mode [ 99.816529][ T5892] bond_slave_1: entered allmulticast mode [ 99.816669][ T5892] bond_slave_0: entered promiscuous mode [ 99.816709][ T5892] bond_slave_1: entered promiscuous mode [ 99.837242][ T5674] usb 3-1: USB disconnect, device number 3 [ 99.846784][ T5892] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 99.924185][ T5674] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 99.959876][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 100.025745][ T5898] faux_driver vgem: [drm] Unknown color mode 55547; guessing buffer size. [ 100.044668][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 100.213821][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.216144][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 100.217621][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.239972][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.249585][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.250295][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.351057][ T5903] openvswitch: netlink: Duplicate or invalid key (type 0). [ 100.461746][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 100.462207][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 100.462658][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 100.463212][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 100.465324][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.467225][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.467694][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.481107][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.501109][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.528331][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.540408][ T9] pwc: Registered as video103. [ 100.543044][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 100.584256][ T9] usb 5-1: USB disconnect, device number 4 [ 100.655141][ T5911] openvswitch: netlink: IP tunnel dst address not specified [ 100.832073][ T5908] sg_read: process 50 (syz.2.47) changed security contexts after opening file descriptor, this is not allowed. [ 101.198470][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.199620][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.278173][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.279467][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.358257][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.431286][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.432482][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.432515][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.438765][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.447220][ T25] usb 1-1: config 0 descriptor?? [ 101.460366][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 101.672486][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 101.832148][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 101.832179][ T5927] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.894680][ T31] audit: type=1326 audit(1790132489.938:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x0 [ 101.929804][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 101.931682][ T5927] input: syz1 as /devices/virtual/input/input10 [ 101.932742][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 101.941573][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 101.953383][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 101.958946][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 102.152473][ T31] audit: type=1804 audit(1790132490.198:3): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.54" name="/newroot/8/file1" dev="fuse" ino=1 res=1 errno=0 [ 102.189368][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 102.189889][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 102.193199][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 102.193701][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 102.195550][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 102.197078][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 102.200974][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 102.201931][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 102.205461][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 102.206877][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 102.257374][ T5934] ------------[ cut here ]------------ [ 102.257391][ T5934] !chanctx_conf [ 102.257399][ T5934] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#1: syz.1.55/5934 [ 102.290949][ T5934] Modules linked in: [ 102.295774][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) [ 102.305056][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.316482][ T5934] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 102.323480][ T5934] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c c5 91 00 cc e8 66 96 71 f6 90 0f 0b 90 eb e1 e8 5b 96 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 102.343324][ T5934] RSP: 0018:ffffc90003a3efc8 EFLAGS: 00010287 [ 102.351166][ T5934] RAX: ffffffff8b563435 RBX: ffff888079480050 RCX: 0000000000080000 [ 102.360607][ T5934] RDX: ffffc90003f01000 RSI: 00000000000003dd RDI: 00000000000003de [ 102.368778][ T5934] RBP: dffffc0000000000 R08: ffffffff8b562fa7 R09: 0000000000000000 [ 102.376780][ T5934] R10: dffffc0000000000 R11: ffffed100f290031 R12: ffffffff8b562fa7 [ 102.384870][ T5934] R13: ffff888055000f40 R14: 0000000000000001 R15: 0000000000000000 [ 102.392928][ T5934] FS: 0000000000000000(0000) GS:ffff888124dd2000(0063) knlGS:00000000f545db40 [ 102.402438][ T5934] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 102.409098][ T5934] CR2: 0000000033d10ff8 CR3: 000000007ab6e000 CR4: 00000000003526f0 [ 102.417123][ T5934] Call Trace: [ 102.421403][ T5934] [ 102.424880][ T5934] rate_control_rate_init_all_links+0xf4/0x190 [ 102.431201][ T5934] sta_apply_auth_flags+0x1bc/0x430 [ 102.436436][ T5934] sta_apply_parameters+0x1291/0x1b50 [ 102.441943][ T5934] ieee80211_add_station+0x3de/0x700 [ 102.447274][ T5934] rdev_add_station+0xfc/0x290 [ 102.453771][ T5934] nl80211_new_station+0x1b4e/0x1fd0 [ 102.460147][ T5934] ? trace_contention_end+0x3d/0x140 [ 102.465491][ T5934] ? __pfx_nl80211_new_station+0x10/0x10 [ 102.471248][ T5934] ? __rtnl_unlock+0xc8/0xf0 [ 102.475929][ T5934] ? nl80211_pre_doit+0x53d/0x890 [ 102.481128][ T5934] genl_family_rcv_msg_doit+0x233/0x340 [ 102.486724][ T5934] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.492917][ T5934] ? bpf_lsm_capable+0x9/0x20 [ 102.498005][ T5934] ? security_capable+0x7e/0x2c0 [ 102.503008][ T5934] genl_rcv_msg+0x614/0x7a0 [ 102.507561][ T5934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.512672][ T5934] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 102.518205][ T5934] ? __pfx_nl80211_new_station+0x10/0x10 [ 102.523880][ T5934] ? __pfx_nl80211_post_doit+0x10/0x10 [ 102.529450][ T5934] ? __asan_memcpy+0x40/0x70 [ 102.534078][ T5934] ? __skb_clone+0x5c/0x6c0 [ 102.538687][ T5934] netlink_rcv_skb+0x226/0x4a0 [ 102.543491][ T5934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.548610][ T5934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.555588][ T5934] ? down_read+0x2be/0x330 [ 102.561497][ T5934] genl_rcv+0x28/0x40 [ 102.565519][ T5934] netlink_unicast+0x7bd/0x940 [ 102.570429][ T5934] netlink_sendmsg+0x813/0xb40 [ 102.575252][ T5934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.580651][ T5934] ? apparmor_socket_sendmsg+0x98/0x360 [ 102.586234][ T5934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.591656][ T5934] sock_sendmsg_nosec+0x13a/0x180 [ 102.596728][ T5934] ____sys_sendmsg+0x54e/0x850 [ 102.601611][ T5934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.606953][ T5934] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.612370][ T5934] ___sys_sendmsg+0x2a5/0x360 [ 102.617080][ T5934] ? __lock_acquire+0x747/0x2de0 [ 102.622119][ T5934] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.627357][ T5934] ? futex_wait+0x2a2/0x390 [ 102.631989][ T5934] ? __fget_files+0x2a/0x420 [ 102.636620][ T5934] ? __fget_files+0x3a2/0x420 [ 102.641603][ T5934] __sys_sendmsg+0x177/0x240 [ 102.646240][ T5934] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.651510][ T5934] __do_fast_syscall_32+0x27a/0x6a0 [ 102.658516][ T5934] ? do_fast_syscall_32+0x33/0x70 [ 102.663593][ T5934] ? asm_int80_emulation+0x1a/0x20 [ 102.669944][ T5934] ? do_int80_emulation+0x299/0x500 [ 102.675187][ T5934] ? trace_irq_disable+0x3b/0x140 [ 102.680323][ T5934] do_fast_syscall_32+0x33/0x70 [ 102.685211][ T5934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.691620][ T5934] RIP: 0023:0xf706f0ec [ 102.695718][ T5934] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 102.715627][ T5934] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 102.724460][ T5934] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 102.732754][ T5934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.734114][ T31] audit: type=1326 audit(1790132490.778:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.734160][ T31] audit: type=1326 audit(1790132490.778:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.734220][ T31] audit: type=1326 audit(1790132490.778:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.734257][ T31] audit: type=1326 audit(1790132490.778:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.734294][ T31] audit: type=1326 audit(1790132490.778:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.734331][ T31] audit: type=1326 audit(1790132490.778:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.734368][ T31] audit: type=1326 audit(1790132490.778:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.734404][ T31] audit: type=1326 audit(1790132490.778:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f060ec code=0x7fc00000 [ 102.747880][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.928763][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.936958][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.936984][ T9] usb 2-1: Product: syz [ 102.936997][ T9] usb 2-1: Manufacturer: syz [ 102.937036][ T9] usb 2-1: SerialNumber: syz [ 102.996313][ T5934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.004414][ T5934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.012506][ T5934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.020759][ T5934] [ 103.023813][ T5934] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.031124][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) [ 103.040261][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.050344][ T5934] Call Trace: [ 103.053654][ T5934] [ 103.056623][ T5934] vpanic+0x56d/0xa60 [ 103.060654][ T5934] ? __pfx__printk+0x10/0x10 [ 103.065284][ T5934] ? __pfx_vpanic+0x10/0x10 [ 103.069829][ T5934] ? is_bpf_text_address+0x292/0x2b0 [ 103.075160][ T5934] ? is_bpf_text_address+0x26/0x2b0 [ 103.080401][ T5934] panic+0xc5/0xd0 [ 103.084158][ T5934] ? __pfx_panic+0x10/0x10 [ 103.088612][ T5934] __warn+0x315/0x4c0 [ 103.092618][ T5934] ? rate_control_rate_init+0x5a6/0x630 [ 103.098194][ T5934] ? rate_control_rate_init+0x5a6/0x630 [ 103.103778][ T5934] __report_bug+0x276/0x570 [ 103.108328][ T5934] ? rate_control_rate_init+0x5a6/0x630 [ 103.113918][ T5934] ? __pfx___report_bug+0x10/0x10 [ 103.118971][ T5934] ? __lock_acquire+0x747/0x2de0 [ 103.123927][ T5934] ? __lock_acquire+0x747/0x2de0 [ 103.128899][ T5934] ? rate_control_rate_init+0x5a6/0x630 [ 103.134474][ T5934] report_bug+0x16b/0x220 [ 103.138842][ T5934] ? rate_control_rate_init+0x5a6/0x630 [ 103.144426][ T5934] ? rate_control_rate_init+0x5a8/0x630 [ 103.150019][ T5934] handle_bug+0x9c/0x200 [ 103.154297][ T5934] exc_invalid_op+0x1a/0x50 [ 103.158838][ T5934] asm_exc_invalid_op+0x1a/0x20 [ 103.163707][ T5934] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 103.169891][ T5934] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c c5 91 00 cc e8 66 96 71 f6 90 0f 0b 90 eb e1 e8 5b 96 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 103.189529][ T5934] RSP: 0018:ffffc90003a3efc8 EFLAGS: 00010287 [ 103.195631][ T5934] RAX: ffffffff8b563435 RBX: ffff888079480050 RCX: 0000000000080000 [ 103.203626][ T5934] RDX: ffffc90003f01000 RSI: 00000000000003dd RDI: 00000000000003de [ 103.211624][ T5934] RBP: dffffc0000000000 R08: ffffffff8b562fa7 R09: 0000000000000000 [ 103.219619][ T5934] R10: dffffc0000000000 R11: ffffed100f290031 R12: ffffffff8b562fa7 [ 103.227622][ T5934] R13: ffff888055000f40 R14: 0000000000000001 R15: 0000000000000000 [ 103.235623][ T5934] ? rate_control_rate_init+0x117/0x630 [ 103.241208][ T5934] ? rate_control_rate_init+0x117/0x630 [ 103.246767][ T5934] ? rate_control_rate_init+0x5a5/0x630 [ 103.252328][ T5934] ? rate_control_rate_init+0x5a5/0x630 [ 103.257915][ T5934] rate_control_rate_init_all_links+0xf4/0x190 [ 103.264085][ T5934] sta_apply_auth_flags+0x1bc/0x430 [ 103.269293][ T5934] sta_apply_parameters+0x1291/0x1b50 [ 103.274684][ T5934] ieee80211_add_station+0x3de/0x700 [ 103.279992][ T5934] rdev_add_station+0xfc/0x290 [ 103.284766][ T5934] nl80211_new_station+0x1b4e/0x1fd0 [ 103.290059][ T5934] ? trace_contention_end+0x3d/0x140 [ 103.295360][ T5934] ? __pfx_nl80211_new_station+0x10/0x10 [ 103.300999][ T5934] ? __rtnl_unlock+0xc8/0xf0 [ 103.305623][ T5934] ? nl80211_pre_doit+0x53d/0x890 [ 103.310657][ T5934] genl_family_rcv_msg_doit+0x233/0x340 [ 103.316213][ T5934] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 103.322297][ T5934] ? bpf_lsm_capable+0x9/0x20 [ 103.326974][ T5934] ? security_capable+0x7e/0x2c0 [ 103.331921][ T5934] genl_rcv_msg+0x614/0x7a0 [ 103.336443][ T5934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.341475][ T5934] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 103.346850][ T5934] ? __pfx_nl80211_new_station+0x10/0x10 [ 103.352491][ T5934] ? __pfx_nl80211_post_doit+0x10/0x10 [ 103.357959][ T5934] ? __asan_memcpy+0x40/0x70 [ 103.362560][ T5934] ? __skb_clone+0x5c/0x6c0 [ 103.367073][ T5934] netlink_rcv_skb+0x226/0x4a0 [ 103.371848][ T5934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.376881][ T5934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.382225][ T5934] ? down_read+0x2be/0x330 [ 103.386653][ T5934] genl_rcv+0x28/0x40 [ 103.390647][ T5934] netlink_unicast+0x7bd/0x940 [ 103.395428][ T5934] netlink_sendmsg+0x813/0xb40 [ 103.400219][ T5934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.405520][ T5934] ? apparmor_socket_sendmsg+0x98/0x360 [ 103.411074][ T5934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.416365][ T5934] sock_sendmsg_nosec+0x13a/0x180 [ 103.421405][ T5934] ____sys_sendmsg+0x54e/0x850 [ 103.426187][ T5934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.431485][ T5934] ? __pfx_futex_wake_mark+0x10/0x10 [ 103.436785][ T5934] ___sys_sendmsg+0x2a5/0x360 [ 103.441466][ T5934] ? __lock_acquire+0x747/0x2de0 [ 103.446410][ T5934] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.451625][ T5934] ? futex_wait+0x2a2/0x390 [ 103.456165][ T5934] ? __fget_files+0x2a/0x420 [ 103.460760][ T5934] ? __fget_files+0x3a2/0x420 [ 103.465457][ T5934] __sys_sendmsg+0x177/0x240 [ 103.470062][ T5934] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.475200][ T5934] __do_fast_syscall_32+0x27a/0x6a0 [ 103.480404][ T5934] ? do_fast_syscall_32+0x33/0x70 [ 103.485440][ T5934] ? asm_int80_emulation+0x1a/0x20 [ 103.490554][ T5934] ? do_int80_emulation+0x299/0x500 [ 103.495753][ T5934] ? trace_irq_disable+0x3b/0x140 [ 103.500782][ T5934] do_fast_syscall_32+0x33/0x70 [ 103.505634][ T5934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.511964][ T5934] RIP: 0023:0xf706f0ec [ 103.516032][ T5934] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 103.535639][ T5934] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 103.544060][ T5934] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 103.552033][ T5934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.560004][ T5934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.567972][ T5934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.575941][ T5934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.583929][ T5934] [ 103.587096][ T5934] Kernel Offset: disabled [ 103.591415][ T5934] Rebooting in 86400 seconds..