last executing test programs: 30.647596985s ago: executing program 1 (id=23): r0 = mq_open(&(0x7f0000000700)='eth0\x00\xf1\x99{\b\x00\xba3\xcb\xae\x99\xe1\x14z\xd3\xe4\x80\xa2\xbc\xdd\xb8\xed\xe9\xa34s\xa6R(\x12\x91i\xeb\x1f\xd1\x88x\x8b\x85#v#\xf0/\x84\x7f_\x05\xcd9\xe1aRi\xd9\xc5\x99|\xcd\a\x17\xd1\xd2\a\xab\xd2\xd2b\xa9\xf7d%$\xc0\xa6vBK\x9f\x1c%!g\xad1M\xa0j\xa2x\a\x14T\xe6t\xa2v\xc3n\x93\\\xcc\x96\x00\xe4\x1f\x94\xac\xb5\xd6\xe5\xccm\x95\xa8R\x00r\x8fg\x9b\xc0\xc3\x15\xd0XB\xf1\xf2>~\x9dmQ\xae\xdf\xca\x1c\xdeQ\xc6\x1e\x12&\x9f\xbe\\?\x99\x18E\xe0\xdf\xf1^.S\xc4\x8f8{IY\vVsw_@P\x04\x00\x00\x00\xa4\xfd\x04\x7f>h\x8b\xd1q\xb9\x95\xef\xd0\'\xef\xb6\r\x9b\xd7\x1b\x0e\xa2\xcc\xc2\xe5\xce\xcb\xc3`b\xd4\xad\x9d\xf0.\b\xa5\xdfg8\x01\x92,\xb9\'+\x02Uc\xacI{R&\xb0\xd4\xe6\xecr\xfd\x94w\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x190, 0x0) (async, rerun: 64) unshare(0x4000400) (rerun: 64) ftruncate(r0, 0xffffff7f) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x14bd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x48004) (async) unshare(0x2a020400) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff01) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @empty, 0x3}}]}, 0x50}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) fcntl$setstatus(r2, 0x403, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) connect$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}}}, 0x10) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003c85f620823040c00bf2e010203010902000000000600220904ff010071c0d908"], &(0x7f00000023c0)={0xfffffffffffffd03, 0x0, 0x0, 0x0, 0x63}) syz_usb_control_io(r7, 0x0, 0x0) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x1, @local, 'wg2\x00'}}, 0x2b) (async) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f00000000c0), 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2f, 0x1, 0x1, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) (async, rerun: 64) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r12 = openat$cgroup_int(r11, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r10], 0x8) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="1e00000028000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r10, @ANYRES64=r9], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r6, r2, 0x30, 0x1c, r2, @void, @value=r2, @void, @void, r9}, 0x20) 30.474044704s ago: executing program 1 (id=25): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000200)={0x28, 0x10000, 0x0, 0x0, 0x3c34d, 0xffffffffffffffff, 0x2, 0x13d199}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000000)={0x30, r3, 0x0, 0x0, 0x5, 0xfc, 0x0, &(0x7f0000000100)=""/198}) 30.183786069s ago: executing program 1 (id=27): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006"], 0xac}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "1c13ebdaf2f20d55806ba058e8edb1439bfcc1000000efffffffffffffff00", 0x494e4f4b}) fsync(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030600000000000000005206000008000300", @ANYRES32=r7, @ANYBLOB="06004800000000000500880000000000"], 0x2c}}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r8, 0x0, 0x61) 27.07971757s ago: executing program 1 (id=40): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) read(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140c, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x9002}, 0x44840) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000600)) splice(r3, 0x0, r4, 0x0, 0x50, 0xf) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000a05"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) (async) dup2(r1, r0) (async) read(r2, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140c, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x9002}, 0x44840) (async) pipe2(&(0x7f0000000200), 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) epoll_create1(0x0) (async) socket(0x1, 0x80802, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000600)) (async) splice(r3, 0x0, r4, 0x0, 0x50, 0xf) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000a05"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 26.973034829s ago: executing program 4 (id=41): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x2000, 0x5, 0x14}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r2, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}]}]}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x158cf000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x303, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 25.74322566s ago: executing program 4 (id=45): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) (async) ioctl$EVIOCSFF(r5, 0x40304580, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fd={0x73682a85}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) (async) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x7e, 0xdf, 0xf1, 0x10, 0x4e8, 0x6889, 0x93dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6a, 0xbf, 0xd0, 0x6, [{{0x9, 0x4, 0x8, 0x1, 0x0, 0xff, 0x3, 0x6b, 0x93}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 25.531139441s ago: executing program 1 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "a972b182"}]}}, 0x0}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) syz_clone3(&(0x7f0000000300)={0x8000000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0), {0xa}, &(0x7f0000000180)=""/252, 0xfc, &(0x7f0000000280)=""/112, &(0x7f0000000380)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2e, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x48044}, 0x24008010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x9}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "a972b182"}]}}, 0x0}, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async) io_setup(0x202, &(0x7f0000000200)) (async) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) (async) syz_clone3(&(0x7f0000000300)={0x8000000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0), {0xa}, &(0x7f0000000180)=""/252, 0xfc, &(0x7f0000000280)=""/112, &(0x7f0000000380)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2e, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x48044}, 0x24008010) (async) 25.343463312s ago: executing program 4 (id=48): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x3, 0x4, 0x0, '\xaa{*)'}}, 0x25) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xcb, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f0a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x3, 0x4, 0x0, '\xaa{*)'}}, 0x25) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xcb, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f0a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 25.180593819s ago: executing program 1 (id=50): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)="c61e9bd0542350", 0x7, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000180)='\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x400, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000001, 0x53e5, 0x20}, 0x0, 0x4000001, 0x1, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@empty, 0x1502, 0x1, 0x0, 0x0, 0x0, 0x8000}}, 0xe8) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)="3711", 0x2, 0x4}]) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='timerslack_ns\x00') write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000900)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0xc, 0x1c, 0x68, 0x0, 0x4, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x1, 0x0, @multicast2}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) 25.180254973s ago: executing program 4 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x0) 24.715731264s ago: executing program 32 (id=50): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)="c61e9bd0542350", 0x7, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000180)='\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x400, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000001, 0x53e5, 0x20}, 0x0, 0x4000001, 0x1, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@empty, 0x1502, 0x1, 0x0, 0x0, 0x0, 0x8000}}, 0xe8) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)="3711", 0x2, 0x4}]) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='timerslack_ns\x00') write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000900)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0xc, 0x1c, 0x68, 0x0, 0x4, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x1, 0x0, @multicast2}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) 24.695734161s ago: executing program 4 (id=54): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8560f5ff2ddeffff0100000000000000950000f11b000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000640)) move_pages(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) (async) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x8000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) (async) mount$fuse(0x20000000, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0) 24.483820401s ago: executing program 4 (id=55): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x3}}, 0x2e) (async, rerun: 32) close(r0) (rerun: 32) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x3, 0x2, 0x2, 0x3}}, 0x26) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004", @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 9.327174266s ago: executing program 33 (id=55): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x3}}, 0x2e) (async, rerun: 32) close(r0) (rerun: 32) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x3, 0x2, 0x2, 0x3}}, 0x26) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004", @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 8.305376483s ago: executing program 2 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='load trusted:s}z 00000000000000001033 '], 0x30, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 8.176634638s ago: executing program 2 (id=97): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xe22, @private=0xa010102}, 0x2, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="2adbd79cc0035a9c10b4cdb493df84f555490761bf59e27806a9bf7f5e", 0x1d}], 0x1}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000540)="e40b", 0x2, 0x4000000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3cf, 0x8, 0xfb, 0xb0, {0x7, 0x25, 0x1, 0x2, 0x9, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x3, 0x1, {0x7, 0x25, 0x1, 0x81, 0x4, 0x1}}}}}}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) 6.874659946s ago: executing program 3 (id=102): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x38, 0xff, 0x4f, 0x40, 0x13d3, 0x3219, 0x7a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x1, 0x0, 0x5e, 0x8b, 0x15}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0xaf, 0x145800) r3 = socket$igmp6(0xa, 0x3, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, 0x0, &(0x7f00000007c0)) getsockopt$MRT6(r3, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) fcntl$dupfd(r2, 0x406, r3) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket(0x11, 0x800000003, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x38, 0xff, 0x4f, 0x40, 0x13d3, 0x3219, 0x7a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x1, 0x0, 0x5e, 0x8b, 0x15}}]}}]}}, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0xaf, 0x145800) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_mreq(r4, 0x29, 0x1d, 0x0, &(0x7f00000007c0)) (async) getsockopt$MRT6(r3, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) (async) fcntl$dupfd(r2, 0x406, r3) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) 6.226750422s ago: executing program 0 (id=104): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) poll(&(0x7f00000016c0)=[{r1, 0x400}], 0x1, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0xb4001, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000000)) prlimit64(0x0, 0x7, &(0x7f0000000540)={0x1, 0x6}, 0x0) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x75, 0x5f, 0x32, 0x20, 0x17dd, 0x5500, 0xf35e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xf0, 0x42, 0xa4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0xd, 0x3}}]}}]}}]}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) set_mempolicy(0x2, &(0x7f0000000100)=0x55, 0x7) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[@ANYBLOB="000400000000000000001500000000a000000033c611553afa09393f84eab191bdfbc685c0810b74201b61ed6d9f1fb1ab688705e0e98e5e4ef6b1e619bcdcb4eea9d19e92e5c457fdc5bd4e20e58f026b868a4a936de1b0be62871e27758eae8008a4a401033741724a5661c981da4bd080a7d5ba532182610b3a661875dc617e3f13537d4e878f40836908e2a1b5e924fecec93a5c00"/160, @ANYRES32=r7, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00aa000000060010004e240000"], 0x40}}, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f00000000c0)={&(0x7f0000001700)=[0xfffffffc, 0x1, 0x7b7, 0x5, 0x8, 0x10000, 0x2, 0x1, 0x1, 0x3ff, 0x1, 0x9, 0x3, 0x1, 0x2, 0xfffffffc, 0x0, 0xffffffff, 0xb, 0x7fffffff, 0xfffffff9, 0x80, 0x1, 0x1, 0x2, 0xfffff000, 0x0, 0x755, 0x10000, 0x96, 0x7, 0x1, 0x401, 0x2a9f, 0x140000, 0x8000, 0x5, 0x9, 0x7, 0x1f, 0x7, 0xd, 0x80, 0x5, 0xc, 0x1000, 0x7, 0x1, 0x1, 0x3, 0x80, 0x1, 0x0, 0x9, 0x1, 0x8, 0x6, 0x0, 0x90, 0x1, 0x10001, 0x3, 0x55a6, 0x3, 0x9, 0x2, 0x3, 0x401, 0x8000, 0x0, 0x7, 0x7, 0x2, 0x3, 0x3, 0x2, 0x6, 0xfa24, 0x4, 0x5, 0x100, 0x7, 0x6, 0x252c, 0x8, 0x9, 0x9, 0x10, 0x7ff, 0x40, 0x7ff, 0x8, 0xfffffffa, 0x0, 0x2, 0x1, 0x3, 0x1, 0x9, 0x3ff, 0xf, 0x9, 0x1, 0x1, 0x8, 0x81, 0x709, 0x0, 0x7fff, 0xf0, 0x5, 0x6, 0x3, 0x1, 0x3, 0x3, 0x9, 0xd, 0x3, 0x5, 0x9, 0x1e, 0x100, 0x1, 0x7, 0x7ff, 0x2, 0xfffffff0, 0x4, 0x59b7, 0x3, 0x0, 0x1000, 0x7ff, 0x8, 0x8, 0x0, 0x0, 0x10, 0x3ff, 0x0, 0x2, 0x0, 0x30, 0x1, 0x6, 0x10000, 0x6c, 0x2, 0x6, 0x7fff, 0x400, 0xc, 0xe36, 0xcc, 0x3, 0x111, 0xd, 0x8, 0x6f, 0x8000, 0xbca, 0x5, 0x4, 0xf, 0x7, 0x3, 0x400000, 0x1, 0x6, 0x2, 0x0, 0x9, 0x2c5b, 0xa1f4, 0x40, 0xa, 0x5, 0x9, 0x6, 0x1, 0x6, 0x4b, 0x5, 0x2c, 0x5, 0x7, 0x80, 0x97f2, 0x9, 0xfffff584, 0x1, 0x3, 0x6, 0xa, 0x0, 0xca4, 0x766, 0x0, 0xfffffffc, 0x3, 0x800, 0x0, 0x5, 0x5, 0x8, 0x401, 0x101, 0x800, 0x2, 0x6, 0x5, 0x8, 0x2, 0x7ff, 0xfd, 0x1, 0x47ac, 0x96e, 0x0, 0xffffffbf, 0xfffffffc, 0xfffffffd, 0x0, 0x7, 0x3, 0xa, 0xfffffff9, 0x9, 0x80000000, 0x2, 0x2, 0x4, 0x5, 0xc454, 0x101, 0x419, 0x9, 0x77, 0x7, 0x1ff, 0x6, 0xd96f, 0xffffffff, 0x951, 0xfffffff8, 0x81, 0x1ff, 0x5663, 0x1, 0x0, 0xab, 0xb42b, 0xffff, 0x6, 0x2, 0x6f24, 0x8, 0x3, 0x2, 0x3, 0x1ff, 0x1ff, 0x5, 0x9, 0xc, 0x3, 0xa, 0x6, 0x9, 0x2, 0x13b, 0x800, 0xfffffffe, 0x9, 0x7, 0x9, 0x4, 0x4, 0x25c, 0x1, 0x10000, 0x7, 0xcf, 0x2, 0x5, 0x5, 0x9, 0x9, 0xf, 0x9, 0x2000, 0xfffffff8, 0x80000001, 0x6, 0xcc, 0x1, 0x80000000, 0x3, 0x5, 0xffffdb28, 0x401, 0x8, 0x5, 0x377, 0x9, 0x1, 0x10000, 0x3, 0x6, 0x2, 0x8000, 0xc, 0x8, 0x10000, 0x3, 0x5, 0x1, 0x1, 0x8, 0x2, 0x0, 0x6, 0xf, 0x7, 0x9, 0x2, 0xfffffff7, 0x7, 0x9, 0x0, 0x200, 0xa73e, 0x80000001, 0x2, 0xb, 0xf2, 0x1, 0x7, 0xe8a1, 0x8, 0x5, 0x5, 0xfff, 0x7, 0x4, 0x2, 0x1, 0x4800, 0x0, 0xd50, 0x921a, 0x3, 0xad6, 0x40, 0x2, 0x9, 0x2, 0x10, 0x0, 0xffffb7cd, 0x5, 0x4, 0x8, 0x8ca, 0x100, 0x0, 0x0, 0x5, 0x3c9, 0x5, 0x52, 0xf60, 0x25f, 0x1000, 0x1ff, 0x5, 0x3, 0xffffff99, 0xffffff77, 0x10, 0xe4, 0x7, 0x4, 0xff4e, 0x400, 0x7, 0x8, 0x5, 0x0, 0x1, 0x2, 0x4, 0xc3e1, 0x80000001, 0x1, 0xfe, 0x2, 0xc94b, 0xffffff01, 0x2, 0x8001, 0x1, 0x80, 0xf, 0x2, 0x7, 0x0, 0x8001, 0x3, 0x8752, 0x7ff, 0x1e85, 0x200, 0x5, 0x5, 0x0, 0xfffffffe, 0x8, 0x7, 0x3, 0x8, 0x13, 0x4, 0x4, 0x6, 0x1, 0x2a2f9be8, 0xa, 0x1000, 0x7, 0xb, 0x3, 0xffffffc1, 0x10000, 0x9, 0xffffffff, 0x40, 0xf, 0x2, 0x1, 0x100, 0x3, 0xc8a6, 0x5, 0x2, 0x7, 0x6, 0x5, 0x81, 0x2, 0xcb, 0x2, 0xff, 0x5, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x40, 0x0, 0x0, 0x8, 0x2, 0x2, 0x9, 0x2, 0x100, 0x9, 0x1000, 0x87eb, 0xfff, 0x1, 0x0, 0x797, 0x7, 0x9, 0xf, 0xd, 0x4, 0x0, 0x6, 0x8, 0xfffffffa, 0x4bb, 0x5, 0x9, 0x2, 0x10001, 0x3, 0xfffff360, 0x6, 0x0, 0x6, 0x480, 0x1, 0x1, 0x3, 0xfff, 0xfffffffe, 0x7, 0xb, 0x4, 0x400, 0x9, 0x2, 0x7, 0xb0, 0x100, 0x1000, 0x101, 0x7, 0x9, 0x3, 0xce41, 0x5, 0x3, 0x29c6, 0x2, 0x3, 0xd6f, 0xffffff80, 0x47, 0x2, 0x4, 0x3, 0x9, 0x6, 0xd, 0x2, 0x40, 0x6, 0x0, 0xff, 0x8, 0x2, 0x1, 0x7f, 0x2, 0x200, 0x6, 0x9, 0x1000, 0x9, 0x2, 0x7, 0x6, 0x5, 0x10000, 0xffffffff, 0x9daf, 0x10000, 0x8, 0xc, 0x2, 0x7, 0x0, 0x8000, 0x4, 0x6, 0xa2, 0x0, 0x7ff, 0x81, 0x3, 0x6, 0x0, 0x0, 0xeea, 0x5, 0x662, 0xb, 0x1, 0x9, 0x4a, 0x0, 0x706, 0xd, 0x627, 0x0, 0x8, 0x1, 0xde9c, 0x6, 0xffffffff, 0x0, 0xe22, 0x5, 0x9, 0x8918, 0xf, 0x3, 0x200, 0x4, 0x1, 0x8000, 0x3, 0xaffd, 0x7, 0x5, 0xfffffbff, 0x10000, 0x3, 0x5, 0x2, 0x100, 0x0, 0x6, 0x2, 0xfffffff8, 0x10000, 0x101, 0x5, 0xfffffffa, 0xffff0000, 0x5, 0xfffffffc, 0x3, 0x1f9f, 0x0, 0x1, 0x6, 0x7fff, 0x5, 0xfd1, 0xffffff7e, 0x80000001, 0x80000001, 0x3, 0x9, 0x7, 0xffffffff, 0xfffffff8, 0x4e6e, 0x4, 0xfc4, 0x6, 0x9, 0x6, 0x9, 0x80, 0x8, 0x200, 0xfffffff7, 0x10000, 0xea09, 0x5, 0x5, 0x4, 0x93f8, 0x7, 0x1, 0x100, 0x7, 0x8, 0x0, 0x3800000, 0x401, 0xf, 0x0, 0x9, 0x5, 0x1, 0x8001, 0x3, 0x8, 0x1, 0x3, 0x3, 0x3, 0x9, 0x8, 0x8, 0x3, 0x0, 0xb9, 0x908, 0x7, 0xe3, 0x1, 0x4, 0x3, 0xff000000, 0xfffff2b3, 0xfffffff2, 0xffffffff, 0x4, 0x80000001, 0xb5725d, 0x2, 0xd, 0x5, 0x6, 0x7, 0x4, 0x10001, 0x7ff, 0x6, 0xf, 0x0, 0x0, 0x1000, 0x9, 0x3, 0x5f, 0x10, 0x4, 0x10000, 0xfffffffa, 0x8001, 0x8, 0xe, 0x3, 0x7, 0x9, 0x3, 0x5, 0xc4ac, 0xd, 0xffc, 0x1, 0x5, 0x8, 0x0, 0x8, 0x0, 0x6, 0xc, 0x81, 0x6, 0x4, 0x6, 0x7, 0x6, 0x2, 0xa5, 0x34aa, 0x9, 0x2, 0x8, 0x4, 0x5, 0x2, 0xf2, 0x8, 0x7fffffff, 0x80b, 0x7, 0xfffffff8, 0x1, 0x80000000, 0x3, 0x9fc6, 0xb7, 0x2, 0x1, 0x6, 0x401000, 0x1, 0x3, 0x7, 0xffffffff, 0x400, 0x3ff, 0x3, 0x6, 0x10001, 0x7fff, 0x8, 0x5, 0x1ff, 0x6, 0x4, 0x1, 0x401, 0x9, 0x4da9, 0x81, 0x4, 0x800, 0x800, 0x1ff, 0x5, 0x920, 0x6b, 0x69, 0x0, 0x6, 0x6, 0x8, 0x5, 0x6, 0xb1, 0x4, 0x3, 0x2, 0x5a6c, 0x8000, 0x3, 0x7fff, 0x38, 0x1, 0x3, 0x51e0, 0x101, 0x5, 0x101, 0x3, 0xfffffff7, 0xb, 0xf, 0x7fffffff, 0x8, 0x2, 0x7fff, 0xe34f, 0x100, 0x10, 0x7ff, 0x7a81e5c9, 0x101, 0x8, 0x401, 0xf, 0x2, 0x5, 0x24, 0x9, 0x4693, 0x2, 0x1, 0x101, 0x7, 0xfffffffb, 0x8, 0x0, 0x2, 0x5, 0x0, 0x4, 0x19, 0x1667, 0x74, 0x6, 0x1, 0xc, 0xb98, 0x9, 0xfff, 0x4, 0x8, 0xf, 0x40, 0x9, 0x0, 0x401, 0x8, 0x5, 0x9, 0x7, 0xe45, 0x10000, 0x6, 0x3ff, 0x7, 0xe4, 0x9, 0x1, 0x6, 0x1, 0x5, 0x400, 0x400, 0x5, 0xff, 0x6, 0x7, 0xffffffff, 0x400, 0x9, 0xfff, 0x81, 0x9, 0xd1c2a91, 0x5, 0x6, 0xa, 0x3, 0x9, 0xfffffffd, 0xa71c, 0xffff, 0xc, 0x33f8, 0x12000, 0x60, 0x7, 0x9, 0x0, 0x9, 0x9, 0xed8, 0x0, 0x1, 0x8, 0x4, 0x10000, 0x19e0000, 0x0, 0x3, 0x7, 0x800, 0x3, 0x3, 0x1, 0x2, 0x10, 0x9, 0x4, 0x4, 0xc784, 0x401, 0x3fc00000, 0x2, 0x8, 0x5, 0x7, 0x3, 0x0, 0x5, 0x8, 0x0, 0x4, 0xf2c, 0x8000, 0x8, 0x4, 0x9, 0x8, 0xa, 0x639a, 0x8, 0x8, 0xc74, 0xb, 0x1ff4, 0x10, 0xea9, 0xb4, 0x4, 0x3, 0x6c, 0x9, 0x7, 0x80000000, 0xb3, 0x9, 0x2b0, 0x4, 0xfffffbff, 0xf, 0x825, 0x3, 0x1000, 0x4, 0x80000001, 0x7, 0xb, 0x401, 0x0, 0x9, 0xfc1, 0x8, 0x0, 0x5, 0x9, 0x8, 0x100, 0x7, 0xfffffff4, 0x4, 0x1, 0xe70, 0xfff, 0x9, 0x80, 0x0, 0x4, 0xfff, 0x4, 0xd, 0x40, 0x2, 0x2, 0x2, 0x1, 0xf8b, 0xb7, 0x10, 0x5, 0x3, 0x2, 0xff, 0xbc8, 0x3, 0xf98, 0xa, 0x5, 0x81, 0x2, 0x79d, 0xfffffffb, 0x7, 0x0, 0x1, 0x6, 0x2c4, 0x9, 0x4, 0x3712, 0xffffffa0, 0x0, 0xfffffff7], 0x4, 0x400, 0x100}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000540)={0x200c0, 0xd0, 0x20}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000a00)={0x0, 0x0, @ioapic}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae"], 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) 5.18655138s ago: executing program 3 (id=105): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1], 0x0, 0x200}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc8442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x48}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.175438858s ago: executing program 0 (id=106): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f000000c040)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f00000002c0)="081ea6707698f93f61f6ed7c63f6e1cdef337335d3895d31", 0x5e0}], 0x1, &(0x7f0000000a00)=[{0x10, 0x103, 0xb}], 0x10}}], 0x1, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x7, "5b89503ed555"}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@deltaction={0xec, 0x31, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb39}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000040)=""/31, 0x1f}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4.260227526s ago: executing program 3 (id=107): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/65}, {&(0x7f00000000c0)=""/157}, {&(0x7f0000000180)=""/226, 0x3b}], 0x3a, 0x2, 0x80000400, 0x1) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)=0x7) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2201, &(0x7f00000018c0)) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x0, 0x4, @l2={'eth', 0x3a, 'geneve0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 4.195758058s ago: executing program 2 (id=108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'geneve0\x00'}}, 0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0xd931d3864d39ddd8) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) stat(&(0x7f00000030c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0x1000}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=0xffffffffffffffff, 0x2f, 0x1, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r5], 0x8) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x2000140) inotify_rm_watch(r3, r9) accept4(r8, &(0x7f00000001c0)=@phonet, 0x0, 0x800) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="c8829833b7e800003e23fbc2911d47cea11c73508a0fdbdf2c6f56b176c6f02722f5", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r5, @ANYRES64=r4], 0x20) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x200) 3.554992783s ago: executing program 0 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x2, 0x7805, 0x44, @loopback, @mcast1, 0x8000, 0x8000, 0x0, 0x95}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c80)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0xfffffffc, {0x7, 0x0, 0x0, r10, 0x141, 0x64}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1a0, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x3c}}, 0x0) 3.554509459s ago: executing program 2 (id=110): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x42) syz_io_uring_setup(0x23a, &(0x7f0000000300)={0x0, 0xcd0c, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000040)=0x3001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f00000002c0)=0x7778, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c5000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001880)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4, 0xa6}], 0x18}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x10001}], 0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd5c) listen(0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) madvise(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x80000000e) 3.552929043s ago: executing program 3 (id=111): setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) clock_gettime(0x5, &(0x7f0000000140)) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x5, 0x7}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgr\x02\x00p\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) sendfile(r1, r0, &(0x7f0000000480)=0x5, 0xede) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000000c0)=0x8001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(anubis-generic)\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)="6989025bc6b79a356ccc22276054b07adf797d272c602e3c3505652fc435801691c00f465e651f0ad03387d525849e324e63ccdbd1bdf404c91543706885241a472f52280ac9236a90f077af9f60113c2aae98c247debc435b7cc49a8797e8bd87b59cb60e6588726fb8b70f1a42a98b7d3573208d33c8bad47a", 0x110}, {&(0x7f00000002c0)="f7c857e38288b5e540d948cbd453a308a5ca995c278679ea0e4ca1c352253c4e795ca3d14d6d261314b2c2a81fe79cb4f7ceb1405dc75932b7666ec7eda7143eb24ae0b57f168519f35ea98bf68cb1be7c0d032f37cdcd1fd2c7dc960036a732c4a06ca25831091c5d97956718db4b7675424249425654e48bfb6297f5b6bcd20d01125924aac924c294d08a6e67784b9f0371cf5b6c", 0x96}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r7, 0x15, 0x0, 0x3, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES8, @ANYRES8=r6, @ANYRES32=r7, @ANYBLOB="d7aa74e1a26e3bb55d8e7e1f31d3b6f0a0f8ca049d7d7fbe194ac7370debbbb02778a90fed77d71e1cae9dcb11b9ab141ef0ee6d015f74076063083db9a559b072e427fa9a0ef213bb378814dcd47716f05e7745f3fe7d80996fc6c80adad6b6458bab7c6b00534bd99d3d3141789a982d87a0a8a3094d368c2affa41dda193ea6f106f744be4d77062edcba618e66986b451f3d84c24ee529c3a68c68c1e50d81c9562c4861d7fcdfc27f4f31350af64d2fad", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r8], 0x20) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) unshare(0x40000000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 2.841881274s ago: executing program 0 (id=112): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010101}, {@multicast1, 0x5}, {@remote}, {@multicast1, 0xffd200}, {@private=0xa010102, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x20040000) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r7, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0xc810) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @pic={0xfe, 0x5, 0x7, 0x75, 0x1a, 0x3, 0x4, 0xf, 0x8, 0x3, 0x9, 0x7, 0xd, 0x40, 0x3, 0x8}}) 1.995471661s ago: executing program 2 (id=113): timer_create(0x2, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\n'], 0x20) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x6b, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r1, &(0x7f00000010c0)=[{&(0x7f0000001080)=""/41, 0x29}], 0x1, 0x6, 0x6) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f00003d6000/0x4000)=nil, &(0x7f000033c000/0x3000)=nil, &(0x7f0000a06000/0x4000)=nil, &(0x7f00004fc000/0x1000)=nil, &(0x7f000087a000/0x4000)=nil, &(0x7f0000101000/0x3000)=nil, &(0x7f0000920000/0x4000)=nil, &(0x7f0000594000/0x3000)=nil, &(0x7f0000398000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)="986c", 0x2, r2}, 0x68) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x3d0701, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fa3000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x4000, 0x2000, &(0x7f0000101000/0x2000)=nil}) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r6, &(0x7f00000004c0)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0xfffffffd, @private0, 0x5, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="d2502d4e16a3fe0423726c81280008f963657d70baddc4fb696115503f51871ebf5955966009b6209e95cd4a994ca308439c", 0x32}], 0x1}, 0x20810) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) fchdir(r7) utimes(&(0x7f0000000000)='.\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x3, 0x0, 0x0, "ff3a55f32eb68900d10052d0002000000000000400f3f7fffffffffff900ffe8", 0x4f565559}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r9, 0x5434, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xf, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.995059552s ago: executing program 3 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x50, 0x7f, 0x9, 0xfffff801, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7, 0x7, 0x400}}) r2 = socket(0x0, 0x3, 0x20003) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x801, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xfffffffe}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) unshare(0x20000400) flistxattr(0xffffffffffffffff, 0x0, 0x2) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x516376ce99af916c, @local}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0x60000000f00, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000017c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1460, 0x14, 0x100, 0x70bd29, 0x25dfdbfb, {0x1f, 0x40}, [@INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "f0ace65bfa1bc5c3bd4ef580968eb5b8ce581ff898e2e627115f7610ba539d4f116fbb6ae1e5283250b3a32c95d91565247903e0e8abb573a7beb3b6a8c235af37a0d0c8141c8a4cb851bb1ad065232be0572aff1933ac3578b6afa5f923ad570668f342e69d924f723e559436bd8c320e3ab4db04b4fac0fc8df4f89d52f3a17478b4c99e90d1ffa2e4cb21c54388a13a7cd9735fe8ba1bd0087a47032d34fd2a7770be7bd7b1ebe424c93384ef59454fec4eb6"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "5b881318ec5d103ee6caf3332ddcf0cb5bc36a096cdec4b4a8873fdbb04ec1a31aa81fd46c95b48d8c8358a1de8394d5ea3f08c2c64795a8237dbd7118c2ada530dff75f78ab10a751b31e17379536bfdf6dc3e6f639fe05854f81c2403921569af61cf87279e5a2617daec2a388043f277ed7d2413faf87f1b2ce82e0e413a9d7e5d5b30b9e3ab0a19acce6ac0d178f43921d8b64b3a21a0770504c5caa591ca5c6e0a2ca24d7af25c60b3a23455f055de2e99e34aa89f30f5e934962ffef436972d4943f9339a509a5092db10f502fb609e916fc04f2ec04b8b1f776d40699bf833de6b215b8"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "512b35bc8ced4a6a0a1c57a5e3153d2d107a0f6dd420fe4e95505eb62344a83eaa98b9fe6e296bfd39d8d9f283b69ad2a06e4212f6b792174510f6c20872534d7ded8ff040d2f02fd3a36e789124044e4edecb32d6567d49d161b0a9185abbc704ec7267b27b5d0ea79984d18d9b2b95152ac92fdf7c2b9599dfdef32cc8bfc089c0c602b82ced3007ba88d4f11d30aa36687c5adea9aa7566ba07a3eaa9a5845f1b6b0fa8c0ce5349d5506a84b9111b8b50e943f9c0613f545f8975028b161019f84e9d3c54"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "6d5f3218292f6cb8843f21d32ce439d85baea5847d3eb6c271f09fbedf027b5479fa21b95e40cc6aa0cdf878648b51bc73995aebaa4291a41d4c79a4f5974fc6cd525bfbe1aa364e28db74d519a2b232e9e0081d7b2695e29b959ab8566b71da8c230513208938b0"}, @INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "16768a9d08aafbcb891214920678b35d4d634823e1e2da67c9b8056ee5099a040648e66d3d070629a174758a9c984b456d0f557b98f24c1ea2fb05129e011d55c4648298de258a6d1cf3c00e6fe5b4ed75bf2522162e6ebe49ede8b358464ce959674678cee313cd5bb17002ca9e4d1ddb5fd78543eae9209bdc5df1d76bff3e1172cdf96fe96067052aa3cf12b7d3c589b0e1e86b174abad56bf45858e042c6d44787b5d8ba0fee5ac4c5fd482c9c"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "6d732f80867a679bd7a71dc987d1ac5873fef98c7d74e260cafbed1ed3fbaab30419c96b656a320a1f047f309f44caf2eec3d01e18756038f0475ccf49643a25187b8d8e178117479c58898449214388a20aa66f47cb37508a5329fdefc7a317a1aeb992662af49ee95c2954d484ebfa259a29bc57f232dc5f976b0cabffc20f7f6c028b8831ce4f18c8dadd422c1a32d876b815228a8b9404d900d4aa979699634bd9cb7facfa3dbd9b8fcc9861c7d4d9b65d"}]}, 0x1460}, 0x1, 0x0, 0x0, 0x4}, 0x20050004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES8=r2, @ANYBLOB="02210000000000000a000100aaaaaaaaaa0a000008002900161f070008002900da6506000a0002000180c2000000000008001b000500000008002e0000000000080004000900000004001400080013"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.51314348s ago: executing program 0 (id=115): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="d0ff", 0x2}], 0x1}, 0x8861) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000300), 0x4) read(r5, &(0x7f0000000080)=""/37, 0x25) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x13, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000554901000000000095000000000000000565db76b30b9c7be19631aa000000000000008520000000000000186000"/98], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.087069787s ago: executing program 2 (id=116): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xe22, @private=0xa010102}, 0x2, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="2adbd79cc0035a9c10b4cdb493df84f555490761bf59e27806a9bf7f5e", 0x1d}], 0x1}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000540)="e40b", 0x2, 0x4000000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3cf, 0x8, 0xfb, 0xb0, {0x7, 0x25, 0x1, 0x2, 0x9, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x3, 0x1, {0x7, 0x25, 0x1, 0x81, 0x4, 0x1}}}}}}}]}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) 1.08601114s ago: executing program 0 (id=117): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) readv(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x2) r5 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x10b482) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000009c0)={0x80000000, 0x0, &(0x7f0000001200)}) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)=0x2) write$dsp(r4, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) close(r4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x0) write(r7, &(0x7f00000001c0)="c5", 0x1) read$FUSE(r6, &(0x7f0000000fc0)={0x2020}, 0x2020) io_setup(0x20, &(0x7f0000001140)) syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x8a182) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)="7058be12b4267e05885ba43c6dd5c8d8e78c904e95e34a22415ca3e209197ce8ca51bde8d1beb5bb035f47a11908507d3c60816e87cd34b0ad43ca1b"}], 0x1a, 0x800003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x0, 0x50, [0x9, 0x1c03, 0x9, 0x6268], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 60.587399][ T5818] cgroup: Unknown subsys name 'net' [ 60.757064][ T5818] cgroup: Unknown subsys name 'cpuset' [ 60.765981][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.061913][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.184924][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.213662][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.245224][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.252640][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.261823][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.270068][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.278608][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.287164][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.295172][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.303954][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.312611][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.312849][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.334146][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.341390][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.350782][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.353343][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.368890][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.369812][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.388799][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.396467][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.407076][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.424795][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.433563][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.434398][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.442127][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.464762][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.465376][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.480704][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.492527][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.501315][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.920344][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 64.934935][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 64.977746][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 64.991851][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 65.032101][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 65.207772][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.215578][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.222870][ T5847] bridge_slave_0: entered allmulticast mode [ 65.230745][ T5847] bridge_slave_0: entered promiscuous mode [ 65.238762][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.246078][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.253249][ T5846] bridge_slave_0: entered allmulticast mode [ 65.260392][ T5846] bridge_slave_0: entered promiscuous mode [ 65.267360][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.274708][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.281854][ T5842] bridge_slave_0: entered allmulticast mode [ 65.288554][ T5842] bridge_slave_0: entered promiscuous mode [ 65.296714][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.303883][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.311062][ T5842] bridge_slave_1: entered allmulticast mode [ 65.318136][ T5842] bridge_slave_1: entered promiscuous mode [ 65.328284][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.335456][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.342589][ T5844] bridge_slave_0: entered allmulticast mode [ 65.349316][ T5844] bridge_slave_0: entered promiscuous mode [ 65.357096][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.364307][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.371540][ T5844] bridge_slave_1: entered allmulticast mode [ 65.378247][ T5844] bridge_slave_1: entered promiscuous mode [ 65.384770][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.391873][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.399114][ T5847] bridge_slave_1: entered allmulticast mode [ 65.406359][ T5847] bridge_slave_1: entered promiscuous mode [ 65.422346][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.431141][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.438923][ T5846] bridge_slave_1: entered allmulticast mode [ 65.446394][ T5846] bridge_slave_1: entered promiscuous mode [ 65.504661][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.511778][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.519641][ T5843] bridge_slave_0: entered allmulticast mode [ 65.527378][ T5843] bridge_slave_0: entered promiscuous mode [ 65.543187][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.556095][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.572340][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.584772][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.594125][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.601248][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.611425][ T5843] bridge_slave_1: entered allmulticast mode [ 65.618190][ T5843] bridge_slave_1: entered promiscuous mode [ 65.629092][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.650016][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.692794][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.713164][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.725801][ T5842] team0: Port device team_slave_0 added [ 65.733677][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.754008][ T5847] team0: Port device team_slave_0 added [ 65.771029][ T5842] team0: Port device team_slave_1 added [ 65.778328][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.797149][ T5847] team0: Port device team_slave_1 added [ 65.806418][ T5844] team0: Port device team_slave_0 added [ 65.843263][ T5844] team0: Port device team_slave_1 added [ 65.859894][ T5846] team0: Port device team_slave_0 added [ 65.906897][ T5846] team0: Port device team_slave_1 added [ 65.913338][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.921209][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.947505][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.960364][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.967540][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.994711][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.008826][ T5843] team0: Port device team_slave_0 added [ 66.018336][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.025353][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.052319][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.072969][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.080058][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.106626][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.118511][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.125570][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.157681][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.174472][ T5843] team0: Port device team_slave_1 added [ 66.181348][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.188592][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.214802][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.269039][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.276164][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.302713][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.315805][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.322807][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.349565][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.380533][ T5844] hsr_slave_0: entered promiscuous mode [ 66.387140][ T5834] Bluetooth: hci1: command tx timeout [ 66.393169][ T5844] hsr_slave_1: entered promiscuous mode [ 66.407601][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.417644][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.444385][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.457141][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.464522][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.468902][ T5834] Bluetooth: hci2: command tx timeout [ 66.490887][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.496230][ T5833] Bluetooth: hci0: command tx timeout [ 66.529292][ T5842] hsr_slave_0: entered promiscuous mode [ 66.535966][ T5842] hsr_slave_1: entered promiscuous mode [ 66.542043][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.549887][ T5834] Bluetooth: hci3: command tx timeout [ 66.553582][ T5834] Bluetooth: hci4: command tx timeout [ 66.555501][ T5842] Cannot create hsr debugfs directory [ 66.598806][ T5846] hsr_slave_0: entered promiscuous mode [ 66.606067][ T5846] hsr_slave_1: entered promiscuous mode [ 66.612115][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.619770][ T5846] Cannot create hsr debugfs directory [ 66.631584][ T5847] hsr_slave_0: entered promiscuous mode [ 66.640665][ T5847] hsr_slave_1: entered promiscuous mode [ 66.646869][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.654841][ T5847] Cannot create hsr debugfs directory [ 66.736648][ T5843] hsr_slave_0: entered promiscuous mode [ 66.742771][ T5843] hsr_slave_1: entered promiscuous mode [ 66.749460][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.757074][ T5843] Cannot create hsr debugfs directory [ 67.041264][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.056572][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.071719][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.092019][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.135028][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.148621][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.176720][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.199242][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.226854][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.261540][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.279802][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.290203][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.339564][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.349926][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.383696][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.419577][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.451810][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.465035][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.483125][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.500193][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.525663][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.591617][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.625480][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.632681][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.655212][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.662422][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.697063][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.772866][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.796280][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.820973][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.828133][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.839260][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.846363][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.860935][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.877008][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.901545][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.920420][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.930763][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.959263][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.966493][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.978627][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.985788][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.998353][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.005966][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.015634][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.022739][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.050975][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.063921][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.090588][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.097770][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.110970][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.141299][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.148454][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.238371][ T5844] veth0_vlan: entered promiscuous mode [ 68.270696][ T5844] veth1_vlan: entered promiscuous mode [ 68.312550][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.335750][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.356353][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.406832][ T5844] veth0_macvtap: entered promiscuous mode [ 68.417940][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.425500][ T5843] veth0_vlan: entered promiscuous mode [ 68.454329][ T5844] veth1_macvtap: entered promiscuous mode [ 68.464642][ T5834] Bluetooth: hci1: command tx timeout [ 68.488668][ T5843] veth1_vlan: entered promiscuous mode [ 68.510192][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.525917][ T5847] veth0_vlan: entered promiscuous mode [ 68.544148][ T5834] Bluetooth: hci2: command tx timeout [ 68.549585][ T5834] Bluetooth: hci0: command tx timeout [ 68.566800][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.577605][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.591799][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.601201][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.610934][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.627978][ T5833] Bluetooth: hci3: command tx timeout [ 68.634352][ T5834] Bluetooth: hci4: command tx timeout [ 68.641418][ T5842] veth0_vlan: entered promiscuous mode [ 68.659404][ T5847] veth1_vlan: entered promiscuous mode [ 68.668676][ T5846] veth0_vlan: entered promiscuous mode [ 68.701383][ T5846] veth1_vlan: entered promiscuous mode [ 68.758762][ T5842] veth1_vlan: entered promiscuous mode [ 68.779707][ T5843] veth0_macvtap: entered promiscuous mode [ 68.799997][ T5843] veth1_macvtap: entered promiscuous mode [ 68.825869][ T5846] veth0_macvtap: entered promiscuous mode [ 68.835247][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.843248][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.845960][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.869225][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.881101][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.894131][ T5847] veth0_macvtap: entered promiscuous mode [ 68.931763][ T5846] veth1_macvtap: entered promiscuous mode [ 68.942804][ T5847] veth1_macvtap: entered promiscuous mode [ 68.953303][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.966840][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.974152][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.980688][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.996548][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.007668][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.019029][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.032632][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.044609][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.055670][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.073732][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.084491][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.094723][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.106486][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.116688][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.127654][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.139759][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.155525][ T5842] veth0_macvtap: entered promiscuous mode [ 69.162939][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.179324][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.180435][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.206538][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.217308][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.228478][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.240957][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.249903][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.259159][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.270588][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.284543][ T5842] veth1_macvtap: entered promiscuous mode [ 69.299703][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.308997][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.324642][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.333672][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.355729][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.375175][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.390139][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.402680][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.412914][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.425995][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.438104][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.471808][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.481184][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.490166][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.498918][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.513351][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.529916][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.542305][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.553190][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.563505][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.574024][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.584110][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.594634][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.605983][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.640096][ T5887] veth0_to_hsr: entered promiscuous mode [ 69.650940][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.662046][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.675248][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.685907][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.695825][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.706402][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.717435][ T5888] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.720584][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.748204][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.760695][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.832439][ T5887] hsr_slave_0 (unregistering): left promiscuous mode [ 69.849217][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.858426][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.867713][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.876796][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.897623][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.907785][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.967722][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.976200][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.124266][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.132146][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.202139][ T5894] netlink: 'syz.3.7': attribute type 29 has an invalid length. [ 70.213372][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.231551][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.249174][ T5894] netlink: 'syz.3.7': attribute type 29 has an invalid length. [ 70.260620][ T5894] netlink: 'syz.3.7': attribute type 29 has an invalid length. [ 70.271143][ T5834] Bluetooth: hci0: unexpected cc 0x2007 length: 1 < 2 [ 70.316641][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.368508][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.410966][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.419117][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.428632][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.436562][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.483622][ T5900] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 70.501781][ T5900] netlink: 'syz.2.9': attribute type 8 has an invalid length. [ 70.528976][ T5900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9'. [ 70.548403][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.558395][ T5834] Bluetooth: hci1: command tx timeout [ 70.590495][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.623863][ T5834] Bluetooth: hci2: command tx timeout [ 70.703914][ T5834] Bluetooth: hci4: command tx timeout [ 70.709378][ T5834] Bluetooth: hci3: command tx timeout [ 70.822938][ T29] audit: type=1326 audit(1736792129.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 70.876406][ T29] audit: type=1326 audit(1736792129.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 70.944545][ T29] audit: type=1326 audit(1736792129.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 71.008804][ T29] audit: type=1326 audit(1736792129.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 71.040075][ T29] audit: type=1326 audit(1736792129.010:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 71.062603][ T29] audit: type=1326 audit(1736792129.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 71.072369][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.094877][ T29] audit: type=1326 audit(1736792129.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 71.094922][ T29] audit: type=1326 audit(1736792129.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 71.094951][ T29] audit: type=1326 audit(1736792129.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ea0b84690 code=0x7ffc0000 [ 71.094980][ T29] audit: type=1326 audit(1736792129.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 71.173181][ T5928] Zero length message leads to an empty skb [ 71.223886][ T5923] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.233208][ T5923] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 71.399178][ T5923] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.530008][ T5923] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 71.575110][ T5923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.608068][ T5923] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 71.658561][ T5923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.665643][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.673988][ T5923] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 71.693338][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.704998][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.720588][ T5923] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 71.729890][ T5923] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 71.860583][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 71.871777][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.889955][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 71.939597][ T5882] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 71.958607][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.018842][ T5882] usb 4-1: Product: syz [ 72.023097][ T5882] usb 4-1: Manufacturer: syz [ 72.031136][ T5882] usb 4-1: SerialNumber: syz [ 72.048537][ T5882] usb 4-1: config 0 descriptor?? [ 72.068820][ T5882] smsusb:smsusb_probe: board id=2, interface number 0 [ 72.092310][ T5882] smsusb:smsusb_probe: Device initialized with return code -19 [ 72.213533][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.272296][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.301291][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.348650][ T5882] usb 4-1: USB disconnect, device number 2 [ 72.365451][ T5881] usb 3-1: device descriptor read/64, error -71 [ 72.483943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.493959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.503648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 72.577030][ T5979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.624478][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.787070][ T5881] usb 3-1: device descriptor read/64, error -71 [ 72.913842][ T5881] usb usb3-port1: attempt power cycle [ 72.940241][ T5976] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 72.983614][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.124086][ T5837] usb 2-1: device descriptor read/64, error -71 [ 73.234724][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.273811][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.314319][ T5881] usb 3-1: device descriptor read/8, error -71 [ 73.374191][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.393765][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 73.406007][ T5885] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 73.423602][ T5885] usb 4-1: config 150 has no interface number 0 [ 73.453070][ T5885] usb 4-1: config 150 interface 204 has no altsetting 0 [ 73.467586][ T5885] usb 4-1: config 150 interface 1 has no altsetting 0 [ 73.486491][ T5885] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 73.496008][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.513501][ T5885] usb 4-1: Product: syz [ 73.517899][ T5885] usb 4-1: Manufacturer: syz [ 73.522542][ T5885] usb 4-1: SerialNumber: syz [ 73.543602][ T5837] usb 2-1: device descriptor read/64, error -71 [ 73.553743][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 73.577388][ T5881] usb 3-1: device descriptor read/8, error -71 [ 73.654052][ T5837] usb usb2-port1: attempt power cycle [ 73.697831][ T5881] usb usb3-port1: unable to enumerate USB device [ 73.747221][ T5885] xr_serial 4-1:150.204: xr_serial converter detected [ 73.953528][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.003546][ T5837] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.025086][ T5837] usb 2-1: device descriptor read/8, error -71 [ 74.107117][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 74.118503][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.130518][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.146298][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 74.155996][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.168027][ T5882] usb 1-1: config 0 descriptor?? [ 74.273872][ T5837] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.305165][ T5837] usb 2-1: device descriptor read/8, error -71 [ 74.330567][ T6005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.35'. [ 74.414160][ T5837] usb usb2-port1: unable to enumerate USB device [ 74.577903][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.587491][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.595417][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.608816][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.617589][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.634624][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 74.640803][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 74.657470][ T5882] usb 1-1: USB disconnect, device number 2 [ 74.755058][ T5878] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 74.764442][ T5878] usb 5-1: config 0 has no interface number 0 [ 74.774817][ T5878] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 74.787618][ T5878] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.801359][ T5878] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 74.810984][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.819806][ T5878] usb 5-1: Product: syz [ 74.824173][ T5878] usb 5-1: Manufacturer: syz [ 74.828969][ T5878] usb 5-1: SerialNumber: syz [ 74.838065][ T5878] usb 5-1: config 0 descriptor?? [ 74.844194][ T6005] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 74.853093][ T5878] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 74.872281][ T5878] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 75.263385][ T5879] usb 5-1: USB disconnect, device number 2 [ 75.307729][ T5879] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 75.346761][ T5879] cyberjack 5-1:0.69: device disconnected [ 75.493858][ T6017] sctp: [Deprecated]: syz.0.37 (pid 6017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.493858][ T6017] Use struct sctp_sack_info instead [ 76.009196][ T5885] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 76.029883][ T5885] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 76.076364][ T5885] usb 4-1: USB disconnect, device number 3 [ 76.102257][ T5885] xr_serial 4-1:150.204: device disconnected [ 76.146230][ T6028] tipc: Started in network mode [ 76.163678][ T5881] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 76.219830][ T6028] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 76.311996][ T6036] netlink: 56 bytes leftover after parsing attributes in process `syz.4.41'. [ 76.338011][ T6028] tipc: Enabled bearer , priority 18 [ 76.360962][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.41'. [ 76.395182][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 76.433698][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.464699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 76.473568][ T5881] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 76.482685][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.501268][ T5881] usb 2-1: config 0 descriptor?? [ 76.509739][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 76.624120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.833864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.843049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.113557][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.121928][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.194422][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.255152][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 77.261308][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 77.283914][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 77.292385][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.294606][ T5881] usb 2-1: USB disconnect, device number 6 [ 77.303995][ T5882] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 77.330733][ T6057] input: syz0 as /devices/virtual/input/input5 [ 77.337821][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.345545][ T46] tipc: Node number set to 10005162 [ 77.357459][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.384727][ T5882] usb 1-1: Product: syz [ 77.400348][ T5882] usb 1-1: Manufacturer: syz [ 77.411279][ T5885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.421844][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.430200][ T5882] usb 1-1: SerialNumber: syz [ 77.462388][ T5882] usb 1-1: config 0 descriptor?? [ 77.467892][ T5885] usb 4-1: Product: syz [ 77.492824][ T5885] usb 4-1: Manufacturer: syz [ 77.500191][ T5885] usb 4-1: SerialNumber: syz [ 77.579483][ T6060] netlink: 'syz.2.46': attribute type 4 has an invalid length. [ 77.773725][ T5885] usb 4-1: 0:2 : does not exist [ 77.858903][ T5885] usb 4-1: USB disconnect, device number 4 [ 77.944663][ T5882] usb 1-1: Firmware version (0.0) predates our first public release. [ 77.952804][ T5882] usb 1-1: Please update to version 0.2 or newer [ 77.985026][ T5882] usb 1-1: Firmware: build [ 78.075854][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.151216][ T2925] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.278416][ T2925] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.320568][ T5882] usb 1-1: USB disconnect, device number 3 [ 78.412016][ T2925] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.508094][ T2925] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.553512][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 78.658839][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.673577][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.697667][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.735591][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 78.744807][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 78.755533][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 78.765419][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 78.778393][ T5881] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 78.789199][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.796627][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.812229][ T5881] usb 3-1: SerialNumber: syz [ 78.819455][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.830643][ T5881] usb 3-1: config 0 descriptor?? [ 78.836532][ T6073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.839233][ T2925] bridge_slave_1: left allmulticast mode [ 78.843998][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.849668][ T2925] bridge_slave_1: left promiscuous mode [ 78.864795][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.876726][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 78.884656][ T5881] port100 3-1:0.0: NFC: Could not get supported command types [ 78.952489][ T2925] bridge_slave_0: left allmulticast mode [ 79.073538][ T2925] bridge_slave_0: left promiscuous mode [ 79.081974][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.113838][ T5879] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 79.902041][ T46] usb 3-1: USB disconnect, device number 6 [ 80.010989][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 80.054169][ T5879] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 80.070239][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.083478][ T5879] usb 4-1: Product: syz [ 80.090129][ T5879] usb 4-1: Manufacturer: syz [ 80.112281][ T5879] usb 4-1: SerialNumber: syz [ 80.188195][ T5879] usb 4-1: config 0 descriptor?? [ 80.221522][ T5879] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 80.904324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.407697][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.441267][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.473220][ T2925] bond0 (unregistering): Released all slaves [ 81.515153][ T2925] bond1 (unregistering): Released all slaves [ 82.046146][ T973] cfg80211: failed to load regulatory.db [ 82.051000][ T6081] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.177767][ T5879] usb 4-1: USB disconnect, device number 5 [ 82.328965][ T2925] hsr_slave_0: left promiscuous mode [ 82.366090][ T2925] hsr_slave_1: left promiscuous mode [ 82.382394][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.395901][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.417688][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.431784][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.510756][ T2925] veth1_macvtap: left promiscuous mode [ 82.529568][ T2925] veth0_macvtap: left promiscuous mode [ 82.566589][ T2925] veth1_vlan: left promiscuous mode [ 82.609242][ T2925] veth0_vlan: left promiscuous mode [ 83.632869][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 83.682794][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 84.727949][ T6133] mmap: syz.2.66 (6133) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.952336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.527916][ T6160] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure [ 86.791362][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 86.855476][ T6204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.73'. [ 86.856337][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 86.856352][ T29] audit: type=1326 audit(1736792145.100:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 86.895678][ T6194] dccp_close: ABORT with 32 bytes unread [ 86.918228][ T29] audit: type=1326 audit(1736792145.100:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 86.989330][ T29] audit: type=1326 audit(1736792145.100:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 87.058401][ T29] audit: type=1326 audit(1736792145.100:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 87.104270][ T29] audit: type=1326 audit(1736792145.100:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 87.147813][ T29] audit: type=1326 audit(1736792145.100:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 87.170684][ T29] audit: type=1326 audit(1736792145.110:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 87.200899][ T29] audit: type=1326 audit(1736792145.110:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 87.228627][ T29] audit: type=1326 audit(1736792145.110:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 87.258662][ T29] audit: type=1326 audit(1736792145.110:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ea0b85d29 code=0x7ffc0000 [ 93.588310][ T5842] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 94.490367][ T2927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.580700][ T2927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.651571][ T6336] trusted_key: encrypted_key: insufficient parameters specified [ 94.753649][ T2927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.803663][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 94.908185][ T2927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.282333][ T2927] bridge_slave_1: left allmulticast mode [ 95.288371][ T2927] bridge_slave_1: left promiscuous mode [ 95.303917][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.413184][ T2927] bridge_slave_0: left allmulticast mode [ 95.459210][ T2927] bridge_slave_0: left promiscuous mode [ 95.483248][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.768473][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.780440][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.791996][ T2927] bond0 (unregistering): Released all slaves [ 96.950896][ T2927] tipc: Disabling bearer [ 96.970795][ T2927] tipc: Left network mode [ 97.278740][ T2927] hsr_slave_0: left promiscuous mode [ 97.296843][ T2927] hsr_slave_1: left promiscuous mode [ 97.313168][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.327961][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.344802][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.357353][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.393246][ T2927] veth1_macvtap: left promiscuous mode [ 97.408615][ T2927] veth0_macvtap: left promiscuous mode [ 97.423027][ T2927] veth1_vlan: left promiscuous mode [ 97.432597][ T2927] veth0_vlan: left promiscuous mode [ 98.155507][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 98.201314][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 99.748310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=5 req=52 state=1 status=67 (errno 9: Bad file descriptor) [ 103.870599][ T6593] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.937118][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller #0 [ 103.946291][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.956357][ T6593] Call Trace: [ 103.959647][ T6593] [ 103.962590][ T6593] dump_stack_lvl+0x241/0x360 [ 103.967290][ T6593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.972490][ T6593] ? __pfx__printk+0x10/0x10 [ 103.977085][ T6593] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 103.983592][ T6593] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 103.990093][ T6593] warn_alloc+0x278/0x410 [ 103.994439][ T6593] ? __pfx_warn_alloc+0x10/0x10 [ 103.999746][ T6593] ? kcov_ioctl+0x56/0x640 [ 104.004167][ T6593] ? __get_vm_area_node+0x1c8/0x2d0 [ 104.009374][ T6593] ? __get_vm_area_node+0x25c/0x2d0 [ 104.014572][ T6593] __vmalloc_node_range_noprof+0x62f/0x1380 [ 104.020482][ T6593] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.026840][ T6593] vmalloc_user_noprof+0x74/0x80 [ 104.031808][ T6593] ? kcov_ioctl+0x56/0x640 [ 104.036239][ T6593] kcov_ioctl+0x56/0x640 [ 104.040495][ T6593] ? __pfx_kcov_ioctl+0x10/0x10 [ 104.045355][ T6593] __se_sys_ioctl+0xf5/0x170 [ 104.049948][ T6593] do_syscall_64+0xf3/0x230 [ 104.054462][ T6593] ? clear_bhb_loop+0x35/0x90 [ 104.059134][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.065036][ T6593] RIP: 0033:0x7f835d38592b [ 104.069449][ T6593] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 104.089177][ T6593] RSP: 002b:00007ffdf0d51b00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.097628][ T6593] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f835d38592b [ 104.105624][ T6593] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 104.113627][ T6593] RBP: 00007f835d576038 R08: 0000000000000005 R09: 0000000000000000 [ 104.121604][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.129692][ T6593] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 104.137774][ T6593] [ 104.267541][ T6593] Mem-Info: [ 104.270786][ T6593] active_anon:5744 inactive_anon:0 isolated_anon:0 [ 104.270786][ T6593] active_file:1285 inactive_file:38295 isolated_file:0 [ 104.270786][ T6593] unevictable:768 dirty:100 writeback:0 [ 104.270786][ T6593] slab_reclaimable:9874 slab_unreclaimable:92491 [ 104.270786][ T6593] mapped:13332 shmem:1462 pagetables:635 [ 104.270786][ T6593] sec_pagetables:0 bounce:0 [ 104.270786][ T6593] kernel_misc_reclaimable:0 [ 104.270786][ T6593] free:1380070 free_pcp:1185 free_cma:0 [ 104.423524][ T6593] Node 0 active_anon:18576kB inactive_anon:0kB active_file:5140kB inactive_file:153104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49128kB dirty:400kB writeback:0kB shmem:4312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10544kB pagetables:2540kB sec_pagetables:0kB all_unreclaimable? no [ 104.513486][ T6593] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 104.587633][ T6593] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.622980][ T6593] lowmem_reserve[]: 0 2465 2466 0 0 [ 104.628913][ T6593] Node 0 DMA32 free:1621192kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18536kB inactive_anon:0kB active_file:4540kB inactive_file:152276kB unevictable:1536kB writepending:396kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:2080kB local_pcp:1188kB free_cma:0kB [ 104.663438][ T6593] lowmem_reserve[]: 0 0 0 0 0 [ 104.668265][ T6593] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 104.695387][ T6593] lowmem_reserve[]: 0 0 0 0 0 [ 104.700362][ T6593] Node 1 Normal free:3907952kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:32kB free_cma:0kB [ 104.729705][ T6593] lowmem_reserve[]: 0 0 0 0 0 [ 104.734763][ T6593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.747783][ T6593] Node 0 DMA32: 1722*4kB (UME) 1195*8kB (UME) 978*16kB (UME) 841*32kB (UME) 322*64kB (UME) 178*128kB (UM) 95*256kB (UME) 47*512kB (UME) 27*1024kB (UME) 5*2048kB (UE) 350*4096kB (UM) = 1622272kB [ 104.828657][ T6593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.854300][ T6593] Node 1 Normal: 208*4kB (U) 46*8kB (UME) 40*16kB (UME) 214*32kB (UME) 94*64kB (UME) 34*128kB (UME) 15*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3907952kB [ 104.873561][ T6593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.883148][ T6593] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.892845][ T6593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.903049][ T6593] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.912894][ T6593] 40881 total pagecache pages [ 104.917035][ T3582] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.918018][ T6593] 0 pages in swap cache [ 104.933583][ T6593] Free swap = 124496kB [ 104.937758][ T6593] Total swap = 124996kB [ 104.941919][ T6593] 2097051 pages RAM [ 104.953456][ T6593] 0 pages HighMem/MovableOnly [ 104.958269][ T6593] 427006 pages reserved [ 104.962440][ T6593] 0 pages cma reserved [ 105.088516][ T3582] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.182880][ T3582] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.291115][ T3582] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.500179][ T3582] bridge_slave_1: left allmulticast mode [ 105.512404][ T3582] bridge_slave_1: left promiscuous mode [ 105.518587][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.531162][ T3582] bridge_slave_0: left allmulticast mode [ 105.537762][ T3582] bridge_slave_0: left promiscuous mode [ 105.547327][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.879231][ T3582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.891115][ T3582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.901592][ T3582] bond0 (unregistering): Released all slaves [ 106.177756][ T3582] hsr_slave_1: left promiscuous mode [ 106.185493][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.193344][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.202708][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.212495][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.241265][ T3582] veth1_macvtap: left promiscuous mode [ 106.246919][ T3582] veth0_macvtap: left promiscuous mode [ 106.252524][ T3582] veth1_vlan: left promiscuous mode [ 106.257974][ T3582] veth0_vlan: left promiscuous mode [ 106.544553][ T3582] team0 (unregistering): Port device team_slave_1 removed [ 106.580242][ T3582] team0 (unregistering): Port device team_slave_0 removed [ 107.188640][ T3582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.261784][ T3582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.340513][ T3582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.401269][ T3582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.492155][ T3582] bridge_slave_1: left allmulticast mode [ 107.499523][ T3582] bridge_slave_1: left promiscuous mode [ 107.505867][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.522240][ T3582] bridge_slave_0: left allmulticast mode [ 107.528425][ T3582] bridge_slave_0: left promiscuous mode [ 107.534529][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.807853][ T3582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.818630][ T3582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.830296][ T3582] bond0 (unregistering): Released all slaves [ 107.840040][ T3582] bond1 (unregistering): Released all slaves [ 108.130141][ T3582] hsr_slave_0: left promiscuous mode [ 108.136523][ T3582] hsr_slave_1: left promiscuous mode [ 108.142603][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.152507][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.162647][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.172060][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.187965][ T3582] veth1_macvtap: left promiscuous mode [ 108.194180][ T3582] veth0_macvtap: left promiscuous mode [ 108.199843][ T3582] veth1_vlan: left promiscuous mode [ 108.206019][ T3582] veth0_vlan: left promiscuous mode [ 108.483017][ T3582] team0 (unregistering): Port device team_slave_1 removed [ 108.519837][ T3582] team0 (unregistering): Port device team_slave_0 removed