last executing test programs: 15.562462526s ago: executing program 0 (id=126): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 15.374243204s ago: executing program 1 (id=128): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="834d2e4774922442dab081688e9829e83abad56916d6acec8fc071572e60c0804181bd76d18057736239a32b1ba62e0059e32f4fe9c840a1242707df58a655", 0x3f}, {&(0x7f0000000480)="395e48b5ff8c9fce9a6d1ca25601023ada907492419a8bf59f6809040ad76de341828ff76c1560ae4195cac2c08635d0b694c828a665ce6e244b7d1831cccbf358245ffe3985076dd42afad719e42a8d1ac2dd931be082fb5e6d133e1913a7329fcf9a5b7a5cd2ad40de", 0x6a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000840)="ebaa390353adfe745a6b84ace462d835220eec80bc0f8a6262a68a7e451132e86ab526d310ab35f58b653dd9de", 0x2d}, {&(0x7f0000000740)="6697d38c88397ed4010aaa48e281a9da43164fea7fdc", 0x16}, {&(0x7f0000000900)="d189326a37cc47b03f2ab03151", 0xd}, {&(0x7f0000000a00)="7efa6c1ae4ceab562c45f294e18b20d37e341f6faa401922cf74d239a66afe427d2092bd3ec411de37aa3e7440acb30930668718303a67747472", 0x3a}, {&(0x7f0000000a80)="af4022dc75738e395a5e1e66ed24f1f8f5589a1594d4345dce002de35ca9f050402a712160ea5d1126abc790a5e3d7bfeb7ac10434a24ac41b0eedd83ec66809cf94dcb4b8cdcacde453390bf143658050a8496457a64cf5ac9b11758c84ec6eaf1e0a39b8f9d4b6d2246ba3df1d1b675d9455ae36c1ec175d85", 0x7a}, {&(0x7f0000000b00)="409cf72076", 0x5}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)="a3f55a47b329bd8c4349f5c8c57d210895a9cd19208524", 0x17}], 0x1}}], 0x3, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) 15.204506956s ago: executing program 3 (id=129): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48850) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10820, 0x400}}, 0x20}}, 0x4084) close_range(r0, 0xffffffffffffffff, 0x0) 15.203892267s ago: executing program 0 (id=130): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737", 0x67, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.739422549s ago: executing program 1 (id=131): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fsopen(&(0x7f0000000400)='vxfs\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) getdents(r0, &(0x7f00000001c0)=""/81, 0x51) 14.674214706s ago: executing program 0 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xdfc0, 0x80, 0xfffffffd, 0x40000331, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, 0x0) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 11.699525769s ago: executing program 1 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000044) 10.397624531s ago: executing program 1 (id=136): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) r0 = syz_open_dev$dvb_demux(0x0, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 10.187840157s ago: executing program 5 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 9.859679587s ago: executing program 2 (id=139): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x48800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 9.715796925s ago: executing program 0 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000080)={0x18, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="250000007eea969500", @ANYRES32=0x0], 0x3c}}, 0x20048000) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket$netlink(0x10, 0x3, 0x0) 8.733670742s ago: executing program 5 (id=141): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000002c0)=0x7) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 8.649415628s ago: executing program 4 (id=142): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 8.620537994s ago: executing program 3 (id=143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="834d2e4774922442dab081688e9829e83abad56916d6acec8fc071572e60c0804181bd76d18057736239a32b1ba62e0059e32f4fe9c840a1242707df58a655", 0x3f}, {&(0x7f0000000480)="395e48b5ff8c9fce9a6d1ca25601023ada907492419a8bf59f6809040ad76de341828ff76c1560ae4195cac2c08635d0b694c828a665ce6e244b7d1831cccbf358245ffe3985076dd42afad719e42a8d1ac2dd931be082fb5e6d133e1913a7329fcf9a5b7a5cd2ad40de", 0x6a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000840)="ebaa390353adfe745a6b84ace462d835220eec80bc0f8a6262a68a7e451132e86ab526d310ab35f58b653dd9de", 0x2d}, {&(0x7f0000000740)="6697d38c88397ed4010aaa48e281a9da43164fea7fdc", 0x16}, {&(0x7f0000000a00)="7efa6c1ae4ceab562c45f294e18b20d37e341f6faa401922cf74d239a66afe427d2092bd3ec411de37aa3e7440acb30930668718303a67747472b7", 0x3b}, {&(0x7f0000000a80)="af4022dc75738e395a5e1e66ed24f1f8f5589a1594d4345dce002de35ca9f050402a712160ea5d1126abc790a5e3d7bfeb7ac10434a24ac41b0eedd83ec66809cf94dcb4b8cdcacde453390bf143658050a8496457a64cf5ac9b11758c84ec6eaf1e0a39b8f9d4b6d2246ba3df1d1b675d9455ae36c1ec175d85", 0x7a}, {&(0x7f0000000b00)="409cf72076", 0x5}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)="a3f55a47b329bd8c4349f5c8c57d210895a9cd19208524", 0x17}], 0x1}}], 0x3, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) 8.353555919s ago: executing program 2 (id=144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737", 0x67, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.263704452s ago: executing program 4 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 8.112246296s ago: executing program 3 (id=146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) setresgid(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r2, &(0x7f0000000680)={0x80, 0xee2c, 0x0, 0x0, 0xffffffffffffff80, 0x7, 0x0, 0x6, 0x7}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES16, @ANYRESOCT], 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0xc000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000300)=0x6012080) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) syz_usb_connect$uac2(0x2, 0xb1, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x2, 0x10, 0x7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x5, 0x9, 0xde}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0xcc, 0x8, "de5d5d"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x6, 0xab}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x78}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x10, 0x6, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf8fb, 0xfe00, 0x8, 0x7d}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0xf7, "e6e696f3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xb7, 0x89, 0x1, {0x8, 0x25, 0x1, 0x80, 0x3, 0xc3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x3, 0x7, {0x8, 0x25, 0x1, 0x81, 0x30, 0x6, 0x9}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x0, 0x2, 0x0, 0xff, 0x9}, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x3, [{0x26, &(0x7f0000000900)=@string={0x26, 0x3, "52da34cb12925b1d092404bb606f294c5c264e84863d2f74ae0e573bc78f1db5708835e6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4ff}}, {0xbe, &(0x7f0000000700)=ANY=[@ANYBLOB="be031b0e78cd687cb386645b76cdb503c9497ea1456068c5833aeb8d26d1530b539ddfd5d05afdf70cb112a8c2d23b472fc8c700a8855b794387a6ee0c1ab537372241dd36d6bac33e06acd2d0698bb1d8c9d4293feaf94fb459736f8d7a8167e1e639d9b5cc7a3bbe3e7db47fd464544bc78bad7bb2fa36d464ee64144b2f1e2f314fccd5de93dda91a64ca4bf197e899cb9a779bb971c8b0ad59890d6f56285c8c8f8cfe64cc53b313dfee60d688bfe3634ed374076676e1c16441f33247fe3e4664caa5ab32fa3c534cdd70153e16ef02e059496340efd6df92195d2203198c0f5e9dac4f3f753d015636b41bcee61f376fc4"]}]}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 7.829072063s ago: executing program 2 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000480)={0x0, 0x10000}) 7.801517304s ago: executing program 4 (id=148): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2603) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 6.625122065s ago: executing program 1 (id=149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xdfc0, 0x80, 0xfffffffd, 0x40000331, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, 0x0) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 6.599931061s ago: executing program 2 (id=150): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000151cf7ffff06000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.541685696s ago: executing program 4 (id=151): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.084869497s ago: executing program 4 (id=152): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283"]) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c6974790000000000000000"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.808845391s ago: executing program 5 (id=153): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e00)="538eb34b12b6e78221d826a03b7c0143cd6b6f16b06f4d0fa7269431b78022336d8825fa7a0e3511e83e19a4a17ae750af98ccb9c80337704a140c13b9307b1191af533c2574ef20e724fa7797f387507cb9f93eeebc24a3403aa64f0cd9da80b8e2432ce5be3a878cba0519d691a55d2c50dfb017ef6a444b9c73aab5428ced4fa4a914b178a1d00dfb91aab5b9eddbffdd480964c76916098e4790dabed0d7324638701c4405dec8192232ce17b730425180aff1e87b5648012f5121b23bbdea0fcd703090816285febe7c4b307a536948b6e3853662c9a2d71fe21c5843d97c86dccdff76d3d3fffe58e94dcb93d706fe1c7e23b360a3f189c6ac6644b1aa8c3bbf4fd56998c52011e256bf2267e73fe6de7b57d1d8dc283b9f9a729590e2543d86f7d1f5eae074ebd97c014a0991631bda524a4380c04b2810d2868b8e2edd814da9a9bc9b78b72ae4e5c00da1bee412b2226ed068616823f9cbd256f0bfa2d9819a13b8b79fdf561941335c8ab88fd398320194f829446aa1bda7da4765714e6ab5346f3f0fbf22f06e5de43e3d2f5124a0b96c8b3aa4d7b7a24bfb41a909f8316adea4c95a49fcee2568b9e30fc6a6762cec", 0x1b5}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.777154293s ago: executing program 0 (id=154): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x50) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x8) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x0) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 4.645054253s ago: executing program 3 (id=155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) syz_io_uring_setup(0x4955, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a) r5 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xdfc0, 0x80, 0xfffffffd, 0x40000331, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, 0x0) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 4.562229539s ago: executing program 1 (id=156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x6020400) syz_open_procfs$namespace(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.158949509s ago: executing program 5 (id=157): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 2.002550222s ago: executing program 5 (id=158): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.819482445s ago: executing program 3 (id=159): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737", 0x67, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.741665986s ago: executing program 4 (id=160): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, 0x0) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)='Or', 0x2}], 0x1}}], 0x2, 0xc000) r7 = socket$inet(0x2, 0x80001, 0x84) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x20}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.547690172s ago: executing program 5 (id=161): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x3516, 0x0, 0x40030000000000, 0x0, 0x0) 1.186214177s ago: executing program 3 (id=162): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 656.396934ms ago: executing program 0 (id=163): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 607.5946ms ago: executing program 2 (id=164): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 75.213919][ T5805] cgroup: Unknown subsys name 'net' [ 75.320475][ T5805] cgroup: Unknown subsys name 'cpuset' [ 75.330041][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.875596][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.373584][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.395844][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.413962][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.421270][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.421421][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.429623][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.436888][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.443849][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.450973][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.458065][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.464637][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.472958][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.479031][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.485818][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.494494][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.500525][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.514334][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.515429][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.522271][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.536947][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.537490][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.547564][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.558541][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.566710][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.569379][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.574677][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.581943][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.589232][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.595785][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.620549][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.448539][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 80.565968][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 80.582856][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 80.781843][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 80.855208][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.863081][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.870570][ T5826] bridge_slave_0: entered allmulticast mode [ 80.878759][ T5826] bridge_slave_0: entered promiscuous mode [ 80.938257][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 80.983632][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.991601][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.999645][ T5826] bridge_slave_1: entered allmulticast mode [ 81.007443][ T5826] bridge_slave_1: entered promiscuous mode [ 81.080716][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.088033][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.095674][ T5820] bridge_slave_0: entered allmulticast mode [ 81.103872][ T5820] bridge_slave_0: entered promiscuous mode [ 81.143431][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 81.192392][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.199920][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.207234][ T5820] bridge_slave_1: entered allmulticast mode [ 81.215835][ T5820] bridge_slave_1: entered promiscuous mode [ 81.324238][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.336599][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.343974][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.352428][ T5831] bridge_slave_0: entered allmulticast mode [ 81.361635][ T5831] bridge_slave_0: entered promiscuous mode [ 81.433594][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.444084][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.451634][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.459181][ T5831] bridge_slave_1: entered allmulticast mode [ 81.467240][ T5831] bridge_slave_1: entered promiscuous mode [ 81.499090][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.506313][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.513581][ T5818] bridge_slave_0: entered allmulticast mode [ 81.521471][ T5818] bridge_slave_0: entered promiscuous mode [ 81.533153][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.587909][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.596288][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.603529][ T5818] bridge_slave_1: entered allmulticast mode [ 81.606542][ T5838] Bluetooth: hci1: command tx timeout [ 81.617935][ T5818] bridge_slave_1: entered promiscuous mode [ 81.629108][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.685757][ T5823] Bluetooth: hci4: command tx timeout [ 81.691390][ T5823] Bluetooth: hci0: command tx timeout [ 81.697477][ T5839] Bluetooth: hci5: command tx timeout [ 81.697492][ T5835] Bluetooth: hci3: command tx timeout [ 81.697658][ T5838] Bluetooth: hci2: command tx timeout [ 81.710012][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.721446][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.731907][ T5829] bridge_slave_0: entered allmulticast mode [ 81.740963][ T5829] bridge_slave_0: entered promiscuous mode [ 81.778687][ T5826] team0: Port device team_slave_0 added [ 81.800737][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.818713][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.826156][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.833311][ T5829] bridge_slave_1: entered allmulticast mode [ 81.841736][ T5829] bridge_slave_1: entered promiscuous mode [ 81.865668][ T5826] team0: Port device team_slave_1 added [ 81.873744][ T5820] team0: Port device team_slave_0 added [ 81.882714][ T5820] team0: Port device team_slave_1 added [ 81.891348][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.930700][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.016258][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.081152][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.088653][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.095974][ T5821] bridge_slave_0: entered allmulticast mode [ 82.104130][ T5821] bridge_slave_0: entered promiscuous mode [ 82.115936][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.140057][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.147318][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.173841][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.187901][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.194844][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.221294][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.235212][ T5831] team0: Port device team_slave_0 added [ 82.241346][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.249028][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.256584][ T5821] bridge_slave_1: entered allmulticast mode [ 82.264376][ T5821] bridge_slave_1: entered promiscuous mode [ 82.275069][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.287074][ T5818] team0: Port device team_slave_0 added [ 82.306544][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.313513][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.340099][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.352126][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.359634][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.386503][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.400435][ T5831] team0: Port device team_slave_1 added [ 82.422719][ T5818] team0: Port device team_slave_1 added [ 82.513371][ T5829] team0: Port device team_slave_0 added [ 82.552865][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.578182][ T5829] team0: Port device team_slave_1 added [ 82.610631][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.617767][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.644044][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.657184][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.664146][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.690633][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.704729][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.715298][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.722570][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.748624][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.780756][ T5826] hsr_slave_0: entered promiscuous mode [ 82.787985][ T5826] hsr_slave_1: entered promiscuous mode [ 82.843091][ T5820] hsr_slave_0: entered promiscuous mode [ 82.855655][ T5820] hsr_slave_1: entered promiscuous mode [ 82.862090][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 82.869911][ T5820] Cannot create hsr debugfs directory [ 82.899659][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.907249][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.933254][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.965973][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.972964][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.999815][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.013045][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.020326][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.046442][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.074502][ T5821] team0: Port device team_slave_0 added [ 83.116996][ T5821] team0: Port device team_slave_1 added [ 83.228196][ T5831] hsr_slave_0: entered promiscuous mode [ 83.234959][ T5831] hsr_slave_1: entered promiscuous mode [ 83.242358][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 83.248557][ T5831] Cannot create hsr debugfs directory [ 83.314286][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.321322][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.347749][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.360777][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.367880][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.394268][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.433075][ T5818] hsr_slave_0: entered promiscuous mode [ 83.439667][ T5818] hsr_slave_1: entered promiscuous mode [ 83.446133][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 83.451874][ T5818] Cannot create hsr debugfs directory [ 83.512754][ T5829] hsr_slave_0: entered promiscuous mode [ 83.519877][ T5829] hsr_slave_1: entered promiscuous mode [ 83.526270][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 83.531990][ T5829] Cannot create hsr debugfs directory [ 83.685684][ T5838] Bluetooth: hci1: command tx timeout [ 83.753608][ T5821] hsr_slave_0: entered promiscuous mode [ 83.760974][ T5821] hsr_slave_1: entered promiscuous mode [ 83.766478][ T5823] Bluetooth: hci0: command tx timeout [ 83.766693][ T5834] Bluetooth: hci3: command tx timeout [ 83.771905][ T5823] Bluetooth: hci4: command tx timeout [ 83.777624][ T5834] Bluetooth: hci5: command tx timeout [ 83.783328][ T5838] Bluetooth: hci2: command tx timeout [ 83.790575][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 83.799962][ T5821] Cannot create hsr debugfs directory [ 84.332875][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.362680][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.374424][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.386491][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.467627][ T5820] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.489767][ T5820] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.502987][ T5820] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.515057][ T5820] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.608973][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.619809][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.631028][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.642576][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.790976][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.803741][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.815129][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.829690][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.850564][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.973036][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.989058][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.012181][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.021426][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.052708][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.102109][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.109470][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.150786][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.158018][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.215075][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.228270][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.243582][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.265938][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.279701][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.327335][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.392683][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.407546][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.421042][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.450434][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.457615][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.470466][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.477644][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.524938][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.532116][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.543103][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.550379][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.631943][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.688233][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.695466][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.731228][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.741105][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.765545][ T5823] Bluetooth: hci1: command tx timeout [ 85.850840][ T5823] Bluetooth: hci4: command tx timeout [ 85.857755][ T5838] Bluetooth: hci2: command tx timeout [ 85.863252][ T5838] Bluetooth: hci5: command tx timeout [ 85.865579][ T5834] Bluetooth: hci0: command tx timeout [ 85.874020][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.877605][ T5835] Bluetooth: hci3: command tx timeout [ 86.024568][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.061388][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.085131][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.133824][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.168754][ T974] cfg80211: failed to load regulatory.db [ 86.189648][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.196862][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.262370][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.292519][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.299757][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.369356][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.429167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.436393][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.470859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.478139][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.583125][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.595254][ T5826] veth0_vlan: entered promiscuous mode [ 86.619788][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.653774][ T5826] veth1_vlan: entered promiscuous mode [ 86.681864][ T5831] veth0_vlan: entered promiscuous mode [ 86.741101][ T5831] veth1_vlan: entered promiscuous mode [ 86.843945][ T5826] veth0_macvtap: entered promiscuous mode [ 86.888829][ T5829] veth0_vlan: entered promiscuous mode [ 86.931195][ T5826] veth1_macvtap: entered promiscuous mode [ 86.960030][ T5829] veth1_vlan: entered promiscuous mode [ 87.017975][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.041150][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.087447][ T5831] veth0_macvtap: entered promiscuous mode [ 87.121091][ T3529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.134728][ T3529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170343][ T5831] veth1_macvtap: entered promiscuous mode [ 87.197394][ T3529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.215476][ T3529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.295281][ T5829] veth0_macvtap: entered promiscuous mode [ 87.324838][ T5829] veth1_macvtap: entered promiscuous mode [ 87.337290][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.363755][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.395276][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.448177][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.504471][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.514119][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.531555][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.538600][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.547443][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.557440][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.568377][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.591303][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.607716][ T5820] veth0_vlan: entered promiscuous mode [ 87.654377][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.667296][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.713378][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.722800][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.744025][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.758312][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.771994][ T5820] veth1_vlan: entered promiscuous mode [ 87.846830][ T5835] Bluetooth: hci1: command tx timeout [ 87.891385][ T5818] veth0_vlan: entered promiscuous mode [ 87.913008][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.933363][ T5835] Bluetooth: hci5: command tx timeout [ 87.939242][ T5834] Bluetooth: hci4: command tx timeout [ 87.942759][ T5818] veth1_vlan: entered promiscuous mode [ 87.944648][ T5834] Bluetooth: hci2: command tx timeout [ 87.952002][ T5839] Bluetooth: hci3: command tx timeout [ 87.955841][ T5834] Bluetooth: hci0: command tx timeout [ 88.060993][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.095787][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.111179][ T5820] veth0_macvtap: entered promiscuous mode [ 88.153751][ T5820] veth1_macvtap: entered promiscuous mode [ 88.185350][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.198140][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.210389][ T5818] veth0_macvtap: entered promiscuous mode [ 89.489304][ T5974] loop0: detected capacity change from 0 to 32768 [ 89.585352][ T5974] read_mapping_page failed! [ 89.590245][ T5974] ERROR: (device loop0): txCommit: [ 89.590245][ T5974] [ 89.688179][ T5974] Zero length message leads to an empty skb [ 89.943032][ T5818] veth1_macvtap: entered promiscuous mode [ 89.988572][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.997554][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.044626][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.127345][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.169656][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.182782][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.194486][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.202752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.203406][ T5826] ERROR: (device loop0): diFree: numfree > numinos [ 90.203406][ T5826] [ 90.230881][ T5821] veth0_vlan: entered promiscuous mode [ 90.237770][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.250630][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.285013][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.312043][ T5821] veth1_vlan: entered promiscuous mode [ 90.335053][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.489901][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.821678][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.861353][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.872657][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.951555][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.143608][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.467192][ T5821] veth0_macvtap: entered promiscuous mode [ 91.552972][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.568993][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.590524][ T5821] veth1_macvtap: entered promiscuous mode [ 91.701428][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.763327][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.781417][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.932463][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.006531][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.062987][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.114819][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.176262][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.190993][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.216797][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.422367][ T5991] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 92.429045][ T5991] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.498562][ T5991] vhci_hcd vhci_hcd.0: Device attached [ 92.690671][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 92.793231][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.812976][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.824269][ T5909] usb 34-1: SetAddress Request (2) to port 0 [ 92.832935][ T5909] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 93.018437][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.063614][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.075460][ T5992] vhci_hcd: connection reset by peer [ 97.082416][ T1336] vhci_hcd vhci_hcd.0: stop threads [ 97.108346][ T1336] vhci_hcd vhci_hcd.0: release socket [ 97.250319][ T1336] vhci_hcd vhci_hcd.0: disconnect device [ 97.928003][ T5909] usb 34-1: device descriptor read/8, error -110 [ 98.504534][ T5909] usb usb34-port1: attempt power cycle [ 99.088365][ T5909] usb usb34-port1: unable to enumerate USB device [ 99.854396][ T6042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.024279][ T6046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.768060][ T6052] process 'syz.0.20' launched './file2' with NULL argv: empty string added [ 103.105208][ T6052] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 105.375043][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.861507][ T6091] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 108.096665][ T6096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.237251][ T6098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.520071][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.528563][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.553805][ T6105] comedi comedi0: Minor 3 could not be opened [ 112.049042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.331318][ T6123] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 112.665450][ T6125] 9p: Bad value for 'wfdno' [ 113.700798][ T6135] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 113.816254][ T974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.375496][ T974] usb 6-1: Using ep0 maxpacket: 32 [ 114.526865][ T974] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 114.592029][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.679000][ T974] usb 6-1: Product: syz [ 114.691631][ T974] usb 6-1: Manufacturer: syz [ 114.711835][ T974] usb 6-1: SerialNumber: syz [ 114.794711][ T974] usb 6-1: config 0 descriptor?? [ 115.097759][ T974] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 002 [ 115.430513][ T6148] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 116.136990][ T6158] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.43'. [ 117.296885][ T6129] i2c i2c-1: failure reading data [ 117.768281][ T5909] usb 6-1: USB disconnect, device number 2 [ 118.194757][ T6172] loop5: detected capacity change from 0 to 256 [ 118.341748][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.349706][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.440078][ T6172] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 118.497720][ T6177] comedi comedi0: Minor 3 could not be opened [ 118.805197][ T6180] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 119.178994][ T31] audit: type=1800 audit(1774470869.708:2): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.47" name="file1" dev="loop5" ino=1048610 res=0 errno=0 [ 122.532674][ T6200] 9p: Bad value for 'wfdno' [ 123.215427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.570851][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.578846][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.600317][ T6209] comedi comedi0: Minor 3 could not be opened [ 124.581802][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.589172][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.597650][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.604828][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.841472][ T6221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.895748][ T6231] loop0: detected capacity change from 0 to 256 [ 125.075485][ T6231] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 125.424839][ T6234] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 125.432426][ T31] audit: type=1800 audit(1774470876.328:3): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.62" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 125.775609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 127.671347][ T6251] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.686752][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.67'. [ 127.695696][ T6251] bridge_slave_1: left allmulticast mode [ 127.701378][ T6251] bridge_slave_1: left promiscuous mode [ 127.707382][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.855989][ T6251] bridge_slave_0: left allmulticast mode [ 127.861914][ T6251] bridge_slave_0: left promiscuous mode [ 127.868613][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.025025][ T6272] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 131.040492][ T6270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.486086][ T6280] 9p: Bad value for 'wfdno' [ 132.514876][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.521728][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.886956][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 135.903058][ T6300] bond0: entered promiscuous mode [ 135.908265][ T6300] bond_slave_0: entered promiscuous mode [ 135.914961][ T6300] bond_slave_1: entered promiscuous mode [ 135.922559][ T6300] gretap0: entered promiscuous mode [ 135.929090][ T6300] hsr1: entered promiscuous mode [ 141.503392][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.510645][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.518264][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.525509][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.640652][ T6345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.131582][ T6360] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 143.905454][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.095700][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 144.122666][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.173463][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.220015][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.250065][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.300627][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.350710][ T5902] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 144.391311][ T5902] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 144.453035][ T5902] usb 1-1: Manufacturer: syz [ 144.538925][ T5902] usb 1-1: config 0 descriptor?? [ 145.038235][ T5902] rc_core: IR keymap rc-hauppauge not found [ 145.063641][ T5902] Registered IR keymap rc-empty [ 145.099386][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.160013][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.218517][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 145.518212][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 145.577081][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.611106][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.868285][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.905564][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.936230][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.086107][ T6386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.165678][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.212790][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.276962][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.337539][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.396646][ T5902] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.439705][ T5902] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 146.529953][ T5902] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.597937][ T5902] usb 1-1: USB disconnect, device number 2 [ 147.165551][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.305497][ T5909] usb 2-1: device descriptor read/64, error -71 [ 148.673359][ T5909] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.349554][ T6399] loop0: detected capacity change from 0 to 32768 [ 149.735532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 149.905481][ T5909] usb 2-1: device descriptor read/64, error -71 [ 150.022503][ T5909] usb usb2-port1: attempt power cycle [ 150.387664][ T6405] syz.5.111 (6405) used greatest stack depth: 17008 bytes left [ 152.925472][ T5954] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.085427][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 153.097342][ T5954] usb 6-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 153.175462][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.215489][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.244222][ T5954] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.275904][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.437369][ T5954] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.473383][ T5954] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.533356][ T5954] usb 6-1: Manufacturer: syz [ 153.569892][ T5954] usb 6-1: config 0 descriptor?? [ 154.052682][ T5954] rc_core: IR keymap rc-hauppauge not found [ 154.097260][ T5954] Registered IR keymap rc-empty [ 154.169932][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.235948][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.483211][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 154.499214][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 154.520782][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.575694][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.607381][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.635513][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.665530][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.686590][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.725590][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.773943][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.818636][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.886128][ T5954] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.932998][ T5954] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.974416][ T5954] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 155.147745][ T5954] usb 6-1: USB disconnect, device number 3 [ 156.049516][ T6461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.375590][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.531263][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.803130][ T6479] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.631676][ T6492] syz.2.135 uses obsolete (PF_INET,SOCK_PACKET) [ 161.265456][ T5954] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 161.605509][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 161.650211][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.138'. [ 161.755712][ T6507] bond0: entered promiscuous mode [ 161.761983][ T6507] bond_slave_0: entered promiscuous mode [ 161.815287][ T6507] bond_slave_1: entered promiscuous mode [ 161.958230][ T6507] gretap0: entered promiscuous mode [ 162.034221][ T6507] debugfs: 'hsr1' already exists in 'hsr' [ 162.041215][ T6507] Cannot create hsr debugfs directory [ 162.047227][ T6507] hsr1: entered promiscuous mode [ 162.305877][ T5954] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 162.314960][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.417999][ T5954] usb 2-1: config 0 descriptor?? [ 162.585775][ T5954] as10x_usb: device has been detected [ 162.667308][ T5954] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 162.765216][ T5954] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 162.838641][ T5954] as10x_usb: error during firmware upload part1 [ 162.865868][ T5902] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 162.883183][ T5954] Registered device nBox DVB-T Dongle [ 163.000799][ T5954] usb 2-1: USB disconnect, device number 5 [ 163.105504][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 163.117333][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.126074][ T5954] Unregistered device nBox DVB-T Dongle [ 163.135444][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.135700][ T5954] as10x_usb: device has been disconnected [ 163.176718][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.225403][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 163.258324][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.479770][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.490642][ T5902] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.498748][ T5902] usb 6-1: Manufacturer: syz [ 163.508065][ T5902] usb 6-1: config 0 descriptor?? [ 164.240202][ T974] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 164.538547][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 164.560029][ T974] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 164.590160][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.622308][ T6537] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 164.636379][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 164.672093][ T5902] rc_core: IR keymap rc-hauppauge not found [ 164.682788][ T5902] Registered IR keymap rc-empty [ 164.691689][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 164.724730][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 164.732757][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.753683][ T974] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 164.763192][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.771362][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.118926][ T974] usb 4-1: config 0 descriptor?? [ 165.125904][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 165.209812][ T974] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 165.226806][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 165.283444][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.515490][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.581010][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.596960][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.605469][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.675481][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.689290][ T974] usb 4-1: USB disconnect, device number 2 [ 165.689327][ C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 165.765939][ T6517] udevd[6517]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 165.785508][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.865708][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.905920][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 165.985774][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 166.045506][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 166.089764][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 166.127211][ T5902] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 166.158181][ T5902] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 166.259003][ T5902] usb 6-1: USB disconnect, device number 4 [ 166.345430][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.547332][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 166.727735][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.745058][ T6561] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 166.795677][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.856306][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.876001][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 167.136435][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.318820][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 167.336665][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 167.455516][ T10] usb 5-1: Manufacturer: syz [ 167.475747][ T10] usb 5-1: config 0 descriptor?? [ 167.825487][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 168.085571][ T10] rc_core: IR keymap rc-hauppauge not found [ 168.091915][ T10] Registered IR keymap rc-empty [ 168.098900][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.118791][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 168.138233][ T5902] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 168.147534][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.154912][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.186384][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 168.198944][ T5902] usb 6-1: config 0 descriptor?? [ 168.227340][ T5902] as10x_usb: device has been detected [ 168.236037][ T5902] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 168.264891][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 168.299331][ T5902] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 168.335845][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.364729][ T5902] as10x_usb: error during firmware upload part1 [ 168.395303][ T5902] Registered device nBox DVB-T Dongle [ 168.396889][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.465612][ T5902] usb 6-1: USB disconnect, device number 5 [ 168.488290][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.536446][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.639263][ T5902] Unregistered device nBox DVB-T Dongle [ 168.640170][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.695668][ T5902] as10x_usb: device has been disconnected [ 168.745790][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.766548][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.808644][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.962398][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.017984][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.087366][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 169.132707][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 169.307101][ T10] usb 5-1: USB disconnect, device number 2 [ 169.765740][ T6579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.745284][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.752529][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.760873][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.768031][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.854148][ T974] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 170.884423][ T6585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.037028][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 171.044231][ T974] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 171.053705][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.079091][ T974] usb 4-1: config 0 descriptor?? [ 171.117723][ T974] as10x_usb: device has been detected [ 171.129927][ T974] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 171.233916][ T974] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 171.299540][ T6586] ------------[ cut here ]------------ [ 171.305041][ T6586] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 171.305055][ T6586] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#0: syz.3.162/6586 [ 171.321056][ T6586] Modules linked in: [ 171.324950][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.3.162 Not tainted syzkaller #0 PREEMPT(full) [ 171.334164][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.345073][ T6586] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 171.351167][ T6586] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 171.370869][ T6586] RSP: 0018:ffffc90003d67a20 EFLAGS: 00010246 [ 171.377419][ T6586] RAX: 0000000000000000 RBX: 1ffff920007acf5c RCX: 0000000000080000 [ 171.385470][ T6586] RDX: ffffc9000e4e2000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10 [ 171.393451][ T6586] RBP: ffffc90003d67bd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8 [ 171.401448][ T6586] R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff88807e7deb60 [ 171.409521][ T6586] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.417512][ T6586] FS: 00007f41289a16c0(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 171.426607][ T6586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.433274][ T6586] CR2: 0000001b3091eff8 CR3: 000000007dd0a000 CR4: 0000000000350ef0 [ 171.441325][ T6586] Call Trace: [ 171.445460][ T6586] [ 171.448380][ T6586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.454001][ T6586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.460174][ T6586] ? __mutex_lock+0x319/0x1300 [ 171.464949][ T6586] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 171.470626][ T6586] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 171.477065][ T6586] ? __pfx___mutex_lock+0x10/0x10 [ 171.482078][ T6586] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 171.487731][ T6586] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.493698][ T6586] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.498735][ T6586] as102_dvb_dmx_start_feed+0x70/0x290 [ 171.504196][ T6586] dmx_section_feed_start_filtering+0x518/0x6c0 [ 171.510451][ T6586] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 171.516039][ T6586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.521694][ T6586] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 171.527263][ T6586] dvb_demux_do_ioctl+0x470/0x540 [ 171.532294][ T6586] dvb_usercopy+0x199/0x2e0 [ 171.536832][ T6586] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 171.542377][ T6586] ? __pfx_dvb_usercopy+0x10/0x10 [ 171.548213][ T6586] ? __fget_files+0x3a0/0x420 [ 171.552901][ T6586] ? __fget_files+0x2a/0x420 [ 171.558054][ T6586] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 171.563337][ T6586] dvb_demux_ioctl+0x29/0x40 [ 171.567962][ T6586] __se_sys_ioctl+0xfc/0x170 [ 171.572545][ T6586] do_syscall_64+0x14d/0xf80 [ 171.577146][ T6586] ? trace_irq_disable+0x3b/0x150 [ 171.582199][ T6586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.588295][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.594181][ T6586] RIP: 0033:0x7f4127b9c799 [ 171.598602][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.618339][ T6586] RSP: 002b:00007f41289a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.626771][ T6586] RAX: ffffffffffffffda RBX: 00007f4127e15fa0 RCX: 00007f4127b9c799 [ 171.634729][ T6586] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 171.642710][ T6586] RBP: 00007f4127c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 171.651476][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.659990][ T6586] R13: 00007f4127e16038 R14: 00007f4127e15fa0 R15: 00007fff1983e3b8 [ 171.667991][ T6586] [ 171.670995][ T6586] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.678254][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.3.162 Not tainted syzkaller #0 PREEMPT(full) [ 171.687431][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.697468][ T6586] Call Trace: [ 171.700731][ T6586] [ 171.703643][ T6586] vpanic+0x56c/0xa60 [ 171.707662][ T6586] ? __pfx__printk+0x10/0x10 [ 171.712326][ T6586] ? __pfx_vpanic+0x10/0x10 [ 171.716819][ T6586] ? is_bpf_text_address+0x292/0x2b0 [ 171.722097][ T6586] ? is_bpf_text_address+0x26/0x2b0 [ 171.727299][ T6586] panic+0xc5/0xd0 [ 171.731023][ T6586] ? __pfx_panic+0x10/0x10 [ 171.735443][ T6586] __warn+0x315/0x4f0 [ 171.739528][ T6586] ? __mutex_lock+0x10a4/0x1300 [ 171.744379][ T6586] ? __mutex_lock+0x10a4/0x1300 [ 171.749225][ T6586] __report_bug+0x29a/0x540 [ 171.753717][ T6586] ? dvb_demux_do_ioctl+0x470/0x540 [ 171.758916][ T6586] ? __mutex_lock+0x10a4/0x1300 [ 171.763754][ T6586] ? __pfx___report_bug+0x10/0x10 [ 171.768769][ T6586] ? pfn_valid+0x125/0x4c0 [ 171.773186][ T6586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.778809][ T6586] ? __lock_acquire+0x6b5/0x2cf0 [ 171.783753][ T6586] report_bug_entry+0x19a/0x290 [ 171.788616][ T6586] ? __mutex_lock+0x10ab/0x1300 [ 171.793457][ T6586] ? __mutex_lock+0x10b0/0x1300 [ 171.798320][ T6586] handle_bug+0xce/0x200 [ 171.802554][ T6586] exc_invalid_op+0x1a/0x50 [ 171.807047][ T6586] asm_exc_invalid_op+0x1a/0x20 [ 171.811880][ T6586] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 171.817353][ T6586] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 171.836942][ T6586] RSP: 0018:ffffc90003d67a20 EFLAGS: 00010246 [ 171.843017][ T6586] RAX: 0000000000000000 RBX: 1ffff920007acf5c RCX: 0000000000080000 [ 171.850969][ T6586] RDX: ffffc9000e4e2000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10 [ 171.858925][ T6586] RBP: ffffc90003d67bd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8 [ 171.866880][ T6586] R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff88807e7deb60 [ 171.874840][ T6586] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.882814][ T6586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.888439][ T6586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.894092][ T6586] ? __mutex_lock+0x319/0x1300 [ 171.898848][ T6586] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 171.904468][ T6586] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 171.910870][ T6586] ? __pfx___mutex_lock+0x10/0x10 [ 171.915883][ T6586] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 171.921505][ T6586] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.927473][ T6586] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.932487][ T6586] as102_dvb_dmx_start_feed+0x70/0x290 [ 171.937937][ T6586] dmx_section_feed_start_filtering+0x518/0x6c0 [ 171.944166][ T6586] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 171.949709][ T6586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.955332][ T6586] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 171.960804][ T6586] dvb_demux_do_ioctl+0x470/0x540 [ 171.965827][ T6586] dvb_usercopy+0x199/0x2e0 [ 171.970329][ T6586] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 171.975866][ T6586] ? __pfx_dvb_usercopy+0x10/0x10 [ 171.980886][ T6586] ? __fget_files+0x3a0/0x420 [ 171.985555][ T6586] ? __fget_files+0x2a/0x420 [ 171.990142][ T6586] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 171.995422][ T6586] dvb_demux_ioctl+0x29/0x40 [ 172.000005][ T6586] __se_sys_ioctl+0xfc/0x170 [ 172.004584][ T6586] do_syscall_64+0x14d/0xf80 [ 172.009164][ T6586] ? trace_irq_disable+0x3b/0x150 [ 172.014188][ T6586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.020240][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.026116][ T6586] RIP: 0033:0x7f4127b9c799 [ 172.030516][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.050109][ T6586] RSP: 002b:00007f41289a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.058516][ T6586] RAX: ffffffffffffffda RBX: 00007f4127e15fa0 RCX: 00007f4127b9c799 [ 172.066475][ T6586] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 172.074429][ T6586] RBP: 00007f4127c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 172.082382][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.090335][ T6586] R13: 00007f4127e16038 R14: 00007f4127e15fa0 R15: 00007fff1983e3b8 [ 172.098299][ T6586] [ 172.101588][ T6586] Kernel Offset: disabled [ 172.105905][ T6586] Rebooting in 86400 seconds..