last executing test programs: 4m52.820350144s ago: executing program 2 (id=1248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$getregs(0xc, r1, 0x1, &(0x7f00000000c0)=""/13) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000080)={0xc4, 0x0, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) ptrace$getregs(0xc, r1, 0x1, &(0x7f00000000c0)=""/13) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000080)={0xc4, 0x0, 0x8}) (async) 4m52.651423223s ago: executing program 2 (id=1251): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x4c, 0x7ff, 0xfffffff9, 0x3, 0x10004, 0xcca, 0x8, 0xb, 0xa, 0xe3, 0x4, 0xb, 0x684b, 0x3e, 0x6, 0xffffffff, 0x1, 0x1a447, 0x3, 0x40000003, 0x100, 0x2, 0xf27, 0x6, 0xb, 0xa, 0x5, 0x8, 0x2, 0x10000, 0x4]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000040)={0x3, 0x180, 0x200, &(0x7f0000000500)=[0x0, 0x10, 0x4, 0x2, 0x8000, 0x100, 0xdef, 0xfffffffffffffffc, 0x5, 0x8, 0xf, 0xfffffffffffff8bd, 0x0, 0x1, 0x2, 0x2, 0xee, 0xfffffffffffffffa, 0xfffffffffffffff7, 0x9e, 0x5, 0x7fffffff, 0x0, 0x6, 0x28, 0x365f9f64, 0x7, 0x400, 0x10, 0x4, 0xfffffffffffff000, 0x684d, 0x1, 0x1, 0x7fffffffffffffff, 0xffffffffffff8001, 0x7fff, 0x8, 0xffffffffffffff51, 0x8, 0x9, 0x101, 0x1, 0x3, 0x5, 0x1, 0x1, 0x100000000, 0x5, 0x0, 0xfffffffffffff800, 0x8, 0x9, 0x9, 0x1ae5, 0x200, 0x7, 0x9, 0x7, 0x9, 0xd, 0x0, 0xc, 0x8000000000000001, 0x0, 0x2b, 0x6, 0x9, 0x3ff, 0x75, 0x81, 0x9a7, 0x9, 0x80, 0xb, 0xc11, 0xffffffffffffff11, 0x1836c0000000, 0x10000, 0x4, 0x80000001, 0x9, 0xffffffffffffff01, 0x5, 0x9, 0x4, 0x4, 0x0, 0x7, 0x8, 0x7, 0x0, 0x1, 0x47e, 0x101, 0x700000000000000, 0x1, 0x6, 0x2, 0xb9d, 0x100000000, 0x6, 0x8, 0x0, 0x3, 0x7, 0x0, 0x9, 0x3fb, 0x3, 0x1, 0x3, 0x3, 0x73, 0x80000001, 0x4, 0x401, 0x5, 0x70, 0x8, 0x7, 0x2, 0x80000001, 0x8, 0x60c9, 0xfffffffffffffe00, 0x3, 0x81]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x1) 4m51.661986674s ago: executing program 2 (id=1258): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) (async, rerun: 64) r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) (rerun: 64) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 4m50.260866272s ago: executing program 2 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6d5, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0xffffffffffffffe0, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x2, 0x5, 0x4, 0xfffffffffffffffc, 0xfffffffffffffff0}, @exit, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x101, 0x1a, &(0x7f0000000380)=""/26, 0x41100, 0x2, '\x00', r3, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x9, 0x7, 0xc}, 0x10, r4, r0, 0xa, 0x0, &(0x7f00000007c0)=[{0x4, 0x3, 0x3, 0xc}, {0x3, 0x2, 0x7, 0x7}, {0x3, 0x4, 0xa, 0x8}, {0x4, 0x4, 0x6, 0x9}, {0x0, 0x1, 0xe, 0x7}, {0x5, 0x2, 0x6, 0x3}, {0x0, 0x2, 0x7, 0xb}, {0x4, 0x4, 0xa, 0x1}, {0x0, 0x4, 0xb, 0x7}, {0x4, 0x2, 0x5, 0xc}], 0x10, 0x80}, 0x94) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x8000000, 0x0, 0x30, 0x0, @in6={0x1b, 0xfffc, 0x48, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x4, {"fe8000"}, 0x0, 0xfffffffffffffffc, 0x4000040a}}}, 0x118) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x4, 0x0, 0xfd, 0x1, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4m50.259863974s ago: executing program 2 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f00004a3000/0x4000)=nil, r0, 0xb, 0x2810, 0xffffffffffffffff, 0x0) 4m49.921112457s ago: executing program 2 (id=1308): r0 = socket$netlink(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000580)=""/156, 0x9c) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x20000001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000e1a000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000aab000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f2d000/0x1000)=nil, &(0x7f0000927000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) io_uring_setup(0x6c7e, &(0x7f00000003c0)={0x0, 0x0, 0x3000}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/177, 0xb1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sched_setattr(0x0, &(0x7f0000000000)={0x63}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000059078ac1e0001ac1414378907ceffffffff830200000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000001907800003d0b25c3896b7aeacec0711fe06501e246b1302ac472fb904491ca1dd91a1b2af4afbcde8da62d4f470b8797d10b39db2e0cc7408ad1255fcc5649a9a3649c3dc780f7c0bb4b17a852daf88c8783157d57b50a5fe065c91abdfc2ae9fe3fcf518eac3176f2e5f678e34c4371982d"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000340)="0fc77100d9f9640f16df640f1b6495baf80c66b820abe28766efbafc0c66b86800000066efb897000f00d0660ff7d265d109f30f005c01d847f6", 0x3a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) 4m49.828327322s ago: executing program 32 (id=1308): r0 = socket$netlink(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000580)=""/156, 0x9c) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x20000001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000e1a000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000aab000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f2d000/0x1000)=nil, &(0x7f0000927000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) io_uring_setup(0x6c7e, &(0x7f00000003c0)={0x0, 0x0, 0x3000}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/177, 0xb1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sched_setattr(0x0, &(0x7f0000000000)={0x63}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800480000340000000000059078ac1e0001ac1414378907ceffffffff830200000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000001907800003d0b25c3896b7aeacec0711fe06501e246b1302ac472fb904491ca1dd91a1b2af4afbcde8da62d4f470b8797d10b39db2e0cc7408ad1255fcc5649a9a3649c3dc780f7c0bb4b17a852daf88c8783157d57b50a5fe065c91abdfc2ae9fe3fcf518eac3176f2e5f678e34c4371982d"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000340)="0fc77100d9f9640f16df640f1b6495baf80c66b820abe28766efbafc0c66b86800000066efb897000f00d0660ff7d265d109f30f005c01d847f6", 0x3a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) 4m16.431408112s ago: executing program 0 (id=1966): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', r1, r2) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 4m16.428764467s ago: executing program 0 (id=1967): madvise(&(0x7f000013f000/0x2000)=nil, 0x2000, 0xe) arch_prctl$ARCH_SET_GS(0x1001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x3, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000440)={0x1, 0xfffffffd, 0x1, 0xfffffffffffffff9, 0x400000002, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffa, 0x2}) write$P9_RVERSION(r5, 0x0, 0xfffffeb5) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000240)=0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x52080}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x20004842) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x52080}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x20004842) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r8, 0x8008976) ioctl$FIDEDUPERANGE(r8, 0xc0189436, 0x0) (async) ioctl$FIDEDUPERANGE(r8, 0xc0189436, 0x0) 4m16.311678267s ago: executing program 0 (id=1968): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r4, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4000801) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x7000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc44, 0x1000000009, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x2, 0x400, 0x80, 0x7, 0x0, 0x7, 0x8d], 0x2000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f00000001c0)={'wlan0\x00', @ifru_hwaddr=@remote}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0xf0, 0x17, &(0x7f00000002c0)="e77616f537ee7ac134130e37b676235c82407d794fe67de3b043c5ce5b361503fd220bccd6600cd2969dd908b7df71c1cbbbf66f81fc61605a127424ac15af7d8dc359be3c78195e89fd09da8fe4ffc18efb71d46dcd5807fcce716fc9df7e3586ffab9c236d2307ecfdf7fa892452972c971d05bc14bfdfe23c0d64c7f8b91ba587753d4a0720f24853d28ffd59ee97e9d8e40b6a953140f10b787a572213cd4ad7680f3b8cfc1a821cf6b487c1aac6909e4b734e6d0739daa94d197d706d50b5896813c60c57bdf313f91b94338e5e0beee79c9e70e22b994f663cbda52f3efb6a3ddc67c97b116222495945eb9da6", &(0x7f0000000180)=""/23, 0xe, 0x0, 0x0, 0xa, &(0x7f00000001c0), &(0x7f00000003c0)="764f1a4cea77e0de1047", 0x1, 0x0, 0x4}, 0x50) 4m16.240978814s ago: executing program 0 (id=1971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c20000000100"}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x4, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x2) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x1, 0x39d}, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) umount2(&(0x7f0000000080)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m16.043371621s ago: executing program 0 (id=1974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x10}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x240040c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0xd0b, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x94}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd1afe4b1b95ee65d}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x66}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4088}, 0x40080) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0xd0, &(0x7f0000000400), &(0x7f0000000440)=0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x410000) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x410000) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x1000, 0xa8, 0x7, 0x0, 0xfff0, 0xfec00000, 0x4000, '\x00', 0x740}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x80, 0x20, 0x4, 0x4, {{0x2c, 0x4, 0x3, 0x12, 0xb0, 0x66, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0x1b, 0x2a, [@private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @remote]}, @cipso={0x86, 0x2b, 0x3, [{0x7, 0x11, "1c3690cc079b28b71e90d78245ea06"}, {0x0, 0x5, "bf70e2"}, {0x1, 0xf, "476c6401ba0bac26e629d41d09"}]}, @rr={0x7, 0x1b, 0x21, [@loopback, @empty, @multicast2, @multicast2, @multicast2, @rand_addr=0x64010102]}, @end, @timestamp={0x44, 0x8, 0x28, 0x0, 0x5, [0x8]}, @cipso={0x86, 0x18, 0x3, [{0x1, 0xa, "623247710e68d9cb"}, {0x1, 0x8, "f4eeb3660d94"}]}, @rr={0x7, 0x17, 0x6e, [@broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x8, 0x93f, 0x50, @private0, @mcast1, 0x8000, 0x7800, 0x5, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x8, 0x93f, 0x50, @private0, @mcast1, 0x8000, 0x7800, 0x5, 0x2}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000900)={0x0, @initdev, @remote}, &(0x7f0000000940)=0xc) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000980)={0x0, @multicast2, @dev}, &(0x7f00000009c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000a40)={0x0, @broadcast, @multicast1}, &(0x7f0000000a80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0xfffffe00, 0x45d, {{0x18, 0x4, 0x3, 0x31, 0x60, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x86, 0x3, 0x7, [{@local, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}]}, @lsrr={0x83, 0x1f, 0xfa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x7, 0x7, "2c03da4e2c"}]}}}}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @local, @remote}, &(0x7f0000000c00)=0xc) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @local, @remote}, &(0x7f0000000c00)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000d40)={'ip_vti0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x9, 0x8001, {{0x34, 0x4, 0x1, 0x4, 0xd0, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, {[@noop, @generic={0x44, 0x5, "2cfd20"}, @rr={0x7, 0x7, 0x38, [@loopback]}, @timestamp_prespec={0x44, 0x54, 0xe7, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xfff}, {@loopback, 0x1d8}, {@multicast1, 0x9}, {@local, 0x723}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010101, 0xff0}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7ff}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffff9ab}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x96, 0x1, 0x8, [{@multicast1, 0x5}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x401ca3ea}, {@rand_addr=0x8, 0x4}]}, @timestamp={0x44, 0x8, 0xf2, 0x0, 0x4, [0x2]}, @generic={0x94, 0x2}, @ssrr={0x89, 0x27, 0x10, [@empty, @broadcast, @multicast1, @loopback, @broadcast, @broadcast, @multicast2, @rand_addr=0x64010100, @multicast1]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d80)={0x44c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1c0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d80)={0x44c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1c0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r5, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2002a004}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@delnexthop={0x28, 0x69, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x440}, 0x1) read$nci(r5, &(0x7f0000001380)=""/133, 0x85) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001440)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001440)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r5) (async) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r5) sendmsg$NL80211_CMD_GET_STATION(r17, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r18, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x598}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xae}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) fchdir(r5) (async) fchdir(r5) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x98, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x59}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb3}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x400, 0x7ff, 0x8, 0x7]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6a}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8, 0x70, 0xfffa]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6f}]}, 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 4m15.930402569s ago: executing program 0 (id=1977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a73797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001c7fe0cead1c8949ea3bb55da56dad958c047bd2ad2ab32837afc19d34c1f0e5bd363b16cb6552022f9736b92eeaafdeae5d8f750e24972457d340c0227948903a94f88d7d49f0d4a4c89e83855699612c3150fceda824c998b8e3eedc33ece04c05985bd73427e748df99f23fe0f1c7bce225cf9574ea2cd921e2e5b26f0119b120d95cd849af6b9c33ea5f9b9ff3cac4868f429cf130f5d1c96c70660eaf0800c68ad3a1511497e7b9d301af1ad3ba5f4284699b5cb42"], 0xa4}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) (async) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x40) (async) 4m15.872400118s ago: executing program 33 (id=1977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) (async) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a73797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001c7fe0cead1c8949ea3bb55da56dad958c047bd2ad2ab32837afc19d34c1f0e5bd363b16cb6552022f9736b92eeaafdeae5d8f750e24972457d340c0227948903a94f88d7d49f0d4a4c89e83855699612c3150fceda824c998b8e3eedc33ece04c05985bd73427e748df99f23fe0f1c7bce225cf9574ea2cd921e2e5b26f0119b120d95cd849af6b9c33ea5f9b9ff3cac4868f429cf130f5d1c96c70660eaf0800c68ad3a1511497e7b9d301af1ad3ba5f4284699b5cb42"], 0xa4}}, 0x40) (async) 2m33.934742913s ago: executing program 4 (id=3677): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x9}}) syz_clone(0x4d000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 2m32.004389161s ago: executing program 4 (id=3684): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1c4, 0x8, 0x2, 0x80, 0xfffffffd, 0x7818, 0x0, 0x400, 0x8, 0x800, 0x2, 0x10, 0x1, 0x400, 0x66, 0x7, 0x5, 0x1ff, 0x7, 0x6, 0x6, 0x4, 0x7, 0x1, 0x46, 0x401, 0x9, 0xfffffffe, 0x4, 0x9, 0x7, 0x5, 0x8, 0x0, 0x2, 0x5, 0x2, 0x80000000, 0x7, 0x2, 0x2, 0x7fff, 0x200, 0x7fff, 0xf, 0xfa, 0x3, 0x1, 0x4, 0x61, 0x10001, 0x2, 0x8, 0x1, 0x8, 0x3e1, 0x3, 0x3, 0x9, 0x0, 0x9, 0x9a50, 0x9, 0xbac, 0x3ff, 0x1, 0x7, 0x7ff, 0x4616, 0x9638, 0x8, 0xeaba, 0x5, 0x6, 0x3, 0x400, 0xd9d, 0x80000001, 0x3, 0x100, 0x1, 0x9, 0x7a, 0x5, 0x3, 0x7, 0x3, 0x20000000, 0x800, 0xe9f, 0xa7, 0x5, 0xffff8001, 0x9, 0x1, 0xd5a, 0x4f19, 0x80, 0x9, 0x8, 0x5bc3, 0x8, 0xb3a, 0x800, 0xe0e0, 0x17b7bf03, 0x8000, 0x5, 0xff, 0x401, 0x1, 0x5, 0xd5a, 0x8, 0xe0b, 0x10000, 0xdb8, 0x1, 0x5, 0x18f817df, 0x6, 0x3ff, 0xe4, 0x5, 0x7, 0x9620, 0x3e, 0x81, 0x2, 0x9, 0x6, 0x6, 0x8, 0x2, 0x7, 0x4, 0x8, 0x400, 0x2, 0xff, 0x50d, 0x190, 0x3000000, 0x8001, 0x8, 0x4a79babd, 0xa, 0x0, 0x9, 0xfffffffa, 0x6bef, 0x8, 0x4, 0x7, 0x9, 0x8, 0x240000, 0x7, 0x800, 0x2, 0x6, 0x1, 0x0, 0x3, 0x5, 0x7, 0x8000, 0x8, 0x2, 0xffff, 0xffff, 0x0, 0x6, 0x6, 0x51, 0x2, 0x124, 0x8, 0x1, 0xd70a, 0x5, 0xf, 0x8, 0x8, 0xffff, 0x897, 0xffff73e8, 0xbd55, 0x800, 0x4, 0x9, 0x9, 0x726f, 0x6, 0x7fffffff, 0x80000001, 0xc, 0x1, 0x1000, 0x401, 0x6, 0x60000, 0x3, 0x7, 0x1000, 0x2, 0xff, 0xfffffffb, 0x40, 0xff, 0x7ff, 0x2, 0x5, 0x40, 0x8, 0x50, 0xe, 0x1, 0x9, 0x1c9, 0xc, 0x4, 0x1083, 0xd3, 0x5dfd, 0x7, 0x0, 0x7fff, 0x9, 0x136f, 0x6, 0x2, 0x4, 0xdf6c675, 0x101, 0x3, 0x101, 0x9, 0x1f02, 0x7193, 0x7fffffff, 0x9, 0x8001, 0x9, 0x5, 0x630, 0x7fffffff, 0xc930, 0x2, 0x200, 0x18b, 0x8, 0x7, 0x7fffffff, 0x5, 0x7ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8000, 0x6, 0x3e9, {0x4, 0x2, 0x200, 0x0, 0xfc01, 0x8001}, {0x7, 0x0, 0x5, 0x5, 0xfffc, 0x4}, 0x3235c424, 0x9, 0xffffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000, 0x9, 0x7, 0x200, 0x1, 0x1b5, 0x7, 0x2a, 0x8, 0x5, 0x4, 0x28, 0x0, 0x6, 0x400, 0x3, 0x7, 0x1, 0x9, 0x8, 0x2, 0x7a49, 0x5, 0x9, 0xfff, 0xb, 0xfffffff8, 0x8ee, 0x7, 0x4, 0x8, 0x615, 0x5, 0x6, 0x6, 0x5, 0x3, 0x8, 0x8, 0x6, 0x800, 0x5, 0x5, 0xffff, 0x3, 0x6, 0x0, 0x80000000, 0xecc7, 0x8, 0x214, 0x3, 0x40, 0xffff, 0x5, 0x4, 0x7, 0x8, 0x400, 0x80, 0x4, 0x7fff, 0x3, 0x9, 0xd3a, 0x8, 0x9b91, 0x3d, 0xffff, 0x3, 0x8, 0x1, 0x7fff, 0x5, 0x7, 0x4, 0x2, 0xfffffffd, 0x1, 0x4, 0x1, 0x3, 0x9, 0x4, 0x0, 0x5, 0x97, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x6, 0xd, 0x7ff, 0x8e1, 0x1, 0x6, 0x101, 0x5ed, 0x7ff, 0x0, 0x1, 0xffffffff, 0x3, 0xfff, 0x2c, 0x7, 0xbf, 0x7, 0x7, 0x6, 0xfff, 0x80000001, 0x9, 0x6, 0x3, 0x2, 0x5, 0x0, 0x3000000, 0xfd4, 0x5, 0x2, 0x3a7, 0xcafa, 0x7, 0x7f, 0x7, 0x8000, 0xf, 0x8000, 0x6, 0xa, 0x6, 0x3a2, 0x2, 0x2, 0x401, 0xed8f, 0x800, 0x4, 0x80000001, 0x5, 0x8, 0x0, 0xffff, 0xff, 0x3ff, 0x0, 0xdd48, 0xb085, 0x0, 0x4, 0xfffffffd, 0xffff, 0x0, 0x3, 0x6, 0x8, 0x7, 0x4c482fc5, 0x10, 0x0, 0x422, 0xffffffff, 0x1, 0x4, 0x8, 0xf9, 0x1, 0xe, 0x7, 0x8, 0x9, 0xab50, 0x8, 0x3, 0x4, 0x3, 0x200, 0x3, 0xffffa0be, 0x5, 0x23, 0x5, 0x2, 0x6, 0x1, 0x800, 0x10, 0x4, 0x10000, 0x1, 0x4, 0x759, 0x2, 0x1000, 0x0, 0x3, 0xfffffffd, 0x401, 0x7, 0x8, 0x3, 0x6, 0x400, 0x60, 0x1, 0x400, 0x6, 0x3, 0x0, 0x2, 0x6, 0x8, 0x9887, 0x9, 0x6, 0x5, 0x20ceef0a, 0x81, 0x3, 0xf, 0x7fffffff, 0x5, 0x2, 0x3, 0x3, 0x4d0, 0x3642, 0xc, 0xd, 0x8, 0x8, 0x2, 0x0, 0x8, 0x1, 0x8001, 0x8, 0x4, 0x400, 0x6, 0x5, 0x10001, 0x8, 0xe7, 0x6, 0x53, 0x5, 0x5, 0x7, 0x4]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r5, 0xfff9, 0x2, 0x0, 0xe, 0x2}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r5, 0x4}, 0x8) 2m31.852871141s ago: executing program 4 (id=3691): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 2m31.845469282s ago: executing program 4 (id=3693): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000200)=',-\\\x00', &(0x7f0000000240)='^(!}\x00']}) 2m31.794760185s ago: executing program 4 (id=3695): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2002000, 0x0) 2m31.721242622s ago: executing program 4 (id=3696): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0xba5, 0x6, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0x8, "2e6dc4becc31"}, {0x5, 0x2}, {0x1, 0x7, "79dac3304e"}, {0x6, 0xb, "4724ccccabc95bd7dd"}]}, @timestamp={0x44, 0x8, 0xb, 0x0, 0x1, [0xb]}, @rr={0x7, 0x27, 0x17, [@private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0xa}, @local, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @broadcast, @remote, @rand_addr=0x64010102]}, @end, @ssrr={0x89, 0x1b, 0xb8, [@private=0xa010102, @multicast2, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x3, 0x3, 0x0, 0x0, 0x8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x92, &(0x7f0000000380)=""/146, 0x40f00, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x3, 0x2, 0xb, 0x5}, {0x4, 0x5, 0x10, 0x8abe156b080decd3}, {0x3, 0x5, 0x2, 0x6}, {0x1, 0x4, 0xb}, {0x2, 0x4, 0x3, 0x77cc6a4f3c5c7078}], 0x10, 0x4}, 0x94) r4 = signalfd4(r1, &(0x7f00000002c0)={[0x5]}, 0x8, 0x80000) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0xf6, r6, 0x1, 0xb5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffe7b) (async) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r6}, 0x14) r7 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000980)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x93a, 0x8001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x44a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x2, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xfb, 0x8, 0x7f}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x110, 0x0, 0xa, 0x0, 0x8, 0x2}, 0x21, &(0x7f0000000a00)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x4, 0xf00, 0x588, [0xff0000, 0x6d5c08112171fcbd, 0xc000, 0xf]}]}, 0x7, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x81a}}, {0x38, &(0x7f0000000a80)=@string={0x38, 0x3, "e843962aff5381cc15a0f7db23d67f630cd1318da420d4ebb71943f230b7cdf918d1298f4d68afdce4d2aadae7a15363f894765896d2"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xc1a}}, {0x23, &(0x7f0000000b40)=@string={0x23, 0x3, "4c34aecc32b15032cd3c71bfa255590b5ad2cc409f156cbd4a50567974741c0882"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x61}}, {0xf7, &(0x7f0000000bc0)=@string={0xf7, 0x3, "fcdf7d6f3ce72945441662bd0cd18dfd919743ba8207f7087b7a80fbb654b49c252a4387366a29ea10c849da14452f8cbd636e11a5b5fbdaca937a2cedd8d31ddb5ae66f10d5b7493f7c360b381735809b062a772e4d246fc564a7e9b4f02ecb5c7d216f56694abf6a0304b05221fc04aff579e47782d4e1f264cc7b6c826db65a162ac3e8136cd9fe9cc4f5115d74cd84e5f8cf298f9c84b042c1fdeed08fcb2c6854be077016c7adcb33f292619d667c416eb767fcfad711121322b56a4355c451cb841d5ec27746958890100ce35bb20634de5356d447c84e233935f8727cc892054749b65444b6619efc519a9d5a13a2eed451"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000f00)={0x24, &(0x7f0000000d40)={0x60, 0xf, 0x7b, {0x7b, 0xb, "a4a43609b4d905348a7033de8df46431c4c5c1d330b7a51709b5000c8582cc34dad6a3369ae410050652eeb2839978b57c11996816abec2d89933bfcf68a15dccc5ae1776156e057b8301c78162673ceaacdd1deee17d97fec1e3a0ee0d089d540df6b4e99c4e89dc056305771e5a21194251515c22f5758e7"}}, &(0x7f0000000e00)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "b31e096773aa92055ce8a6aa027c3a36d6e1310b337ea569165505ef5ec4950e1e40d86b3b43f338ea6a79db3538a4b61d2a8de717c6ee20e7065c12e4"}}, &(0x7f0000000e80)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "06334ac2"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x7, 0x1, {0x22, 0xee}}}}, &(0x7f0000001100)={0x2c, &(0x7f0000000f40)={0x40, 0x16, 0x9c, "a0726e89112ce6e104086b42d39f1539aaa78ad212b332153a6befbf900cf40721ac42b27146483efc704eea49049a8f80be1fff113e4597ff003680758611b071db8140ac9bef8a7e2a2c1caa0f00198735d4d3125aad5b51f2d352b6fee4a5418bff37db74fa51c4f69f258dc414ec28462ead0f5ae1f6d5a2d54d586e1290d3a0bb60392457bf3f69c97b16e39efce3efe3edbae0f747c790ffdf"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0xb6}, &(0x7f0000001080)={0x20, 0x1, 0x2a, "9400db2a9e8365ad052e567bf8e24d53cb4634bbba41b77d75aa222ba646f8e93d8c75e0e42e1d9a95ac"}, &(0x7f00000010c0)={0x20, 0x3, 0x1, 0x6}}) (async) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$P9_RWALK(r8, &(0x7f0000000300)={0x3c, 0x6f, 0x1}, 0x9) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x1, &(0x7f0000000580)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x87, &(0x7f0000000600)=""/135, 0x41000, 0x58, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000700)=[0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0x10, 0x7}, {0x4, 0x1, 0xb, 0xa}, {0x5, 0x4, 0x4, 0x4}, {0x1, 0x5, 0x2, 0x3}, {0x3, 0x5, 0xd}, {0x3, 0x2, 0x5, 0x1}, {0x3, 0x5, 0x4, 0x7}, {0x0, 0x5, 0x6}, {0x5, 0x5, 0x5, 0x6}], 0x10, 0x6}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@dellinkprop={0xbc, 0x6d, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x29004, 0x8000}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'batadv0\x00'}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_MAP={0x24, 0xe, {0x4f, 0x4, 0x800, 0x4, 0x9, 0xf3}}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r10, 0x0, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m17.655170344s ago: executing program 5 (id=3817): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012006f6e64000000000c00020008000100060000000000"], 0x3c}}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x3, 0x80, 0x0, 0x0, 0x2000}}) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2m16.620002353s ago: executing program 5 (id=3834): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8003, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m16.555958474s ago: executing program 5 (id=3836): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r0, 0x80796c) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000020005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (async) socketpair(0x18, 0xa, 0x7, &(0x7f0000000140)={0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x7, 0x2, 0x40, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x9, 0x4}}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x64}}, 0x20000010) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 2m16.470749529s ago: executing program 5 (id=3837): syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x8) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2m16.416877397s ago: executing program 5 (id=3838): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x400}], &(0x7f0000000000)='GPL\x00', 0x81, 0x2d, &(0x7f0000000200)=""/45, 0x41000, 0x22, '\x00', 0x0, @fallback=0x17, r0, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x5, 0xeb}, 0x10, 0x0, r0, 0x2, &(0x7f00000002c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000340)=[{0x2, 0x1, 0xa, 0x6}, {0x5, 0x5, 0x9, 0x6}], 0x10, 0x101}, 0x94) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r7, r0, 0x0, 0x1, 0x2}, 0x50) (async) ftruncate(r0, 0x8008976) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000f00)="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", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f0000002300)="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", 0x2af}], 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x4000) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) (async, rerun: 64) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x58000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 2m16.053552369s ago: executing program 5 (id=3843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000400003c0001802c00018014000300ff0100000000000000000000000000010d0004"], 0x58}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000300120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x100, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ipvlan1\x00', 0x1}, 0x18) 2m15.977781395s ago: executing program 34 (id=3843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000400003c0001802c00018014000300ff0100000000000000000000000000010d0004"], 0x58}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000300120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x100, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ipvlan1\x00', 0x1}, 0x18) 2m15.690159706s ago: executing program 35 (id=3696): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0xba5, 0x6, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0x8, "2e6dc4becc31"}, {0x5, 0x2}, {0x1, 0x7, "79dac3304e"}, {0x6, 0xb, "4724ccccabc95bd7dd"}]}, @timestamp={0x44, 0x8, 0xb, 0x0, 0x1, [0xb]}, @rr={0x7, 0x27, 0x17, [@private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0xa}, @local, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @broadcast, @remote, @rand_addr=0x64010102]}, @end, @ssrr={0x89, 0x1b, 0xb8, [@private=0xa010102, @multicast2, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x3, 0x3, 0x0, 0x0, 0x8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x92, &(0x7f0000000380)=""/146, 0x40f00, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x3, 0x2, 0xb, 0x5}, {0x4, 0x5, 0x10, 0x8abe156b080decd3}, {0x3, 0x5, 0x2, 0x6}, {0x1, 0x4, 0xb}, {0x2, 0x4, 0x3, 0x77cc6a4f3c5c7078}], 0x10, 0x4}, 0x94) r4 = signalfd4(r1, &(0x7f00000002c0)={[0x5]}, 0x8, 0x80000) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0xf6, r6, 0x1, 0xb5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffe7b) (async) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r6}, 0x14) r7 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000980)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x93a, 0x8001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x44a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x2, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xfb, 0x8, 0x7f}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x110, 0x0, 0xa, 0x0, 0x8, 0x2}, 0x21, &(0x7f0000000a00)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x4, 0xf00, 0x588, [0xff0000, 0x6d5c08112171fcbd, 0xc000, 0xf]}]}, 0x7, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x81a}}, {0x38, &(0x7f0000000a80)=@string={0x38, 0x3, "e843962aff5381cc15a0f7db23d67f630cd1318da420d4ebb71943f230b7cdf918d1298f4d68afdce4d2aadae7a15363f894765896d2"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xc1a}}, {0x23, &(0x7f0000000b40)=@string={0x23, 0x3, "4c34aecc32b15032cd3c71bfa255590b5ad2cc409f156cbd4a50567974741c0882"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x61}}, {0xf7, &(0x7f0000000bc0)=@string={0xf7, 0x3, "fcdf7d6f3ce72945441662bd0cd18dfd919743ba8207f7087b7a80fbb654b49c252a4387366a29ea10c849da14452f8cbd636e11a5b5fbdaca937a2cedd8d31ddb5ae66f10d5b7493f7c360b381735809b062a772e4d246fc564a7e9b4f02ecb5c7d216f56694abf6a0304b05221fc04aff579e47782d4e1f264cc7b6c826db65a162ac3e8136cd9fe9cc4f5115d74cd84e5f8cf298f9c84b042c1fdeed08fcb2c6854be077016c7adcb33f292619d667c416eb767fcfad711121322b56a4355c451cb841d5ec27746958890100ce35bb20634de5356d447c84e233935f8727cc892054749b65444b6619efc519a9d5a13a2eed451"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000f00)={0x24, &(0x7f0000000d40)={0x60, 0xf, 0x7b, {0x7b, 0xb, "a4a43609b4d905348a7033de8df46431c4c5c1d330b7a51709b5000c8582cc34dad6a3369ae410050652eeb2839978b57c11996816abec2d89933bfcf68a15dccc5ae1776156e057b8301c78162673ceaacdd1deee17d97fec1e3a0ee0d089d540df6b4e99c4e89dc056305771e5a21194251515c22f5758e7"}}, &(0x7f0000000e00)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "b31e096773aa92055ce8a6aa027c3a36d6e1310b337ea569165505ef5ec4950e1e40d86b3b43f338ea6a79db3538a4b61d2a8de717c6ee20e7065c12e4"}}, &(0x7f0000000e80)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "06334ac2"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x7, 0x1, {0x22, 0xee}}}}, &(0x7f0000001100)={0x2c, &(0x7f0000000f40)={0x40, 0x16, 0x9c, "a0726e89112ce6e104086b42d39f1539aaa78ad212b332153a6befbf900cf40721ac42b27146483efc704eea49049a8f80be1fff113e4597ff003680758611b071db8140ac9bef8a7e2a2c1caa0f00198735d4d3125aad5b51f2d352b6fee4a5418bff37db74fa51c4f69f258dc414ec28462ead0f5ae1f6d5a2d54d586e1290d3a0bb60392457bf3f69c97b16e39efce3efe3edbae0f747c790ffdf"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0xb6}, &(0x7f0000001080)={0x20, 0x1, 0x2a, "9400db2a9e8365ad052e567bf8e24d53cb4634bbba41b77d75aa222ba646f8e93d8c75e0e42e1d9a95ac"}, &(0x7f00000010c0)={0x20, 0x3, 0x1, 0x6}}) (async) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$P9_RWALK(r8, &(0x7f0000000300)={0x3c, 0x6f, 0x1}, 0x9) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x1, &(0x7f0000000580)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x87, &(0x7f0000000600)=""/135, 0x41000, 0x58, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000700)=[0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0x10, 0x7}, {0x4, 0x1, 0xb, 0xa}, {0x5, 0x4, 0x4, 0x4}, {0x1, 0x5, 0x2, 0x3}, {0x3, 0x5, 0xd}, {0x3, 0x2, 0x5, 0x1}, {0x3, 0x5, 0x4, 0x7}, {0x0, 0x5, 0x6}, {0x5, 0x5, 0x5, 0x6}], 0x10, 0x6}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@dellinkprop={0xbc, 0x6d, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x29004, 0x8000}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'batadv0\x00'}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_MAP={0x24, 0xe, {0x4f, 0x4, 0x800, 0x4, 0x9, 0xf3}}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r10, 0x0, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m8.758690164s ago: executing program 6 (id=3932): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0xfffffffffffffc18, 0x24d, 0xfffffffa, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0xffffffffffffff7f}], "db55a3354ca6d746db00abec7dc7bab5a753e28de04049bfa713bf4cef51bb53d0ad"}, 0x9a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x8, 0x80000) fanotify_mark(r2, 0x105, 0x4800003a, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) read$FUSE(r2, 0x0, 0x6c) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m8.756811317s ago: executing program 6 (id=3933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) read(r0, &(0x7f00000001c0)=""/132, 0x84) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) read(r1, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) poll(&(0x7f0000000340)=[{r2, 0x4040}], 0x1, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40408d0}, 0x40448c0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x1}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r8], 0x8c}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m7.806349589s ago: executing program 6 (id=3944): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x193}], 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) 2m7.683521597s ago: executing program 6 (id=3945): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x84) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x30000800) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000240)='./file0/file0\x00', 0x272) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m7.662222105s ago: executing program 6 (id=3948): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r1, &(0x7f0000000080)="8e01000000000000000018fe", 0xfffffffffffffed2, 0x20000840, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2200e9ff000800000001000000d0bf37d976007e525eb96b3a0b0688000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000020a42573ab166b800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m7.282064179s ago: executing program 6 (id=3955): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)=0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x7) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) (async) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x22c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5db}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @local, 0xfffffff1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xab2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x51d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfda4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ea}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "9d9c93166b38bdc16da0cf19af303b68fcd4d061d43ebb9bc21e19"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve={0x60800000001503d1, &(0x7f0000000040)=0x4}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) 2m7.219372806s ago: executing program 36 (id=3955): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)=0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x7) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) (async) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x22c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5db}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @local, 0xfffffff1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xab2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x51d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfda4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ea}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "9d9c93166b38bdc16da0cf19af303b68fcd4d061d43ebb9bc21e19"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve={0x60800000001503d1, &(0x7f0000000040)=0x4}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) 31.012864742s ago: executing program 3 (id=5226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xde, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x8e, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xf, &(0x7f00000007c0)=@raw=[@call={0x85, 0x0, 0x0, 0x85}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], &(0x7f0000000840)='syzkaller\x00', 0x6, 0x60, &(0x7f0000000880)=""/96, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x800, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x3, 0x0, 0x5}, {0x2, 0x1, 0xa, 0xb}, {0x5, 0x3, 0x3, 0x6}, {0x5, 0x3, 0x10, 0x6}, {0x3, 0x3, 0x7, 0xc}, {0x3, 0x2, 0x8, 0x5}, {0x4, 0x2, 0xd}], 0x10, 0x7}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1c, 0x1, 0x8, 0x2, 0x11000, 0x1, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x1b08, 0xd3, 0x0, 0x42a1, 0x1, 0x4568, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x9, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7f, 0x9f, &(0x7f0000000400)=""/159, 0x40f00, 0x40, '\x00', r4, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xd, 0xd, 0x9}, 0x10, 0xffffffffffffffff, r5, 0x5, &(0x7f0000000cc0)=[r6, r7, r8, r9], &(0x7f0000000d00)=[{0x2, 0x2, 0xf, 0x5}, {0x2, 0x3, 0xa, 0xa}, {0x1, 0x2, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x6}, {0x4, 0x4, 0xffff, 0x4}], 0x10, 0x2}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r10, 0x431, 0x70bd2a, 0x259fdc00, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) 30.949825062s ago: executing program 3 (id=5228): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) mmap(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x3000002, 0x4c831, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 30.073707116s ago: executing program 3 (id=5246): ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x8202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000940)=[@code={0xa, 0x6d, {"0f01c8c40115c2b9120000000048b8a80c0000000000000f23c00f21f835020009000f23f8c4e1b172d03766b85f008ec04b0fc76a1a48b807000000000000000f23d00f21f8351000000b0f23f8c4a1fd65d466b801008ed80f01c5"}}], 0x6d}) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x63}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0x8, 0x8}}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) openat$kvm(0x0, &(0x7f0000000040), 0x8202, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000940)=[@code={0xa, 0x6d, {"0f01c8c40115c2b9120000000048b8a80c0000000000000f23c00f21f835020009000f23f8c4e1b172d03766b85f008ec04b0fc76a1a48b807000000000000000f23d00f21f8351000000b0f23f8c4a1fd65d466b801008ed80f01c5"}}], 0x6d}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x63}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0x8, 0x8}}) (async) 29.892094435s ago: executing program 3 (id=5250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) listen(r1, 0x0) io_uring_setup(0x4d71, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0x60, 0x800) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect={{}, {0x2}}}, {0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @tick=0x4, {}, {0x0, 0x83}, @control}, {0x6f, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x3, 0x3}}], 0x70) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x100000000002, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x8000000000000, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2040) r7 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000140)={r9, 0x2ad2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={r9, 0x8}, 0x8) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 28.88606371s ago: executing program 3 (id=5261): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x9, 0x0, 0x2019, 0x2, 0x0, {0x2, 0x4}, 0x1}) clock_gettime(0xfffffff2, &(0x7f0000000000)) 28.811188991s ago: executing program 3 (id=5262): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)='\b\x00\x00\x00(\x00\x00\x00K', 0x9}], 0x1}}], 0x1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000050000000200000029bd7000e2ffffff0100010028000000000000006800120072"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) (async) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) close(0x4) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000088"]) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x4000, 0x2, {0x77359400}, {0x5, 0x1, 0xfb, 0x34, 0x41, 0x5, "5a0a0327"}, 0x8, 0x3, {0x0}, 0x80}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x7, 0x5, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x1, 0x3ff, 0x5}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)=ANY=[@ANYBLOB="64020000", @ANYRES16=r8, @ANYBLOB="ff022bbd700019dcdf250800000020000180140002007069320a76763000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0xc000}, 0x4040004) (async) syz_emit_ethernet(0x98, &(0x7f0000000c40)={@remote, @multicast, @void, {@x25={0x805, {0x1, 0xfe, 0x0, "751f828ad9a86909e5b283012305b790631ea9683491b2fc24dfd022821540aa50984aa57bb48e40464504bc17a721147b1f799e86f62734ec6cbb8ab4537863ae7a52e9be79dc49a4907ac0d57c3ac9f6bd08c06fd71d8d0ea2773091eeef4fd10b307b78c1aadb341d49d53c0d7d1e8205f2d004a6705b585359388930d09346388047ce0199"}}}}, &(0x7f0000000000)={0x1, 0x4, [0xea0, 0xdbc, 0x9f5, 0x7a2]}) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x9, 0x93, &(0x7f0000000240)=""/147, 0x40f00, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x0, 0x10, 0x8001}, 0x94) (async) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) (async) r12 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r12, 0x0, 0x0, 0x800) (async) ioctl$CDROMVOLCTRL(r11, 0x2202, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x0, 0x83, 0x27, &(0x7f0000000480)="11bda8094828def1c4b16998cc71097b4fb979c082ac75ffe58e15432c1d9ac24843781dbcb0b26985c09f268ff1355cea5bb0456640cebf3f19d1ad9d63c5386c7943c261ea4769cf94f27ce56c380dd3087581e3642bdede5bde9388c6a0ff9f9e5810b994c81f2596b4652c7b1f3de6be295ff6dd8539e26f017d026e702a39138a", &(0x7f0000000800)=""/39, 0x1, 0x0, 0xb0, 0xcd, &(0x7f0000000640)="6a87756d0cfdc03b5042e6f27fc52ae61cfe5890adf2ef51559f5f04b3b2bf40b15b896e058d16a25762d1c2dce85ae1c487096d470453a19236a6eddadfb01c0212c6a2450c41ac3357fb78700996831cfe35659db8a4de6188f878d5a3eb83df2ecd9156b7fe27b51500333568394bbdc97e53aa4273439bfa2dbf0f05b8135774492e839e3702d3e9a16507bd15d354e729fdd993222a8c922783e6b21bfbbd81b96cb07709d0b8d5923aa742b467", &(0x7f0000000700)="a78fd664d3a78613c4fb3178cfb2dfe4b20a003aea95d6b4245a4946f4481bb360bdc7ee5d2d08bb589f315ace51bc5e08600d2f2d46a26a965627a2557c4c2a6d6236ea09d111a382b7ac0efa20f1751c0a1730959d806bd6a397df2a44b1c0f6b5dafe5af935ae664baa4240e6e8120b82c85e5e760e515c33bd77433317174485fd7d47f57a019b5792bcf30001b2b6ea2b6b410669a1560edecfc9762b5046c0168e0c8df861a98fd3222108752671ee91e2def2cecc0d83cdd60a784abbf780a8ad29bbfca0d7399d3e6b", 0x6, 0x0, 0x3}, 0x50) 18.937099554s ago: executing program 7 (id=5353): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x90600) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x5, 0x8}, 'port0\x00', 0x5c, 0x800a8, 0x10001, 0x7, 0x10000, 0x0, 0x2, 0x0, 0x7, 0x4}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000140)={{0x3, @addr=0x7}, 0x8, 0x1, 0x7}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff78e6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x52645000) r3 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x80800) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000380)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)=0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100418}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x815) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x200040, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r9, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x3c}}, 0xc804) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r10, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x30}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f00000008c0)=0x4055) write$P9_RSYMLINK(r7, &(0x7f0000000900)={0x14, 0x11, 0x2, {0x0, 0x3, 0x4}}, 0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), r11) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001b00)={'syztnl0\x00', &(0x7f0000001a80)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xa, 0x9, 0x5c, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x8000, 0x9, 0xf}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001bc0)={0x3, 0x0}, 0x8) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@bloom_filter={0x1e, 0x6, 0x800, 0x2, 0x20800, r7, 0x1000, '\x00', 0x0, r7, 0x4, 0x4, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x15, 0x14, &(0x7f0000000980)=@raw=[@generic={0x7, 0x2, 0x5, 0x9, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, @generic={0x78, 0xf, 0x5, 0x21f, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa373}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000a40)='GPL\x00', 0x8, 0x1000, &(0x7f0000000a80)=""/4096, 0x41000, 0xc, '\x00', r12, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000001b40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001b80)={0x4, 0x7, 0x5, 0x8}, 0x10, r13, r8, 0x7, &(0x7f0000001c80)=[r14], &(0x7f0000001cc0)=[{0x4, 0x3, 0x5, 0x7}, {0x2, 0x5, 0x2, 0x6}, {0x4, 0x4, 0x7, 0x1}, {0x0, 0x4, 0xa}, {0x0, 0x5, 0x7, 0x9}, {0x1, 0x1, 0xe, 0x2}, {0x2, 0x3, 0xa, 0x5}], 0x10, 0xe}, 0x94) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000001e40)=0x3a) 18.853866305s ago: executing program 7 (id=5354): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e7ee7a8400000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x8000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x8, 0x0, {}, {0xee00}, 0x8c4}) chdir(&(0x7f0000000140)='./bus\x00') r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x8000000, 0x0, 0x30, 0x0, @ib={0x1b, 0xfffb, 0x9, {"eaf2a40bfd1d81e9c5cc2eb813065bf8"}, 0x0, 0x0, 0x2ca1}, @ib={0x1b, 0x2, 0x4, {"fe8000"}, 0x39680000000, 0xfffffffffffffffc, 0x4000040a}}}, 0x118) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$USBDEVFS_RESETEP(r9, 0x80045503, &(0x7f0000000000)={0xe, 0x1}) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 18.790164615s ago: executing program 7 (id=5357): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x140) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) (async) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) (async) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 32) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) bind$netrom(r3, 0x0, 0x0) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e0487135e6334553553ebb1d224831b58c6e08004600002000000000001190780000000000000000440471c000004e2000089078"], 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 18.788317365s ago: executing program 7 (id=5360): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f0000000180)="bdc66e4235d2679c93bf49b0c5d78f7d3ceb42b08c096306d3dc8f54f304a1efe480fa4769adcfdffc07d24a7536d584aed2c77dfcb1dd438e3d4c72e0ff7a479e45d34f4925e2a36587d4d6e2825d37aa216b89ca0000000000", 0x5a, 0x32000081, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r7 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000380)=""/212, &(0x7f00000002c0)=0xd4) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) readlinkat(r6, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)=""/48, 0x30) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48f, 0x0, 0x1000008}]}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) 18.704293707s ago: executing program 7 (id=5362): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x4d0101, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mount_setattr(r2, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000, {r2}}, 0x20) (async) getdents64(r0, &(0x7f0000002fc0)=""/4108, 0x100c) 18.703880381s ago: executing program 7 (id=5363): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x2e, 0x38, [0xfffffffffffffffb, 0x0, 0x3ff, 0xffffffffffffffff], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x2e, 0x38, [0xfffffffffffffffb, 0x0, 0x3ff, 0xffffffffffffffff], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x4010, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 17.729909867s ago: executing program 8 (id=5369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6802, 0x9, 0x8000000000000000, 0xffffffffffffffff}}], 0x68}) (async) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r11, &(0x7f0000000400)={0x0, &(0x7f00000007c0)=[@code={0xa, 0x63, {"0f20e035000004000f22e0410f01d1f3450f01f8b9800000c00f3235000800000f300f07c74424000e000000c7442402f9ffffffff1c24b9ad0b00000f320fc738b805000000b98ddc22ff0f01c140c60700"}}], 0x63}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0xc4) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) 17.527475675s ago: executing program 8 (id=5370): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) userfaultfd(0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x3000002) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/150, 0x96}, {&(0x7f0000000040)=""/13, 0xd}], 0x2) 16.953486241s ago: executing program 1 (id=5380): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a007f"]) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f0000000280)={0xdb, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 16.726370181s ago: executing program 1 (id=5381): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async, rerun: 32) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=unix']) 16.718077718s ago: executing program 1 (id=5382): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x310, 0x168, 0x0, 0x310, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7cf2, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000004007000000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000c5ab5de4efc47e5b100000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESDEC=r3], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x30, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x41, r6}) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@ethernet={0x30a, @random="e5114d3e42a4"}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x4010084) 16.607117998s ago: executing program 1 (id=5383): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xd1, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b00)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000006ffc)=0x1fc, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x8001fbc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x1, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000300)=ANY=[@ANYRES8=r5]) (async) sendto$inet6(r1, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r9 = syz_io_uring_setup(0xec5, &(0x7f0000000440)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) io_uring_enter(r9, 0x47fa, 0x0, 0x0, 0x0, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, 0x0, 0x0) (async) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r8}, 0x18) (async) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 16.606325995s ago: executing program 8 (id=5384): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x204034, &(0x7f0000000100)='+)\x00') ioctl$BLKRRPART(r0, 0x125f, 0x0) 16.605336212s ago: executing program 8 (id=5385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe47, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x3, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @objref={{}, @void}}]}]}], {0x14}}, 0x5c}}, 0x0) 16.533170524s ago: executing program 1 (id=5386): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x7, 0x4, 0xfffffffa, 0x1, 0x5, 0x1000000, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d4, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xfd}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x530dbdb7c0738e9c, 0x2c, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f0000000400)={0x5, 0x2, 0x660, 0x5a9}, 0x10}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x85) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x7000, 0x11a000}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 16.531375725s ago: executing program 1 (id=5387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x30}}, 0x4040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_connect(0x0, 0x9d4, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0xfc, 0xfb, 0x89, 0x8, 0x13d3, 0x3247, 0x7b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c2, 0x4, 0x81, 0x9, 0x60, 0xac, [{{0x9, 0x4, 0x87, 0x4, 0xb, 0x57, 0xdd, 0xcb, 0x52, [], [{{0x9, 0x5, 0x80, 0x8, 0x200, 0x3, 0x3, 0xf8, [@generic={0x77, 0xf, "8e32e3ac824c5839c60587ecca116f8a6f9c6e9bcd871a447a5953ca1fda34fd45fdec98ebc2dab3e8615b0856120c8f20f5f325ec817195dcce456d8d6643b5ad47679cd52ad3b771fb49a498058d76876430042785976c1f7e3115c5e280f69e8bd9ee64a4e430acf0c24134eee0389a67fd1ee5"}]}}, {{0x9, 0x5, 0x3, 0x0, 0xff76a74c5942e23, 0x2, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xfb, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe1, 0x401}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x6, 0xf}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0xcb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x81}]}}, {{0x9, 0x5, 0x0, 0x0, 0x5f9a14c6d12b273, 0x80, 0xab, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x2, 0xc, [@generic={0xd2, 0x24, "da1cfa2c9bc9eeb4cddadbd1a7b14449aca1901afcf608d00fefd89e3605e235e6dcb6be23751f38830304a847cd1eca8191bac9d4299347ab99b96d61ef0d39b1e6f43febb8ce2e36ce3234fd05703d398fecb14a463a9335e1db2c53eec72d1d685ba153ef6a6c2cbc32a520b5c709c035bd3db4b305fe05c38e773daa9bd1a51b4211615d84931c97449000d4aa7b303dcffdc3b1e794a5d04a1006a06f359efcd26b0de22cded5b51576bbffd8696935058505a5ee403d7942ab89ba578e301f717f0ff3cb2f04f2ac5a684fb96e"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x7, 0x9, 0x2, [@generic={0xaa, 0x4, "83484e7effbd898bda5756cae9957ecda911cd2a3624513ea8590eaac1ffc85218462018f20f1d803fabb617778cadc909bc53302f804fc3b1eba79db3072c2edf393d49b3a780ac551f32d385871d11451fb92a7327282eccf0689533ed171e46cef8219055d231bfd9c735b1b10649b09196ecdf19c8c311dba4457e03b99b704ae13291ea763934c80db41130c68976c08394bb7574522b8c6cb5b7290c37ffd0a674fdf06c72"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x17, 0x1, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x30, 0x1, 0x5, 0x10}}]}}, {{0x9, 0x4, 0x7f, 0x1, 0x3, 0x8, 0x6, 0x62, 0x80, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0xff, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x67}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ef, 0xa0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x9, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x9, 0x0, 0x3}}]}}, {{0x9, 0x4, 0x30, 0x5, 0x7, 0x24, 0x4a, 0x72, 0x1, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x93, 0x1, 0x16}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x3, 0x1, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7c}, @generic={0x5b, 0x23, "ef85dd3d0977754bd67378a90e1384ff8cf9161a5be76d8e7707eaf3785181e4ee3def273113ec05c4e45e008ec43831fa76de6b4c2a2b80423958ac0f84a86ea8ce2c9174efa66044bb19f1c77e16a6f3f361ee2a8be712ae"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x2, 0x2, 0x88, [@generic={0x23, 0x2, "8b33e0f98c7561a2ccb3ee53f11870ab256fb43fc3b23d871b461170fb26c3b6e8"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x7a, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x401}]}}, {{0x9, 0x5, 0x5955ac4876128d1, 0x0, 0x400, 0x5, 0x7, 0x6, [@generic={0xac, 0x11, "a378c057a2dc6d66182e82ab7912dfc8098fcb729b5320252853ac50c22e90eed3e0a9f42f60e1329662ec6173b6a240edfb980a4de8e0b61c8af78d2546d2edf53174ed32608050eaa4d7ec64687bdf6c8c06032e7c17cf95ffb3cf1e61d3fedf2ab2b27ca4b5e1f7c5c109037f2f30cc531d1ea6592ea52938e36748c536dc2db589840886e5d026ff8554a445aedccc60fcbcc76dfd5d3a0f45ddfc1a89762c6ff2b4be1939688a13"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x10, 0xff, 0x6, [@generic={0x15, 0xd, "09aa0faa88ca813950788955d1c797794cc75c"}, @generic={0x87, 0x1e, "29dc176d791da232a75bd2c27cb1908fb2bfc0556951038a0d270e740394d2aa400e05d2d3f54f5d9203908809c580b6490b36ca0bd65ce6e39d5f9fa5952b5eb88744c2c212c5b2838b1ec4dedcda96679d36352b58eb74fd1459121a1fd7cb829c84d14c663ad1530f2bfed807ba8fdf721cd7fb00d840898f8584900c28d94849b69d2b"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0x4, 0x4f}}]}}, {{0x9, 0x4, 0xf2, 0x3, 0xa, 0x68, 0xef, 0x1, 0x40, [@generic={0xd2, 0x24, "a6cbe3de716f70092fd6702a0ca68698500f7e07ab51d823713408fd05928dc43048b41f1abbf5346ca5fa7cbe260975a57131b491d62230f8a138a9923862d9ae121488b2c123eeae6a29d5778aef8f898996f5b7c0dcb1b9b1f85d7ee919c8f65e44672b1ce8b611627c3ee3846a39037b6ee5fab27ba76cddb27363e563a251b4907454289cc12c2c9fd5c0a1e8c0c5f5ef8f9029b5efe8b001b02064942265169c603ba0f00ca0ba622e86d1b441203c94937cb7796c6ffb5cdc7429d3a0ea8191d678eae783996f3d8f734f21fe"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0xd9, 0x4, 0x4c, [@generic={0x5, 0x24, "67ce54"}, @generic={0x6e, 0x8, "d90ddbcc3ad0db666312c8d181a687a57eb2fdd3426ee9598823a7b05b689016d0880a2b8008efc55227a45fc033ee692b1b67dff2d162212f7e84440bda9ca4f68659d784fefc599ef5700035bf13be57f184cc4a9a1b1d5cde9490c4581a9dd3f8a34f4aff0b41605f2a4a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x2c, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0x400}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x8, 0x0, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc1, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x30, 0x1, 0x8, 0x9, [@generic={0xfa, 0x23, "d67a708c4868841a29146799a47f4a7b72bc34133e66f2b70fc72a16c68ba79295a5397d7f4ff17b7cf3680bb976ed0bd1b4c7efc0f9b55776e4ee402f38192fbc23ce48252c60c3c84450c740af3184415f8fc45c9c64e88c8c99c39f0535fa814105489ef34feac35f3cd714ab49a2f6cd972ee830153567d81a34ef5ec339bace5d2ea4faea4d90fbf98b580d0b206105069fa10b1a51b5a3d7e6cd9c4cb119c4e89fb955535bd5862c7db5c9543edf54df612f9acc1aa805da88363a9dfd19f58a8187b1ae349f7be872e271ce5c3b58b4ab4ac43fbdf1b73217f90834710ae6b71e82c84b2c97d1ac41ac7b180c49866a0935886009"}, @generic={0xef, 0xc, "1b22c6bf1dbcc4e0ee7a810aa99a9ca363bfd4f9b0ef19e082b92a3821afaacb846281863ae3c5b3ebfd3056322d6a9a64f7c769fc0393fd5619985e91124d720acd0e65e431f9ea1789a34632b40464c9d8412b27b9bd241be3e123c0e3fe7c844da1f02487e6facbee340aae3d656e8e0444971310fa9ee09d6420effd4c05c8ade5fdabddcd4b11937fa18dfb2b399dd91e12047832a513c146f1fc009db1ff2e04231a70cfb18c33dab1ffdf687c55e524f86b38dfb01c3eb5dd15dc19b5f95bc8ac91015f53804c80e422d3333f2ea9c5c4caec81e4383a4465534de3ebb2da499f6208567d7e3b2493c3"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0x4, 0x1, [@generic={0x52, 0xf, "8c829c5e1a041f305dd7ea2487ac1969c0482f1c5fcbad30238276cccd00dfcd193de94b96a1e174a5d024a9041055dd0f23b0174c8280001f222732d6b3b9d85c93d165d901594379ebc6a281400f93"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0xfa, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0xb}, @generic={0x57, 0x21, "d4afd9a72ae85c6b22433e643bfae9648886a02e85df118ff261bf7f595b3e26f67ab634daeabd5a2dc3ebbb22a30f5915c9895e7f0f839089b0dda637c62b9a817042e60ced0e8cd869beb43a11e031c69d735e6d"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x1, 0xd, 0xc, [@generic={0x85, 0x23, "092b789638803d805be806dea67726dfa2b6ce64fd53d396691de7c6fba1e3c8aa8feded143aa8e3c709143f2324a06a186a2ca13da2d0eab18c6ee958a91a20810be10921e613e9a1aadf5977b69825f6be1e23676648ac2bdbac370d9ab2331579ae8c569f64bb9e354ed5e3d2ba3f9bc31cca2af3f24b372800ef33f2db317ec77a"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xea, 0x4}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x8, 0x1, 0x7, 0x10, 0xff}, 0x50, &(0x7f0000000f40)={0x5, 0xf, 0x50, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "10106d73f5db945b7a2ee63ffb0720d1"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x8001, 0x0, 0x6, [0x0, 0xc0a0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xe, 0x2, 0x100, 0xb6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f5d6d19c44271bf50e8bedf4c6949bf5"}]}, 0x2, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0xc0c}}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b4c, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000140)=0x2, 0x4) listen(r1, 0xfff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24084801}, 0x24002883) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5015023bcc780000"], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008011}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 16.521568527s ago: executing program 8 (id=5388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="23000f000087ced4041627906b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff39) r6 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r5, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r6, 0x0}]) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x13) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 16.244724642s ago: executing program 8 (id=5389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r2, 0x1e2ec02aec38f1e5, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd589}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x30}, {0x9, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x6c, 0x1}, {0x24, 0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x30}, {0x36, 0x1}, {0x9}, {0x16, 0x1}, {0x2, 0x1}, {0x3}, {0x71, 0x1}, {0x12, 0x1}, {0x2}, {0x3, 0x1}, {0x30}, {0x48, 0x1}, {0x1}, {0x48}, {0x13, 0x1}, {0x16, 0x1}, {0x3}, {0x9}, {0x60}, {0x4, 0x1}, {0x71abb6562e87a574}, {0x1b}, {0x6c}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x3, 0x1}, {0x1b, 0x1}, {0xb}, {0x6, 0x1}, {0x5, 0x1}, {0x6c, 0x1}, {0x6}, {0xc}, {0x9, 0x1}, {0x9}, {0x2c, 0x1}, {0xc}, {0x36, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0xb}, {0x5}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x47b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xe2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xb0}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0x24}, {0x4, 0x1}, {0x3}, {0x9}, {0x4, 0x1}, {0xb}, {0x9, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x9}, {0x60}, {0x12, 0x1}, {0x6c, 0x1}, {0x48, 0x1}, {0x2, 0x1}, {0x7b, 0x1}, {0x60}, {0xd, 0x1}, {0x16, 0x1}, {0x9}, {0x48}, {0x24}, {0x9, 0x1}, {0x12}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4004007) (async) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x703196c4b213569c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x38}}, 0x8000) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x5c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x46, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d901594c5d5c8037db4c4995b302b34c5c8ba625e727b541cc3e05b701830a135f4565ae8"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2c04a844}, 0x0) 11.821160098s ago: executing program 37 (id=5262): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)='\b\x00\x00\x00(\x00\x00\x00K', 0x9}], 0x1}}], 0x1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000050000000200000029bd7000e2ffffff0100010028000000000000006800120072"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) (async) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) close(0x4) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000088"]) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x4000, 0x2, {0x77359400}, {0x5, 0x1, 0xfb, 0x34, 0x41, 0x5, "5a0a0327"}, 0x8, 0x3, {0x0}, 0x80}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x7, 0x5, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x1, 0x3ff, 0x5}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)=ANY=[@ANYBLOB="64020000", @ANYRES16=r8, @ANYBLOB="ff022bbd700019dcdf250800000020000180140002007069320a76763000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0xc000}, 0x4040004) (async) syz_emit_ethernet(0x98, &(0x7f0000000c40)={@remote, @multicast, @void, {@x25={0x805, {0x1, 0xfe, 0x0, "751f828ad9a86909e5b283012305b790631ea9683491b2fc24dfd022821540aa50984aa57bb48e40464504bc17a721147b1f799e86f62734ec6cbb8ab4537863ae7a52e9be79dc49a4907ac0d57c3ac9f6bd08c06fd71d8d0ea2773091eeef4fd10b307b78c1aadb341d49d53c0d7d1e8205f2d004a6705b585359388930d09346388047ce0199"}}}}, &(0x7f0000000000)={0x1, 0x4, [0xea0, 0xdbc, 0x9f5, 0x7a2]}) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x9, 0x93, &(0x7f0000000240)=""/147, 0x40f00, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x0, 0x10, 0x8001}, 0x94) (async) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) (async) r12 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r12, 0x0, 0x0, 0x800) (async) ioctl$CDROMVOLCTRL(r11, 0x2202, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x0, 0x83, 0x27, &(0x7f0000000480)="11bda8094828def1c4b16998cc71097b4fb979c082ac75ffe58e15432c1d9ac24843781dbcb0b26985c09f268ff1355cea5bb0456640cebf3f19d1ad9d63c5386c7943c261ea4769cf94f27ce56c380dd3087581e3642bdede5bde9388c6a0ff9f9e5810b994c81f2596b4652c7b1f3de6be295ff6dd8539e26f017d026e702a39138a", &(0x7f0000000800)=""/39, 0x1, 0x0, 0xb0, 0xcd, &(0x7f0000000640)="6a87756d0cfdc03b5042e6f27fc52ae61cfe5890adf2ef51559f5f04b3b2bf40b15b896e058d16a25762d1c2dce85ae1c487096d470453a19236a6eddadfb01c0212c6a2450c41ac3357fb78700996831cfe35659db8a4de6188f878d5a3eb83df2ecd9156b7fe27b51500333568394bbdc97e53aa4273439bfa2dbf0f05b8135774492e839e3702d3e9a16507bd15d354e729fdd993222a8c922783e6b21bfbbd81b96cb07709d0b8d5923aa742b467", &(0x7f0000000700)="a78fd664d3a78613c4fb3178cfb2dfe4b20a003aea95d6b4245a4946f4481bb360bdc7ee5d2d08bb589f315ace51bc5e08600d2f2d46a26a965627a2557c4c2a6d6236ea09d111a382b7ac0efa20f1751c0a1730959d806bd6a397df2a44b1c0f6b5dafe5af935ae664baa4240e6e8120b82c85e5e760e515c33bd77433317174485fd7d47f57a019b5792bcf30001b2b6ea2b6b410669a1560edecfc9762b5046c0168e0c8df861a98fd3222108752671ee91e2def2cecc0d83cdd60a784abbf780a8ad29bbfca0d7399d3e6b", 0x6, 0x0, 0x3}, 0x50) 2.175770579s ago: executing program 38 (id=5363): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x2e, 0x38, [0xfffffffffffffffb, 0x0, 0x3ff, 0xffffffffffffffff], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x2e, 0x38, [0xfffffffffffffffb, 0x0, 0x3ff, 0xffffffffffffffff], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x4010, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 12.152052ms ago: executing program 39 (id=5389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r2, 0x1e2ec02aec38f1e5, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd589}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x30}, {0x9, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x6c, 0x1}, {0x24, 0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x30}, {0x36, 0x1}, {0x9}, {0x16, 0x1}, {0x2, 0x1}, {0x3}, {0x71, 0x1}, {0x12, 0x1}, {0x2}, {0x3, 0x1}, {0x30}, {0x48, 0x1}, {0x1}, {0x48}, {0x13, 0x1}, {0x16, 0x1}, {0x3}, {0x9}, {0x60}, {0x4, 0x1}, {0x71abb6562e87a574}, {0x1b}, {0x6c}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x3, 0x1}, {0x1b, 0x1}, {0xb}, {0x6, 0x1}, {0x5, 0x1}, {0x6c, 0x1}, {0x6}, {0xc}, {0x9, 0x1}, {0x9}, {0x2c, 0x1}, {0xc}, {0x36, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0xb}, {0x5}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x47b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xe2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xb0}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0x24}, {0x4, 0x1}, {0x3}, {0x9}, {0x4, 0x1}, {0xb}, {0x9, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x9}, {0x60}, {0x12, 0x1}, {0x6c, 0x1}, {0x48, 0x1}, {0x2, 0x1}, {0x7b, 0x1}, {0x60}, {0xd, 0x1}, {0x16, 0x1}, {0x9}, {0x48}, {0x24}, {0x9, 0x1}, {0x12}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4004007) (async) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x703196c4b213569c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x38}}, 0x8000) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x5c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x46, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d901594c5d5c8037db4c4995b302b34c5c8ba625e727b541cc3e05b701830a135f4565ae8"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2c04a844}, 0x0) 0s ago: executing program 40 (id=5387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x30}}, 0x4040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_connect(0x0, 0x9d4, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0xfc, 0xfb, 0x89, 0x8, 0x13d3, 0x3247, 0x7b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c2, 0x4, 0x81, 0x9, 0x60, 0xac, [{{0x9, 0x4, 0x87, 0x4, 0xb, 0x57, 0xdd, 0xcb, 0x52, [], [{{0x9, 0x5, 0x80, 0x8, 0x200, 0x3, 0x3, 0xf8, [@generic={0x77, 0xf, "8e32e3ac824c5839c60587ecca116f8a6f9c6e9bcd871a447a5953ca1fda34fd45fdec98ebc2dab3e8615b0856120c8f20f5f325ec817195dcce456d8d6643b5ad47679cd52ad3b771fb49a498058d76876430042785976c1f7e3115c5e280f69e8bd9ee64a4e430acf0c24134eee0389a67fd1ee5"}]}}, {{0x9, 0x5, 0x3, 0x0, 0xff76a74c5942e23, 0x2, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xfb, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe1, 0x401}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x6, 0xf}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0xcb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x81}]}}, {{0x9, 0x5, 0x0, 0x0, 0x5f9a14c6d12b273, 0x80, 0xab, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x2, 0xc, [@generic={0xd2, 0x24, "da1cfa2c9bc9eeb4cddadbd1a7b14449aca1901afcf608d00fefd89e3605e235e6dcb6be23751f38830304a847cd1eca8191bac9d4299347ab99b96d61ef0d39b1e6f43febb8ce2e36ce3234fd05703d398fecb14a463a9335e1db2c53eec72d1d685ba153ef6a6c2cbc32a520b5c709c035bd3db4b305fe05c38e773daa9bd1a51b4211615d84931c97449000d4aa7b303dcffdc3b1e794a5d04a1006a06f359efcd26b0de22cded5b51576bbffd8696935058505a5ee403d7942ab89ba578e301f717f0ff3cb2f04f2ac5a684fb96e"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x7, 0x9, 0x2, [@generic={0xaa, 0x4, "83484e7effbd898bda5756cae9957ecda911cd2a3624513ea8590eaac1ffc85218462018f20f1d803fabb617778cadc909bc53302f804fc3b1eba79db3072c2edf393d49b3a780ac551f32d385871d11451fb92a7327282eccf0689533ed171e46cef8219055d231bfd9c735b1b10649b09196ecdf19c8c311dba4457e03b99b704ae13291ea763934c80db41130c68976c08394bb7574522b8c6cb5b7290c37ffd0a674fdf06c72"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x17, 0x1, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x30, 0x1, 0x5, 0x10}}]}}, {{0x9, 0x4, 0x7f, 0x1, 0x3, 0x8, 0x6, 0x62, 0x80, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0xff, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x67}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ef, 0xa0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x9, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x9, 0x0, 0x3}}]}}, {{0x9, 0x4, 0x30, 0x5, 0x7, 0x24, 0x4a, 0x72, 0x1, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x93, 0x1, 0x16}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x3, 0x1, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7c}, @generic={0x5b, 0x23, "ef85dd3d0977754bd67378a90e1384ff8cf9161a5be76d8e7707eaf3785181e4ee3def273113ec05c4e45e008ec43831fa76de6b4c2a2b80423958ac0f84a86ea8ce2c9174efa66044bb19f1c77e16a6f3f361ee2a8be712ae"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x2, 0x2, 0x88, [@generic={0x23, 0x2, "8b33e0f98c7561a2ccb3ee53f11870ab256fb43fc3b23d871b461170fb26c3b6e8"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x7a, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x401}]}}, {{0x9, 0x5, 0x5955ac4876128d1, 0x0, 0x400, 0x5, 0x7, 0x6, [@generic={0xac, 0x11, "a378c057a2dc6d66182e82ab7912dfc8098fcb729b5320252853ac50c22e90eed3e0a9f42f60e1329662ec6173b6a240edfb980a4de8e0b61c8af78d2546d2edf53174ed32608050eaa4d7ec64687bdf6c8c06032e7c17cf95ffb3cf1e61d3fedf2ab2b27ca4b5e1f7c5c109037f2f30cc531d1ea6592ea52938e36748c536dc2db589840886e5d026ff8554a445aedccc60fcbcc76dfd5d3a0f45ddfc1a89762c6ff2b4be1939688a13"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x10, 0xff, 0x6, [@generic={0x15, 0xd, "09aa0faa88ca813950788955d1c797794cc75c"}, @generic={0x87, 0x1e, "29dc176d791da232a75bd2c27cb1908fb2bfc0556951038a0d270e740394d2aa400e05d2d3f54f5d9203908809c580b6490b36ca0bd65ce6e39d5f9fa5952b5eb88744c2c212c5b2838b1ec4dedcda96679d36352b58eb74fd1459121a1fd7cb829c84d14c663ad1530f2bfed807ba8fdf721cd7fb00d840898f8584900c28d94849b69d2b"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0x4, 0x4f}}]}}, {{0x9, 0x4, 0xf2, 0x3, 0xa, 0x68, 0xef, 0x1, 0x40, [@generic={0xd2, 0x24, "a6cbe3de716f70092fd6702a0ca68698500f7e07ab51d823713408fd05928dc43048b41f1abbf5346ca5fa7cbe260975a57131b491d62230f8a138a9923862d9ae121488b2c123eeae6a29d5778aef8f898996f5b7c0dcb1b9b1f85d7ee919c8f65e44672b1ce8b611627c3ee3846a39037b6ee5fab27ba76cddb27363e563a251b4907454289cc12c2c9fd5c0a1e8c0c5f5ef8f9029b5efe8b001b02064942265169c603ba0f00ca0ba622e86d1b441203c94937cb7796c6ffb5cdc7429d3a0ea8191d678eae783996f3d8f734f21fe"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0xd9, 0x4, 0x4c, [@generic={0x5, 0x24, "67ce54"}, @generic={0x6e, 0x8, "d90ddbcc3ad0db666312c8d181a687a57eb2fdd3426ee9598823a7b05b689016d0880a2b8008efc55227a45fc033ee692b1b67dff2d162212f7e84440bda9ca4f68659d784fefc599ef5700035bf13be57f184cc4a9a1b1d5cde9490c4581a9dd3f8a34f4aff0b41605f2a4a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x2c, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0x400}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x8, 0x0, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc1, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x30, 0x1, 0x8, 0x9, [@generic={0xfa, 0x23, "d67a708c4868841a29146799a47f4a7b72bc34133e66f2b70fc72a16c68ba79295a5397d7f4ff17b7cf3680bb976ed0bd1b4c7efc0f9b55776e4ee402f38192fbc23ce48252c60c3c84450c740af3184415f8fc45c9c64e88c8c99c39f0535fa814105489ef34feac35f3cd714ab49a2f6cd972ee830153567d81a34ef5ec339bace5d2ea4faea4d90fbf98b580d0b206105069fa10b1a51b5a3d7e6cd9c4cb119c4e89fb955535bd5862c7db5c9543edf54df612f9acc1aa805da88363a9dfd19f58a8187b1ae349f7be872e271ce5c3b58b4ab4ac43fbdf1b73217f90834710ae6b71e82c84b2c97d1ac41ac7b180c49866a0935886009"}, @generic={0xef, 0xc, "1b22c6bf1dbcc4e0ee7a810aa99a9ca363bfd4f9b0ef19e082b92a3821afaacb846281863ae3c5b3ebfd3056322d6a9a64f7c769fc0393fd5619985e91124d720acd0e65e431f9ea1789a34632b40464c9d8412b27b9bd241be3e123c0e3fe7c844da1f02487e6facbee340aae3d656e8e0444971310fa9ee09d6420effd4c05c8ade5fdabddcd4b11937fa18dfb2b399dd91e12047832a513c146f1fc009db1ff2e04231a70cfb18c33dab1ffdf687c55e524f86b38dfb01c3eb5dd15dc19b5f95bc8ac91015f53804c80e422d3333f2ea9c5c4caec81e4383a4465534de3ebb2da499f6208567d7e3b2493c3"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0x4, 0x1, [@generic={0x52, 0xf, "8c829c5e1a041f305dd7ea2487ac1969c0482f1c5fcbad30238276cccd00dfcd193de94b96a1e174a5d024a9041055dd0f23b0174c8280001f222732d6b3b9d85c93d165d901594379ebc6a281400f93"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0xfa, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0xb}, @generic={0x57, 0x21, "d4afd9a72ae85c6b22433e643bfae9648886a02e85df118ff261bf7f595b3e26f67ab634daeabd5a2dc3ebbb22a30f5915c9895e7f0f839089b0dda637c62b9a817042e60ced0e8cd869beb43a11e031c69d735e6d"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x1, 0xd, 0xc, [@generic={0x85, 0x23, "092b789638803d805be806dea67726dfa2b6ce64fd53d396691de7c6fba1e3c8aa8feded143aa8e3c709143f2324a06a186a2ca13da2d0eab18c6ee958a91a20810be10921e613e9a1aadf5977b69825f6be1e23676648ac2bdbac370d9ab2331579ae8c569f64bb9e354ed5e3d2ba3f9bc31cca2af3f24b372800ef33f2db317ec77a"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xea, 0x4}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x8, 0x1, 0x7, 0x10, 0xff}, 0x50, &(0x7f0000000f40)={0x5, 0xf, 0x50, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "10106d73f5db945b7a2ee63ffb0720d1"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x8001, 0x0, 0x6, [0x0, 0xc0a0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xe, 0x2, 0x100, 0xb6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f5d6d19c44271bf50e8bedf4c6949bf5"}]}, 0x2, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0xc0c}}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b4c, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000140)=0x2, 0x4) listen(r1, 0xfff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24084801}, 0x24002883) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5015023bcc780000"], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008011}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) kernel console output (not intermixed with test programs): 046][T32586] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 359.092445][T32622] FAULT_INJECTION: forcing a failure. [ 359.092445][T32622] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 359.098502][T32622] CPU: 3 UID: 0 PID: 32622 Comm: syz.3.4832 Not tainted syzkaller #0 PREEMPT(full) [ 359.098527][T32622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.098538][T32622] Call Trace: [ 359.098545][T32622] [ 359.098552][T32622] dump_stack_lvl+0x16c/0x1f0 [ 359.098575][T32622] should_fail_ex+0x512/0x640 [ 359.098600][T32622] _copy_from_user+0x2e/0xd0 [ 359.098625][T32622] wext_handle_ioctl+0xc2/0x2a0 [ 359.098644][T32622] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 359.098667][T32622] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 359.098693][T32622] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 359.098721][T32622] sock_ioctl+0x3a1/0x6b0 [ 359.098742][T32622] ? __pfx_sock_ioctl+0x10/0x10 [ 359.098758][T32622] ? hook_file_ioctl_common+0x145/0x410 [ 359.098788][T32622] ? selinux_file_ioctl+0x180/0x270 [ 359.098806][T32622] ? selinux_file_ioctl+0xb4/0x270 [ 359.098823][T32622] ? __pfx_sock_ioctl+0x10/0x10 [ 359.098842][T32622] __x64_sys_ioctl+0x18e/0x210 [ 359.098867][T32622] do_syscall_64+0xcd/0xfa0 [ 359.098884][T32622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.098899][T32622] RIP: 0033:0x7f940b58f7c9 [ 359.098912][T32622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.098927][T32622] RSP: 002b:00007f940c4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.098942][T32622] RAX: ffffffffffffffda RBX: 00007f940b7e5fa0 RCX: 00007f940b58f7c9 [ 359.098952][T32622] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000008 [ 359.098962][T32622] RBP: 00007f940c4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 359.098972][T32622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.098982][T32622] R13: 00007f940b7e6038 R14: 00007f940b7e5fa0 R15: 00007ffc4f57df88 [ 359.099006][T32622] [ 359.102282][T32610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.184941][T32610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.322291][ T10] usb 12-1: USB disconnect, device number 19 [ 359.322295][ C1] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 359.326967][ C1] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 359.368616][T32643] ISOFS: Unable to identify CD-ROM format. [ 359.571739][T32620] netlink: 'syz.1.4833': attribute type 6 has an invalid length. [ 359.574945][T11260] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.577807][T11260] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.580866][T11260] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.583885][T11260] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.717527][T32667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32667 comm=syz.3.4840 [ 359.915439][T32696] FAULT_INJECTION: forcing a failure. [ 359.915439][T32696] name failslab, interval 1, probability 0, space 0, times 0 [ 359.920999][T32696] CPU: 1 UID: 0 PID: 32696 Comm: syz.3.4845 Not tainted syzkaller #0 PREEMPT(full) [ 359.921022][T32696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.921032][T32696] Call Trace: [ 359.921038][T32696] [ 359.921045][T32696] dump_stack_lvl+0x16c/0x1f0 [ 359.921065][T32696] should_fail_ex+0x512/0x640 [ 359.921085][T32696] ? __kmalloc_noprof+0xca/0x880 [ 359.921109][T32696] should_failslab+0xc2/0x120 [ 359.921131][T32696] __kmalloc_noprof+0xdd/0x880 [ 359.921152][T32696] ? __mutex_trylock_common+0xe9/0x250 [ 359.921170][T32696] ? ioctl_standard_iw_point+0x414/0xca0 [ 359.921193][T32696] ? ioctl_standard_iw_point+0x414/0xca0 [ 359.921210][T32696] ioctl_standard_iw_point+0x414/0xca0 [ 359.921238][T32696] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 359.921266][T32696] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 359.921283][T32696] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 359.921306][T32696] ? __pfx___mutex_lock+0x10/0x10 [ 359.921329][T32696] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 359.921354][T32696] ioctl_standard_call+0x166/0x1d0 [ 359.921373][T32696] ? __pfx_ioctl_standard_call+0x10/0x10 [ 359.921390][T32696] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 359.921415][T32696] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 359.921437][T32696] wext_handle_ioctl+0x226/0x2a0 [ 359.921457][T32696] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 359.921479][T32696] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 359.921503][T32696] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 359.921530][T32696] sock_ioctl+0x3a1/0x6b0 [ 359.921549][T32696] ? __pfx_sock_ioctl+0x10/0x10 [ 359.921566][T32696] ? hook_file_ioctl_common+0x145/0x410 [ 359.921597][T32696] ? selinux_file_ioctl+0x180/0x270 [ 359.921615][T32696] ? selinux_file_ioctl+0xb4/0x270 [ 359.921637][T32696] ? __pfx_sock_ioctl+0x10/0x10 [ 359.921657][T32696] __x64_sys_ioctl+0x18e/0x210 [ 359.921684][T32696] do_syscall_64+0xcd/0xfa0 [ 359.921704][T32696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.921721][T32696] RIP: 0033:0x7f940b58f7c9 [ 359.921738][T32696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.921754][T32696] RSP: 002b:00007f940c4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.921773][T32696] RAX: ffffffffffffffda RBX: 00007f940b7e5fa0 RCX: 00007f940b58f7c9 [ 359.921785][T32696] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000008 [ 359.921795][T32696] RBP: 00007f940c4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 359.921807][T32696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.921817][T32696] R13: 00007f940b7e6038 R14: 00007f940b7e5fa0 R15: 00007ffc4f57df88 [ 359.921843][T32696] [ 360.046579][ T34] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 360.087840][ T6002] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 360.205940][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 360.209376][ T34] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 360.212097][ T34] usb 6-1: config 179 has no interface number 0 [ 360.214123][ T34] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 360.217861][ T34] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 360.221411][ T34] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.225010][ T34] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 360.228889][ T34] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 360.233008][ T34] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 360.235915][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.241257][T32672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.248419][ T6002] usb 13-1: Using ep0 maxpacket: 8 [ 360.251982][ T6002] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 360.255531][ T6002] usb 13-1: config 179 has no interface number 0 [ 360.258241][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 360.262108][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 360.265583][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.269395][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 360.275103][ T6002] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 360.281222][ T6002] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 360.284917][ T6002] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.292481][T32681] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 360.409114][ T5999] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 360.469433][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input61 [ 360.485088][T32728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4849'. [ 360.487902][T32728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4849'. [ 360.514915][ T6002] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input62 [ 360.579848][ T5999] usb 8-1: Using ep0 maxpacket: 8 [ 360.583050][ T5999] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 360.585779][ T5999] usb 8-1: config 179 has no interface number 0 [ 360.587867][ T5999] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 360.591913][ T5999] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 360.595459][ T5999] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.598974][ T5999] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 360.602872][ T5999] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 360.607045][ T5999] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 360.609902][ T5999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.615920][T32706] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 360.676797][T32672] FAULT_INJECTION: forcing a failure. [ 360.676797][T32672] name failslab, interval 1, probability 0, space 0, times 0 [ 360.680746][T32672] CPU: 2 UID: 0 PID: 32672 Comm: syz.1.4842 Not tainted syzkaller #0 PREEMPT(full) [ 360.680761][T32672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.680768][T32672] Call Trace: [ 360.680772][T32672] [ 360.680777][T32672] dump_stack_lvl+0x16c/0x1f0 [ 360.680792][T32672] should_fail_ex+0x512/0x640 [ 360.680805][T32672] ? fs_reclaim_acquire+0xae/0x150 [ 360.680826][T32672] should_failslab+0xc2/0x120 [ 360.680846][T32672] __kmalloc_noprof+0xdd/0x880 [ 360.680866][T32672] ? tomoyo_encode2+0x100/0x3e0 [ 360.680889][T32672] ? tomoyo_encode2+0x100/0x3e0 [ 360.680906][T32672] tomoyo_encode2+0x100/0x3e0 [ 360.680927][T32672] tomoyo_encode+0x29/0x50 [ 360.680943][T32672] tomoyo_realpath_from_path+0x18f/0x6e0 [ 360.680959][T32672] tomoyo_path_number_perm+0x245/0x580 [ 360.680969][T32672] ? tomoyo_path_number_perm+0x237/0x580 [ 360.680981][T32672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.680992][T32672] ? find_held_lock+0x2b/0x80 [ 360.681017][T32672] ? find_held_lock+0x2b/0x80 [ 360.681030][T32672] ? hook_file_ioctl_common+0x145/0x410 [ 360.681048][T32672] ? __fget_files+0x20e/0x3c0 [ 360.681061][T32672] security_file_ioctl+0x9b/0x240 [ 360.681075][T32672] __x64_sys_ioctl+0xb7/0x210 [ 360.681091][T32672] do_syscall_64+0xcd/0xfa0 [ 360.681103][T32672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.681114][T32672] RIP: 0033:0x7fe62c78f7c9 [ 360.681124][T32672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.681135][T32672] RSP: 002b:00007fe62d5a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.681145][T32672] RAX: ffffffffffffffda RBX: 00007fe62c9e5fa0 RCX: 00007fe62c78f7c9 [ 360.681155][T32672] RDX: 00002000000001c0 RSI: 0000000040304580 RDI: 0000000000000004 [ 360.681164][T32672] RBP: 00007fe62d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 360.681173][T32672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.681182][T32672] R13: 00007fe62c9e6038 R14: 00007fe62c9e5fa0 R15: 00007ffe8140be78 [ 360.681205][T32672] [ 360.681221][T32672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.784162][ T5999] usb 6-1: USB disconnect, device number 49 [ 360.786711][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 360.789211][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 360.792995][ C0] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 360.795628][ C0] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 360.798555][ T6002] usb 13-1: USB disconnect, device number 18 [ 360.836703][T32706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.839562][T32706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.846323][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input63 [ 361.191204][T25506] usb 8-1: USB disconnect, device number 54 [ 361.191341][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 361.196996][ C3] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 361.294270][ T316] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4852'. [ 361.319901][ T5947] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 361.357489][ T323] FAULT_INJECTION: forcing a failure. [ 361.357489][ T323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.362111][ T323] CPU: 3 UID: 0 PID: 323 Comm: syz.8.4854 Not tainted syzkaller #0 PREEMPT(full) [ 361.362127][ T323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.362133][ T323] Call Trace: [ 361.362137][ T323] [ 361.362142][ T323] dump_stack_lvl+0x16c/0x1f0 [ 361.362156][ T323] should_fail_ex+0x512/0x640 [ 361.362173][ T323] _copy_from_user+0x2e/0xd0 [ 361.362188][ T323] ioctl_standard_iw_point+0x513/0xca0 [ 361.362224][ T323] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 361.362247][ T323] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 361.362263][ T323] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 361.362278][ T323] ? __pfx___mutex_lock+0x10/0x10 [ 361.362292][ T323] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 361.362308][ T323] ioctl_standard_call+0x166/0x1d0 [ 361.362319][ T323] ? __pfx_ioctl_standard_call+0x10/0x10 [ 361.362329][ T323] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 361.362344][ T323] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 361.362357][ T323] wext_handle_ioctl+0x226/0x2a0 [ 361.362368][ T323] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 361.362381][ T323] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 361.362397][ T323] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 361.362412][ T323] sock_ioctl+0x3a1/0x6b0 [ 361.362425][ T323] ? __pfx_sock_ioctl+0x10/0x10 [ 361.362434][ T323] ? hook_file_ioctl_common+0x145/0x410 [ 361.362453][ T323] ? selinux_file_ioctl+0x180/0x270 [ 361.362464][ T323] ? selinux_file_ioctl+0xb4/0x270 [ 361.362476][ T323] ? __pfx_sock_ioctl+0x10/0x10 [ 361.362488][ T323] __x64_sys_ioctl+0x18e/0x210 [ 361.362504][ T323] do_syscall_64+0xcd/0xfa0 [ 361.362517][ T323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.362528][ T323] RIP: 0033:0x7fb36538f7c9 [ 361.362538][ T323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.362548][ T323] RSP: 002b:00007fb366191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.362559][ T323] RAX: ffffffffffffffda RBX: 00007fb3655e5fa0 RCX: 00007fb36538f7c9 [ 361.362565][ T323] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000008 [ 361.362572][ T323] RBP: 00007fb366191090 R08: 0000000000000000 R09: 0000000000000000 [ 361.362578][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.362584][ T323] R13: 00007fb3655e6038 R14: 00007fb3655e5fa0 R15: 00007fff7fe58ee8 [ 361.362598][ T323] [ 361.401581][ T5947] Bluetooth: hci1: Malformed LE Event: 0x0b [ 361.605761][ T359] Invalid source name [ 361.607755][ T359] UBIFS error (pid: 359): cannot open "ubifs", error -22 [ 361.810379][ T5999] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 362.002284][ T5999] usb 13-1: Using ep0 maxpacket: 8 [ 362.005244][ T5999] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 362.007898][ T5999] usb 13-1: config 179 has no interface number 0 [ 362.009928][ T5999] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 362.013703][ T5999] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 362.017331][ T5999] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.020907][ T5999] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 362.023827][T25506] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 362.024809][ T5999] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 362.032416][ T5999] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 362.036037][ T5999] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.041194][ T355] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 362.166113][ T387] trusted_key: encrypted_key: master key parameter is missing [ 362.185681][T25506] usb 8-1: Using ep0 maxpacket: 8 [ 362.188995][T25506] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 362.191838][T25506] usb 8-1: config 179 has no interface number 0 [ 362.193616][T25506] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 362.197750][T25506] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 362.201711][T25506] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.203262][ T391] FAULT_INJECTION: forcing a failure. [ 362.203262][ T391] name failslab, interval 1, probability 0, space 0, times 0 [ 362.204870][T25506] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 362.204888][T25506] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 362.204918][T25506] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 362.209656][ T391] CPU: 0 UID: 0 PID: 391 Comm: syz.1.4868 Not tainted syzkaller #0 PREEMPT(full) [ 362.209678][ T391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 362.209689][ T391] Call Trace: [ 362.209697][ T391] [ 362.209703][ T391] dump_stack_lvl+0x16c/0x1f0 [ 362.209725][ T391] should_fail_ex+0x512/0x640 [ 362.209750][ T391] should_failslab+0xc2/0x120 [ 362.209770][ T391] kmem_cache_alloc_node_noprof+0x78/0x770 [ 362.209796][ T391] ? __alloc_skb+0x2b2/0x380 [ 362.209814][ T391] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 362.209839][ T391] ? __alloc_skb+0x2b2/0x380 [ 362.209858][ T391] __alloc_skb+0x2b2/0x380 [ 362.209878][ T391] ? __pfx___alloc_skb+0x10/0x10 [ 362.209908][ T391] wireless_send_event+0x3bd/0xc50 [ 362.209928][ T391] ? __might_fault+0xe3/0x190 [ 362.209955][ T391] ? __pfx_wireless_send_event+0x10/0x10 [ 362.209980][ T391] ioctl_standard_iw_point+0x6a8/0xca0 [ 362.209999][ T391] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 362.210027][ T391] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 362.210043][ T391] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 362.210067][ T391] ? __pfx___mutex_lock+0x10/0x10 [ 362.210090][ T391] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 362.210114][ T391] ioctl_standard_call+0x166/0x1d0 [ 362.210132][ T391] ? __pfx_ioctl_standard_call+0x10/0x10 [ 362.210148][ T391] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 362.210171][ T391] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 362.210214][ T391] wext_handle_ioctl+0x226/0x2a0 [ 362.210234][ T391] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 362.210255][ T391] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.210281][ T391] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 362.210313][ T391] sock_ioctl+0x3a1/0x6b0 [ 362.210334][ T391] ? __pfx_sock_ioctl+0x10/0x10 [ 362.210350][ T391] ? hook_file_ioctl_common+0x145/0x410 [ 362.210379][ T391] ? selinux_file_ioctl+0x180/0x270 [ 362.210394][ T391] ? selinux_file_ioctl+0xb4/0x270 [ 362.210406][ T391] ? __pfx_sock_ioctl+0x10/0x10 [ 362.210421][ T391] __x64_sys_ioctl+0x18e/0x210 [ 362.210446][ T391] do_syscall_64+0xcd/0xfa0 [ 362.210464][ T391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.210480][ T391] RIP: 0033:0x7fe62c78f7c9 [ 362.210496][ T391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.210513][ T391] RSP: 002b:00007fe62d5a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.210529][ T391] RAX: ffffffffffffffda RBX: 00007fe62c9e5fa0 RCX: 00007fe62c78f7c9 [ 362.210541][ T391] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000008 [ 362.210551][ T391] RBP: 00007fe62d5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 362.210560][ T391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.210572][ T391] R13: 00007fe62c9e6038 R14: 00007fe62c9e5fa0 R15: 00007ffe8140be78 [ 362.210597][ T391] [ 362.260650][ T5999] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input64 [ 362.262426][T25506] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.322074][ T363] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 362.518518][T25506] usb 13-1: USB disconnect, device number 19 [ 362.518518][ C3] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 362.524404][ C3] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 362.545806][ T1028] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input65 [ 362.571358][ T421] bridge0: Device is already in use. [ 362.609484][ T421] syzkaller0: entered promiscuous mode [ 362.611324][ T421] syzkaller0: entered allmulticast mode [ 362.709793][ T40] kauditd_printk_skb: 179 callbacks suppressed [ 362.709803][ T40] audit: type=1400 audit(2000000397.707:16321): avc: denied { unmount } for pid=15101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 362.720236][ T40] audit: type=1400 audit(2000000397.716:16322): avc: denied { read write } for pid=15101 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.727920][ T40] audit: type=1400 audit(2000000397.716:16323): avc: denied { open } for pid=15101 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.735573][ T40] audit: type=1400 audit(2000000397.716:16324): avc: denied { ioctl } for pid=15101 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.744023][ T40] audit: type=1400 audit(2000000397.744:16325): avc: denied { map_create } for pid=437 comm="syz.1.4873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.749590][ T40] audit: type=1400 audit(2000000397.744:16326): avc: denied { create } for pid=437 comm="syz.1.4873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.755730][ T40] audit: type=1400 audit(2000000397.744:16327): avc: denied { bind } for pid=437 comm="syz.1.4873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.761920][ T40] audit: type=1400 audit(2000000397.744:16328): avc: denied { write } for pid=437 comm="syz.1.4873" path="socket:[114744]" dev="sockfs" ino=114744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.769227][ T40] audit: type=1400 audit(2000000397.763:16329): avc: denied { read } for pid=362 comm="syz.3.4863" name="event4" dev="devtmpfs" ino=4356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.772601][ T6002] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 362.776489][ T40] audit: type=1400 audit(2000000397.763:16330): avc: denied { open } for pid=362 comm="syz.3.4863" path="/dev/input/event4" dev="devtmpfs" ino=4356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.858768][ T5999] usb 8-1: USB disconnect, device number 55 [ 362.858820][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 362.863345][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 362.932780][ T6002] usb 12-1: Using ep0 maxpacket: 8 [ 362.936685][ T6002] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 362.939429][ T6002] usb 12-1: config 179 has no interface number 0 [ 362.941436][ T6002] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 362.945742][ T6002] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 362.950161][ T6002] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.954839][ T6002] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 362.959234][ T6002] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 362.964400][ T6002] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 362.968162][ T6002] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.975001][ T408] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 363.082529][ T842] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 363.243430][ T842] usb 6-1: Using ep0 maxpacket: 32 [ 363.249613][ T842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 363.255058][ T842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 363.259540][ T842] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.267189][ T842] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 363.270714][ T842] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 363.273866][ T842] usb 6-1: Product: syz [ 363.275715][ T842] usb 6-1: Manufacturer: syz [ 363.277256][ T842] usb 6-1: SerialNumber: syz [ 363.288249][ T842] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input66 [ 363.445903][ T6002] xfrm0 speed is unknown, defaulting to 1000 [ 363.473305][ T490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=490 comm=syz.3.4880 [ 363.501273][ T5999] usb 6-1: USB disconnect, device number 50 [ 363.504449][ C3] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 363.532836][T25506] usb 12-1: USB disconnect, device number 20 [ 363.532890][ C0] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 363.538748][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 363.577318][ T5999] appletouch 6-1:1.0: input: appletouch disconnected [ 363.597908][ T516] binder: 513:516 ioctl c018620c 0 returned -14 [ 363.906122][ T6002] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 364.098642][ T6002] usb 13-1: Using ep0 maxpacket: 8 [ 364.101719][ T6002] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 364.104559][ T6002] usb 13-1: config 179 has no interface number 0 [ 364.107202][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 364.111309][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 364.114758][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.118168][ T6002] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 364.122002][ T6002] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 364.126388][ T6002] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 364.129364][ T6002] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.134587][ T523] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 364.203426][ T538] SELinux: policydb magic number 0xfd7cff8c does not match expected magic number 0xf97cff8c [ 364.207883][ T538] SELinux: failed to load policy [ 364.210921][ T538] binder: BINDER_SET_CONTEXT_MGR already set [ 364.213041][ T538] binder: 536:538 ioctl 4018620d 2000000000c0 returned -16 [ 364.217110][ T538] binder: BINDER_SET_CONTEXT_MGR already set [ 364.219111][ T538] binder: 536:538 ioctl 4018620d 200000000040 returned -16 [ 364.221869][ T538] binder: BINDER_SET_CONTEXT_MGR already set [ 364.223792][ T538] binder: 536:538 ioctl 4018620d 200000000100 returned -16 [ 364.227898][ T538] binder: BINDER_SET_CONTEXT_MGR already set [ 364.229854][ T538] binder: 536:538 ioctl 4018620d 2000000002c0 returned -16 [ 364.332575][ T550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=550 comm=syz.7.4890 [ 364.339564][ T550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=550 comm=syz.7.4890 [ 364.347177][ T550] tmpfs: Unknown parameter 'obj_type' [ 364.353432][ T6002] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input67 [ 364.566658][ T523] FAULT_INJECTION: forcing a failure. [ 364.566658][ T523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.572571][ T523] CPU: 0 UID: 0 PID: 523 Comm: syz.8.4883 Not tainted syzkaller #0 PREEMPT(full) [ 364.572589][ T523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 364.572596][ T523] Call Trace: [ 364.572600][ T523] [ 364.572605][ T523] dump_stack_lvl+0x16c/0x1f0 [ 364.572620][ T523] should_fail_ex+0x512/0x640 [ 364.572636][ T523] _copy_from_user+0x2e/0xd0 [ 364.572651][ T523] input_ff_effect_from_user+0x109/0x2c0 [ 364.572683][ T523] evdev_do_ioctl+0xf16/0x1b30 [ 364.572703][ T523] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 364.572730][ T523] evdev_ioctl+0x16f/0x1a0 [ 364.572745][ T523] ? __pfx_evdev_ioctl+0x10/0x10 [ 364.572762][ T523] __x64_sys_ioctl+0x18e/0x210 [ 364.572779][ T523] do_syscall_64+0xcd/0xfa0 [ 364.572791][ T523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.572803][ T523] RIP: 0033:0x7fb36538f7c9 [ 364.572813][ T523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.572823][ T523] RSP: 002b:00007fb366191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.572835][ T523] RAX: ffffffffffffffda RBX: 00007fb3655e5fa0 RCX: 00007fb36538f7c9 [ 364.572842][ T523] RDX: 00002000000001c0 RSI: 0000000040304580 RDI: 0000000000000004 [ 364.572849][ T523] RBP: 00007fb366191090 R08: 0000000000000000 R09: 0000000000000000 [ 364.572856][ T523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.572863][ T523] R13: 00007fb3655e6038 R14: 00007fb3655e5fa0 R15: 00007fff7fe58ee8 [ 364.572878][ T523] [ 364.645705][ T6002] usb 13-1: USB disconnect, device number 20 [ 364.647770][ C0] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 364.647809][ C0] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 364.679835][ T580] netlink: 'syz.7.4894': attribute type 29 has an invalid length. [ 364.702541][ T582] syzkaller1: entered promiscuous mode [ 364.704857][ T582] syzkaller1: entered allmulticast mode [ 364.717086][ T582] input: syz1 as /devices/virtual/input/input69 [ 364.885052][ T601] netlink: 'syz.7.4897': attribute type 1 has an invalid length. [ 364.903389][ T601] bond3: entered promiscuous mode [ 364.905250][ T601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.915886][ T601] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.919647][ T601] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 364.923116][ T601] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 365.029080][ T34] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 365.171253][ T644] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4899'. [ 365.189526][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 365.196719][ T34] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 365.200959][ T34] usb 8-1: config 179 has no interface number 0 [ 365.203726][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 365.207898][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 365.211746][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 365.215238][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 365.218930][ T34] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 365.223840][ T34] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 365.226603][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.237504][ T593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 365.318312][ T669] input: syz1 as /devices/virtual/input/input70 [ 365.354139][ T655] kvm: kvm [654]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 365.467051][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input71 [ 365.512208][ T693] FAULT_INJECTION: forcing a failure. [ 365.512208][ T693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.516751][ T693] CPU: 1 UID: 0 PID: 693 Comm: syz.8.4907 Not tainted syzkaller #0 PREEMPT(full) [ 365.516766][ T693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 365.516773][ T693] Call Trace: [ 365.516777][ T693] [ 365.516782][ T693] dump_stack_lvl+0x16c/0x1f0 [ 365.516797][ T693] should_fail_ex+0x512/0x640 [ 365.516812][ T693] _copy_to_user+0x32/0xd0 [ 365.516827][ T693] simple_read_from_buffer+0xcb/0x170 [ 365.516846][ T693] proc_fail_nth_read+0x197/0x240 [ 365.516860][ T693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.516873][ T693] ? rw_verify_area+0xcf/0x6c0 [ 365.516889][ T693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.516901][ T693] vfs_read+0x1e4/0xcf0 [ 365.516913][ T693] ? __pfx___mutex_lock+0x10/0x10 [ 365.516925][ T693] ? __pfx_vfs_read+0x10/0x10 [ 365.516938][ T693] ? __fget_files+0x20e/0x3c0 [ 365.516953][ T693] ksys_read+0x12a/0x250 [ 365.516963][ T693] ? __pfx_ksys_read+0x10/0x10 [ 365.516973][ T693] ? fput+0x9b/0xd0 [ 365.516988][ T693] do_syscall_64+0xcd/0xfa0 [ 365.517000][ T693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.517011][ T693] RIP: 0033:0x7fb36538e1dc [ 365.517020][ T693] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 365.517031][ T693] RSP: 002b:00007fb366191030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.517043][ T693] RAX: ffffffffffffffda RBX: 00007fb3655e5fa0 RCX: 00007fb36538e1dc [ 365.517050][ T693] RDX: 000000000000000f RSI: 00007fb3661910a0 RDI: 0000000000000009 [ 365.517056][ T693] RBP: 00007fb366191090 R08: 0000000000000000 R09: 0000000000000000 [ 365.517062][ T693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.517068][ T693] R13: 00007fb3655e6038 R14: 00007fb3655e5fa0 R15: 00007fff7fe58ee8 [ 365.517083][ T693] [ 365.581059][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.810016][T25506] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 365.992507][T25506] usb 12-1: Using ep0 maxpacket: 8 [ 365.996275][T25506] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 365.999778][T25506] usb 12-1: config 179 has no interface number 0 [ 366.004342][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 366.009023][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 366.010371][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4913'. [ 366.014101][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 366.022154][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 366.029283][T25506] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.034893][T25506] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.038603][T25506] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.044546][ T695] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 366.263767][T25506] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input72 [ 366.508793][ T34] usb 12-1: USB disconnect, device number 21 [ 366.508853][ C2] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 366.514064][ C2] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 367.084981][ T770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.126296][ T779] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 367.129295][ T779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.189598][ T785] netlink: 'syz.7.4923': attribute type 4 has an invalid length. [ 367.224592][ T777] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4920'. [ 367.249191][ T777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.253008][ T826] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4923'. [ 367.563532][ T846] lo speed is unknown, defaulting to 1000 [ 367.563923][ T1028] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 367.567394][ T846] xfrm0 speed is unknown, defaulting to 1000 [ 367.577834][ T845] lo speed is unknown, defaulting to 1000 [ 367.586057][ T845] xfrm0 speed is unknown, defaulting to 1000 [ 367.735493][ T1028] usb 12-1: Using ep0 maxpacket: 8 [ 367.739026][ T1028] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 367.742249][ T1028] usb 12-1: config 179 has no interface number 0 [ 367.744714][ T1028] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 367.749596][ T1028] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 367.753254][ T1028] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.758377][ T1028] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 367.761851][ T1028] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 367.765852][ T1028] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 367.769174][ T1028] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.774027][ T829] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 367.972188][ T6002] usb 8-1: USB disconnect, device number 56 [ 367.972294][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 367.977954][ C3] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 367.994828][ T1028] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input73 [ 368.061263][ T926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4928'. [ 368.073732][ T926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4928'. [ 368.101577][ T40] kauditd_printk_skb: 241 callbacks suppressed [ 368.101589][ T40] audit: type=1400 audit(2000000402.746:16570): avc: denied { write } for pid=942 comm="syz.1.4930" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 368.116054][ T40] audit: type=1400 audit(2000000402.756:16571): avc: denied { unmount } for pid=28895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 368.143816][ T40] audit: type=1400 audit(2000000402.793:16572): avc: denied { ioctl } for pid=946 comm="syz.3.4931" path="socket:[114087]" dev="sockfs" ino=114087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.147411][ T948] pim6reg: entered allmulticast mode [ 368.151797][ T40] audit: type=1400 audit(2000000402.793:16573): avc: denied { setopt } for pid=946 comm="syz.3.4931" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.155757][ T948] pim6reg: left allmulticast mode [ 368.177088][ T40] audit: type=1400 audit(2000000402.821:16574): avc: denied { create } for pid=952 comm="syz.1.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.183366][ T40] audit: type=1400 audit(2000000402.821:16575): avc: denied { getopt } for pid=952 comm="syz.1.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.193615][ T954] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 368.199053][ T954] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.207061][ T1028] usb 12-1: USB disconnect, device number 22 [ 368.209020][ C2] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 368.209041][ C2] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 368.255920][ T974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2560 (5120 ns) > initial count (48 ns). Using initial count to start timer. [ 368.265633][ T974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.269904][ T40] audit: type=1400 audit(2000000402.896:16576): avc: denied { name_bind } for pid=972 comm="syz.1.4934" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 368.290985][ T40] audit: type=1400 audit(2000000402.924:16577): avc: denied { bind } for pid=982 comm="syz.3.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.308742][ T983] netlink: 'syz.3.4935': attribute type 1 has an invalid length. [ 368.337201][ T983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.351933][ T983] bond3: Unable to set up delay as MII monitoring is disabled [ 368.355617][ T983] bond3 (unregistering): Released all slaves [ 368.394284][ T40] audit: type=1400 audit(2000000403.017:16578): avc: denied { read } for pid=1017 comm="syz.8.4936" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 368.402450][ T40] audit: type=1400 audit(2000000403.017:16579): avc: denied { open } for pid=1017 comm="syz.8.4936" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 368.599343][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.604670][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.607923][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.610817][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.615245][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.639672][ T1122] lo speed is unknown, defaulting to 1000 [ 368.642113][ T1122] xfrm0 speed is unknown, defaulting to 1000 [ 368.755254][ T1122] chnl_net:caif_netlink_parms(): no params data found [ 368.788601][ T1206] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 368.886542][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.889015][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.891735][ T1122] bridge_slave_0: entered allmulticast mode [ 368.894528][ T1122] bridge_slave_0: entered promiscuous mode [ 368.897649][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.900151][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.904026][ T1122] bridge_slave_1: entered allmulticast mode [ 368.906864][ T1122] bridge_slave_1: entered promiscuous mode [ 368.923949][ T1122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.928567][ T1122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.950328][ T1122] team0: Port device team_slave_0 added [ 368.953607][ T1122] team0: Port device team_slave_1 added [ 368.967582][ T1122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.969783][ T1122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.978085][ T1122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.982858][ T1122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.985158][ T1122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.993690][ T1122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.028319][ T1122] hsr_slave_0: entered promiscuous mode [ 369.037956][ T1122] hsr_slave_1: entered promiscuous mode [ 369.039719][ T34] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 369.136257][ T6002] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 369.177112][ T1122] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.200140][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 369.203680][ T34] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 369.206310][ T34] usb 12-1: config 179 has no interface number 0 [ 369.208336][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 369.212447][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 369.215971][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.219464][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 369.223677][ T34] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 369.228370][ T34] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 369.231735][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.236500][ T1218] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 369.251142][ T1122] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.307391][ T6002] usb 13-1: Using ep0 maxpacket: 32 [ 369.311498][ T6002] usb 13-1: config 0 has an invalid interface number: 184 but max is 0 [ 369.314738][ T6002] usb 13-1: config 0 has no interface number 0 [ 369.317248][ T6002] usb 13-1: config 0 interface 184 has no altsetting 0 [ 369.323581][ T6002] usb 13-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 369.323743][ T1122] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.326955][ T6002] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.326969][ T6002] usb 13-1: Product: syz [ 369.334903][ T6002] usb 13-1: Manufacturer: syz [ 369.336873][ T6002] usb 13-1: SerialNumber: syz [ 369.339014][ T6002] usb 13-1: config 0 descriptor?? [ 369.343827][ T6002] smsc75xx v1.0.0 [ 369.345361][ T6002] smsc75xx 13-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 369.349417][ T6002] smsc75xx 13-1:0.184: probe with driver smsc75xx failed with error -22 [ 369.385145][ T1477] xt_hashlimit: overflow, rate too high: 0 [ 369.463895][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input74 [ 369.473389][ T1122] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.584282][T11260] Bluetooth: hci3: Frame reassembly failed (-84) [ 369.639817][ T1494] XFS (nbd3): no-recovery mounts must be read-only. [ 369.694332][ T1218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.697413][ T1218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.701293][ T1218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.706485][ T1218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.747217][ T34] usb 12-1: USB disconnect, device number 23 [ 369.748603][ T1122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.749162][ C3] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 369.754516][ C3] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 369.759785][ T1122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.764642][ T1122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.769386][ T1122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.816713][ T1122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.824896][ T1122] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.833301][T11268] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.836303][T11268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.844339][T11268] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.847376][T11268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.934059][ T1534] netlink: 'syz.8.4943': attribute type 2 has an invalid length. [ 369.937389][ T1534] netlink: 'syz.8.4943': attribute type 1 has an invalid length. [ 369.940874][ T1534] netlink: 'syz.8.4943': attribute type 1 has an invalid length. [ 369.983825][ T1122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.008024][ T1122] veth0_vlan: entered promiscuous mode [ 370.013196][ T1122] veth1_vlan: entered promiscuous mode [ 370.028297][ T1122] veth0_macvtap: entered promiscuous mode [ 370.032424][ T1122] veth1_macvtap: entered promiscuous mode [ 370.041665][ T1122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.048232][ T1122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.053843][ T8488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.058399][ T8488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.065334][ T8488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.069026][ T8488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.117337][T11270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.120588][T11270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.141703][T11268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.144373][T11268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.285436][ T1548] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4937'. [ 370.292710][ T1548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4937'. [ 370.339597][ T1548] hsr_slave_1 (unregistering): left promiscuous mode [ 370.815548][ T5947] Bluetooth: hci4: command tx timeout [ 370.943497][ T842] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 371.103876][ T842] usb 12-1: Using ep0 maxpacket: 8 [ 371.106793][ T842] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 371.109584][ T842] usb 12-1: config 179 has no interface number 0 [ 371.111710][ T842] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 371.115914][ T842] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 371.119606][ T842] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.123138][ T842] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 371.127016][ T842] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 371.131988][ T842] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 371.134824][ T842] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.139710][ T1615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 371.573371][ T842] usb 12-1: USB disconnect, device number 24 [ 371.575561][ C1] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 371.575584][ C1] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 371.756404][ T5947] Bluetooth: hci3: command 0x1003 tx timeout [ 371.756409][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 371.814405][ T1641] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 371.818440][ T1641] cramfs: wrong magic [ 372.087922][ T10] usb 13-1: USB disconnect, device number 21 [ 372.149250][ T1659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4962'. [ 372.171875][ T1721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4962'. [ 372.362673][ T64] Bluetooth: hci0: unexpected event for opcode 0x0c57 [ 372.368224][ T1734] syz_tun: entered allmulticast mode [ 372.371975][ T1735] netlink: 'syz.8.4966': attribute type 7 has an invalid length. [ 372.375111][ T1735] netlink: 'syz.8.4966': attribute type 8 has an invalid length. [ 372.381717][ T1734] syz_tun: left allmulticast mode [ 372.586609][ T64] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 372.590038][ T64] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 372.635365][ T1774] delete_channel: no stack [ 372.666418][ T1778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4975'. [ 372.868673][ T34] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 372.951820][ T1783] bridge1: entered promiscuous mode [ 372.954506][ T1783] bridge1: entered allmulticast mode [ 372.959408][ T1790] Cannot find set identified by id 3 to match [ 372.963381][ T1790] netlink: 940 bytes leftover after parsing attributes in process `syz.8.4977'. [ 373.029225][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 373.033538][ T34] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.037206][ T34] usb 12-1: config 179 has no interface number 0 [ 373.040101][ T64] Bluetooth: hci4: command tx timeout [ 373.042795][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 373.047359][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 373.052295][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.057029][ T34] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 373.061713][ T34] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.065939][ T34] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 373.069064][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.075154][ T1770] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 373.296881][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input75 [ 373.509648][ T40] kauditd_printk_skb: 216 callbacks suppressed [ 373.509659][ T40] audit: type=1400 audit(2000000407.805:16796): avc: denied { execmem } for pid=1769 comm="syz.7.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 373.523701][ T40] audit: type=1400 audit(2000000407.823:16797): avc: denied { mount } for pid=1832 comm="syz.3.4982" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 373.525627][ T1833] gfs2: gfs2 mount does not exist [ 373.530695][ T40] audit: type=1400 audit(2000000407.823:16798): avc: denied { read } for pid=1832 comm="syz.3.4982" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 373.543968][ T1837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4983'. [ 373.552043][ T40] audit: type=1400 audit(2000000407.823:16799): avc: denied { open } for pid=1832 comm="syz.3.4982" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 373.559663][ T1841] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4984'. [ 373.564684][ T40] audit: type=1400 audit(2000000407.823:16800): avc: denied { mounton } for pid=1832 comm="syz.3.4982" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 373.576399][ T40] audit: type=1400 audit(2000000407.833:16801): avc: denied { module_request } for pid=1817 comm="syz.8.4981" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 373.588222][ T40] audit: type=1400 audit(2000000407.842:16802): avc: denied { create } for pid=1836 comm="syz.1.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 373.597986][ T40] audit: type=1400 audit(2000000407.842:16803): avc: denied { write } for pid=1836 comm="syz.1.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 373.605564][ T40] audit: type=1400 audit(2000000407.842:16804): avc: denied { bind } for pid=1836 comm="syz.1.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.617429][ T40] audit: type=1400 audit(2000000407.842:16805): avc: denied { name_bind } for pid=1836 comm="syz.1.4983" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 373.632475][ T1837] CIFS mount error: No usable UNC path provided in device string! [ 373.632475][ T1837] [ 373.635795][ T1837] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 373.735800][ T53] usb 12-1: USB disconnect, device number 25 [ 373.735941][ C3] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 373.741263][ C3] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 373.874228][ T1932] loop4: detected capacity change from 0 to 7 [ 373.890378][ T6218] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 373.892849][ T6218] loop4: partition table partially beyond EOD, truncated [ 373.896123][ T6218] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 373.925667][ T1932] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 373.928919][ T1932] loop4: partition table partially beyond EOD, truncated [ 373.933324][ T1932] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 374.007672][ T6218] udevd[6218]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 374.014381][ T1975] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4991'. [ 374.017461][ T1975] nbd: couldn't find a device at index 0 [ 374.061342][ T1972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4990'. [ 375.275126][ T64] Bluetooth: hci4: command tx timeout [ 375.977014][ T2006] batman_adv: batadv0: Adding interface: gretap1 [ 375.979635][ T2006] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.990768][ T2006] batman_adv: batadv0: Interface activated: gretap1 [ 376.073612][ T2040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4996'. [ 376.079397][ T2040] nfs4: Unknown parameter '' [ 376.236243][ T64] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 376.243014][ T2067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5001'. [ 376.243143][ T2064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5001'. [ 376.369556][ T2083] CIFS: iocharset name too long [ 376.526371][ T1028] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 376.545827][ T2106] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 376.687378][ T1028] usb 6-1: Using ep0 maxpacket: 8 [ 376.690273][ T2115] gfs2: not a GFS2 filesystem [ 376.691241][ T1028] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 376.695898][ T1028] usb 6-1: config 179 has no interface number 0 [ 376.699186][ T1028] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 376.703838][ T1028] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 376.709247][ T1028] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 376.713931][ T1028] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 376.719587][ T1028] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 376.725876][ T1028] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 376.730042][ T1028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.736724][ T2069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 376.960081][ T1028] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input76 [ 377.222618][ T1028] usb 6-1: USB disconnect, device number 51 [ 377.224772][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 377.224796][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 377.501632][ T5947] Bluetooth: hci4: command tx timeout [ 377.665455][ T2289] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 377.821742][ T2307] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.012905][ T2335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5025'. [ 378.077339][ T2372] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 378.082083][ T2372] usb usb9: usbfs: process 2372 (syz.1.5026) did not claim interface 0 before use [ 378.217477][ T2386] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 378.220581][ T2386] program syz.1.5030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.472950][ T841] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 378.612061][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 378.612082][ T5295] Bluetooth: hci3: command 0x1003 tx timeout [ 378.639538][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 378.643076][ T841] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 378.645819][ T841] usb 6-1: config 179 has no interface number 0 [ 378.647847][ T841] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 378.651228][ T841] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 378.655164][ T841] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 378.658865][ T841] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 378.662906][ T841] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 378.667403][ T841] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 378.670202][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.674655][ T2386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.896293][ T841] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input77 [ 378.903298][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 378.903308][ T40] audit: type=1400 audit(2000000412.854:16972): avc: denied { read } for pid=5330 comm="acpid" name="js0" dev="devtmpfs" ino=4471 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.912321][ T40] audit: type=1400 audit(2000000412.854:16973): avc: denied { open } for pid=5330 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4471 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.919548][ T40] audit: type=1400 audit(2000000412.854:16974): avc: denied { ioctl } for pid=5330 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4471 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.976174][ T40] audit: type=1400 audit(2000000412.919:16975): avc: denied { write } for pid=2404 comm="syz.7.5031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.982651][ T40] audit: type=1400 audit(2000000412.919:16976): avc: denied { read } for pid=2404 comm="syz.7.5031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.989277][ T40] audit: type=1400 audit(2000000412.919:16977): avc: denied { setopt } for pid=2404 comm="syz.7.5031" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.995641][ T40] audit: type=1400 audit(2000000412.919:16978): avc: denied { getopt } for pid=2404 comm="syz.7.5031" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.002770][ T40] audit: type=1400 audit(2000000412.919:16979): avc: denied { execute } for pid=2404 comm="syz.7.5031" name="file0" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.010189][ T40] audit: type=1400 audit(2000000412.919:16980): avc: denied { execute_no_trans } for pid=2404 comm="syz.7.5031" path="/303/file0" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.109404][ T40] audit: type=1400 audit(2000000413.041:16981): avc: denied { write } for pid=2385 comm="syz.1.5030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.158642][ T841] usb 6-1: USB disconnect, device number 52 [ 379.158692][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 379.158714][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 379.535055][ T2460] create_pit_timer: 2 callbacks suppressed [ 379.535071][ T2460] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 379.551131][ T2460] kvm: pic: level sensitive irq not supported [ 379.551996][ T2460] kvm: pic: non byte read [ 379.557341][ T2460] kvm: pic: level sensitive irq not supported [ 379.557655][ T2460] kvm: pic: non byte read [ 379.564585][ T2460] kvm: pic: level sensitive irq not supported [ 379.565984][ T2460] kvm: pic: non byte read [ 379.573944][ T2460] kvm: pic: level sensitive irq not supported [ 379.574251][ T2460] kvm: pic: non byte read [ 379.579224][ T2460] kvm: pic: level sensitive irq not supported [ 379.579482][ T2460] kvm: pic: non byte read [ 379.793690][ T2484] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5047'. [ 379.994948][ T2488] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 380.055911][ T64] Bluetooth: hci5: command 0xfc11 tx timeout [ 380.056003][ T5947] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 380.142024][ T8488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.146683][ T2525] netlink: 'syz.8.5056': attribute type 21 has an invalid length. [ 380.224512][ T2531] overlayfs: failed lookup in lower (newroot/274, name='file1', err=-40): overlapping layers [ 380.280614][T25506] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 380.281359][ T2531] overlayfs: failed lookup in lower (newroot/274, name='file1', err=-40): overlapping layers [ 380.462436][T25506] usb 12-1: Using ep0 maxpacket: 8 [ 380.465406][T25506] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 380.468180][T25506] usb 12-1: config 179 has no interface number 0 [ 380.470539][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 380.474676][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 380.478548][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.482474][T25506] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 380.488038][T25506] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 380.493545][T25506] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 380.498077][T25506] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.506054][ T2508] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 380.727616][T25506] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input78 [ 380.841390][ T2580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5064'. [ 380.998954][ C2] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 380.998959][ T53] usb 12-1: USB disconnect, device number 26 [ 381.003731][ C2] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 381.011242][ T2614] o2cb: This node has not been configured. [ 381.013819][ T2614] o2cb: Cluster check failed. Fix errors before retrying. [ 381.016811][ T2614] (syz.3.5070,2614,0):user_dlm_register:674 ERROR: status = -22 [ 381.020661][ T2614] (syz.3.5070,2614,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 381.025015][ T2617] o2cb: This node has not been configured. [ 381.027521][ T2617] o2cb: Cluster check failed. Fix errors before retrying. [ 381.030865][ T2617] (syz.3.5070,2617,2):user_dlm_register:674 ERROR: status = -22 [ 381.033344][ T2617] (syz.3.5070,2617,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 381.044815][ T2617] o2cb: This node has not been configured. [ 381.047051][ T2617] o2cb: Cluster check failed. Fix errors before retrying. [ 381.049919][ T2617] (syz.3.5070,2617,3):user_dlm_register:674 ERROR: status = -22 [ 381.054232][ T2617] (syz.3.5070,2617,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 381.059144][ T2614] o2cb: This node has not been configured. [ 381.061557][ T2614] o2cb: Cluster check failed. Fix errors before retrying. [ 381.064728][ T2614] (syz.3.5070,2614,3):user_dlm_register:674 ERROR: status = -22 [ 381.067449][ T2614] (syz.3.5070,2614,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 381.129685][ T2644] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 381.132371][ T2644] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 381.145103][ T2644] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 381.145128][T25506] Process accounting resumed [ 381.161792][ T2648] Process accounting resumed [ 381.576949][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5083'. [ 381.616814][ T2708] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 381.625982][ T2708] autofs4:pid:2708:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 381.660109][ T6018] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 381.822736][ T6018] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 381.825658][ T6018] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 381.828733][ T6018] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.833826][ T6018] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.836853][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.839463][ T6018] usb 6-1: Product: 늉眷Ỷ》ࡖ㪶琺柌㭅秞♊㋱歩ꇣᕥ싸ࣽ쨻᷿誻ںᬕ툐爜뮽ᨄ❑磫磝昗톖「줄ⶹ䷕꯹Ǜᐰ [ 381.845501][ T6018] usb 6-1: Manufacturer: ౩ [ 381.847004][ T6018] usb 6-1: SerialNumber: 㥮ꭹ氿໚฾쐚຿羄중焗鰔䷔洠ᶀꐑ뾻鉬ⰺ쬈嵈峻䉭ᄁ㾗㓸捐怈얦흊ﮎㅉꒋ늑ጠ챷夐寎悥띹立趙쏞⪇ቂꞻⲭ杲熶닉磳➹傼侾䭧ᐄ脰抇ꘐ﫴匵肗翬眱엳뚪ﳙ㶲뗔鐒㽓煉䎭妞গ붋ో凞䱷漬꛸蟜邔薾㉚됇兵锥林欥∥⤤뷻킵ྦྷ燴ἢ腎⟀埧ᡘ뀳ꈬ㌛䣱㫤 [ 381.911349][ T2719] tipc: Enabling of bearer rejected, failed to enable media [ 381.974404][ T2725] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5086'. [ 382.080474][ T6018] usb 6-1: 0:2 : does not exist [ 382.087305][ T6018] usb 6-1: USB disconnect, device number 53 [ 382.101767][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.203334][ T2749] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5087'. [ 382.437426][ T2749] kvm: kvm [2748]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xe907 [ 382.834209][ T2779] netlink: 'syz.1.5091': attribute type 9 has an invalid length. [ 382.874782][ T2796] fuse: Bad value for 'fd' [ 382.883214][ T2796] ubi31: attaching mtd0 [ 382.887160][ T2796] ubi31: scanning is finished [ 382.888710][ T2796] ubi31: empty MTD device detected [ 382.935490][ T2808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2576 sclass=netlink_tcpdiag_socket pid=2808 comm=syz.8.5093 [ 383.052195][ T2796] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 383.054625][ T2796] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 383.056902][ T2796] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 383.059033][ T2796] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 383.065136][ T2796] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 383.067737][ T2796] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 383.070844][ T2796] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2544034492 [ 383.074857][ T2796] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 383.080917][ T2829] ubi31: background thread "ubi_bgt31d" started, PID 2829 [ 383.147008][ T842] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 383.147559][ T2836] fuse: Unknown parameter 'user_idsystem.posix_acl_default' [ 383.151913][ T2836] fuse: Unknown parameter 'user_idsystem.posix_acl_default' [ 383.177254][ T2841] netlink: 180 bytes leftover after parsing attributes in process `syz.7.5098'. [ 383.180395][ T2841] netlink: 180 bytes leftover after parsing attributes in process `syz.7.5098'. [ 383.225063][ T2841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5098'. [ 383.318022][ T842] usb 6-1: Using ep0 maxpacket: 16 [ 383.321729][ T842] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.326219][ T842] usb 6-1: config 1 interface 0 has no altsetting 0 [ 383.331035][ T842] usb 6-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 383.334196][ T842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.336828][ T842] usb 6-1: Product: Ѓ [ 383.338246][ T842] usb 6-1: Manufacturer: 甘ち᧺캭툵⫾᲌딀ณ㴒喙굡般䀻칟ꖤ㤒ﾁѕꆠ킏ࣵ盂ﵢ雑뼣쑉ﮓ猄鑞ꎽⓖ묖䒿淬項铎縩췃䉮代戵솻ᯂಷ䈷冞 [ 383.349829][ T842] usb 6-1: SerialNumber: 뵐涉㙳ଏ픱骄黅奢茸뎃歄鳑䮿彜 [ 383.356133][ T2779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 383.417427][ T2861] pim6reg: entered allmulticast mode [ 383.447846][ T2872] Cannot find set identified by id 65534 to match [ 383.580574][ T842] usbhid 6-1:1.0: can't add hid device: -71 [ 383.582571][ T842] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 383.592569][ T842] usb 6-1: USB disconnect, device number 54 [ 383.638185][ T2894] random: crng reseeded on system resumption [ 383.703762][ T2894] Restarting kernel threads ... [ 383.706689][ T2894] Done restarting kernel threads. [ 383.859215][ T2906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34764 sclass=netlink_route_socket pid=2906 comm=syz.7.5116 [ 384.035732][ T2918] QAT: Stopping all acceleration devices. [ 384.264591][ T40] kauditd_printk_skb: 350 callbacks suppressed [ 384.264608][ T40] audit: type=1400 audit(2000000417.856:17332): avc: denied { read append } for pid=2930 comm="syz.1.5113" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 384.277333][ T40] audit: type=1400 audit(2000000417.856:17333): avc: denied { open } for pid=2930 comm="syz.1.5113" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 384.284868][ T40] audit: type=1400 audit(2000000417.856:17334): avc: denied { read write } for pid=2930 comm="syz.1.5113" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:fonts_cache_t:s0" [ 384.294252][ T40] audit: type=1400 audit(2000000417.856:17335): avc: denied { open } for pid=2930 comm="syz.1.5113" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:fonts_cache_t:s0" [ 384.305541][ T40] audit: type=1400 audit(2000000417.856:17336): avc: denied { ioctl } for pid=2930 comm="syz.1.5113" path="/dev/video36" dev="devtmpfs" ino=1067 ioctlcmd=0x5630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:fonts_cache_t:s0" [ 384.318269][ T40] audit: type=1400 audit(2000000417.912:17337): avc: denied { mounton } for pid=2935 comm="syz.1.5114" path="/34/file0" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 384.322093][ T2936] XFS (nbd1): SB validate failed with error -5. [ 384.400892][ T40] audit: type=1400 audit(2000000417.987:17338): avc: denied { create } for pid=2945 comm="syz.1.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 384.406576][ T40] audit: type=1400 audit(2000000417.987:17339): avc: denied { bind } for pid=2945 comm="syz.1.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 384.412365][ T40] audit: type=1400 audit(2000000417.987:17340): avc: denied { setopt } for pid=2945 comm="syz.1.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 384.417954][ T40] audit: type=1400 audit(2000000417.987:17341): avc: denied { accept } for pid=2945 comm="syz.1.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 384.811139][ T2982] 9p: Unknown uid 00000000004294967295 [ 384.847506][ T6018] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 384.867890][ T2992] bond0: Device is already in use. [ 384.894220][ T2998] dvmrp6: entered allmulticast mode [ 384.904638][ T2998] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5124'. [ 384.930705][ T2998] pimreg: entered allmulticast mode [ 384.936209][ T2998] dvmrp6: left allmulticast mode [ 385.007648][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 385.011874][ T6018] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 385.014877][ T6018] usb 6-1: config 179 has no interface number 0 [ 385.017436][ T6018] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 385.023902][ T6018] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 385.027734][ T6018] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 385.032228][ T6018] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 385.036805][ T6018] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 385.042333][ T6018] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 385.045553][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.052338][ T2971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.067028][ T2997] pimreg: left allmulticast mode [ 385.276922][ T6002] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input79 [ 385.370249][ T3053] tun0: tun_chr_ioctl cmd 1074025675 [ 385.372981][ T3053] tun0: persist enabled [ 385.379804][ T3053] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 385.382676][ T3053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.388036][ T3053] vhci_hcd vhci_hcd.0: Device attached [ 385.399107][ T3053] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 385.402049][ T3053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.403674][ T3065] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5127'. [ 385.406270][ T3053] vhci_hcd vhci_hcd.0: Device attached [ 385.414845][ T3053] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 385.417634][ T3053] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 385.422332][ T3053] vhci_hcd vhci_hcd.0: Device attached [ 385.532317][ T3069] vhci_hcd: connection closed [ 385.532494][T11270] vhci_hcd: stop threads [ 385.532535][ T3061] vhci_hcd: connection closed [ 385.534237][T11270] vhci_hcd: release socket [ 385.534353][ T3058] vhci_hcd: connection closed [ 385.537386][T11270] vhci_hcd: disconnect device [ 385.541764][T11270] vhci_hcd: stop threads [ 385.543481][T11270] vhci_hcd: release socket [ 385.544042][ T1028] usb 6-1: USB disconnect, device number 55 [ 385.545077][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 385.550065][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 385.552392][T11270] vhci_hcd: disconnect device [ 385.555016][T11270] vhci_hcd: stop threads [ 385.556842][T11270] vhci_hcd: release socket [ 385.560400][T11270] vhci_hcd: disconnect device [ 385.585222][ T34] vhci_hcd: vhci_device speed not set [ 385.703828][T11261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.249083][ T3113] QAT: Stopping all acceleration devices. [ 386.286422][ T3121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5137'. [ 386.376900][ T53] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 386.402026][ T3130] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5138'. [ 386.456493][ T3138] kvm: kvm [3137]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001e) [ 386.537273][ T53] usb 13-1: Using ep0 maxpacket: 8 [ 386.540315][ T53] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 386.543102][ T53] usb 13-1: config 179 has no interface number 0 [ 386.545266][ T53] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 386.549101][ T53] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 386.552810][ T53] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 386.556654][ T53] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 386.560846][ T53] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 386.565669][ T53] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 386.570566][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.576002][ T3103] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 386.624952][ T5999] hid (null): unknown global tag 0xf4 [ 386.629531][ T5999] hid-generic 7FFF:0002:000B.0014: unknown main item tag 0x6 [ 386.632731][ T5999] hid-generic 7FFF:0002:000B.0014: unexpected long global item [ 386.637062][ T5999] hid-generic 7FFF:0002:000B.0014: probe with driver hid-generic failed with error -22 [ 386.656830][ T3162] netlink: 'syz.7.5144': attribute type 1 has an invalid length. [ 386.670951][ T3162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.752970][ T3162] bond5: (slave veth5): Enslaving as an active interface with a down link [ 386.769335][ T3162] bond5: (slave dummy0): making interface the new active one [ 386.776267][ T3162] dummy0: entered promiscuous mode [ 386.778742][ T3162] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 386.783773][ T3162] netlink: 'syz.7.5144': attribute type 10 has an invalid length. [ 386.787162][ T3162] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5144'. [ 386.792421][ T3162] bond5: (slave dummy0): Releasing active interface [ 386.801110][ T842] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input81 [ 386.961169][ T5947] Bluetooth: hci1: connection err: -111 [ 387.054713][ C1] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 387.054712][ T34] usb 13-1: USB disconnect, device number 22 [ 387.059474][ C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 387.164966][ T3297] netlink: 'syz.7.5153': attribute type 11 has an invalid length. [ 387.725856][ T3317] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5157'. [ 387.829427][ T3329] syz_tun: entered allmulticast mode [ 387.834947][ T3329] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5161'. [ 388.120810][ T3345] netlink: 'syz.8.5162': attribute type 1 has an invalid length. [ 388.140423][ T3345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.181788][ T3345] veth5: entered promiscuous mode [ 388.187705][ T3345] bond3: (slave veth5): Enslaving as an active interface with a down link [ 388.199613][ T3345] bond3: entered allmulticast mode [ 388.294751][ T3452] sg_write: data in/out 1376413916/43 bytes for SCSI command 0x0-- guessing data in; [ 388.294751][ T3452] program syz.3.5166 not setting count and/or reply_len properly [ 388.327514][ T3455] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5167'. [ 388.440796][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.448386][T11266] bridge_slave_1: left allmulticast mode [ 388.450330][T11266] bridge_slave_1: left promiscuous mode [ 388.453077][T11266] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.456872][T11266] bridge_slave_0: left allmulticast mode [ 388.459129][T11266] bridge_slave_0: left promiscuous mode [ 388.461603][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.698441][T11266] bond6 (unregistering): (slave gretap2): Releasing active interface [ 388.708298][ T1028] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 388.835406][T11266] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 388.891870][ T1028] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.895432][ T1028] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.898648][ T1028] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 388.902987][ T1028] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.905943][ T1028] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.911110][ T1028] usb 13-1: config 0 descriptor?? [ 389.346142][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.348538][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.351748][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.354469][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.357048][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.359644][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.362490][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.365165][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.367762][ T1028] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 389.377909][ T1028] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 389.519819][T11266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.554839][T11266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.575898][T11266] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 389.629029][T11266] bond0 (unregistering): Released all slaves [ 389.761872][T11266] bond1 (unregistering): Released all slaves [ 389.771266][T11266] bond2 (unregistering): Released all slaves [ 389.779999][T11266] bond3 (unregistering): Released all slaves [ 389.924726][T11266] bond4 (unregistering): Released all slaves [ 389.932718][T11266] bond5 (unregistering): Released all slaves [ 389.939055][T11266] bond6 (unregistering): Released all slaves [ 389.964353][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 389.964365][ T40] audit: type=1400 audit(2000000423.195:17546): avc: denied { read write } for pid=25003 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.975216][ T40] audit: type=1400 audit(2000000423.195:17547): avc: denied { open } for pid=25003 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.985601][ T40] audit: type=1400 audit(2000000423.195:17548): avc: denied { ioctl } for pid=25003 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.996519][ T40] audit: type=1400 audit(2000000423.204:17549): avc: denied { create } for pid=3492 comm="syz.7.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.003756][ T40] audit: type=1400 audit(2000000423.223:17550): avc: denied { create } for pid=3492 comm="syz.7.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 390.012001][ T40] audit: type=1400 audit(2000000423.223:17551): avc: denied { setopt } for pid=3492 comm="syz.7.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 390.060932][ T40] audit: type=1400 audit(2000000423.279:17552): avc: denied { shutdown } for pid=3497 comm="syz.7.5171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.069543][ T40] audit: type=1400 audit(2000000423.279:17553): avc: denied { getopt } for pid=3497 comm="syz.7.5171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.075960][ T40] audit: type=1400 audit(2000000423.279:17554): avc: denied { connect } for pid=3497 comm="syz.7.5171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.079588][ T3498] erspan1: entered promiscuous mode [ 390.085263][ T40] audit: type=1400 audit(2000000423.279:17555): avc: denied { name_connect } for pid=3497 comm="syz.7.5171" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 390.094960][T11266] tipc: Left network mode [ 390.494897][ T5947] Bluetooth: hci0: command 0x0405 tx timeout [ 390.609022][T11266] hsr_slave_0: left promiscuous mode [ 390.612603][T11266] hsr_slave_1: left promiscuous mode [ 390.615178][T11266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.619046][T11266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.622452][T11266] veth0_vlan: left promiscuous mode [ 390.678423][ T3463] usb 13-1: string descriptor 0 read error: -2 [ 391.121572][ T3529] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5175'. [ 391.439896][T11266] lo (unregistering): left allmulticast mode [ 391.554499][ T6002] usb 13-1: USB disconnect, device number 23 [ 391.628131][ T3540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5177'. [ 391.860188][ T3596] netlink: 'syz.8.5184': attribute type 30 has an invalid length. [ 391.876557][ T3596] bond4: option arp_missed_max: invalid value (0) [ 391.878771][ T3596] bond4: option arp_missed_max: allowed values 1 - 255 [ 391.880257][T11276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.881447][ T3618] netlink: 'syz.1.5185': attribute type 11 has an invalid length. [ 391.891079][ T3596] bond4 (unregistering): Released all slaves [ 391.971558][ T3616] md: could not open device unknown-block(2,0). [ 391.973686][ T3616] md: md_import_device returned -6 [ 391.988453][T11266] IPVS: stop unused estimator thread 0... [ 392.031357][ T3695] netlink: 'syz.8.5191': attribute type 6 has an invalid length. [ 392.050456][ T6002] hid_parser_main: 6 callbacks suppressed [ 392.050469][ T6002] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 392.056782][ T6002] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz0 [ 392.106518][ T3703] fido_id[3703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 392.201110][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5191'. [ 392.245798][ T3727] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 392.250442][ T3727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.399347][ T3737] kvm: user requested TSC rate below hardware speed [ 392.441963][ T3745] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 392.644187][ T5947] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 392.648442][ T5947] Bluetooth: hci0: Injecting HCI hardware error event [ 392.654497][ T5947] Bluetooth: hci0: hardware error 0x00 [ 392.693046][ T3765] netlink: 'syz.7.5201': attribute type 1 has an invalid length. [ 392.750459][ T3765] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.756109][ T3765] bond6: (slave bond7): making interface the new active one [ 392.758906][ T3765] bond6: (slave bond7): Enslaving as an active interface with an up link [ 392.763686][ T3765] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5201'. [ 392.766868][ T3765] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5201'. [ 392.770769][ T3765] 8021q: adding VLAN 0 to HW filter on device bond6 [ 392.801311][ T3848] hugetlbfs: Bad value 'B%' for mount option 'size' [ 392.801311][ T3848] [ 392.808075][ T3846] tipc: Enabled bearer , priority 10 [ 392.958172][ T3864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.136356][ T3880] lo speed is unknown, defaulting to 1000 [ 393.140078][ T3880] xfrm0 speed is unknown, defaulting to 1000 [ 393.202931][ T3911] tun0: tun_chr_ioctl cmd 1074025675 [ 393.207237][ T3911] tun0: persist enabled [ 393.353668][ T3930] netlink: 'syz.8.5214': attribute type 1 has an invalid length. [ 393.445266][ T3936] SELinux: syz.8.5216 (3936) set checkreqprot to 1. This is no longer supported. [ 393.706090][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5220'. [ 393.709118][ T3950] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5220'. [ 393.713339][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5220'. [ 393.717155][ T3950] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5220'. [ 393.838561][ T3988] sctp: [Deprecated]: syz.8.5223 (pid 3988) Use of int in maxseg socket option. [ 393.838561][ T3988] Use struct sctp_assoc_value instead [ 393.874378][ T53] tipc: Node number set to 3692991876 [ 394.028303][ T4020] overlayfs: regular lower layers cannot follow data lower layers [ 394.032633][ T4016] netlink: 'syz.7.5234': attribute type 5 has an invalid length. [ 394.081654][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5236'. [ 394.190067][ T4033] netlink: 'syz.1.5237': attribute type 2 has an invalid length. [ 394.193474][ T4033] netlink: 'syz.1.5237': attribute type 1 has an invalid length. [ 394.406937][ T4043] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 394.847156][ T4078] geneve2: entered promiscuous mode [ 394.848989][ T4078] geneve2: entered allmulticast mode [ 394.851458][T11270] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.854341][T11270] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.856284][ T4078] virtio-fs: tag not found [ 394.857107][T11270] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.861223][ T5947] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 394.863278][T11270] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.863961][ T4078] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 394.863976][ T4078] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 394.864193][ T4078] vhci_hcd vhci_hcd.0: Device attached [ 394.864567][ T4082] vhci_hcd: connection closed [ 394.865050][T11267] vhci_hcd: stop threads [ 394.865061][T11267] vhci_hcd: release socket [ 394.865068][T11267] vhci_hcd: disconnect device [ 394.906761][ T4087] dlm: no locking on control device [ 395.053766][ T4092] netfs: Couldn't get user pages (rc=-14) [ 395.227679][ T4099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.231838][ T4099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.424910][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 395.424922][ T40] audit: type=1400 audit(2000000428.291:17867): avc: denied { create } for pid=4114 comm="syz.1.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 395.481946][ T40] audit: type=1400 audit(2000000428.347:17868): avc: denied { setopt } for pid=4114 comm="syz.1.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 395.584274][ T4137] overlayfs: missing 'lowerdir' [ 395.622026][ T40] audit: type=1400 audit(2000000428.478:17869): avc: denied { read } for pid=4138 comm="syz.7.5258" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.630337][ T40] audit: type=1400 audit(2000000428.478:17870): avc: denied { open } for pid=4138 comm="syz.7.5258" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.638051][ T40] audit: type=1400 audit(2000000428.478:17871): avc: denied { ioctl } for pid=4138 comm="syz.7.5258" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.658417][ T40] audit: type=1400 audit(2000000428.506:17872): avc: denied { write } for pid=4138 comm="syz.7.5258" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.671110][ T40] audit: type=1400 audit(2000000428.534:17873): avc: denied { create } for pid=4138 comm="syz.7.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.677233][ T40] audit: type=1400 audit(2000000428.534:17874): avc: denied { connect } for pid=4138 comm="syz.7.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.715346][ T40] audit: type=1400 audit(2000000428.571:17875): avc: denied { prog_load } for pid=4142 comm="syz.1.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.721463][ T40] audit: type=1400 audit(2000000428.571:17876): avc: denied { bpf } for pid=4142 comm="syz.1.5259" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 397.341461][T11266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.766134][ T4204] __nla_validate_parse: 8 callbacks suppressed [ 398.766146][ T4204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5267'. [ 399.039687][ T53] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 399.210827][ T53] usb 12-1: Using ep0 maxpacket: 8 [ 399.215895][ T53] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 399.218497][ T53] usb 12-1: config 179 has no interface number 0 [ 399.220439][ T53] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 399.224545][ T53] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 399.227943][ T53] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.231301][ T53] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 399.236286][ T53] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 399.240300][ T53] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 399.243218][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.247750][ T4207] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 399.468390][ T53] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input82 [ 399.724795][ T34] usb 12-1: USB disconnect, device number 27 [ 399.724869][ C1] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 399.729542][ C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 399.771635][ T4248] xt_cluster: node mask cannot exceed total number of nodes [ 399.781288][ T4249] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5272'. [ 399.784569][ T4249] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5272'. [ 399.803219][ T4252] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5274'. [ 399.989103][ T4265] IPv6: sit1: Disabled Multicast RS [ 399.992586][ T4265] sit1: entered allmulticast mode [ 400.135307][ T4273] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 400.137597][ T4273] overlayfs: failed to set xattr on upper [ 400.139461][ T4273] overlayfs: ...falling back to redirect_dir=nofollow. [ 400.142638][ T4273] overlayfs: ...falling back to index=off. [ 400.144455][ T4273] overlayfs: ...falling back to uuid=null. [ 400.146438][ T4273] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 400.500351][ T4299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.620392][ T4313] overlayfs: failed to resolve './file1': -2 [ 400.709307][ T4328] ip6t_srh: unknown srh match flags 4000 [ 400.711919][ T4328] syzkaller0: entered promiscuous mode [ 400.842603][ T4345] mkiss: ax0: crc mode is auto. [ 400.846755][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 400.846769][ T40] audit: type=1400 audit(2000000433.358:17943): avc: denied { create } for pid=4344 comm="syz.1.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.857474][ T40] audit: type=1400 audit(2000000433.368:17944): avc: denied { connect } for pid=4344 comm="syz.1.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.865701][ T40] audit: type=1400 audit(2000000433.368:17945): avc: denied { open } for pid=4344 comm="syz.1.5284" path="/dev/ttyq7" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 400.879431][ T34] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 400.916898][ T40] audit: type=1400 audit(2000000433.433:17946): avc: denied { node_bind } for pid=4342 comm="syz.8.5283" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 400.917505][ T4351] openvswitch: netlink: Flow key attribute not present in set flow. [ 400.965530][ T4359] netlink: 'syz.8.5286': attribute type 9 has an invalid length. [ 400.987421][ T40] audit: type=1400 audit(2000000433.498:17947): avc: denied { bpf } for pid=4360 comm="syz.1.5287" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.994109][ T40] audit: type=1400 audit(2000000433.498:17948): avc: denied { read } for pid=4362 comm="syz.8.5288" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 401.001405][ T40] audit: type=1400 audit(2000000433.498:17949): avc: denied { open } for pid=4362 comm="syz.8.5288" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 401.008926][ T40] audit: type=1400 audit(2000000433.498:17950): avc: denied { allowed } for pid=4362 comm="syz.8.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 401.015573][ T40] audit: type=1400 audit(2000000433.508:17951): avc: denied { map } for pid=4362 comm="syz.8.5288" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=121549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 401.022049][ T4366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 401.023888][ T40] audit: type=1400 audit(2000000433.508:17952): avc: denied { read write } for pid=4362 comm="syz.8.5288" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=121549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 401.025666][ T4366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 401.026713][ T4366] vhci_hcd vhci_hcd.0: Device attached [ 401.047175][ T4368] vhci_hcd: connection closed [ 401.047388][ T8472] vhci_hcd: stop threads [ 401.050492][ T8472] vhci_hcd: release socket [ 401.051962][ T8472] vhci_hcd: disconnect device [ 401.053439][ T34] usb 12-1: config index 0 descriptor too short (expected 45, got 36) [ 401.053466][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 171, changing to 11 [ 401.059399][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5290'. [ 401.059684][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41384, setting to 1024 [ 401.066864][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.070975][ T34] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.074195][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.078152][ T34] usb 12-1: config 0 descriptor?? [ 401.144998][ T4380] netlink: 'syz.8.5292': attribute type 8 has an invalid length. [ 401.512126][ T34] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 401.517683][ T34] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 401.610329][ T5947] Bluetooth: hci4: SCO packet too small [ 401.793311][ T1028] usb 12-1: USB disconnect, device number 28 [ 401.869551][ T4430] netlink: 'syz.1.5299': attribute type 1 has an invalid length. [ 401.882702][ T4430] bond4: entered promiscuous mode [ 401.885342][ T4430] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.900875][ T4430] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.903388][ T4430] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 401.907058][ T4430] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 401.914603][ T4430] bond4: (slave ip6gre1): making interface the new active one [ 401.917475][ T4430] ip6gre1: entered promiscuous mode [ 401.920967][ T4430] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 401.930475][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5299'. [ 402.043634][ T4430] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 402.046865][ T4430] ip6gre1: left promiscuous mode [ 402.089728][ T4430] bond4 (unregistering): Released all slaves [ 402.314117][ T4510] xt_nfacct: accounting object `syz0' does not exist [ 402.316495][ T4510] netlink: 'syz.1.5302': attribute type 10 has an invalid length. [ 402.407580][ T4510] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 402.494271][ T4526] netlink: 'syz.7.5307': attribute type 1 has an invalid length. [ 402.510666][ T4526] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5307'. [ 402.579403][ T4567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=4567 comm=syz.7.5310 [ 402.584136][ T4567] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5310'. [ 402.609865][ T4567] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5310'. [ 402.640625][ T4575] netlink: 'syz.8.5313': attribute type 17 has an invalid length. [ 402.643975][ T4575] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5313'. [ 402.649613][ T4576] o2cb: This node has not been configured. [ 402.651513][ T4576] o2cb: Cluster check failed. Fix errors before retrying. [ 402.653764][ T4576] (syz.7.5312,4576,1):user_dlm_register:674 ERROR: status = -22 [ 402.656705][ T4576] (syz.7.5312,4576,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 402.762723][ T4576] o2cb: This node has not been configured. [ 402.765090][ T4576] o2cb: Cluster check failed. Fix errors before retrying. [ 402.768053][ T4576] (syz.7.5312,4576,2):user_dlm_register:674 ERROR: status = -22 [ 402.770763][ T4576] (syz.7.5312,4576,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 402.815543][ T1184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.176079][ T4611] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 403.178026][ T4613] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 404.471642][ T4666] netlink: 'syz.7.5334': attribute type 3 has an invalid length. [ 404.595385][ T4672] __nla_validate_parse: 1 callbacks suppressed [ 404.595401][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5336'. [ 404.747188][T11252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.749658][T11252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.594093][ T4736] netlink: 'syz.8.5345': attribute type 15 has an invalid length. [ 405.596678][ T4736] netlink: 'syz.8.5345': attribute type 15 has an invalid length. [ 405.599141][ T4736] netlink: 'syz.8.5345': attribute type 15 has an invalid length. [ 405.708673][ T4745] vlan3: entered promiscuous mode [ 405.710866][ T4745] bridge0: entered promiscuous mode [ 405.857542][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5352'. [ 405.936672][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5354'. [ 405.954982][ T4780] 8021q: adding VLAN 0 to HW filter on device bond9 [ 406.043441][ T4829] No buffer was provided with the request [ 406.103111][ T4840] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 4840 comm: syz.7.5362) [ 406.165318][ T4850] program syz.1.5364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.176640][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5364'. [ 406.222705][ T40] kauditd_printk_skb: 218 callbacks suppressed [ 406.222723][ T40] audit: type=1400 audit(2000000438.389:18171): avc: denied { create } for pid=4851 comm="syz.1.5365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 406.223815][ T4852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5365'. [ 406.314668][ T4856] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5367'. [ 406.356333][ T40] audit: type=1400 audit(2000000438.519:18172): avc: denied { read } for pid=4855 comm="syz.1.5367" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.363715][ T40] audit: type=1400 audit(2000000438.519:18173): avc: denied { open } for pid=4855 comm="syz.1.5367" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.371940][ T40] audit: type=1400 audit(2000000438.519:18174): avc: denied { ioctl } for pid=4855 comm="syz.1.5367" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.383261][ T64] Bluetooth: hci4: unexpected event for opcode 0x2043 [ 406.499498][ T40] audit: type=1400 audit(2000000438.650:18175): avc: denied { create } for pid=4855 comm="syz.1.5367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 406.861159][ T4866] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 406.869250][ T40] audit: type=1400 audit(2000000438.996:18176): avc: denied { append } for pid=4865 comm="syz.8.5368" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.876661][ T40] audit: type=1400 audit(2000000438.996:18177): avc: denied { write } for pid=4865 comm="syz.8.5368" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 407.023030][ T4844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.024950][ T4844] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 407.028162][ T4844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.030429][ T4844] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 407.272912][ T40] audit: type=1400 audit(2000000439.370:18178): avc: denied { create } for pid=4890 comm="syz.8.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 407.279176][ T40] audit: type=1400 audit(2000000439.370:18179): avc: denied { setopt } for pid=4890 comm="syz.8.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 407.295832][ T40] audit: type=1400 audit(2000000439.389:18180): avc: denied { create } for pid=4894 comm="syz.1.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 407.448401][ T4901] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5372'. [ 407.453178][ T4901] IPVS: length: 4096 != 8 [ 407.562391][ T4907] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5374'. [ 407.568654][ T4907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4118 sclass=netlink_route_socket pid=4907 comm=syz.1.5374 [ 407.769970][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5378'. [ 407.826328][ T4923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=4923 comm=syz.1.5379 [ 407.831390][ T4923] validate_nla: 62 callbacks suppressed [ 407.831400][ T4923] netlink: 'syz.1.5379': attribute type 2 has an invalid length. [ 407.837175][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5379'. [ 407.872313][ T4925] program syz.1.5380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.887407][ T4925] bond0: entered promiscuous mode [ 407.889712][ T4925] bond_slave_0: entered promiscuous mode [ 407.892355][ T4925] bond_slave_1: entered promiscuous mode [ 407.895002][ T4925] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 407.902205][ T4925] batadv0: entered promiscuous mode [ 407.906386][ T4925] debugfs: 'hsr1' already exists in 'hsr' [ 407.908931][ T4925] Cannot create hsr debugfs directory [ 407.913325][ T4925] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 408.080073][ T4932] 9pnet_fd: p9_fd_create_unix (4932): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 408.111810][ T4936] Cannot find add_set index 0 as target [ 408.183088][ T4940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=346 sclass=netlink_route_socket pid=4940 comm=syz.1.5383 [ 408.252278][ T4948] netlink: 'syz.1.5386': attribute type 11 has an invalid length. [ 408.255619][ T4948] netlink: 'syz.1.5386': attribute type 13 has an invalid length. [ 408.325416][ T4956] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 408.558743][ T6002] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 408.719169][ T6002] usb 6-1: Using ep0 maxpacket: 16 [ 408.723099][ T6002] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.727448][ T6002] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 408.732626][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 408.737150][ T6002] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.744953][ T6002] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 408.748801][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.752430][ T6002] usb 6-1: Product: syz [ 408.754241][ T6002] usb 6-1: Manufacturer: syz [ 408.756229][ T6002] usb 6-1: SerialNumber: syz [ 408.760979][ T6002] usb 6-1: config 0 descriptor?? [ 408.825952][ T6002] rc_core: IR keymap rc-xbox-dvd not found [ 408.828405][ T6002] Registered IR keymap rc-empty [ 408.831268][ T6002] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 408.836625][ T6002] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input85 [ 408.976491][T11258] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.984252][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.988376][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.004598][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 413.004610][ T40] audit: type=1400 audit(2000000444.728:18242): avc: denied { execute } for pid=5012 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 413.014650][ T40] audit: type=1400 audit(2000000444.728:18243): avc: denied { execute_no_trans } for pid=5012 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 413.022847][ T40] audit: type=1400 audit(2000000444.737:18244): avc: denied { execmem } for pid=5012 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 413.194935][ T40] audit: type=1400 audit(2000000444.906:18245): avc: denied { create } for pid=5015 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.462666][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.821127][ T6018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.612470][ T1184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.783741][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.164252][T11258] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.355924][ T40] audit: type=1400 audit(2000000466.569:18246): avc: denied { egress } for pid=6018 comm="kworker/0:5" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 436.364354][ T40] audit: type=1400 audit(2000000466.569:18247): avc: denied { sendto } for pid=6018 comm="kworker/0:5" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 437.730192][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.885267][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.960472][T11256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.964858][T11256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.066862][T11256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.070189][T11256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.156571][T11256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.160357][T11256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.237054][T11256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.240533][T11256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.367539][ T4844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 449.369638][ T4844] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 449.374205][ T1028] ------------[ cut here ]------------ [ 449.376963][ T1028] workqueue: cannot queue hci_conn_timeout on wq hci4 [ 449.380002][ T1028] WARNING: CPU: 2 PID: 1028 at kernel/workqueue.c:2257 __queue_work+0xd03/0x1160 [ 449.383247][ T1028] Modules linked in: [ 449.385050][ T40] audit: type=1400 audit(2000000478.753:18248): avc: denied { write } for pid=5917 comm="syz-executor" path="pipe:[8231]" dev="pipefs" ino=8231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 449.385197][ T1028] CPU: 2 UID: 0 PID: 1028 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 449.385245][ T1028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.400497][ T1028] Workqueue: events l2cap_chan_timeout [ 449.402713][ T1028] RIP: 0010:__queue_work+0xd03/0x1160 [ 449.404875][ T1028] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 af e1 38 00 90 0f 0b 90 e9 b4 f5 ff [ 449.412196][ T1028] RSP: 0018:ffffc90005fbfa38 EFLAGS: 00010086 [ 449.414665][ T1028] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 449.417824][ T1028] RDX: ffff888028438000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 449.420964][ T1028] RBP: ffff8880200a4948 R08: 0000000000000001 R09: 0000000000000000 [ 449.424317][ T1028] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 449.427201][ T1028] R13: ffff88804edf8800 R14: ffff8880200a4990 R15: ffff88804edf8978 [ 449.429729][ T1028] FS: 0000000000000000(0000) GS:ffff8880d6c05000(0000) knlGS:0000000000000000 [ 449.432561][ T1028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.434682][ T1028] CR2: 00007f79d7031186 CR3: 000000003278b000 CR4: 0000000000352ef0 [ 449.437217][ T1028] Call Trace: [ 449.438346][ T1028] [ 449.439307][ T1028] ? __cancel_work+0x2c8/0x370 [ 449.440877][ T1028] ? clear_pending_if_disabled+0xa8/0x210 [ 449.442715][ T1028] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 449.444688][ T1028] __queue_delayed_work+0x35b/0x460 [ 449.446383][ T1028] queue_delayed_work_on+0x1b5/0x200 [ 449.448068][ T1028] l2cap_chan_del+0x5a0/0x8f0 [ 449.449628][ T1028] l2cap_chan_close+0xfe/0xa30 [ 449.451168][ T1028] ? __pfx_l2cap_chan_close+0x10/0x10 [ 449.452929][ T1028] l2cap_chan_timeout+0x196/0x310 [ 449.454557][ T1028] process_one_work+0x9cf/0x1b70 [ 449.456164][ T1028] ? __pfx_process_one_work+0x10/0x10 [ 449.457952][ T1028] ? assign_work+0x1a0/0x250 [ 449.459445][ T1028] worker_thread+0x6c8/0xf10 [ 449.460942][ T1028] ? __pfx_worker_thread+0x10/0x10 [ 449.462693][ T1028] kthread+0x3c5/0x780 [ 449.464165][ T1028] ? __pfx_kthread+0x10/0x10 [ 449.465670][ T1028] ? rcu_is_watching+0x12/0xc0 [ 449.467211][ T1028] ? __pfx_kthread+0x10/0x10 [ 449.468693][ T1028] ret_from_fork+0x675/0x7d0 [ 449.470189][ T1028] ? __pfx_kthread+0x10/0x10 [ 449.471684][ T1028] ret_from_fork_asm+0x1a/0x30 [ 449.473224][ T1028] [ 449.474243][ T1028] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 449.476552][ T1028] CPU: 2 UID: 0 PID: 1028 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 449.479499][ T1028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.482936][ T1028] Workqueue: events l2cap_chan_timeout [ 449.484673][ T1028] Call Trace: [ 449.485796][ T1028] [ 449.486756][ T1028] dump_stack_lvl+0x3d/0x1f0 [ 449.488244][ T1028] vpanic+0x640/0x6f0 [ 449.489553][ T1028] ? __queue_work+0xd03/0x1160 [ 449.491073][ T1028] panic+0xca/0xd0 [ 449.492281][ T1028] ? __pfx_panic+0x10/0x10 [ 449.493723][ T1028] ? check_panic_on_warn+0x1f/0xb0 [ 449.495369][ T1028] check_panic_on_warn+0xab/0xb0 [ 449.496979][ T1028] __warn+0xf6/0x3c0 [ 449.498256][ T1028] ? __queue_work+0xd03/0x1160 [ 449.499753][ T1028] report_bug+0x3c3/0x580 [ 449.501106][ T1028] ? __queue_work+0xd03/0x1160 [ 449.502719][ T1028] handle_bug+0x184/0x210 [ 449.504095][ T1028] exc_invalid_op+0x17/0x50 [ 449.505579][ T1028] asm_exc_invalid_op+0x1a/0x20 [ 449.507134][ T1028] RIP: 0010:__queue_work+0xd03/0x1160 [ 449.508869][ T1028] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 af e1 38 00 90 0f 0b 90 e9 b4 f5 ff [ 449.514937][ T1028] RSP: 0018:ffffc90005fbfa38 EFLAGS: 00010086 [ 449.516862][ T1028] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 449.519399][ T1028] RDX: ffff888028438000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 449.521925][ T1028] RBP: ffff8880200a4948 R08: 0000000000000001 R09: 0000000000000000 [ 449.524455][ T1028] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 449.526955][ T1028] R13: ffff88804edf8800 R14: ffff8880200a4990 R15: ffff88804edf8978 [ 449.529496][ T1028] ? __warn_printk+0x198/0x350 [ 449.531042][ T1028] ? __warn_printk+0x1a5/0x350 [ 449.532584][ T1028] ? __queue_work+0xd02/0x1160 [ 449.534132][ T1028] ? __cancel_work+0x2c8/0x370 [ 449.535661][ T1028] ? clear_pending_if_disabled+0xa8/0x210 [ 449.537497][ T1028] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 449.539462][ T1028] __queue_delayed_work+0x35b/0x460 [ 449.541161][ T1028] queue_delayed_work_on+0x1b5/0x200 [ 449.542887][ T1028] l2cap_chan_del+0x5a0/0x8f0 [ 449.544399][ T1028] l2cap_chan_close+0xfe/0xa30 [ 449.545980][ T1028] ? __pfx_l2cap_chan_close+0x10/0x10 [ 449.547713][ T1028] l2cap_chan_timeout+0x196/0x310 [ 449.549316][ T1028] process_one_work+0x9cf/0x1b70 [ 449.550930][ T1028] ? __pfx_process_one_work+0x10/0x10 [ 449.552659][ T1028] ? assign_work+0x1a0/0x250 [ 449.554167][ T1028] worker_thread+0x6c8/0xf10 [ 449.555655][ T1028] ? __pfx_worker_thread+0x10/0x10 [ 449.557336][ T1028] kthread+0x3c5/0x780 [ 449.558671][ T1028] ? __pfx_kthread+0x10/0x10 [ 449.560154][ T1028] ? rcu_is_watching+0x12/0xc0 [ 449.561732][ T1028] ? __pfx_kthread+0x10/0x10 [ 449.563271][ T1028] ret_from_fork+0x675/0x7d0 [ 449.564765][ T1028] ? __pfx_kthread+0x10/0x10 [ 449.566256][ T1028] ret_from_fork_asm+0x1a/0x30 [ 449.567823][ T1028] [ 449.569452][ T1028] Kernel Offset: disabled [ 449.570842][ T1028] Rebooting in 86400 seconds..