last executing test programs: 15m41.10388733s ago: executing program 32 (id=27): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0xd) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x40, 0x0, 0x6}}, 0x14) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20088001) epoll_wait(r0, &(0x7f0000000380)=[{}, {}], 0x2, 0xff) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2d4, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffeff, 0x14}}}}, [@NL80211_ATTR_TID_CONFIG={0x2b4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x290, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x6c, 0x60, 0x60, 0x5, 0x48, 0x18, 0x1b, 0x1, 0xb, 0x18, 0xb, 0x30, 0x5, 0x6d, 0x12, 0x36, 0x6, 0x30, 0x24, 0x0, 0x1b, 0x36, 0x12, 0x0, 0x6c, 0x2, 0xc, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xd8, 0x7, 0x1ff, 0x8, 0xf, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x8}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x7, 0x5}, {0x5, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x6}, {0x6, 0x8}, {0x0, 0x3}, {0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x5}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0xa}, {0x4}, {0x5, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x4}, {0x7, 0x9}, {0x3}, {0x4, 0xa}, {0x2}, {0x5, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x5, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x2, 0x3}, {}, {0x0, 0x9}, {0x2, 0x7}, {0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0x9}, {0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x6}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x36, 0x24, 0x12, 0x18, 0x24]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x6, 0xa}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x16, 0x5, 0x532bc4e4c6577338, 0xb, 0x2, 0x1b, 0x1, 0x16, 0x48, 0x5, 0x36, 0x9, 0x3, 0x5, 0x12, 0x58, 0x60, 0x5, 0x18, 0xb]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x108, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x4, 0xa}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0xa}, {0x4}, {0x5, 0x2}, {0x4, 0x1}, {0x7}, {0x5, 0x9}, {0x0, 0xa}, {0x3}, {0x5, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x7}, {0x6, 0x3}, {0x4, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x6, 0x9}, {0x7}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x6}, {0x2, 0x4}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x8}, {0x2, 0x6}, {0x2, 0x2}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x6}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x8, 0x3ff, 0xfffc, 0x8, 0x400, 0x6, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x3}, {0x0, 0x8}, {0x2}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x2, 0x5}, {0x6, 0x3}, {0x5, 0x4}, {0x4, 0xa}, {}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0xa}, {0x2, 0xa}, {0x2, 0x6}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0x3}, {0x7}, {0x1, 0x7}, {0x4, 0x7}, {0x2, 0x5}, {0x6, 0x5}, {0x2, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x6}, {0x7, 0x1}, {0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x60, 0x36, 0x5, 0xb, 0x79, 0x9, 0x30, 0x1, 0x0, 0x6c, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x4, 0xf, 0x0, 0x9, 0x5, 0x1, 0x84]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x170, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe7ee}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x600000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe31}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfa5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc1c}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ac}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc60}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}}, 0x40009) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2d}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000cc0)) (async) read$FUSE(r0, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETLOCK(r2, &(0x7f0000002e40)={0x1f, 0x37, 0x2, {0x1, 0x1, 0x4, r7, 0x1, ','}}, 0x1f) (async) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000002e80)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002ec0)='./binderfs2/custom1\x00', 0x1802, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002f40)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa, 0x35}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40890}, 0x20000804) (async) write$selinux_attr(0xffffffffffffffff, &(0x7f0000003080)='system_u:object_r:src_t:s0\x00', 0x1b) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x1c, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x10) r10 = socket(0x8, 0x1, 0x3) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000003200)={'sit0\x00', &(0x7f00000031c0)={@local, @private=0xa010102, 0x1, 0x6}}) ioctl$sock_rose_SIOCDELRT(r10, 0x890c, &(0x7f0000003240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9, @default, @rose={'rose', 0x0}, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000003380)={&(0x7f00000032c0), 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) 14m49.396812163s ago: executing program 33 (id=486): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$UHID_INPUT(r5, &(0x7f0000000ac0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="c793172211a614355acf821a9416e3f487396d10717a118e0128ecee6f4f57412c4cc6d7400e099c54bd7a1ecb3b7d2af2d8af17142912cf3e86e0816e5f39f092ff317af9159bdd0387ef149ab8f7a2fcfbfa1700d37343dd209e0004ae9206c4c2673851ac902353b68991403a2105b049e2ea86d6e66f58ee358e4cb9abe9219fbb4bf10da849b5c1afee1ed3bf5c3adca0430a2afab0ef6d4058c4fee009c405371d3d45947be6f7ccaeb18bcc6023077f73ed20", 0xb6}], 0x1}}], 0x1, 0x0) 13m9.090503998s ago: executing program 34 (id=1007): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x16) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a3a00002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 13m8.947503352s ago: executing program 35 (id=1009): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3ddf16e9a0f5b1a23af0811201000092ecc620ac030109020001000020000904c40101fffd00"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x300, 0x2000004, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x2}}}, 0x24}}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x4008c001, 0x0) pipe(&(0x7f00000001c0)) timer_settime(r5, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) r8 = socket(0x22, 0x2, 0x3) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000eeb19272de63f02c34c98f6f3aa34b00", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf2509000000"], 0x14}}, 0x4000) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000600)=@bpq0, 0x10) 12m59.116344706s ago: executing program 36 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001900), 0x4) (async, rerun: 32) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 32) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x9a6b820c61fc1a69) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000280)=0x1) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000380)) (async) getsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r7, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) (async, rerun: 32) r10 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000010, 0x2000000, 0x7}]}) (async, rerun: 64) r11 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x5, @meta={0x50314b52, 0x79cc654, 0xc9c, 0x5dad, 0x44a8f236}}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async, rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000004c0)={0x0, 0x9, 0x6, 0x0, 0x73}) (rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r11, 0x810c5701, &(0x7f0000000100)) r13 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r13, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffd94, 0x0, 0x0, 0x0, 0xffe1}, 0x0) 12m15.501110811s ago: executing program 37 (id=1291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 11m36.283129263s ago: executing program 38 (id=1431): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x5da1, 0x6efa, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='gfs2\x00', 0x21000d, 0x0) 11m14.738496741s ago: executing program 39 (id=1537): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004005) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) 10m27.525083449s ago: executing program 40 (id=1736): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x26, 0x0, &(0x7f00000006c0)="e460cdfbef2408002900119343056a0f000000072beb3014cd3ec8a755c1e1380081ffad0004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x26, 0x0, &(0x7f00000006c0)="e460cdfbef2408002900119343056a0f000000072beb3014cd3ec8a755c1e1380081ffad0004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) (async) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000140)=0x1) 9m51.070054386s ago: executing program 41 (id=2015): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @multicast2}, {0x307, @multicast}, 0xe, {0x2, 0x4e24, @loopback}, 'lo\x00'}) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)={[&(0x7f0000000500)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\xe2\xb0I#\x8dZ\x8d\xf0\xa2\x97Q@\x0e^\x14\xe0\xbdv\xfd\xf2{\xda=\xfa\xca\x03\x10\xed\xd3\x96\xebUc\x88\x15\x05\xc7\x88u\x11R\x19P@z:\xc6<\xbb\x82\xa9\xcfU\x93\x85.Z#\x14 \n\xd9\xe3\xef\x15\xe8\x19\x92+\xe8\xb4[\xf8\xfb\xcfw\xbf\xab\x92\x01[\xc0\x9c\x94Q\x12\xdb\x1ai\x18\b\xd2\xd0\x8fD%\xfc\xe52\x18\x842\x19\x19V\x7f\xf8\x11I\x88\xb1\x9c\x7fl\nE}\x9d\xcbI\xdf\xa5\x90-w\x87\xbd\xc1\xa4\xaa\xfdf\xbe\xdf\xb5']}) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000) 8m45.634610873s ago: executing program 42 (id=2244): openat$sequencer(0xffffffffffffff9c, 0x0, 0x751083, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='map_files\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$userio(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(r0, &(0x7f0000000500)='./file0\x00', 0xa) 8m37.708096238s ago: executing program 43 (id=2252): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 8m28.972195295s ago: executing program 44 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xed}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0xa, 0x3) getpid() r3 = socket(0x28, 0x801, 0x0) shutdown(r3, 0x2) 7m51.625908981s ago: executing program 45 (id=2283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "b00dea55fe1c39c5", "0b59a18dc565492a7257f7bc0cf24d6568d8ca8aced6a5f94de56e4a39ffae42", "e60a84b0", "48f7cfcde39d035d"}, 0x38) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) 6m22.428626111s ago: executing program 46 (id=2545): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340), 0x0) 3m52.426248667s ago: executing program 47 (id=3862): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x23) (async) r0 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async, rerun: 32) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) (async, rerun: 64) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10410, &(0x7f00000000c0)='norecovery') (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 3m24.871373376s ago: executing program 48 (id=4293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030020004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000210000000000000000200002000a"], 0x60}}, 0x0) 3m14.71247612s ago: executing program 49 (id=4395): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4f20, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00991e0000000000000000"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f048}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40081271, &(0x7f0000000980)=0x4000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000140)='xfs\x00', 0x800, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10, r1, 0x6d021000) 3m2.582602909s ago: executing program 2 (id=4551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000008c0), &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x95e, 0x0, 0x6, 0x9}, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) 3m1.672158203s ago: executing program 2 (id=4561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0xa07, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20008840) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) 3m1.548940275s ago: executing program 2 (id=4564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x101) dup2(r3, r1) close_range(r0, 0xffffffffffffffff, 0x2) 3m0.668468008s ago: executing program 2 (id=4581): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) timer_create(0xefe5b9899fda1222, 0x0, &(0x7f0000001d40)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0/../file0\x00'}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) (async) read$midi(r0, 0x0, 0x43) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) timer_create(0xefe5b9899fda1222, 0x0, &(0x7f0000001d40)) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0/../file0\x00'}) (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) 3m0.412457919s ago: executing program 2 (id=4584): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x190) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x20, 0xfffeffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) (async) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000202505a1a440000102030109025c0d020107b0060904000001020d00000524060001052400ff7f0d240f010000006066ff04000106241a09002009058103080003f7090904010000020d00000904010102020d000009058202ff030507b5090503020800060208"], 0x0) syz_usb_ep_read(r3, 0x81, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000500)="38bdb692191e9c3e4f2107785feb0d11083e745ba6aa1ed45264c32ab9b886a31aed362a8fd76758fead60ba0963ec9d174cd90f07cae97a49848d6dff3642e9531490b1b8982eacfae9c29c38281da3bee73922fc8551483ed7261b585ade5f3fa3f592b6bca569d54f356a706d777291b594d1456ae5a66e74a70f14c24e3ba6d2eb9e4868b8c9ea7239fbbd8f7907535315a226c3309abdc87588926876ecdf8460b4", 0xa4}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000680)="b63b7af2c1f73f9e9d0a56f41cfd04e61ab88004bf2b24cfa89585a178ff2ee4fc6fb2a7745bebad3af6b6917e4f79037c8a4d0cdc0171681225570d2bf7d59984aa352124e47b38aa78a91f044c06e0a7ee1a523f3291c8c0114b39a9508d09360d4628df237ca5dbd0dcd8d9d42ce764c0258627153c5703662baa4f5238c894efd7acadc3c9dc15dda06d1a846dd91a59551c1367588a4827fd563e51ac9507c627997b9931260c05ff70bdaaad58a3dcd4ae341f0f84a2c3f40137ba05a2c042ce672611589a6dcfa82925cafdd85c59a2b3ae2ded8cc384e9e9467c913556fa0616a50971e36b00000000000000", 0xf0}], 0x3) (async) cachestat(r4, &(0x7f0000000000)={0xa41f, 0x9}, &(0x7f0000000180), 0x0) (async) r5 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r6, 0xff09, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f00000003c0), 0x1000020, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@uuid_on}, {@workdir={'workdir', 0x3d, './file1/file0/../file0'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(r0, &(0x7f0000000140)='./file0/file1\x00', 0x0) 3m0.092501353s ago: executing program 2 (id=4593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/53, 0x35) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x871a15abc695f91d, 0x0, 0x25dfdbfc, {}, [{0x60}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 3m0.018183236s ago: executing program 50 (id=4593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/53, 0x35) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x871a15abc695f91d, 0x0, 0x25dfdbfc, {}, [{0x60}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 2m22.451841503s ago: executing program 4 (id=5129): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000009c0)={r1}) r2 = socket(0x5, 0xa, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000eb1b6321bce6a2f0000000000000000000b00aa315139e2544d6ba326ce31f2bf010e899b5b948cb5e94c7839ee970d9ce02c4ad193aee6e9226eee9dadf63f4cb2fbd6c738bd7bca6ca718576603ae36231c410f31a039afcdae42ec7eca2054e6926", @ANYRES32=0x0, @ANYBLOB="00000000000000002400c605cf14aa9038000000010004000000da90fa9344620c9ef77851070a0001ca80ebf811276c0bbf3c11b9ade433ab05a4c2e6667dc7b2a9a2d1d94004077266ba9a47fbaccead91cbdf5a7ce67b0b7dbc"], 0x44}}, 0x4008000) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3) (async) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xfff3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x8, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008884}, 0x41) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x804) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) r11 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) (async) sendmsg$can_bcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x44) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x44010) 2m22.360598355s ago: executing program 4 (id=5130): syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffff8, 0x519002) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) ioprio_get$pid(0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0xffd, 0x4) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd25, 0x35dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x34}}, 0x24088094) (async) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = socket(0x11, 0x80803, 0x0) setsockopt(r6, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 2m22.360337301s ago: executing program 4 (id=5131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000210000000000020000200002000a"], 0x60}}, 0x0) 2m22.301977689s ago: executing program 4 (id=5132): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @empty, 0xb}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x4) 2m22.241527692s ago: executing program 4 (id=5133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b47, &(0x7f0000000000)) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 2m22.001748172s ago: executing program 4 (id=5134): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r6, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0xe0, 0x13, 0x1, 0x70bd26, 0x0, "", [@generic="4015143f4529d72384a65b0f683ca0a21fdf11444d7bbf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed725c35ced379c91e5d395b09e24054fac066b0d60932a7fb2f4423642b16de2b91a996c389e0cb74f8f1dbe67149fdad4cbe11380128a4d403799666fbe091ac999b1c7ec800cbbf61d13ab1b9"]}, 0xe0}], 0x1}, 0x0) r12 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) r13 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r13, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) 2m21.934243212s ago: executing program 51 (id=5134): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r6, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0xe0, 0x13, 0x1, 0x70bd26, 0x0, "", [@generic="4015143f4529d72384a65b0f683ca0a21fdf11444d7bbf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed725c35ced379c91e5d395b09e24054fac066b0d60932a7fb2f4423642b16de2b91a996c389e0cb74f8f1dbe67149fdad4cbe11380128a4d403799666fbe091ac999b1c7ec800cbbf61d13ab1b9"]}, 0xe0}], 0x1}, 0x0) r12 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) r13 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r13, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) 2m18.681738335s ago: executing program 5 (id=5155): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x2, 0x2, 0x0, 0x5, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08000100ac141433080002000a010100080019"], 0x3c}, 0x1, 0x0, 0x0, 0x24008084}, 0xea5bc50b6199d77e) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f00000005c0)=""/80, 0x50}, {0x0}, {0x0}], 0x4}, 0x6}], 0x1, 0x2042, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005803000000006c907800000000000000000420880b0000000000000800000086dd2ab663c500000000100000000100000000000000080022eb00000000200080000200000000000000000000000800655800000000"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r2, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'gre0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r6}, 0x14) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r6, @ANYBLOB="ee0e6a00"], 0x28}}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) socket$inet_udp(0x2, 0x2, 0x0) 2m18.610822357s ago: executing program 5 (id=5156): r0 = socket$netlink(0x10, 0x3, 0x9) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffe02, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)={[0x8000000000000001, 0x9, 0x3, 0x85, 0x2, 0x0, 0x4002004c8, 0xffffffffffff8001, 0x45c5, 0x20000c595, 0xfffffffffffffff9, 0xffffffffffffffff, 0x4, 0x0, 0x80000004000000, 0x4], 0xffffffff, 0x2010d3}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r5, 0x84, "7744a58d94b6fd9b5bf2514a40cbda4be326889b25d56b348968203c2643e10ec0f1f1207f1e692fc0c737a154116d19a11a1f7fa9097b36808e5075b008dce8193c89a113155a478ed26ab480316beeb465bc4d8d573b7692655b9b83d83355f8364d2bb9550c599d1b717e7dfd89fbf966bbe0d1cb50bd88ab181b74606729b63de058"}, &(0x7f00000001c0)=0x8c) ioctl$KVM_RUN(r3, 0xae80, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) mount$bind(0x0, 0x0, 0x0, 0x1144a0, 0xfffffffffffff000) r6 = socket$inet6(0xa, 0x80000, 0xffffe) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r8) r9 = getpgid(0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x26, 0x0, @tid=r9}, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='westwood', 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) recvfrom$l2tp6(r6, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0) 2m18.461646338s ago: executing program 5 (id=5157): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x1, 0x1070bd2f, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x5, 0x2}, 0x50) 2m18.329985936s ago: executing program 5 (id=5161): symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) r0 = getpid() (rerun: 32) r1 = syz_pidfd_open(r0, 0x0) (async) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) (async, rerun: 64) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (async) setns(r1, 0x24020000) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES8=r6, @ANYRES32=r6], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="f1fffbff", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="0800a411", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004004) (async, rerun: 64) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 64) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 2m18.266055749s ago: executing program 5 (id=5164): r0 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x1000000003, 0x82}], 0x1, 0x0, 0x0, 0x1) (async) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x1000000003, 0x82}], 0x1, 0x0, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000740)='0+,\xaa\xd4\x00#\xb3\x9cu~V\xb1\x8eC\x92\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\xf7\x99;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\x04\x00\x00\x00\x00\x00\x00\x00s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3', 0x0) 2m16.381830911s ago: executing program 5 (id=5179): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = dup(r2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r4 = syz_open_pts(r2, 0x80) dup3(r4, r2, 0x80000) read(r2, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0x3, 0x2, 0x2, 0xfbdfffd3, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xc}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$9p(r3, &(0x7f0000001200)='\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x80}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 2m16.287653711s ago: executing program 52 (id=5179): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = dup(r2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r4 = syz_open_pts(r2, 0x80) dup3(r4, r2, 0x80000) read(r2, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0x3, 0x2, 0x2, 0xfbdfffd3, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xc}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$9p(r3, &(0x7f0000001200)='\x00', 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x80}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 1m53.280803959s ago: executing program 8 (id=5355): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000100)="7a53a0dba4a89bc6aa20eaac98cd7813", 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{0xb4}, {0x5, 0xfff9, 0x5, 0x5, 0xf310}}}}, 0xe) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700039022abd70e5fa0edf4c07000000", @ANYRES32=r4, @ANYBLOB="0c0001800800010066000300"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x17, 0x0, 0xa9}) 1m52.410759645s ago: executing program 8 (id=5358): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) connect(r4, &(0x7f0000000180)=@x25, 0x80) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000040001280270001006272696467655f736c6176650000050005000000000006000200653f0000050006000000000004001800"], 0x60}}, 0x8000) (async) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000002c0)={{r1}, 0x6, &(0x7f0000000280)=[0x10001, 0x9, 0x6, 0x1, 0x2, 0x2], 0x8, 0xc, 0x1}) 1m52.340668744s ago: executing program 8 (id=5359): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe}]}, &(0x7f0000000680)='GPL\x00', 0xfffffff9, 0x94, &(0x7f00000006c0)=""/148, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x154f5, 0xffffffffffffffff, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x3, 0xf, 0x1}, {0x2, 0x1, 0x4, 0x5}, {0x0, 0x1, 0x10, 0x3}, {0x2, 0x4, 0xe, 0xc}, {0x1, 0x4, 0xb, 0x2}, {0x1, 0x3, 0x7, 0x8}, {0x1, 0x4, 0x0, 0x1}], 0x10, 0xfdc6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x1b, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x9e3}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xe5, &(0x7f0000000180)=""/229, 0x41100, 0x0, '\x00', r1, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x3, 0x4}, 0x10, r3, r4, 0x4, &(0x7f0000000940), &(0x7f0000000980)=[{0x2, 0x5, 0xf, 0x9}, {0x4, 0x4, 0x8}, {0x1, 0x5, 0x8, 0xa}, {0x5, 0x5, 0xf}], 0x10, 0x400}, 0x94) r6 = creat(&(0x7f0000000a80)='./file0\x00', 0x18) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000b00)={{@my=0x1}, 0xc76a700, 0x7, 0x0, 0x200}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r5, r1, 0x25, 0x11, @void}, 0x10) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000b80)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000bc0)={0x6, 'batadv_slave_1\x00', {0x7}, 0x4}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000dc0)={{r8, &(0x7f0000000c00)='%{$\x00', 0x420081, &(0x7f0000000c40)={@align=0x2, {0x1, 0xb, 0x5, 0x1}}, 0x0, &(0x7f0000000c80)={@_ha_fsid}, &(0x7f0000000cc0)=0x2}, 0x1, &(0x7f0000000d80)=[{0x3, 0xfffffff9, &(0x7f0000000d00)='\xaa\x00', &(0x7f0000000d40)="d8bb66512768", 0x6}]}) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000010c0)={@remote, @rand_addr, 0x0}, &(0x7f0000001100)=0xc) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x2, 0xa, 0xa, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0xa, 0x6, 0x8, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @generic={0x7, 0x1, 0x0, 0x8, 0x7}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f80)='syzkaller\x00', 0x7, 0xc1, &(0x7f0000000fc0)=""/193, 0x40f00, 0x10, '\x00', r10, 0x1b, r7, 0x8, &(0x7f0000001140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0x10, 0x2, 0x2}, 0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close_range(r0, r11, 0x2) r12 = accept(r9, &(0x7f0000001280)=@rc, &(0x7f0000001300)=0x80) close_range(r6, r12, 0x2) chdir(&(0x7f0000001340)='./file0\x00') ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000001380)={0x1}) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f00000013c0)) syz_emit_ethernet(0xc3, &(0x7f0000001400)={@remote, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, '4~', "1d4622", 0x805, "5ad8709aaff4f0c29ac371f0f5e612df6defe43537953e161a30f3a183afc887d2b0fd21ff2e418165ac5cfc31002599a9fd9727f181a82cb998b57d243dd63fb464aa58523cef312405376d26efa9efe2e9c697b8ee4282774b17c85a722423b1903161d1764a586aebb361b8227f52b248104a5ddd3d771dd95192a87825c9043b0f7663870364179e45019fb4f125143ad4e59ebabd29c8a2a43a29e919bc2a7eedf04091083a1c556c85"}}}}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000015c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r9, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r12, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x194, r13, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x448a1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x37}, @val={0x8, 0x3, r16}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48) syz_clone(0x1000, &(0x7f0000001a40)="8b4086ad9ffc4abfe5ce939fbdf6f004f3e51e28604678cbd9886479439a2b04d884bdfa32f33ea85f80f50bc28a2bae28966d09c26a93bdd29792e06f578c8f62df90b75e854714501a8e2ee2351433e9277f010c5114ee558aecf7a71717555777e78e15a5", 0x66, &(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)="1553b85f4684fe494b4cdb32022d33790634") ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000001bc0)={0x9, 0x8, '\x00', 0x0, &(0x7f0000001b80)=[0x0]}) 1m52.281527383s ago: executing program 8 (id=5360): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000010c0), &(0x7f0000001100)=0x30) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x100, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x40, 0x144, 0x5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) unlink(&(0x7f0000000340)='./file1\x00') r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x9, {"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", 0x1000}}, 0x1006) execveat(r1, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)={[&(0x7f0000000180)='!$#-/[\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='workdir']}, 0x1000) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x10829, &(0x7f0000000480)=ANY=[@ANYBLOB='quo']) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m52.136293468s ago: executing program 8 (id=5361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000021000000000000003a200002000a"], 0x60}}, 0x0) 1m51.930319781s ago: executing program 8 (id=5366): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff0700000800100007ff020008000f"], 0x54}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "7d421435fe8d8e089decf74f82a4385b64bb143fa63a7ba0f11aec4f6740a736", "67c35b3b08a75d95a78d011ab5aa1b0ad2a1fe632cacfd99e3add7cf74b66a6f", "0f2b892a0bf4a91cc4251e8d0472450e39695858a93e73a61daf6ee1cd67db07", "ba2a854aa728996f331a51f9d8106975525f989948e0256e0d275d5830c08003", "5913cbe76f232daf0e45ede064b7ee82d2c481cb959f969779c20daf3b20f1bd", "3316eaf5335ee436c6e545b1", 0xfffffffa, 0x9, 0xaec, 0xf336, 0x200}}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="b193e50c7e356e5d973f311b5df05444632b8bbc168f776557f25b57733534c2865ee05091f9cd41a0709237b024da97ded3e55b976115db0333c61a32ed9d87f6cf1819dea7dd140ee52419baabb9029cb52da5a4c885b9438b4a9e8b0399385b4f76f52f2fb578be598da6e3dd8a771682865691417d72a30c2a4e9138974d786d15425dac2777bfb4c11c910332879f4475cde80d5af52881d1f7b4f9ed7998c16d"], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) (async) write(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8, 0x9}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000000200)={0x0, 0x6, [0x612e, 0x8, 0x1, 0x1, 0xb6, 0x4cbd]}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) ioctl$SIOCRSGCAUSE(r9, 0x89e0, &(0x7f0000000500)) (async) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) readv(r3, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/230, 0xe6}], 0x1) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r12, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x55d5823233fd9be7}, 0x24000015) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r9, 0x80184151, &(0x7f0000000280)={0x0, &(0x7f0000000240)="2b1532e1ac111a19ebe17423a95f", 0xe}) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) 1m51.833182213s ago: executing program 53 (id=5366): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff0700000800100007ff020008000f"], 0x54}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "7d421435fe8d8e089decf74f82a4385b64bb143fa63a7ba0f11aec4f6740a736", "67c35b3b08a75d95a78d011ab5aa1b0ad2a1fe632cacfd99e3add7cf74b66a6f", "0f2b892a0bf4a91cc4251e8d0472450e39695858a93e73a61daf6ee1cd67db07", "ba2a854aa728996f331a51f9d8106975525f989948e0256e0d275d5830c08003", "5913cbe76f232daf0e45ede064b7ee82d2c481cb959f969779c20daf3b20f1bd", "3316eaf5335ee436c6e545b1", 0xfffffffa, 0x9, 0xaec, 0xf336, 0x200}}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="b193e50c7e356e5d973f311b5df05444632b8bbc168f776557f25b57733534c2865ee05091f9cd41a0709237b024da97ded3e55b976115db0333c61a32ed9d87f6cf1819dea7dd140ee52419baabb9029cb52da5a4c885b9438b4a9e8b0399385b4f76f52f2fb578be598da6e3dd8a771682865691417d72a30c2a4e9138974d786d15425dac2777bfb4c11c910332879f4475cde80d5af52881d1f7b4f9ed7998c16d"], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) (async) write(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8, 0x9}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000000200)={0x0, 0x6, [0x612e, 0x8, 0x1, 0x1, 0xb6, 0x4cbd]}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) ioctl$SIOCRSGCAUSE(r9, 0x89e0, &(0x7f0000000500)) (async) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) readv(r3, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/230, 0xe6}], 0x1) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r12, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x55d5823233fd9be7}, 0x24000015) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r9, 0x80184151, &(0x7f0000000280)={0x0, &(0x7f0000000240)="2b1532e1ac111a19ebe17423a95f", 0xe}) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) 44.507376757s ago: executing program 3 (id=6081): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0x30c82397) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000300)={[{@gid={'gid', 0x3d, r4}}]}) 44.349316446s ago: executing program 3 (id=6084): ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000040)={0x6, 0x0, 0x7, 0x9}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x3111c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 44.348844697s ago: executing program 3 (id=6085): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000600)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x20, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x4d, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"}}}}, 0x73) 44.187943501s ago: executing program 3 (id=6087): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000080), 0x2000008, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000080), 0x2000008, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) (async) 44.049662037s ago: executing program 3 (id=6089): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) close(r0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'macvlan0\x00', {}, 0x39}) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800020004000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 43.763771281s ago: executing program 3 (id=6095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xfffe, 0x4e21, 0x2, 0x0, 0x0, 0x80, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4d2, 0x32}, @in=@empty, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000003, 0x543}, {0x4, 0x7fffffffffffffff, 0x44, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xfffffffffffffcbc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$EVIOCGUNIQ(r4, 0x80404508, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00800000000000000000c22c6776f79c7bf1ae7f9607cd0b8d000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000212000004400128009000100766c616e00000000340002800600010003000000280003800c00010005000000010000000c000100f0ff0700c3f2ffff0c000100000000004000000008000500", @ANYRES32=r1, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x8028002) r5 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r7, 0xb}}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r7}}, 0x18) 43.657921628s ago: executing program 54 (id=6095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbb, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xfffe, 0x4e21, 0x2, 0x0, 0x0, 0x80, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4d2, 0x32}, @in=@empty, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000003, 0x543}, {0x4, 0x7fffffffffffffff, 0x44, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xfffffffffffffcbc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$EVIOCGUNIQ(r4, 0x80404508, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00800000000000000000c22c6776f79c7bf1ae7f9607cd0b8d000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000212000004400128009000100766c616e00000000340002800600010003000000280003800c00010005000000010000000c000100f0ff0700c3f2ffff0c000100000000004000000008000500", @ANYRES32=r1, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x8028002) r5 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r7, 0xb}}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r7}}, 0x18) 10.610123776s ago: executing program 6 (id=6596): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0xa8, 0x1000}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0xfe, 0x8, 0x0, 0xd7, 0x8}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe8f, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x44810}, 0x4008811) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) readv(r7, &(0x7f0000000140)=[{&(0x7f0000001240)=""/223, 0xdf}], 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600000001fe8000000000000000001900000000aafffe40010000000d000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780000fe020000"], 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x40}]}) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0xd3, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000c50000000000119078e00000010000000000004e2200b19078d8c5a7a4b2d1b66c33a77ce2da7ef1e8021d5e39b82329f009ba4dcbe04cffef5f445fefbf190ca1e98d2ade3dd5b262f5055bb991fba0132e6c53905ff5c35acfcd4bbaeb388a521b0ec903a70721d6bad17eb196e57ce17fdccf3f30b6e8615ef53240559e11a90d091445cf3dcd58165c4dd0519aea2e18d91c1ac3912f4e07091b8210e002f6f94b827a83902fe995e8cecaea2a8437d955b39dd996b462dcbb652b6bdc7f4a4e"], 0x0) 9.689808668s ago: executing program 6 (id=6608): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000003880)=ANY=[@ANYRESDEC=r2, @ANYRES8=r4, @ANYBLOB="abc5d21f6a4724bd47209758b5f868cacdfe25b143413c2bf362380ea153d2d09a61c316839935ff", @ANYRESOCT=r1, @ANYRES8=r3, @ANYRESOCT=r0, @ANYRES8=0x0], 0xfce1) fchmod(r1, 0x1) r5 = syz_usb_connect$hid(0x1, 0x66, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x8, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x8, 0x5, {0x5, 0x21, "d329f5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f717ee40f00a057a423f58f0659c6c2e7daa67bebcfbff00020301090212ae00"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r1, 0x540b, 0x1) 8.309614453s ago: executing program 6 (id=6629): shmctl$IPC_INFO(0x0, 0x3, 0x0) (async) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000006340)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}, {0x0}], 0x2}}], 0x2, 0xc044) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r0, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3f00000015002a8592fa04420580df25023f08fd", @ANYRES32=r2, @ANYBLOB="080009001309000008000400e000000114000300766972745f776966693000000000000008000100ac14142008000400ac1414aa"], 0x4c}}, 0x4004801) (async) ioperm(0x0, 0x80, 0x0) (async, rerun: 32) r4 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0xc4cc, 0x10100, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000440)=0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, 0x0}, 0x108) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff2b, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) (async, rerun: 64) io_uring_enter(r4, 0x5b43, 0x94d, 0x0, 0x0, 0x0) (rerun: 64) 8.189897015s ago: executing program 6 (id=6630): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="f4e0e3f5156d23e33a7d79779329d44be3943d1cd84e67189e63cf57d2a14cfe4ea7386ec479e2ef17dcc1d0bc21614a889ef175d539ef5cae2d29e4dd851127e81d0604e53f018dee2a3cd2c2169744ae451f1b8360f9c67237bc1e231b84a9efc19f08532414e6ad89d12c14d22f81fbfeea7803185cf5a48d39c3a68a042f9ef2aa425ce7180e99c09252b27415c6ffbbc3b4efae", @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c1db7a6c0498a"], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)}, 0xffffffffffffffab) 8.189477198s ago: executing program 6 (id=6631): semtimedop(0x0, &(0x7f0000000200)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = semget$private(0x0, 0x7, 0x0) semtimedop(r2, &(0x7f0000000640)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f00000008c0)=""/4096) 7.948487803s ago: executing program 6 (id=6633): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0413c5000000001101020400010000a00009040000010300000009210009fd0222070009058103000000000000"], 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0xffffffffffffff46, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xb}, {}, {0x1c, 0xfffc}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}, @TCA_FW_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}, @TCA_RATE={0x6, 0x5, {0x9a, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x308}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x24004000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000003c0)={0x7, 0x3, 0x1, 0x7f, 0x5, 0x0, 0x100000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "1b56d9", 0x3c, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x7fff, 0x11, 0x1, @mcast1, @local, [@hopopts], "4118de85"}}}}}}}, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.846616435s ago: executing program 55 (id=6633): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0413c5000000001101020400010000a00009040000010300000009210009fd0222070009058103000000000000"], 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0xffffffffffffff46, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xb}, {}, {0x1c, 0xfffc}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}, @TCA_FW_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}, @TCA_RATE={0x6, 0x5, {0x9a, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x308}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x24004000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000003c0)={0x7, 0x3, 0x1, 0x7f, 0x5, 0x0, 0x100000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "1b56d9", 0x3c, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x7fff, 0x11, 0x1, @mcast1, @local, [@hopopts], "4118de85"}}}}}}}, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.421027569s ago: executing program 9 (id=6695): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX=0x0], 0x0) r0 = syz_open_dev$evdev(0x0, 0x40, 0x8382) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 2.160730623s ago: executing program 9 (id=6708): syz_emit_ethernet(0x7a, &(0x7f0000001480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000086dd61bc4a0600442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be000000010100be000000031c0885140100000000007b40080005eb000000022302230902000000000000030004005046561fa1a4b946950a7ec39bbd63f21de260b82054d7e694450154533e7dd91b3841f3c3d46edaf8dd043b68853772044e29429727f1f329b79573885c5154fcbe6b26c9e5a14eeb13abab7b43832d983fc3ec6e19176c975b357f42a6d22fa7e6e10b745d5acddf07f967b8cf93fe08f5d95100c08a740af85618daa2193d394fc30e044d3d75bdbec881c8b16b8ae539198c1e23712e17e87034b38578654c6bebacb4f525771e2822af177a96bcc2c62c70def49de2f5219842046ffec132c95660abb82493e37917c214c60461b6bc4fa0e40dfd317456f4b013089809e9e13420628c6c2d81c5c48750123e4ccfc95b9b2936d310b475ea7190bcd3abad"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x1, 0xf9}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100033060000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000232000000fe880000000000000000000000000001000000000000009aaf0a3f012d94f600000000000000000000000000000000000000000000000000fdffffffdfffff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000004c001400726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"], 0x13c}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) socket(0x1e, 0x4, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25df5bfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xe95}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0xfe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25df5bfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xe95}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0xfe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffd8e, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffd8e, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1}, 0x20003fee}], 0x1, 0x40000002, 0x0) close(r6) 2.04916154s ago: executing program 9 (id=6709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245", 0x6f}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25f78dee121adf8805143e7fae13e8b6c5f129f3774d7bcbd71fb4089652786bc4cc963f1702", 0x92}], 0x2, 0x0, 0x0, 0x4040010}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl$Q_QUOTAOFF(0x57f6bcafd27ae6e1, &(0x7f00000000c0)=@nullb, r2, 0x0) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) 2.04828502s ago: executing program 9 (id=6710): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0xa2300) read$FUSE(r1, &(0x7f0000003640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd9f) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303047720168f9eb212e32e862f03030303030303030303030305f69643d00", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) (async) syz_fuse_handle_req(r3, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x600c1000, 0xa, 0x8, 0x7, 0xf760, 0x0, 0x0, 0x80, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xa, {0x3, 0x2, 0x5, 0x1, 0x44e, 0xc, {0x0, 0xb, 0xb, 0x1, 0x4, 0xa, 0x9, 0x7fffffff, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x20000006, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) close(0x3) (async) sendto$unix(r0, &(0x7f0000000280)="6307d93a2617a437d33b4901c02fc0e71308b5eab6646e5396a02577eef25a114f007c6996e6a321c3ded53527c88f2073ed79e20f4bfe988529a5b05d424285a15cb2225033cb3cedcbf604d73ecd", 0x4f, 0x4000, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x3c, '\x00', @buffer={"38912e14b96acbb942644cd1944750bafecc30dc6f1f636f0e7ece59a75ceef1", 0x20}, 0x9}]}) (async) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) r6 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[r6, r1], 0x2) getsockopt$sock_int(r8, 0x1, 0x13, 0x0, &(0x7f0000006380)) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f00000000c0)={0x1, "15ba246f740cdbbf4c16d28f6ae3f24887bf9c7cc48b575287f5ef78c300", 0x2, 0x1}) (async) fcntl$setown(r1, 0x8, r2) (async) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f0000000340)='--#^[-\x00', 0x7, 0x2) 1.96081955s ago: executing program 0 (id=6711): syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="c87be6970899", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x94, 0x4, "f443"}, @end, @noop]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000003c0)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e1f, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xf19}, r2}}, 0x38) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x1, 0x8000}]}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x873, 0x2}, 0xe) (async) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x501001) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) 1.955919068s ago: executing program 0 (id=6712): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r0, 0x400, 0x0) lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='use']) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400100029000b0026bd7000004000000f000008d191f2654583"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) 1.858118802s ago: executing program 0 (id=6713): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) 1.790870308s ago: executing program 0 (id=6714): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000a00)=0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x26, 0x7, 0x50, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x20, 0x1, 0x2, 0x6}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x8, 0x401, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@timestamp={0x44, 0x10, 0x50, 0x0, 0x4, [0x8, 0xa71, 0x9d7d]}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x3, [0x2]}, @generic={0x7, 0xa, "2662984bae7fb904"}, @generic={0x7, 0x8, "ba19ba69c5bd"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x930241f68e73bb1d, 0x20, 0x7, 0x5, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x66, 0x0, 0xa1, 0x2f, 0x0, @broadcast, @multicast1, {[@noop]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r15 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r15) getsockname$packet(r15, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r14, 0x209, 0x40, 0x1000000, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r16}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x10c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x41}, 0x4010) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000000c00000079a000fe000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 1.630920156s ago: executing program 0 (id=6715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x9}}, 0x14}}, 0x20006004) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000001800032e03dd8b0000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r1, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14, 0x80}, @ipv4=@dccp={{0x5, 0x4, 0x3, 0x9, 0x24, 0x68, 0x0, 0x8, 0x21, 0x0, @empty, @private=0xa010102}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x0, "15b495", 0xc, "4101a2"}}}}, 0x32) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) close_range(r1, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 1.539685411s ago: executing program 7 (id=6718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.460709926s ago: executing program 7 (id=6719): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x15}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) setpriority(0x0, 0x0, 0x9) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x35, 0x1c, 0x40, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x32}}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18dfff0000000000000000000000009500"/32], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r7, @ANYRES16], 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) dup(r0) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xc2) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200c5c44c5d8e4f2a13"], 0xa) 1.188064351s ago: executing program 1 (id=6721): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) mount(&(0x7f0000000080)=@filename='./cgroup/../file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='qnx4\x00', 0x181000, 0x0) 1.186985813s ago: executing program 1 (id=6722): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) close(0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0) 1.108213776s ago: executing program 1 (id=6723): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x8, 0xcf, 0x2, 0x6, 0x6, 0x7fff, 0x0, 0xffffffffffffff5a, 0xf54, 0x2, 0x5, 0xa97, 0x6, 0xe90, 0xb], 0xcdf24004, 0x400}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x460000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r1, &(0x7f0000000180)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace_dev_match', 0x1, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}}, 0x4000811) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e23, 0xc7f, @private2, 0x3ff}}}, 0x90) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000440)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x36, 0x0, [0x2, 0x81, 0x7f, 0x7fff, 0xae73, 0x1, 0x5, 0x6, 0x80, 0x401, 0x40, 0xe02, 0x5, 0x7a8a, 0x7]}, {0x5, 0x0, [0x1ff, 0x800, 0x2, 0x4, 0x1, 0x0, 0xfffffe01, 0x16592a30, 0x80, 0x8, 0xffffffff, 0x1, 0x26, 0x5, 0xa56c]}, {0x5, 0x0, [0x6, 0x100, 0x6, 0x7, 0x2, 0x6, 0x1, 0x0, 0x6242, 0x401, 0x0, 0x4, 0x3, 0x5, 0xd, 0x8]}, {0xc, 0x0, [0x9, 0x7f, 0x1, 0x40, 0x6, 0x81, 0x8c, 0x400, 0x8, 0x4, 0x758, 0xb3ac, 0x1ff, 0x3ff, 0xf, 0x7f]}, {0x10, 0x0, [0x8, 0x2, 0x3ff, 0x2dd6, 0x19, 0x8, 0xc7, 0x3, 0x5, 0x800, 0x5, 0x8, 0x6, 0x4, 0x9, 0x6]}], r3, 0x1, 0x1, 0x168}}, 0x20) r5 = openat$cgroup_freezer_state(r2, &(0x7f0000000680), 0x2, 0x0) fcntl$addseals(r5, 0x409, 0x4) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000008c0)={0x1c8, 0x1, 0xd, 0xbf, &(0x7f00000006c0)=""/191, 0x75, &(0x7f0000000780)=""/117, 0xb6, &(0x7f0000000800)=""/182}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000009c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000900), 0x0, {0xa, 0x4e24, 0x6d1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xda9}, r6}}, 0x38) recvmsg(r2, &(0x7f0000000dc0)={&(0x7f0000000a00)=@generic, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/108, 0x6c}, {&(0x7f0000000b00)=""/64, 0x40}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000bc0)=""/56, 0x38}, {&(0x7f0000000c00)=""/145, 0x91}, {&(0x7f0000000cc0)=""/61, 0x3d}], 0x6, &(0x7f0000000d80)=""/22, 0x16}, 0x2123) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001e00)={&(0x7f0000000e00)=""/4096, 0x1000, 0xffff}) clock_gettime(0x0, &(0x7f0000001e40)={0x0, 0x0}) write$evdev(r2, &(0x7f0000001e80)=[{{0x0, 0xea60}, 0x5, 0xf800, 0x40}, {{0x77359400}, 0x3, 0x9, 0x400}, {{r7, r8/1000+10000}, 0x4, 0x2, 0x9}], 0x48) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000001f80)=@req={0x5, 0x800, 0x9, 0xfffffffe}, 0x10) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000001fc0)=0x7) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002000), 0x404000, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000002040), 0x8, 0x580) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000002080)={{0x1, 0x1, 0x18, r10, {0x4}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000020c0), &(0x7f0000002100)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000002140)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000002180)={0x3, 'gre0\x00', {0x1}, 0xeec0}) 1.104170667s ago: executing program 1 (id=6724): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000005580e5020000000033e6000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0001"], 0x38}, 0x1, 0x0, 0x0, 0x3ca14676541386b4}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="0201f80000000000000000000a00000000000000edff0000400000000000000000000001000000000005000500000000000a000010000000f5fb0100000000000000000000000000010700"/84], 0x60}, 0x1, 0x7}, 0x0) 1.020759321s ago: executing program 1 (id=6725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) r5 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r10) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r9, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000128bd7000fedbdf25180000eb29907de5c20008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000100000a00060008021100000100000a00060008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a001a000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r13 = dup2(r2, r12) close_range(r13, 0xffffffffffffffff, 0x0) sendmmsg$alg(r1, &(0x7f0000003f40), 0x1, 0x20008011) 659.131612ms ago: executing program 0 (id=6726): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) 500.451335ms ago: executing program 7 (id=6727): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x20080, 0x0) close(0x3) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6f3a8fa0"], 0x0, 0x0, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x113bf309017d3a70, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x1c, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5acd}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x4d}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x4, 0xa, 0x9, 0x57b8, 0x80000001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x3d, &(0x7f0000000440)=""/61, 0x41100, 0x48, '\x00', r5, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0xd, 0x8000, 0x2}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 250.48844ms ago: executing program 7 (id=6728): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc96a, 0xd, 0x5}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 200.671268ms ago: executing program 7 (id=6729): socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="430000007d030000003c00f8ff08000000000200000002200000000000000000008001800000010000800800000000000000d2b05da9a624000002002d2c03001fb07b"], 0x43) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x7b61, 0x80, 0x1, 0x60}) socket$inet(0x2, 0xa, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xd, 0x3, 0x1, [{@broadcast, 0x6}]}]}}}], 0x20}}], 0x1, 0x4000810) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x1d, 0x2, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 150.013845ms ago: executing program 9 (id=6730): r0 = socket$inet(0x2, 0x2, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000580)='ns/ipc\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r4, r2, 0x0, 0x80009) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x24, r6, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84098}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042bbd7000ffdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="0c009900090000001b000000540051802800008005000900010000001c0008800400010004000200040002000400020004000200040001001c0000800400060011000100d5249eae381075beca1072228e0000000c00008008000700030000000400cc0004004600"], 0x84}, 0x1, 0x0, 0x0, 0x2000c000}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1, 0xffffffff}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x89, 0x2}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x3, 0x4, [0xfdf, 0x40, 0xd, 0x10]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x7695, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4a1f}}, 0x1, 0x6}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r12, 0x10000e, 0x2, 0x1, 0x8008, 0x101, 0x7, 0x7, {r12, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x7, 0x5, 0xe, 0x3}}, &(0x7f0000000340)=0xb0) 149.645966ms ago: executing program 1 (id=6731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000005000000dc0000000700000020080000", @ANYRES32, @ANYBLOB="143b000000020000000064f1c9cb447a075f696e70a1b6c8c2d5255921dff6a9f0ae6d42ea00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000100"/28], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0xe503, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x71d4, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x2, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffe, 0xff, 0x1005, 0x7f, 0x5f33, 0x4, 0x4, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x2000009, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x40, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x4, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffbfe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x400c8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0xfd, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8c, 0x200, 0xffff3441, 0xff]}, 0x45c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180)="7efa97d8a6e6829498e4a8029ed56892ad059c08bd", &(0x7f00000001c0)=@tcp6=r3, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) close(0x3) socket$kcm(0xa, 0x3, 0x87) sendmmsg$inet6(r8, &(0x7f0000000280)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xff00) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0xff, 0xff, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10021, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x6, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfa, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x40, '\x00', 0x8}, {0x5, 0x0, 0x5, '\x00', 0xc}, {0x7, 0x7f, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x5, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 60.383509ms ago: executing program 7 (id=6732): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="000101", 0x3}], 0x1}, 0x4004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$sock(r1, &(0x7f0000001cc0)={&(0x7f0000000700)=@llc={0x1a, 0x7, 0xe, 0x7f, 0x1, 0xd}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000780)="4845bb25fc4848203854b96a9697e6721bcfb7070025921eac8031ee6b3907b7f280aa4abc8b169fe78c8c12d766c8531c793418980c7090ffebd1bf1ad640752805a2b2e35d153d583ebf8f2bffe74b385e9ef79913001d9d03d9c8f3dbb695c751cf48c63f6baa6469b9d2ed192f545072e700528a64a8", 0x78}, {&(0x7f0000000800)="38bfff4443f4230d1c77af136dedf95c0467bbf406a3e9a58473c3f6f636ce991fae92be102fdf7056a85340d613b96138536b2fc2f18d0302c45dbe24b7785ce29aee4bef8e156b16113d7e34fcb35f7f09444a3eb8ba81664c921572d08baec92141be6ecd82aed31886028b72dc1a79de9f73fcc67d4ed4ad3e920f3811ee934bf196d40740", 0x87}, {&(0x7f00000008c0)="66c521e82601ad5e9f7340027805c208ac663ff28acc883645ca9ba67a16032ac87e9284c4fcb0aca6ce", 0x2a}, {&(0x7f0000000900)="313e89eadfb928ba40f88b06e58154bc6d430796081fbe14e71fdba0bd878a8d53dc7ff956206c1ff5e6a32f7f4c7b9de2076147e8f9bcaff4dfcf9da48b", 0x3e}, {&(0x7f00000009c0)="be5aa5a82e7b0eef19b65b43e913eb28172024eddba4e472496c148d9b6d00df0fea6a618baee0244cf883f39cc7cb35f952fb185b6943717481c03a94dd32af198db478687b5cf4557f944ee60473c510a04c5b87fdce25932c0019ba168e1ce7a3ce506e5432096053e378e160ad61a862584d47000a191a9b37d5cfc86af6bb27009747156132a9540efa17fbcd78dabf718713301976feac26c9eb97d21379ac8b97e4ea7b3d7e1ea8d8e347a63375f327d419915934ae85b0b614d000be7d6a6780e6de1feb5a21560103b5eecfce174ec16cb38d20bb33387a62970a3847f92a6f6060539635628e1806cc46b35024c71a8f75258a8c7d8aa29a1b3287fd2df366947aee9d5f192ec5957b6abef24971448fba0720c77f7faf605ffb0c85a2c570639975a38d1fac89b5a010b3826cffa7b9c96e70504bdfcf2bfb66c2cf0c5219b65f420c65323756f467ca4cdf6edd265f68cde758fd1a68612605760c88d7869bd78506e49271430dde24ab9497b63b3e68b037701b47e91bca0531d56b594f8316992ac8ac594705ae39c19e0e67d7ab007799851583d1eca4fed03c387e963f8c8cfc10ecf716580102e924b62ac094984afb47c269e6909ec90c8007089aa4a43f2255f0441e84977fd3d6036df3f3c2f898caf99452c78103c27c0daa5dfa7ea1216bacca0c82a2897e62adbf4b58876101f5d4d5ce1b7fd208bbfc8b070c1a41aec0d1482548143236b1c6ab85eb59769e4a06e73690d3ada848dd292a6c49fa00abcd6401031ccc3e141baae52f7781957e2edd341443f4ec327cc32014d9be54137fca2c4ac9de6d2316f54cd56553223273845b16689e88a784170ba16d58e69eb440047b4c4f1c973175b32a7f4ace72f8200cb10ebd3395fef841ea1f8cfc2ff30ee4b1e700fe84d084b5b9c7880dab88e6ee25385e524e5386d05308f5cc1919636ad65f6a0e70899406930db11f291105b22de61dea8cf3079914c7a1aa4e2a3a4b463e00716fd955509aaebe5abd8dc613e6ef8d3afad79bb40954f5a1edd9f4ac4e95f9de82ee94bd8d14f4a0ce9276b5a455b5022aee45a336d3c5df209dadb916c1b347fbe3d1a498654ef03471885cf548d2afa0194791640a45d1c0a007eaec7ea27bc0969f96ddfa6ab633e448c7980d5414383e8a0b45830eb6f80d47e4015af64411f99652953a644ad29e2164477d50dc9b177c8ac6c403b33c61381ad7802791d218c9a7c5a98e1f661e63a0637759d4be5da2d84da023d7ee1f82d5adc2c1409f95a6b20a588fdd480fc23adf18a9cf0bd7e93b14fcd3ed40e2dedb56f0843dc12c79e63921ef4ec93482c490dbd67797480f2fde181396b29a5513905191b181422e4601c5fe11c5961455154b6fd5ddc928d86633d8860617d5cbc220b02c4862af47b580ee7bb770aae0514c6536160184d44a1910058cc5a8ceb7a63edab954afda3b80ce0ca189833d57dfcd344f047e7549d788a3e0788f0cf4751ca9b30d0d3a545da30fca55f3ce6cef411f896af399147f1cd562fef1cb69228bb7c1f88ae293a784038bcddc6263d363b2419c01a36dd7e8251b1ac36a787ab302a2479c67e33d634db92397c8ed84296f6efc4236f0c0aa3aedca1f67bd30b66ef06943d150ce36a206cb549619a1aef3bd62b5ba8cc9ada35c123c0d03be85cde60023bfa0671e0661c53ef444f4792bc2d8371b5491088e020a38fd11e0f86ea80cfb3aaf28e7868ed2a607214d8427af798319658ec22e05d47ac63d154af3a5627ee2a0ee41840fed06fa032072ff7fcf32024fab4c07951ada8040bb5bd6c0aa0717e1fb3939169277d6b5d490cacdc0edc3a1dd2a1d36dbd5c97b57513d0da554182407314630a78c76fc81af17804fc2168f4aff90e8bf02426465cec30d1e2880ad091fea68d9b396201f24b5a5079bc0b65886a4a03887f223171b5e9512419908bbc71d96a377b9b34b29541ce9d90172280e24eec00e83479000e9050d9220315b76dd1f3592b8751144eeac7a7589545e852eb04db055f10fe6c0ed54b54bf4f0147f417e77838a549a21e4628bea84a31a5a6799df15756b854c448b7ffdc5e2b16eac66ab9b756bb4b7cb4ae549dad300d5a511a853c9e28e24bc552c8e72f56b0a3dc80f5adee6e556cb8f9d92de73dc8267eec85ceb885e342bf9b56b233ef9163b17df6b5c1732f21ecfdae530f491ebd36ca508274786120dfc07ef899feff0b34b31ea15eb2d2f06367ebb4cfd8e385d05724e97adadf77a309678977ec5b60193a0538ec99ce4c492f2729abd0eacb011a86b3d5ffade0a54e1d7418564272e2376dfd2f14b6b6313888a71905fa89626b06b2ed0f4dd6229242d5e1538d97ae28f7a7388b08953f9a7a7a04d31d9db1001fbda00c806e7375d0830d86111fc8cb0132854c1285deef72222dd162f9905e9f0fe3e563c6881ca6e28e7f1d47eff61cd999edbf44886c170be6f1c9e39cccd68cc2bd9a4200e1c3518107506a1f9a7c1f578d64c877110b9571f99c81d79d5131864b4cb56ee4e3dfafc7a3d47a5e30d5164b3200c63150afd2bcdfb217415f14b5485dbff1a09890e177a20be7a73c756ac6e368b90166d7d4ccdf4c52e116e0060dfd39184181eaa8e819d256400766f0aad2dc7ad32e523e3865ad0db13e00eea9f5c8ecca9d36dd4f7253f28e75e3fce29c79ef71882b56ca39b0203edf236242f5810b82cac91a3d6904f229dadecdde8752c2540b3785da620987c24f3e0414bbea77b7954b0c03899b38fa7221bffb66d0d83f81360b67d014a837fd42a43b3573a9e87ffdee9fbadd310be9d3c2793732641823d97370ce0948c83a85d9a87e101dba7f2cb354d3bd4cb844279101a861f959870939e3f2654514f98d0dc38c3a03dbd05a96b9eda4795fd6068b285992ee2d9d2e11557e1d727ba5879d6b0f7ac8c61daecae9a7962cc108a5c000b5126e563e45c0eec203166ce3ca9e4d12a8cb81f8862e9560bbdd488ef55e6b6aa622e17f6918710e88ceec1ebfecd3ed8267d1956241cfac271b04770f841ddbe2c68b2d9c7ffbfca91e5300ea5c6e037c4a5e7a122a45c56e634ee03de6453358e8e7379a91fdb3496c271345a9ad563a5c29dd7323d13a7b339cfb3bc7d26105099ee1412bf6ce9ab5bfae48115ddc1c2ef5a3998c5deac25c16252c675ae166bc328f8903d9191d3847bed6d3005f59d4a6fe153cf1086c22407f6310e23dadaa9824740fd0f294cd5c65f43421601be7c9ec849f5af3bb2046577ec920496b1975fdfe3c09b38df3085fc9fbeefed1bf95001bad3e9d6e138f454f654caf97e6dfc2049094cd3452f34dcb536a52c60421a7cf5d2158e1ad827c3b57f31589c9c7177a8fbb1748593e8a05309b10d99b06c11f30cc5588d6ffb1250b2ee4a3c3b871682f1181b3686a193c47e1dddd935f2c0f1421f7d4504ac86bb14fc6bc7da1264eef0992285f8a2ef63bd37e5baa7ac1e072abd01999638e03e07c79c10d8a8c0bbb897e483c719de9d5cd9b4dcfa6d5be909e4ac1192b93ab2abdc7cb9da7210a53b61e1b013b39976f5cebfce976fba9c67cde1b4713168ca56a6311bddfee73ef9f0a903e617e8387ccdcb5654fd33087997c2b9f3f7e25efab02484b690ff7ec7f7fabf31d890bba0e93f3439973dc9de6d6f499ecdc1233332162f9e36e838c6b37e6364e152ee7d36ccd52660c8559745219fca72aeeccfbdc5c2f8b3ae1a34f869df6971f89fee42d19559a11be247d6f80983f45053d9a3e0ef72834e264bed9c7f48c774e801aa9ad79e1674c41c6a7ae84611fe94d0cf44c23d194fcfdd6351e41341556b8c3e8924e762754e44fc57f60de7f7d51a689913d19d3ea5181349f05a8237ad7de0ee19292fccddb67a0994ca3712207b1a051d8fd4345ba9d4769142a15f0192e2a022a07c95b4029248159f1692fdca2b5d4d421119d9779c63a325a58c02a0b94cf4b8b5312451a0a4e2d29ad4655e8c1d64446910f27462421eb4d879f73cbb7214dfef29c45d741cbb22839e066ab654025d32287b5b6f40f4c48b3bf22928cf619e7f89b7494d75a26a5a126012581075576ea1c565c092f66629b5f103d17b4160c0fca4ca70ab6d45e15e8aa484f469f53884db7e7fb5298e7f930f43c6bed940743d211021cfd5739cbec9b3fb2908d3be607d11f0b0a91c22c73539fc2f87ddb90f22e46c7d2a0bd7f6d59ce4db25955e0b71ffb982eadfae3b018727024a80e3914a6a71a0b9ec6cd3ea9bc81c2aa13fb1bdf5d1b190355efc903e58f33b0f50c5777b26197b3dc95c73fefeaa7b35056a864e241840b78f7a4f35afe604fa601944977935fadc05e493ca3dc9249c7970e9bc36246bfcb138303e136918d1a05219d72073d5d8ef8a25d4b8744d86ef9564253e242f6fbcfa94d42985eb7217ce8f493c23b2262c5691985a44ad6085bd83a7f3505cb952938f2dddae65738b761a5c287986ee4888afa1285531d1603fc49bc430dc46d69cfe73e3b82e0033026349eec854f650a3c64159f65c1028ad04d48e8433b7c58b3bff80d04f699b13f7c3328f7b1ccb0f97f2febf273a8bd3431b4d4ce79b0477e4186e7a34c7b1415247f8c206de2f0214a4681675cdce0adc3807f1e9806154d495369fba411504ce286fb9f7a234f2cc5f821b30555f1fa3dacc0b2dbc9335e9b2872291deab53af82a51b2527af6594b8cec3b8a238063257e1698f7d14b36174b957f35369562664c6caefa30fd2b34b4430f9ec06fbfbee4db2b67638f01c0775db14ca1ca498f76e53c44601bac5bf3277c8fd8cf1462bade04957b22ff64be44ffc6291aa0f234bd523f68db8f11c4b42f2ce837deb7d9e462e5e683fc46b143c3421fa249c38b7805260e5dc07b5c7e5156029ae5dd28ae28ddf3242ccef11ba94db9adff6514a30ef8eca269d9310f528be0a6179b75529f5a4d1bc13686e401fe8372f9db4c6bb91c8fa8e1b690cd7706d4c8cc0d2fd215185723e45db624257e90bef1afd07dc65853f2a08cfbe3e7279a19315bfd919d61a69692cc98f09f8ea6481030f57f71704b368d2ce8dacb8f0e91c5368058ffad463b0ecbcba19439b338371a3f89a56fb50fe4f2991e4f83205274bf81557004d9f9f100c3f7f4049b17d772208c8ef7fd3abee1ab2f0101934a2f2bd0fae0b53c051ef74a537712816d088c061a7bc4f3b46fa341509eb75d37a674548b7d2d52ebef70486631392219d550cf0741f1de88d137ddf61c324b75f4adb5ce7ef0f5b79b1303ab3582c2fb8f89af63c08ba35c4db2733be1a1a991d87eaa1a6e9422159547a427669b33425bda131dc183d2c815e3bbda0127f28fccb62e4a3016765f801fe213ad8a36fafd5ae9b5118a22939809fd1bf527f970fc4a8813b932b107a2a88a00ea70e8d9856474e5435a229005c2b88b74484bda89c515b3e921b7b98804048c27469323b634b2b0b6e2ad6775555d22fe711a50fbc7894e11bb750259386c84c250d37d34fbbb20df934406bff922770d5a0685458442d358583b4bd5e753d43cebb6ce42598d935d6bab85509be375dd9a92f4828692af025d0039dbab38b085c55cbfadf2d0f375ae1a7e2093b357f501a8e1c8ca2bea7ea570d05958858f42be0c85057b82e212ef1c92039e3a702b0e41d76e4a57a4093bae92c0fc0763021acc4a841d3bfc59d77fa13759fbc3445ed311fa25ce75f3a807df1ec7278f2c20da4c53482e23704e6446cadc9e437", 0x1000}, {&(0x7f00000019c0)="cd82609028304be5f628925a659aec5e8d610ed971c95d51ae0e3b7ec8ccb26f0650ac7144f9075f3c68ca6ba8a07cb35b5c630ced078da997018d18b92fc0f6f20d616d7d90e0691c52b7972a19f201c00d", 0x52}, {&(0x7f0000001a40)="675ae158f552c43ac5c6a14c9229d58927629e6c358e9c1f5a39216c64af3b443938ec868bec22f534b7d8c04d2a28d40a396ba511c4d77af90d2da0ec200380eb76cf53c64c97843b617c17f2f5841084f981b7ee49bb76c80198053f946bae26be03fc204778690d6082bb0d67673974ef42b895de1a182bc7b5a636454d378fcf01e36024c962a5f5272cee898a929acc36f118fc03d0c7668a862b93d1077c230d916eccd33c16796defa0916ad1466060f59de87c3d64cbba4b67789c99e2660fc01d5c5074803309e67702b5c3b3eab7a52850b2e77b01d72da7818889822589bd78266b7e28c8787fbd41060e556d86ab9623c8f15d", 0xf9}, {&(0x7f0000001b40)="a0a8b28620ba1aeabb2477e9a9b002c5698fffe92578d50ce095606b49525ff794e17e0a2b5062fa97bd46e1a318e2bebdc0eece5fb5d16cc7d4ae965e66f23c0b793596fee1b0c0fae4f3be8c9f1ce91980021f373b9c62d98e98bd927235ccd3a5027e44c465804916b990163056f0496cc9f031db7b61715d8b47257a44a753e69d3df42c444c77cc3cf4c25b0fdd0f60367207926cbc97ec2d26b771ef0659fec0e57441ae402c4d7b53ea55831629ea3abc5e8a28a219c7c0ff1cdfc9c4a8cfb298c3108099d945eb2d", 0xcc}], 0x8}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9db"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xe, 0x10, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x935, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4197, 0x0, 0x0, 0x0, 0x7}, @generic={0x7, 0xb, 0x9, 0xffff, 0x2}, @exit, @alu={0x7, 0x1, 0xf, 0x1, 0x8, 0x40, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}]}, &(0x7f0000001dc0)='GPL\x00', 0x4, 0xc2, &(0x7f0000002140)=""/194, 0x41100, 0x44, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e40)={0x3, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000002400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002440)=[{0x1, 0x5, 0x2, 0xa}, {0x3, 0x4, 0xe, 0x3}, {0x3, 0x5, 0x7, 0xc}, {0x2, 0x0, 0x10, 0x2}, {0x2, 0x5, 0x7, 0xb}, {0x2, 0x1, 0xb, 0x4}, {0x5, 0x1, 0xb}, {0x3, 0x1, 0xb, 0x8}, {0x3, 0x3, 0xd, 0x9}, {0x2, 0x2, 0xa, 0xc}], 0x10, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x25dfdbfb, {0xa, 0x17, 0x0, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x7c0}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001f00)={'ip6gre0\x00', &(0x7f0000001e80)={'syztnl0\x00', 0x0, 0x4, 0x2b, 0x50, 0x3784, 0x60, @mcast1, @mcast2, 0x80, 0x80, 0x21, 0x7b}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x50, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002100)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f40)={0x15c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004014}, 0x12) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$packet(0x11, 0x4, 0x300) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x15, 0x1f, 0x1fe, 0x0}) 0s ago: executing program 9 (id=6733): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r1, 0x400, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000c, 0x4008031, r3, 0x1c5ed000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, 0x12, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000200)="b061dc91246b995a7ca1f8a81b13f50b003d", 0x0, 0x0, 0x30, 0x0, 0x0}) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0xb, 0xfff, 0xc, 0xb, 0x660, 0x3ff, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0xfffffffc, 0x6, 0x6], 0x0, 0x4}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000180)={r4, 0x2, 0x1d6d, 0x2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x400000b7, 0x0, 0x31c4}]}) write$qrtrtun(r2, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) kernel console output (not intermixed with test programs): SB device number 60 using dummy_hcd [ 957.851193][ T6963] usb 11-1: Using ep0 maxpacket: 8 [ 957.854539][ T6963] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 957.858538][ T6963] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 957.862690][ T6963] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 957.868443][ T6963] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 957.872087][ T6963] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.874285][T14894] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 957.874806][ T6963] usb 11-1: Product: syz [ 957.879267][ T6963] usb 11-1: Manufacturer: syz [ 957.880994][ T6963] usb 11-1: SerialNumber: syz [ 957.883874][ T6963] usb 11-1: config 0 descriptor?? [ 957.932176][ T6963] rc_core: IR keymap rc-streamzap not found [ 957.934195][ T6963] Registered IR keymap rc-empty [ 957.936515][ T6963] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 957.941424][ T6963] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input95 [ 958.041169][T14894] usb 6-1: Using ep0 maxpacket: 8 [ 958.045539][T14894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 958.051271][T14894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 958.056258][T14894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 958.063660][T14894] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 958.066934][T14894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.069638][T14894] usb 6-1: Product: syz [ 958.071693][T14894] usb 6-1: Manufacturer: syz [ 958.073279][T14894] usb 6-1: SerialNumber: syz [ 958.076477][T14894] usb 6-1: config 0 descriptor?? [ 958.087675][T28367] FAULT_INJECTION: forcing a failure. [ 958.087675][T28367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.092891][T28367] CPU: 2 UID: 0 PID: 28367 Comm: syz.6.5890 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.092910][T28367] Tainted: [L]=SOFTLOCKUP [ 958.092914][T28367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.092921][T28367] Call Trace: [ 958.092925][T28367] [ 958.092930][T28367] dump_stack_lvl+0x100/0x190 [ 958.092962][T28367] should_fail_ex.cold+0x5/0xa [ 958.092979][T28367] _copy_from_user+0x2e/0xd0 [ 958.093155][T28367] evdev_handle_get_keycode_v2+0xb7/0x170 [ 958.093418][T28367] ? __pfx_evdev_handle_get_keycode_v2+0x10/0x10 [ 958.093434][T28367] ? trace_contention_end+0x140/0x180 [ 958.093447][T28367] ? __mutex_lock+0x26a/0x1b90 [ 958.093461][T28367] evdev_do_ioctl+0xc78/0x1b60 [ 958.093474][T28367] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 958.093485][T28367] ? __pfx___mutex_lock+0x10/0x10 [ 958.093507][T28367] evdev_ioctl+0x16f/0x1a0 [ 958.093518][T28367] ? __pfx_evdev_ioctl+0x10/0x10 [ 958.093530][T28367] __x64_sys_ioctl+0x18e/0x210 [ 958.093548][T28367] do_syscall_64+0x106/0xf80 [ 958.093559][T28367] ? clear_bhb_loop+0x40/0x90 [ 958.093573][T28367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.093584][T28367] RIP: 0033:0x7f595219c629 [ 958.093595][T28367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.093605][T28367] RSP: 002b:00007f5952fdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.093617][T28367] RAX: ffffffffffffffda RBX: 00007f5952415fa0 RCX: 00007f595219c629 [ 958.093624][T28367] RDX: 0000200000000040 RSI: 0000000080284504 RDI: 0000000000000004 [ 958.093630][T28367] RBP: 00007f5952fdd090 R08: 0000000000000000 R09: 0000000000000000 [ 958.093636][T28367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.093643][T28367] R13: 00007f5952416038 R14: 00007f5952415fa0 R15: 00007fffb5091f78 [ 958.093657][T28367] [ 958.095434][ T9] usb 11-1: USB disconnect, device number 60 [ 958.131161][T14894] rc_core: IR keymap rc-streamzap not found [ 958.179753][T14894] Registered IR keymap rc-empty [ 958.186146][T14894] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 958.192738][T14894] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input96 [ 958.290481][T14894] usb 6-1: USB disconnect, device number 48 [ 958.830310][T28408] comedi: No check for data length of config insn id 63311 is implemented [ 958.833497][T28408] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 958.837095][T28408] comedi: Assuming n=15 is correct [ 958.849046][T28408] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 958.885951][T28410] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5904'. [ 958.943172][T28411] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5904'. [ 958.946390][T28411] nbd: nbd64 already in use [ 959.020518][T28418] trusted_key: encrypted_key: insufficient parameters specified [ 959.021068][ T1471] usb 14-1: new low-speed USB device number 48 using dummy_hcd [ 959.037652][T25373] udevd[25373]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 959.204287][ T1471] usb 14-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.208518][ T1471] usb 14-1: config 0 interface 0 has no altsetting 0 [ 959.212483][ T1471] usb 14-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 959.216801][ T1471] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.222862][ T1471] usb 14-1: config 0 descriptor?? [ 959.291492][ T5994] usb 11-1: new high-speed USB device number 61 using dummy_hcd [ 959.441275][ T39] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 959.441548][ T5994] usb 11-1: Using ep0 maxpacket: 8 [ 959.448612][ T5994] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 959.453839][ T5994] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 959.458696][ T5994] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 959.466022][ T5994] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 959.469913][ T5994] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.473709][ T5994] usb 11-1: Product: syz [ 959.475679][ T5994] usb 11-1: Manufacturer: syz [ 959.477757][ T5994] usb 11-1: SerialNumber: syz [ 959.482891][ T5994] usb 11-1: config 0 descriptor?? [ 959.525261][T19088] Bluetooth: hci2: command tx timeout [ 959.531261][ T5994] rc_core: IR keymap rc-streamzap not found [ 959.533735][ T5994] Registered IR keymap rc-empty [ 959.536279][ T5994] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 959.542193][ T5994] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input97 [ 959.601199][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 959.605342][ T39] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 959.610654][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 959.615530][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 959.623687][ T39] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 959.627615][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.629608][T28406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.631446][ T39] usb 6-1: Product: syz [ 959.634626][T28406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.635765][ T39] usb 6-1: Manufacturer: syz [ 959.640308][ T39] usb 6-1: SerialNumber: syz [ 959.641961][ T1471] usbhid 14-1:0.0: can't add hid device: -71 [ 959.644690][ T1471] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 959.649109][ T39] usb 6-1: config 0 descriptor?? [ 959.649567][ T1471] usb 14-1: USB disconnect, device number 48 [ 959.693712][T14894] usb 11-1: USB disconnect, device number 61 [ 959.713169][ T39] rc_core: IR keymap rc-streamzap not found [ 959.715862][ T39] Registered IR keymap rc-empty [ 959.719062][ T39] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 959.728712][ T39] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input98 [ 959.856591][T28428] FAULT_INJECTION: forcing a failure. [ 959.856591][T28428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.861310][T28428] CPU: 3 UID: 0 PID: 28428 Comm: syz.1.5908 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.861329][T28428] Tainted: [L]=SOFTLOCKUP [ 959.861333][T28428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 959.861340][T28428] Call Trace: [ 959.861344][T28428] [ 959.861349][T28428] dump_stack_lvl+0x100/0x190 [ 959.861371][T28428] should_fail_ex.cold+0x5/0xa [ 959.861387][T28428] _copy_to_user+0x32/0xd0 [ 959.861403][T28428] evdev_handle_get_keycode_v2+0x14a/0x170 [ 959.861417][T28428] ? __pfx_evdev_handle_get_keycode_v2+0x10/0x10 [ 959.861432][T28428] ? trace_contention_end+0x140/0x180 [ 959.861445][T28428] ? __mutex_lock+0x26a/0x1b90 [ 959.861458][T28428] evdev_do_ioctl+0xc78/0x1b60 [ 959.861472][T28428] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 959.861483][T28428] ? __pfx___mutex_lock+0x10/0x10 [ 959.861503][T28428] evdev_ioctl+0x16f/0x1a0 [ 959.861514][T28428] ? __pfx_evdev_ioctl+0x10/0x10 [ 959.861527][T28428] __x64_sys_ioctl+0x18e/0x210 [ 959.861543][T28428] do_syscall_64+0x106/0xf80 [ 959.861553][T28428] ? clear_bhb_loop+0x40/0x90 [ 959.861567][T28428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.861578][T28428] RIP: 0033:0x7fe22279c629 [ 959.861588][T28428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.861598][T28428] RSP: 002b:00007fe2236e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.861609][T28428] RAX: ffffffffffffffda RBX: 00007fe222a15fa0 RCX: 00007fe22279c629 [ 959.861616][T28428] RDX: 0000200000000040 RSI: 0000000080284504 RDI: 0000000000000004 [ 959.861623][T28428] RBP: 00007fe2236e8090 R08: 0000000000000000 R09: 0000000000000000 [ 959.861629][T28428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.861635][T28428] R13: 00007fe222a16038 R14: 00007fe222a15fa0 R15: 00007fffc3208a58 [ 959.861650][T28428] [ 959.863426][ T39] usb 6-1: USB disconnect, device number 49 [ 960.255828][ T40] audit: type=1400 audit(5316248563.045:1343): avc: denied { shutdown } for pid=28439 comm="syz.6.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 960.398715][T28454] tmpfs: Bad value for 'mpol' [ 960.443566][T28453] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5916'. [ 960.671644][ T39] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 960.766849][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5922'. [ 960.777311][T20058] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.777416][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5922'. [ 960.781757][T20058] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.788386][T20058] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.794900][T20058] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.894272][ T39] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.898572][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 960.901762][ T39] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 960.905755][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.912384][ T39] usb 6-1: config 0 descriptor?? [ 961.038959][T28485] netlink: 'syz.6.5926': attribute type 1 has an invalid length. [ 961.060098][T28485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 961.098863][T28485] bond1: (slave veth3): Enslaving as an active interface with a down link [ 961.127049][T28485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5926'. [ 961.298520][T28496] netlink: 'syz.6.5929': attribute type 1 has an invalid length. [ 961.323750][T28496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 961.334019][T28456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.338040][T28456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.343447][T28495] xt_hashlimit: max too large, truncated to 1048576 [ 961.349546][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 961.352382][ T39] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 961.358405][ T39] usb 6-1: USB disconnect, device number 50 [ 961.360078][T28496] vlan3: entered promiscuous mode [ 961.364955][T28496] bond2: entered promiscuous mode [ 961.367379][T28496] vlan3: entered allmulticast mode [ 961.369654][T28496] bond2: entered allmulticast mode [ 961.373906][T28495] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5929'. [ 961.382235][T28496] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5929'. [ 961.383887][T28495] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 961.391844][T28495] bond2: (slave batadv1): making interface the new active one [ 961.395043][T28495] batadv1: entered promiscuous mode [ 961.397076][T28495] batadv1: entered allmulticast mode [ 961.399893][T28495] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 961.411347][T28496] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 961.416482][T28496] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 961.525362][T28504] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 961.551293][ T6963] usb 14-1: new high-speed USB device number 49 using dummy_hcd [ 961.601101][T19088] Bluetooth: hci2: command tx timeout [ 961.681156][ T6963] usb 14-1: device descriptor read/64, error -71 [ 961.892692][ T40] audit: type=1400 audit(5316248564.675:1344): avc: denied { setattr } for pid=28509 comm="syz.1.5934" name="cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 961.921140][ T6963] usb 14-1: new high-speed USB device number 50 using dummy_hcd [ 961.941366][T28512] netlink: 'syz.1.5935': attribute type 13 has an invalid length. [ 961.949431][T28513] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 962.051087][ T6963] usb 14-1: device descriptor read/64, error -71 [ 962.161386][ T6963] usb usb14-port1: attempt power cycle [ 962.478665][T28517] ipt_rpfilter: unknown options [ 962.501112][ T6963] usb 14-1: new high-speed USB device number 51 using dummy_hcd [ 962.510605][T28520] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 962.521844][ T6963] usb 14-1: device descriptor read/8, error -71 [ 962.553969][T28526] cgroup: Need name or subsystem set [ 962.569323][T19088] bt_warn_ratelimited: 55 callbacks suppressed [ 962.569342][T19088] Bluetooth: hci2: unexpected event 0x14 length: 10 > 6 [ 962.571854][T28526] 9pnet_fd: Insufficient options for proto=fd [ 962.761341][ T6963] usb 14-1: new high-speed USB device number 52 using dummy_hcd [ 962.782437][ T6963] usb 14-1: device descriptor read/8, error -71 [ 962.829913][T28533] gretap1: entered promiscuous mode [ 962.891331][ T6963] usb usb14-port1: unable to enumerate USB device [ 962.921357][ T830] usb 11-1: new low-speed USB device number 62 using dummy_hcd [ 962.925820][T28536] openvswitch: netlink: IP tunnel dst address not specified [ 962.929483][ T40] audit: type=1800 audit(5316248565.715:1345): pid=28536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5944" name="file0" dev="tmpfs" ino=1000 res=0 errno=0 [ 963.082536][ T830] usb 11-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.085726][ T830] usb 11-1: config 0 interface 0 has no altsetting 0 [ 963.087898][ T830] usb 11-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 963.090906][ T830] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.097015][ T830] usb 11-1: config 0 descriptor?? [ 963.273188][ T6963] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 963.421236][ T6963] usb 6-1: Using ep0 maxpacket: 8 [ 963.425181][ T6963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 27244, setting to 64 [ 963.431778][ T6963] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 963.435579][ T6963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.438930][ T6963] usb 6-1: Product: syz [ 963.440760][ T6963] usb 6-1: Manufacturer: syz [ 963.443225][ T6963] usb 6-1: SerialNumber: syz [ 963.447559][ T6963] usb 6-1: config 0 descriptor?? [ 963.452797][ T6963] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0204 [ 963.505210][T28530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.509992][T28530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.517848][ T830] usbhid 11-1:0.0: can't add hid device: -71 [ 963.520091][ T830] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 963.525025][ T830] usb 11-1: USB disconnect, device number 62 [ 963.654531][ T5994] usb 6-1: USB disconnect, device number 51 [ 964.044746][T28546] netlink: 'syz.3.5948': attribute type 1 has an invalid length. [ 964.175356][T28551] kvm: pic: level sensitive irq not supported [ 964.176610][T28555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5951'. [ 964.179914][T28551] kvm: pic: single mode not supported [ 964.186044][T28551] kvm: pic: level sensitive irq not supported [ 964.246446][T28559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5953'. [ 964.301303][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5956'. [ 964.343119][T28576] xt_hashlimit: size too large, truncated to 1048576 [ 964.406706][T28581] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5958'. [ 964.479392][T28588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5960'. [ 964.487392][T28588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28588 comm=syz.1.5960 [ 964.561638][T28593] tmpfs: Bad value for 'mpol' [ 964.741408][ T830] usb 14-1: new low-speed USB device number 53 using dummy_hcd [ 964.822247][ T1471] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 964.902815][ T830] usb 14-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.907476][ T830] usb 14-1: config 0 interface 0 has no altsetting 0 [ 964.910890][ T830] usb 14-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 964.914913][ T830] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.928728][ T830] usb 14-1: config 0 descriptor?? [ 964.971079][ T1471] usb 6-1: Using ep0 maxpacket: 8 [ 964.974909][ T1471] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 964.980045][ T1471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 964.984735][ T1471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 964.992016][ T1471] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 964.996027][ T1471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.999672][ T1471] usb 6-1: Product: syz [ 965.002371][ T1471] usb 6-1: Manufacturer: syz [ 965.004454][ T1471] usb 6-1: SerialNumber: syz [ 965.009197][ T1471] usb 6-1: config 0 descriptor?? [ 965.071098][ T1471] rc_core: IR keymap rc-streamzap not found [ 965.073668][ T1471] Registered IR keymap rc-empty [ 965.076774][ T1471] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 965.083308][ T1471] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input99 [ 965.221427][T28593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.225792][T28593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.232730][ T1326] usb 6-1: USB disconnect, device number 52 [ 965.336424][T28578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.340405][T28578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.346644][ T830] usbhid 14-1:0.0: can't add hid device: -71 [ 965.349358][ T830] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 965.356137][ T830] usb 14-1: USB disconnect, device number 53 [ 965.445545][ T40] audit: type=1400 audit(5316248568.235:1346): avc: denied { lock } for pid=28603 comm="syz.3.5966" path="socket:[145627]" dev="sockfs" ino=145627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 965.785357][T28617] __nla_validate_parse: 3 callbacks suppressed [ 965.785376][T28617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5970'. [ 965.792418][T28617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5970'. [ 965.853096][T28619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 965.855707][T28619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 965.874166][T28619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 965.880514][T28619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 965.884057][T28619] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 965.888929][T28619] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 965.984365][ T40] audit: type=1326 audit(5316248568.775:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.3.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f234799c629 code=0x7ffc0000 [ 966.061888][T28639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5976'. [ 966.149947][T28646] XFS (nullb0): Invalid superblock magic number [ 966.791741][T28635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 966.793969][T28635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 966.830521][T28655] cgroup: subsys name conflicts with all [ 966.830539][T28653] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 966.890259][T28661] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 966.929733][T28667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5983'. [ 967.077240][ T5994] hid_parser_main: 5 callbacks suppressed [ 967.077292][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.082495][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.085001][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.088330][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.093605][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.096460][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.098766][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.102744][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.105234][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.107964][ T5994] hid-generic 00A0:0086:0003.0018: unknown main item tag 0x0 [ 967.114501][ T5994] hid-generic 00A0:0086:0003.0018: hidraw1: HID v0.05 Device [syz1] on syz0 [ 967.149137][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5991'. [ 967.164986][T28688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 967.169485][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5991'. [ 967.173150][T28685] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5989'. [ 967.174086][T28688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5991'. [ 967.180316][T28685] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 967.184572][ T40] audit: type=1400 audit(5316248569.975:1348): avc: denied { relabelto } for pid=28681 comm="syz.9.5989" name="544" dev="tmpfs" ino=2901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 967.189717][T28688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.199940][ T40] audit: type=1400 audit(5316248569.975:1349): avc: denied { associate } for pid=28681 comm="syz.9.5989" name="544" dev="tmpfs" ino=2901 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 967.201837][T28688] bond3: (slave bond0): making interface the new active one [ 967.208755][T28692] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 967.214492][T28692] netlink: 'syz.1.5990': attribute type 3 has an invalid length. [ 967.218717][T28688] bond3: (slave bond0): Enslaving as an active interface with an up link [ 967.220085][T28689] netlink: 'syz.6.5991': attribute type 4 has an invalid length. [ 967.220099][T28689] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5991'. [ 967.236040][T28689] .`: renamed from bond0 (while UP) [ 967.253080][T28689] program syz.6.5991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.255738][T28694] netlink: 'syz.9.5992': attribute type 4 has an invalid length. [ 967.256846][T28688] program syz.6.5991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.267813][T28694] netlink: 'syz.9.5992': attribute type 4 has an invalid length. [ 967.292752][T20052] bond3: (slave .`): link status definitely down, disabling slave [ 967.301557][T20052] bond3: now running without any active interface! [ 967.405178][T28700] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5995'. [ 967.561324][ T5994] usb 11-1: new high-speed USB device number 63 using dummy_hcd [ 967.662429][T20052] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.666975][T20052] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.711523][ T5994] usb 11-1: Using ep0 maxpacket: 8 [ 967.722429][ T5994] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.726452][ T5994] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.730214][ T5994] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 967.743034][ T5994] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 967.746125][ T5994] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.748915][ T5994] usb 11-1: Product: syz [ 967.750378][ T5994] usb 11-1: Manufacturer: syz [ 967.766049][ T5994] usb 11-1: SerialNumber: syz [ 967.769756][ T5994] usb 11-1: config 0 descriptor?? [ 967.772422][T20052] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.779011][ T5994] streamzap 11-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 967.779408][T20052] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.868472][T20052] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.872070][T20052] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.995347][ T5994] usb 11-1: USB disconnect, device number 63 [ 968.028003][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.032466][T20052] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.033811][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.036942][T20052] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.041901][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.047547][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.058763][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.071516][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 968.103340][T28705] lo speed is unknown, defaulting to 1000 [ 968.113197][T28705] xfrm0 speed is unknown, defaulting to 1000 [ 968.330266][T28708] kvm: pic: non byte write [ 968.410260][T20052] bridge_slave_1: left allmulticast mode [ 968.413190][T20052] bridge_slave_1: left promiscuous mode [ 968.416304][T20052] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.422813][T20052] bridge_slave_0: left allmulticast mode [ 968.425417][T20052] bridge_slave_0: left promiscuous mode [ 968.428175][T20052] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.454150][T20052] batman_adv: batadv0: Interface deactivated: gretap1 [ 968.657964][T20052] batman_adv: batadv0: Removing interface: gretap1 [ 968.811260][ T39] usb 11-1: new low-speed USB device number 64 using dummy_hcd [ 968.873362][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 968.980804][ T39] usb 11-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.985447][ T39] usb 11-1: config 0 interface 0 has no altsetting 0 [ 968.988493][ T39] usb 11-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 968.994192][ T39] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.003023][ T39] usb 11-1: config 0 descriptor?? [ 969.008235][T20052] bond1 (unregistering): (slave veth3): Releasing active interface [ 969.015276][T20052] bond1 (unregistering): Released all slaves [ 969.029027][T20052] bond2 (unregistering): Released all slaves [ 969.043350][T20052] bond3 (unregistering): Released all slaves [ 969.055166][T20052] bond0 (unregistering): Released all slaves [ 969.068980][T20052] bond4 (unregistering): Released all slaves [ 969.086892][T20052] bond5 (unregistering): Released all slaves [ 969.100745][T20052] bond6 (unregistering): (slave vxcan3): Releasing backup interface [ 969.111055][T20052] vxcan3: left promiscuous mode [ 969.125897][T20052] bond6 (unregistering): Released all slaves [ 969.137407][T20052] bond7 (unregistering): Released all slaves [ 969.158758][T28715] bridge0: port 2(veth0_to_bridge) entered blocking state [ 969.161936][T28715] bridge0: port 2(veth0_to_bridge) entered disabled state [ 969.164477][T28715] veth0_to_bridge: entered allmulticast mode [ 969.167979][T28715] veth0_to_bridge: entered promiscuous mode [ 969.253554][T28705] chnl_net:caif_netlink_parms(): no params data found [ 969.330040][T20052] tipc: Left network mode [ 969.346681][T28734] overlayfs: overlapping lowerdir path [ 969.413633][T28721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.418465][T28721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.426187][ T39] usbhid 11-1:0.0: can't add hid device: -71 [ 969.431076][ T39] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 969.436029][ T39] usb 11-1: USB disconnect, device number 64 [ 969.476451][T28705] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.482285][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.487429][T28705] bridge_slave_0: entered allmulticast mode [ 969.496485][T28705] bridge_slave_0: entered promiscuous mode [ 969.501570][T28705] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.503972][T28705] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.506544][T28705] bridge_slave_1: entered allmulticast mode [ 969.509845][T28705] bridge_slave_1: entered promiscuous mode [ 969.539387][T20052] IPVS: stopping backup sync thread 25231 ... [ 969.548444][T28705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.554614][T28705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.611619][T28705] team0: Port device team_slave_0 added [ 969.615704][T28705] team0: Port device team_slave_1 added [ 969.618320][T28747] overlay: Unknown parameter 'smackfshat' [ 969.645317][T28705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.648239][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.659765][T28705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.665772][T28705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.668533][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.679821][T28705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.795639][T28705] hsr_slave_0: entered promiscuous mode [ 969.798905][T28705] hsr_slave_1: entered promiscuous mode [ 969.802542][T28705] debugfs: 'hsr0' already exists in 'hsr' [ 969.805890][T28705] Cannot create hsr debugfs directory [ 969.806819][T28758] ALSA: seq fatal error: cannot create timer (-22) [ 969.993958][T28764] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 970.035582][T20052] hsr_slave_0: left promiscuous mode [ 970.041326][T20052] hsr_slave_1: left promiscuous mode [ 970.044368][T20052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.047588][T20052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.064610][T20052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.067747][T20052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.081217][ T5933] Bluetooth: hci0: command tx timeout [ 970.087348][T20052] veth1_macvtap: left promiscuous mode [ 970.092152][T20052] veth0_macvtap: left promiscuous mode [ 970.092275][T20052] veth1_vlan: left promiscuous mode [ 970.092328][T20052] veth0_vlan: left promiscuous mode [ 970.151614][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 970.203369][T20052] pimreg3 (unregistering): left allmulticast mode [ 970.287046][ T5994] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 970.405999][T20052] team0 (unregistering): Port device team_slave_0 removed [ 970.443166][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 970.448584][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 970.460998][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 970.464335][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 970.483976][ T5994] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 970.487246][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.490068][ T5994] usb 6-1: Product: syz [ 970.491441][ T5994] usb 6-1: Manufacturer: syz [ 970.492910][ T5994] usb 6-1: SerialNumber: syz [ 970.501520][ T5994] usb 6-1: config 0 descriptor?? [ 970.512384][ T5994] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 970.557890][T28764] netlink: 'syz.3.6014': attribute type 13 has an invalid length. [ 970.693289][T28776] netlink: 'syz.3.6011': attribute type 7 has an invalid length. [ 970.696683][T28776] netlink: 'syz.3.6011': attribute type 8 has an invalid length. [ 970.712262][T28776] tmpfs: Unknown parameter 'erleaé [ 970.712262][T28776] æO' [ 970.716870][T10452] usb 6-1: USB disconnect, device number 53 [ 970.758388][T28783] xt_cgroup: xt_cgroup: no path or classid specified [ 970.879210][T28789] __nla_validate_parse: 2 callbacks suppressed [ 970.879253][T28789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6011'. [ 970.898616][T28789] comedi comedi1: comedi_bond: 0:2 attached, 24 channels from 1 devices [ 970.961931][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 971.022781][ T1471] usb 11-1: new high-speed USB device number 65 using dummy_hcd [ 971.074327][T20052] IPVS: stop unused estimator thread 0... [ 971.089170][T28705] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 971.100727][T28705] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 971.109121][T28705] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 971.132572][T28705] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 971.182839][ T1471] usb 11-1: config index 0 descriptor too short (expected 28277, got 36) [ 971.186363][ T1471] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.190501][ T1471] usb 11-1: config 0 has no interfaces? [ 971.207001][ T1471] usb 11-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 971.210843][ T1471] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.218452][T28705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.220475][ T1471] usb 11-1: config 0 descriptor?? [ 971.241945][T28705] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.247511][T20052] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.249999][T20052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.258186][T20052] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.260847][T20052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.336804][T28815] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 971.339295][T28815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 971.343138][T28815] vhci_hcd vhci_hcd.0: Device attached [ 971.406213][T28816] vhci_hcd: connection closed [ 971.406677][T20064] vhci_hcd vhci_hcd.1: stop threads [ 971.410787][T20064] vhci_hcd vhci_hcd.1: release socket [ 971.420665][T28705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.421157][T20064] vhci_hcd vhci_hcd.1: disconnect device [ 971.432821][ T1471] usb 11-1: USB disconnect, device number 65 [ 971.593419][T28705] veth0_vlan: entered promiscuous mode [ 971.599124][T28705] veth1_vlan: entered promiscuous mode [ 971.617493][T28705] veth0_macvtap: entered promiscuous mode [ 971.624157][T28705] veth1_macvtap: entered promiscuous mode [ 971.635157][T28705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.642727][T28705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.649758][T20074] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.653965][T20074] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.657937][T20074] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.662186][T20074] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.719179][T20058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.722751][T20058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.735020][T20058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.738294][T20058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.161335][ T5933] Bluetooth: hci0: command tx timeout [ 972.168552][T28857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.176257][T28859] netlink: 'syz.6.6028': attribute type 1 has an invalid length. [ 972.190095][T28859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.214102][T28859] bond0: (slave gretap1): making interface the new active one [ 972.218175][T28859] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 972.237121][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 972.244248][T28865] affs: No valid root block on device nullb0 [ 972.324451][T28869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.335464][T28873] netlink: 'syz.6.6033': attribute type 2 has an invalid length. [ 972.342846][T28873] !: entered promiscuous mode [ 972.365357][T28878] XFS (nullb0): Invalid superblock magic number [ 972.433089][T28885] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.6035'. [ 972.731297][ T6963] usb 14-1: new high-speed USB device number 54 using dummy_hcd [ 972.881212][ T6963] usb 14-1: Using ep0 maxpacket: 8 [ 972.884594][ T6963] usb 14-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.890090][ T6963] usb 14-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 972.893648][ T6963] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.896238][ T6963] usb 14-1: Product: syz [ 972.897928][ T6963] usb 14-1: Manufacturer: syz [ 972.899569][ T6963] usb 14-1: SerialNumber: syz [ 972.912057][ T6963] usb 14-1: config 0 descriptor?? [ 972.917743][ T6963] streamzap 14-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 973.031657][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 973.118792][ T6963] usb 14-1: USB disconnect, device number 54 [ 973.644955][T28901] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6041'. [ 973.973775][ T40] audit: type=1400 audit(5316248576.765:1350): avc: denied { ioctl } for pid=28922 comm="syz.1.6049" path="socket:[147766]" dev="sockfs" ino=147766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 974.027732][T28918] block nbd6: shutting down sockets [ 974.157386][ T40] audit: type=1400 audit(5316248576.945:1351): avc: denied { map } for pid=28929 comm="syz.6.6050" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 974.231250][ T5933] Bluetooth: hci0: command tx timeout [ 974.421102][T10355] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 974.572948][T10355] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.577352][T10355] usb 6-1: config 0 has no interfaces? [ 974.585031][T10355] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 974.588751][T10355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.601028][T10355] usb 6-1: Product: syz [ 974.603133][T10355] usb 6-1: Manufacturer: syz [ 974.605347][T10355] usb 6-1: SerialNumber: syz [ 974.611771][T10355] usb 6-1: config 0 descriptor?? [ 974.821275][T28937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.825418][T28937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.035198][T28937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6052'. [ 975.038327][ T6963] usb 6-1: USB disconnect, device number 54 [ 975.047835][T28937] ip6t_srh: unknown srh match flags 4000 [ 976.313073][ T5933] Bluetooth: hci0: command tx timeout [ 977.076221][T28930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.240126][T28989] fuse: Bad value for 'group_id' [ 977.242293][T28989] fuse: Bad value for 'group_id' [ 977.328384][T28997] overlayfs: failed to resolve './file0': -2 [ 977.451124][T10355] usb 14-1: new high-speed USB device number 55 using dummy_hcd [ 977.477095][T29003] lo speed is unknown, defaulting to 1000 [ 977.479903][T29003] xfrm0 speed is unknown, defaulting to 1000 [ 977.518086][T29003] netlink: 'syz.1.6068': attribute type 15 has an invalid length. [ 977.520694][T29003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6068'. [ 977.606502][T10355] usb 14-1: Using ep0 maxpacket: 8 [ 977.610370][T10355] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 977.613539][T10355] usb 14-1: config 179 has no interface number 0 [ 977.615793][T10355] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 977.619342][T10355] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 977.623515][T10355] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 977.627424][T10355] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 977.631221][ T5994] usb 11-1: new high-speed USB device number 66 using dummy_hcd [ 977.631424][T10355] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 977.637989][T10355] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 977.641413][T10355] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.653798][T28983] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 977.771044][ T5994] usb 11-1: device descriptor read/64, error -71 [ 977.864416][T10355] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:179.65/input/input100 [ 978.011156][ T5994] usb 11-1: new high-speed USB device number 67 using dummy_hcd [ 978.062106][ T39] usb 14-1: USB disconnect, device number 55 [ 978.062205][ C0] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 978.068569][ C0] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 978.142026][ T5994] usb 11-1: device descriptor read/64, error -71 [ 978.175013][T29010] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 978.251874][ T5994] usb usb11-port1: attempt power cycle [ 978.591354][ T5994] usb 11-1: new high-speed USB device number 68 using dummy_hcd [ 978.608773][T29028] netlink: 'syz.9.6076': attribute type 11 has an invalid length. [ 978.614248][ T5994] usb 11-1: device descriptor read/8, error -71 [ 978.663724][T29034] veth0: entered promiscuous mode [ 978.665756][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6078'. [ 978.759157][T29036] vcan1: entered allmulticast mode [ 978.851195][ T5994] usb 11-1: new high-speed USB device number 69 using dummy_hcd [ 978.871889][ T5994] usb 11-1: device descriptor read/8, error -71 [ 978.982084][ T5994] usb usb11-port1: unable to enumerate USB device [ 979.179410][T29042] bpf: Bad value for 'gid' [ 979.336153][T29052] binder: 29051:29052 ioctl c00c6211 0 returned -14 [ 979.352766][T29052] syzkaller1: entered promiscuous mode [ 979.355303][T29052] syzkaller1: entered allmulticast mode [ 979.465655][ T40] audit: type=1400 audit(5316248582.255:1352): avc: denied { mounton } for pid=29054 comm="syz.1.6086" path="/224/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 979.522393][T29061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6088'. [ 979.526713][T29062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6088'. [ 979.537888][T29063] 9pnet_virtio: no channels available for device syz [ 979.884999][T29078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29078 comm=syz.1.6093 [ 979.892632][T29078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29078 comm=syz.1.6093 [ 979.898119][T29080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29080 comm=syz.1.6093 [ 980.098113][T19088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.104282][T19088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.108513][T19088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.112917][T19088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.121200][T19088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.158094][T29094] lo speed is unknown, defaulting to 1000 [ 980.161379][T29094] xfrm0 speed is unknown, defaulting to 1000 [ 980.295234][T29098] Bluetooth: MGMT ver 1.23 [ 980.314587][T29094] chnl_net:caif_netlink_parms(): no params data found [ 980.396159][T29094] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.401319][T29094] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.404639][T29094] bridge_slave_0: entered allmulticast mode [ 980.408685][T29094] bridge_slave_0: entered promiscuous mode [ 980.414016][T29094] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.417079][T29094] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.420427][T29094] bridge_slave_1: entered allmulticast mode [ 980.431808][T29094] bridge_slave_1: entered promiscuous mode [ 980.454699][T29124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6103'. [ 980.484708][T29094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.489773][T29094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.519193][T29094] team0: Port device team_slave_0 added [ 980.529786][T29094] team0: Port device team_slave_1 added [ 980.536776][T29127] random: crng reseeded on system resumption [ 980.567808][T29094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.571504][T29094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.583075][T29094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.589718][T29094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.592967][ T39] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 980.596357][T29094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.607993][T29094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.649616][T29094] hsr_slave_0: entered promiscuous mode [ 980.653602][T29094] hsr_slave_1: entered promiscuous mode [ 980.656824][T29094] debugfs: 'hsr0' already exists in 'hsr' [ 980.659331][T29094] Cannot create hsr debugfs directory [ 980.772167][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 980.776061][ T39] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 980.781243][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1149, setting to 1024 [ 980.788159][ T39] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 980.793076][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.796522][ T39] usb 6-1: Product: syz [ 980.798437][ T39] usb 6-1: Manufacturer: syz [ 980.800459][ T39] usb 6-1: SerialNumber: syz [ 980.806083][ T39] usb 6-1: config 0 descriptor?? [ 980.815654][ T39] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0209 [ 980.818860][T10355] usb 11-1: new full-speed USB device number 70 using dummy_hcd [ 980.983065][T10355] usb 11-1: device descriptor read/64, error -71 [ 981.022491][T29140] syzkaller1: entered promiscuous mode [ 981.024891][T29140] syzkaller1: entered allmulticast mode [ 981.062909][ T6804] usb 6-1: USB disconnect, device number 55 [ 981.243061][T10355] usb 11-1: new full-speed USB device number 71 using dummy_hcd [ 981.322337][T29153] 9p filesystem being mounted at /30/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 981.364038][T29094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 981.371071][T10355] usb 11-1: device descriptor read/64, error -71 [ 981.375892][T29094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 981.382263][T29094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 981.389223][T29094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 981.460041][T29094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.469225][T29094] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.481417][T20060] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.482451][T10355] usb usb11-port1: attempt power cycle [ 981.484470][T20060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.496744][T20000] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.499299][T20000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.628671][T29094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.800338][T29094] veth0_vlan: entered promiscuous mode [ 981.814234][T29094] veth1_vlan: entered promiscuous mode [ 981.832655][T10355] usb 11-1: new full-speed USB device number 72 using dummy_hcd [ 981.837691][T29094] veth0_macvtap: entered promiscuous mode [ 981.844909][T29094] veth1_macvtap: entered promiscuous mode [ 981.852974][T10355] usb 11-1: device descriptor read/8, error -71 [ 981.858621][T29094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.872123][T29094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.888077][T20058] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.891291][ T6804] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 981.894591][T20058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.897702][T20058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.900508][T20058] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.983399][T20000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.986349][T20000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.012161][T20058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.015284][T20058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.052389][ T6804] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.060114][ T6804] usb 6-1: config 0 interface 0 has no altsetting 0 [ 982.065205][ T6804] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 982.068478][ T6804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.076204][ T6804] usb 6-1: config 0 descriptor?? [ 982.083231][ T40] audit: type=1400 audit(5316248584.875:1353): avc: denied { mount } for pid=29206 comm="syz.7.6096" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 982.101134][T10355] usb 11-1: new full-speed USB device number 73 using dummy_hcd [ 982.121860][T10355] usb 11-1: device descriptor read/8, error -71 [ 982.148739][T29212] overlay: ./file0 is not a directory [ 982.231426][ T5933] Bluetooth: hci4: command tx timeout [ 982.241653][T10355] usb usb11-port1: unable to enumerate USB device [ 982.484865][T29179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.488839][T29179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.495200][T29221] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 982.499564][ T6804] usbhid 6-1:0.0: can't add hid device: -71 [ 982.502215][ T6804] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 982.506265][ T6804] usb 6-1: USB disconnect, device number 56 [ 982.655456][ T40] audit: type=1400 audit(5316248585.445:1354): avc: denied { execmod } for pid=29233 comm="syz.9.6114" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=148157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 982.815888][T29243] netlink: 'syz.9.6115': attribute type 9 has an invalid length. [ 982.818466][T29243] netlink: 'syz.9.6115': attribute type 11 has an invalid length. [ 982.825228][T29243] netlink: 'syz.9.6115': attribute type 12 has an invalid length. [ 982.828429][T29243] netlink: 211616 bytes leftover after parsing attributes in process `syz.9.6115'. [ 982.922967][ T40] audit: type=1400 audit(5316248585.715:1355): avc: denied { unmount } for pid=29094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 982.925029][T29245] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6116'. [ 983.037692][T29249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.040125][T29249] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 983.044031][T29249] bond0: (slave sit0): Error -95 calling set_mac_address [ 983.063126][T29253] syzkaller0: entered promiscuous mode [ 983.064908][T29253] syzkaller0: entered allmulticast mode [ 983.190575][T29266] program syz.7.6121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 983.196552][T29265] xt_NFQUEUE: number of total queues is 0 [ 983.231474][T29271] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 983.243940][T29269] hfs: can't find a HFS filesystem on dev sr0 [ 983.391276][ T6804] usb 14-1: new high-speed USB device number 56 using dummy_hcd [ 983.551033][ T6804] usb 14-1: Using ep0 maxpacket: 8 [ 983.556356][ T6804] usb 14-1: config 1 interface 0 altsetting 131 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 983.560393][ T6804] usb 14-1: config 1 interface 0 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.577537][ T6804] usb 14-1: config 1 interface 0 has no altsetting 0 [ 983.582468][ T6804] usb 14-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 983.585781][ T6804] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.587950][T29297] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6128'. [ 983.588814][ T6804] usb 14-1: Product: syz [ 983.595034][ T6804] usb 14-1: Manufacturer: syz [ 983.597110][ T6804] usb 14-1: SerialNumber: syz [ 983.602357][T29261] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 983.679552][T29299] sit0: entered promiscuous mode [ 983.687010][T29299] netlink: 'syz.6.6129': attribute type 1 has an invalid length. [ 983.690560][T29299] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6129'. [ 983.761188][ T830] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 983.859114][T29257] pimreg: entered allmulticast mode [ 983.874617][ T6804] usbhid 14-1:1.0: can't add hid device: -71 [ 983.876681][ T6804] usbhid 14-1:1.0: probe with driver usbhid failed with error -71 [ 983.893526][ T6804] usb 14-1: USB disconnect, device number 56 [ 983.912780][ T830] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.912809][ T830] usb 6-1: config 0 interface 0 has no altsetting 0 [ 983.912836][ T830] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 983.912856][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.916795][ T830] usb 6-1: config 0 descriptor?? [ 983.972724][T29314] vivid-003: ================= START STATUS ================= [ 983.975333][T29314] vivid-003: Radio HW Seek Mode: Bounded [ 983.977834][T29314] vivid-003: Radio Programmable HW Seek: false [ 983.980132][T29314] vivid-003: RDS Rx I/O Mode: Block I/O [ 983.986277][T29314] vivid-003: Generate RBDS Instead of RDS: false [ 983.989007][T29314] vivid-003: RDS Reception: true [ 983.993754][T29314] vivid-003: RDS Program Type: 0 inactive [ 983.996011][T29314] vivid-003: RDS PS Name: inactive [ 983.998207][T29314] vivid-003: RDS Radio Text: inactive [ 984.000082][T29314] vivid-003: RDS Traffic Announcement: false inactive [ 984.002920][T29314] vivid-003: RDS Traffic Program: false inactive [ 984.005275][T29314] vivid-003: RDS Music: false inactive [ 984.007276][T29314] vivid-003: ================== END STATUS ================== [ 984.231645][T29329] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6139'. [ 984.235950][T29329] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.238958][T29329] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.311263][ T5933] Bluetooth: hci4: command tx timeout [ 984.351413][T29295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.356241][T29295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.364633][ T830] usbhid 6-1:0.0: can't add hid device: -71 [ 984.368336][ T830] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 984.394363][ T830] usb 6-1: USB disconnect, device number 57 [ 984.509038][T29339] fuse: Bad value for 'fd' [ 984.564295][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e644000: rx timeout, send abort [ 984.804152][T29354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6144'. [ 984.924166][ T40] audit: type=1400 audit(5316248587.715:1356): avc: denied { mount } for pid=29363 comm="syz.1.6146" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 985.017031][T29371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6148'. [ 985.067230][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e644000: abort rx timeout. Force session deactivation [ 985.154873][T29379] 9p filesystem being mounted at /8/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 985.163673][T29381] dlm: no locking on control device [ 985.377880][T29386] 9pnet_virtio: no channels available for device syz [ 985.451081][ T830] usb 11-1: new low-speed USB device number 74 using dummy_hcd [ 985.612397][ T830] usb 11-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.615726][ T830] usb 11-1: config 0 interface 0 has no altsetting 0 [ 985.617993][ T830] usb 11-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 985.619803][T29401] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 985.621230][ T830] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.629513][ T830] usb 11-1: config 0 descriptor?? [ 985.758322][ T40] audit: type=1400 audit(5316248588.545:1357): avc: denied { unmount } for pid=26468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 985.778361][T29406] overlayfs: missing 'lowerdir' [ 985.822489][T29409] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6162'. [ 986.035789][T29383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.040241][T29383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.054723][ T830] usbhid 11-1:0.0: can't add hid device: -71 [ 986.057412][ T830] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 986.076126][ T830] usb 11-1: USB disconnect, device number 74 [ 986.122440][ T40] audit: type=1800 audit(5316248588.905:1358): pid=29426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.6166" name="/newroot/244/file0" dev="tmpfs" ino=1347 res=0 errno=0 [ 986.228669][T20052] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.235160][T20052] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.238334][T20052] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.242248][T20052] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.401107][ T5933] Bluetooth: hci4: command tx timeout [ 986.446206][T29454] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6174'. [ 986.508498][T29456] sctp: [Deprecated]: syz.9.6175 (pid 29456) Use of int in max_burst socket option deprecated. [ 986.508498][T29456] Use struct sctp_assoc_value instead [ 986.756135][T29480] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6183'. [ 986.763546][T29480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29480 comm=syz.7.6183 [ 986.822148][ T1326] usb 14-1: new high-speed USB device number 57 using dummy_hcd [ 986.833533][T29488] netlink: 'syz.6.6186': attribute type 4 has an invalid length. [ 986.854893][T29488] netlink: 'syz.6.6186': attribute type 4 has an invalid length. [ 986.981407][ T1326] usb 14-1: Using ep0 maxpacket: 8 [ 986.985233][ T1326] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.989200][ T1326] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 986.993520][ T1326] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 986.998714][ T1326] usb 14-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 987.002042][ T1326] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.004559][ T1326] usb 14-1: Product: syz [ 987.005926][ T1326] usb 14-1: Manufacturer: syz [ 987.007510][ T1326] usb 14-1: SerialNumber: syz [ 987.010527][ T1326] usb 14-1: config 0 descriptor?? [ 987.061288][ T1326] rc_core: IR keymap rc-streamzap not found [ 987.063332][ T1326] Registered IR keymap rc-empty [ 987.065691][ T1326] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0 [ 987.073165][ T1326] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0/input101 [ 987.141811][ T39] usb 12-1: new low-speed USB device number 56 using dummy_hcd [ 987.162077][T29504] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 987.166022][T29504] SELinux: failed to load policy [ 987.219227][ T1326] usb 14-1: USB disconnect, device number 57 [ 987.327590][ T39] usb 12-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.332365][ T39] usb 12-1: config 0 interface 0 has no altsetting 0 [ 987.334652][ T39] usb 12-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 987.338190][ T39] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.346154][ T39] usb 12-1: config 0 descriptor?? [ 987.534179][ T5933] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 987.544708][T29526] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 987.658471][T29528] vlan3: entered promiscuous mode [ 987.660455][T29528] vlan3: entered allmulticast mode [ 987.662629][T29528] hsr_slave_1: entered allmulticast mode [ 987.751702][T29490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.754890][T29490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.761011][ T39] usbhid 12-1:0.0: can't add hid device: -71 [ 987.763763][ T39] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 987.767833][T29531] sp0: Synchronizing with TNC [ 987.771288][ T39] usb 12-1: USB disconnect, device number 56 [ 988.090869][T29535] __nla_validate_parse: 3 callbacks suppressed [ 988.090891][T29535] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6201'. [ 988.111054][ T39] usb 14-1: new high-speed USB device number 58 using dummy_hcd [ 988.150738][T29537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6202'. [ 988.206510][T29539] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6203'. [ 988.213185][T29539] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 988.217098][T29539] gretap2: entered promiscuous mode [ 988.219478][T29539] gretap2: entered allmulticast mode [ 988.254017][ T39] usb 14-1: device descriptor read/64, error -71 [ 988.301813][T29548] netlink: 'syz.7.6206': attribute type 1 has an invalid length. [ 988.472400][T19088] Bluetooth: hci4: command tx timeout [ 988.512514][ T39] usb 14-1: new high-speed USB device number 59 using dummy_hcd [ 988.522490][T29562] sp0: Synchronizing with TNC [ 988.590251][T29563] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6208'. [ 988.594241][T29563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6208'. [ 988.646646][ T39] usb 14-1: device descriptor read/64, error -71 [ 988.752270][ T39] usb usb14-port1: attempt power cycle [ 988.958603][T29567] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6209'. [ 989.091077][ T39] usb 14-1: new high-speed USB device number 60 using dummy_hcd [ 989.117714][ T39] usb 14-1: device descriptor read/8, error -71 [ 989.268139][T29561] [U] è [ 989.362149][ T39] usb 14-1: new high-speed USB device number 61 using dummy_hcd [ 989.381912][ T39] usb 14-1: device descriptor read/8, error -71 [ 989.439949][T29590] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6215'. [ 989.492157][T29595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6219'. [ 989.494681][ T39] usb usb14-port1: unable to enumerate USB device [ 989.539159][T29595] XFS (nullb0): Invalid superblock magic number [ 989.744686][T29608] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 989.808502][T29617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=29617 comm=syz.1.6225 [ 989.813519][T29617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=29617 comm=syz.1.6225 [ 989.817850][T29617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=29617 comm=syz.1.6225 [ 989.836965][T29617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 989.845831][T29617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29617 comm=syz.1.6225 [ 989.850221][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6225'. [ 989.853461][T29617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6225'. [ 989.897289][T29623] overlayfs: failed to clone upperpath [ 989.931512][ T1326] usb 11-1: new full-speed USB device number 75 using dummy_hcd [ 989.951219][T29627] netlink: 'syz.1.6228': attribute type 9 has an invalid length. [ 989.955582][T29627] netlink: 'syz.1.6228': attribute type 11 has an invalid length. [ 989.959051][T29627] netlink: 'syz.1.6228': attribute type 12 has an invalid length. [ 990.003343][T29631] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 990.085083][ T1326] usb 11-1: unable to get BOS descriptor or descriptor too short [ 990.089582][ T1326] usb 11-1: not running at top speed; connect to a high speed hub [ 990.096723][ T1326] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.102087][ T1326] usb 11-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.105792][T29640] CIFS mount error: No usable UNC path provided in device string! [ 990.105792][T29640] [ 990.107788][ T1326] usb 11-1: config 1 interface 0 has no altsetting 0 [ 990.112622][T29640] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 990.117156][ T1326] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.121952][ T1326] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.125241][ T1326] usb 11-1: Product: syz [ 990.127326][ T1326] usb 11-1: Manufacturer: syz [ 990.129535][ T1326] usb 11-1: SerialNumber: syz [ 990.361247][ T39] usb 12-1: new low-speed USB device number 57 using dummy_hcd [ 990.513469][ T39] usb 12-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.516975][ T39] usb 12-1: config 0 interface 0 has no altsetting 0 [ 990.519290][ T39] usb 12-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 990.522481][ T39] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.526788][ T39] usb 12-1: config 0 descriptor?? [ 990.769809][ T1326] cdc_ether 11-1:1.0: skipping garbage [ 990.773554][ T1326] cdc_ether 11-1:1.0: skipping garbage [ 990.778555][T29648] Invalid option length (2082) for dns_resolver key [ 990.781933][ T1326] cdc_ether 11-1:1.0: skipping garbage [ 990.784404][ T1326] cdc_ether 11-1:1.0: skipping garbage [ 990.786839][ T1326] usb 11-1: bad CDC descriptors [ 990.792033][ T1326] usb 11-1: USB disconnect, device number 75 [ 990.942701][T29642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.947263][T29642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.959558][ T39] usbhid 12-1:0.0: can't add hid device: -71 [ 990.961931][ T39] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 990.969708][ T39] usb 12-1: USB disconnect, device number 57 [ 990.984273][T29660] netlink: 'syz.9.6239': attribute type 3 has an invalid length. [ 990.987030][T29660] netlink: 'syz.9.6239': attribute type 1 has an invalid length. [ 991.045952][T29670] bond4: entered promiscuous mode [ 991.051278][T29670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 991.071941][T29675] No control pipe specified [ 991.074941][T29670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 991.077590][T29670] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 991.086425][T29670] bond4: (slave vcan1): Error -95 calling set_mac_address [ 991.210835][T29684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 991.468902][T29696] netlink: 'syz.6.6250': attribute type 3 has an invalid length. [ 991.475857][T29694] overlayfs: failed to clone upperpath [ 991.479082][T29694] fuse: Bad value for 'fd' [ 991.532776][T29699] syzkaller1: entered promiscuous mode [ 991.535693][T29699] syzkaller1: entered allmulticast mode [ 991.549477][T29699] ip6gre1: entered promiscuous mode [ 991.551849][T29699] ip6gre1: entered allmulticast mode [ 991.558867][T29701] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 991.565539][T29701] syzkaller0: entered promiscuous mode [ 991.567389][T29701] syzkaller0: entered allmulticast mode [ 991.683608][T29718] netlink: 'syz.1.6257': attribute type 39 has an invalid length. [ 991.688616][T29718] veth0_macvtap: left promiscuous mode [ 991.988080][T29744] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 991.999363][ T40] audit: type=1326 audit(5316248594.785:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29746 comm="syz.9.6267" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fbe79c629 code=0x0 [ 992.179673][T29755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.191548][T29755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.202898][T29755] bond0 (unregistering): Released all slaves [ 992.519655][ T40] audit: type=1400 audit(5316248595.305:1360): avc: denied { watch_sb } for pid=29773 comm="syz.7.6275" path="/newroot/38" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 992.645461][T29786] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 992.650347][T29786] bond1 (unregistering): Released all slaves [ 992.873598][T29801] netlink: 'syz.9.6282': attribute type 62 has an invalid length. [ 993.005015][T29809] batadv_slave_0: entered promiscuous mode [ 993.008938][T29808] batadv_slave_0: left promiscuous mode [ 993.366468][T29835] ip6gre1: entered allmulticast mode [ 993.370101][T29835] team0: Device ip6gre1 is of different type [ 993.375253][T29838] __nla_validate_parse: 9 callbacks suppressed [ 993.375268][T29838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6295'. [ 993.399729][T29840] macsec1: entered promiscuous mode [ 993.435186][T29842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6296'. [ 993.493968][T29845] netlink: 'syz.1.6297': attribute type 8 has an invalid length. [ 993.540306][T29847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6298'. [ 993.545964][T29847] overlayfs: failed to clone upperpath [ 994.005121][T29863] overlayfs: failed to clone upperpath [ 994.075102][T29871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6306'. [ 994.078771][T29871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6306'. [ 994.089363][T29871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29871 comm=syz.1.6306 [ 994.159297][T29874] trusted_key: encrypted_key: master key parameter is missing [ 994.230546][T29876] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6308'. [ 994.291155][T29882] openvswitch: netlink: Missing valid actions attribute. [ 994.293587][T29882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.318807][T29884] overlayfs: missing 'lowerdir' [ 994.331032][ T40] audit: type=1400 audit(5316248597.115:1361): avc: denied { getopt } for pid=29883 comm="syz.7.6311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 994.335381][T29886] openvswitch: netlink: Key type 31 is not supported [ 994.382164][ T40] audit: type=1400 audit(5316248597.175:1362): avc: denied { bind } for pid=29887 comm="syz.7.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 994.433036][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6315'. [ 994.437088][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6315'. [ 994.491041][T10355] usb 11-1: new high-speed USB device number 76 using dummy_hcd [ 994.504284][T29905] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 994.512133][ T40] audit: type=1400 audit(5316248597.295:1363): avc: denied { relabelto } for pid=29903 comm="syz.1.6317" name="" dev="pipefs" ino=150450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 994.545604][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6318'. [ 994.559302][T29910] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6319'. [ 994.564998][T29907] 8021q: adding VLAN 0 to HW filter on device bond5 [ 994.607888][T29916] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 994.651169][T10355] usb 11-1: Using ep0 maxpacket: 8 [ 994.654459][T10355] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 994.658457][T10355] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 994.663049][T10355] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 994.669605][T10355] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 994.674141][T10355] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.677543][T10355] usb 11-1: Product: syz [ 994.679342][T10355] usb 11-1: Manufacturer: syz [ 994.681567][T10355] usb 11-1: SerialNumber: syz [ 994.685793][T10355] usb 11-1: config 0 descriptor?? [ 994.751043][T10355] rc_core: IR keymap rc-streamzap not found [ 994.753817][T10355] Registered IR keymap rc-empty [ 994.757751][T10355] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 994.764381][T10355] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input102 [ 994.899792][T29880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.905292][T29880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.910364][ T6963] usb 11-1: USB disconnect, device number 76 [ 995.005175][T29932] netlink: 'syz.7.6325': attribute type 11 has an invalid length. [ 995.011821][T29932] netlink: 'syz.7.6325': attribute type 11 has an invalid length. [ 995.335376][T29947] lo speed is unknown, defaulting to 1000 [ 995.337869][T29947] xfrm0 speed is unknown, defaulting to 1000 [ 995.445955][T29955] netlink: 'syz.7.6332': attribute type 2 has an invalid length. [ 995.448818][T29955] netlink: 'syz.7.6332': attribute type 2 has an invalid length. [ 995.464273][ T40] audit: type=1400 audit(5316248598.255:1364): avc: denied { setopt } for pid=29954 comm="syz.7.6332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 995.465753][T29959] overlayfs: failed to clone upperpath [ 995.518717][T29962] netlink: 'syz.6.6335': attribute type 1 has an invalid length. [ 995.540437][T29962] 8021q: adding VLAN 0 to HW filter on device bond5 [ 995.666927][T29977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=29977 comm=syz.7.6339 [ 995.677167][T29977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=29977 comm=syz.7.6339 [ 995.954530][T30008] overlayfs: failed to clone upperpath [ 996.115799][T30019] netlink: 'syz.6.6348': attribute type 1 has an invalid length. [ 996.135144][T30019] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 996.139288][T30019] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 996.186820][T30020] gretap3: entered promiscuous mode [ 996.215767][T30028] (syz.9.6350,30028,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 996.218717][T30028] (syz.9.6350,30028,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 996.236375][T30019] macvlan2: entered promiscuous mode [ 996.238197][T30019] macvlan2: entered allmulticast mode [ 996.240534][T30019] bond6: entered promiscuous mode [ 996.243230][T30019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 996.249778][T30019] bond6: left promiscuous mode [ 996.464886][ T1326] IPVS: starting estimator thread 0... [ 996.481998][T19088] Bluetooth: hci2: unexpected event for opcode 0x060d [ 996.598536][T30042] IPVS: using max 44 ests per chain, 105600 per kthread [ 996.623831][T19088] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 996.785599][ T34] IPVS: starting estimator thread 0... [ 996.847195][T30077] lo speed is unknown, defaulting to 1000 [ 996.855711][T30077] xfrm0 speed is unknown, defaulting to 1000 [ 996.892280][T30073] IPVS: using max 44 ests per chain, 105600 per kthread [ 997.025016][T30090] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 997.096881][T30094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=30094 comm=syz.9.6368 [ 997.105231][T30093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=30093 comm=syz.9.6368 [ 997.215269][T30096] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.295826][ T6963] IPVS: starting estimator thread 0... [ 997.367347][T30114] openvswitch: netlink: Actions may not be safe on all matching packets [ 997.391291][T30106] IPVS: using max 44 ests per chain, 105600 per kthread [ 997.604013][T30133] overlay: Unknown parameter 'obj_user' [ 997.666751][T30140] bond2: option downdelay: invalid value (18446744073709551615) [ 997.670308][T30140] bond2: option downdelay: allowed values 0 - 2147483647 [ 997.680054][T30140] bond2 (unregistering): Released all slaves [ 997.831607][T19088] Bluetooth: hci4: command 0x0405 tx timeout [ 997.867098][T30159] cgroup: release_agent respecified [ 998.020903][T30163] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 998.047253][T16143] udevd[16143]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 998.047867][T30163] geneve2: entered promiscuous mode [ 998.075962][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.077273][T25373] udevd[25373]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 998.373474][T30193] overlayfs: failed to clone upperpath [ 998.376532][T30193] overlayfs: failed to clone lowerpath [ 998.415530][T30197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.473215][ T40] audit: type=1326 audit(5316248601.265:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.1.6398" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22279c629 code=0x0 [ 998.484199][ T40] audit: type=1326 audit(5316248601.265:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.1.6398" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22279c629 code=0x0 [ 999.091760][T30240] __nla_validate_parse: 10 callbacks suppressed [ 999.091777][T30240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6405'. [ 999.238605][T30245] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.6406'. [ 999.279231][T30247] Mount JFS Failure: -5 [ 999.280779][T30247] jfs_mount failed w/return code = -5 [ 999.631091][T10355] usb 11-1: new high-speed USB device number 77 using dummy_hcd [ 999.781028][T10355] usb 11-1: Using ep0 maxpacket: 8 [ 999.786237][T10355] usb 11-1: config 0 has an invalid interface number: 255 but max is 0 [ 999.789716][T10355] usb 11-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 999.793902][T10355] usb 11-1: config 0 has no interface number 0 [ 999.796606][T10355] usb 11-1: too many endpoints for config 0 interface 255 altsetting 255: 48, using maximum allowed: 30 [ 999.801632][T10355] usb 11-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 999.807189][T10355] usb 11-1: config 0 interface 255 has no altsetting 0 [ 999.812429][T10355] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 999.816218][T10355] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.819672][T10355] usb 11-1: Product: syz [ 999.821838][T10355] usb 11-1: Manufacturer: syz [ 999.824008][T10355] usb 11-1: SerialNumber: syz [ 999.829695][T10355] usb 11-1: config 0 descriptor?? [ 1000.037067][T10355] streamzap 11-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1000.043286][T10355] usb 11-1: USB disconnect, device number 77 [ 1000.612152][T30254] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 1000.990079][T30268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30268 comm=syz.6.6413 [ 1001.465647][T30202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1001.526204][T30280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6417'. [ 1001.585689][T30286] autofs: Bad value for 'fd' [ 1001.646009][T30289] netlink: 'syz.6.6420': attribute type 1 has an invalid length. [ 1001.801023][T10355] usb 12-1: new high-speed USB device number 58 using dummy_hcd [ 1001.971296][T10355] usb 12-1: Using ep0 maxpacket: 8 [ 1001.974616][T10355] usb 12-1: config 0 has an invalid interface number: 255 but max is 0 [ 1001.977336][T10355] usb 12-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1001.981128][T10355] usb 12-1: config 0 has no interface number 0 [ 1001.983256][T10355] usb 12-1: too many endpoints for config 0 interface 255 altsetting 255: 48, using maximum allowed: 30 [ 1001.984462][T30326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6431'. [ 1001.987986][T10355] usb 12-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1001.988013][T10355] usb 12-1: config 0 interface 255 has no altsetting 0 [ 1001.999756][T10355] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1002.003802][T10355] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.006404][T10355] usb 12-1: Product: syz [ 1002.007800][T10355] usb 12-1: Manufacturer: syz [ 1002.009477][T10355] usb 12-1: SerialNumber: syz [ 1002.017509][T10355] usb 12-1: config 0 descriptor?? [ 1002.229041][T10355] streamzap 12-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1002.235241][T10355] usb 12-1: USB disconnect, device number 58 [ 1002.719590][T30332] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1003.081317][T15082] usb 12-1: new low-speed USB device number 59 using dummy_hcd [ 1003.243191][T15082] usb 12-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.247241][T15082] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1003.250050][T15082] usb 12-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1003.253898][T15082] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.258887][T15082] usb 12-1: config 0 descriptor?? [ 1003.639727][T30352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.646692][T30351] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1003.669775][T30341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.677204][T30341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.683332][T15082] usbhid 12-1:0.0: can't add hid device: -71 [ 1003.686347][T15082] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 1003.692869][T15082] usb 12-1: USB disconnect, device number 59 [ 1004.229890][T30364] macvtap1: entered promiscuous mode [ 1004.233776][T30364] macvtap1: entered allmulticast mode [ 1004.237122][T30364] mac80211_hwsim hwsim79 wlan0: entered promiscuous mode [ 1004.245179][T30364] mac80211_hwsim hwsim79 wlan0: entered allmulticast mode [ 1004.253399][T30364] team0: Device macvtap1 failed to register rx_handler [ 1004.257240][T30364] mac80211_hwsim hwsim79 wlan0: left allmulticast mode [ 1004.260399][T30364] mac80211_hwsim hwsim79 wlan0: left promiscuous mode [ 1004.834941][T30314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1004.922162][T30376] syzkaller0: entered promiscuous mode [ 1004.923904][T30376] syzkaller0: entered allmulticast mode [ 1005.011013][ T1326] usb 12-1: new high-speed USB device number 60 using dummy_hcd [ 1005.161008][ T1326] usb 12-1: Using ep0 maxpacket: 8 [ 1005.164143][ T1326] usb 12-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1005.169737][ T1326] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1005.180501][ T1326] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1005.183659][ T1326] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.186479][ T1326] usb 12-1: Product: syz [ 1005.188090][ T1326] usb 12-1: Manufacturer: syz [ 1005.189779][ T1326] usb 12-1: SerialNumber: syz [ 1005.193817][ T1326] usb 12-1: config 0 descriptor?? [ 1005.401708][ T1326] streamzap 12-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1005.406569][ T1326] usb 12-1: USB disconnect, device number 60 [ 1006.060420][T30396] netlink: 'syz.7.6453': attribute type 178 has an invalid length. [ 1006.223094][T30399] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6454'. [ 1006.367990][T30404] fuse: Bad value for 'user_id' [ 1006.370057][T30404] fuse: Bad value for 'user_id' [ 1006.967205][T30428] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 1006.967641][ T40] audit: type=1804 audit(5316248609.755:1367): pid=30427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.6462" name="/newroot/87/file0" dev="tmpfs" ino=517 res=1 errno=0 [ 1006.970542][T30428] ref_ctr increment failed for inode: 0x205 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803cea3d40 [ 1006.984070][T30428] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 1006.987162][T30428] ref_ctr decrement failed for inode: 0x205 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803cea3d40 [ 1006.993955][T30428] uprobe: syz.7.6462:30428 failed to unregister, leaking uprobe [ 1007.168224][T30450] 9p filesystem being mounted at /90/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1007.172282][T30453] nfs4: Unknown parameter '‡MÊÎM%®láà1dÕ³ Mèò"ôÊ«âËd•z`PÃ& ã™îW“' [ 1007.208329][T20567] usb 11-1: new low-speed USB device number 78 using dummy_hcd [ 1007.363321][T30463] xt_ct_set_helper: 15 callbacks suppressed [ 1007.363371][T30463] xt_CT: No such helper "pptp" [ 1007.374164][T20567] usb 11-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.377762][T20567] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1007.380107][T20567] usb 11-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1007.383224][T20567] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.389967][T20567] usb 11-1: config 0 descriptor?? [ 1007.397078][T30468] cgroup: Invalid name [ 1007.423066][T30470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6470'. [ 1007.433430][T30472] Falling back ldisc for ttyS3. [ 1007.477719][ T40] audit: type=1400 audit(5316248610.265:1368): avc: denied { ioctl } for pid=30474 comm="syz.1.6475" path="socket:[156676]" dev="sockfs" ino=156676 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1007.651343][T30488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.797342][T30425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.800455][T30425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.806634][T20567] usbhid 11-1:0.0: can't add hid device: -71 [ 1007.808658][T20567] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1007.812915][T20567] usb 11-1: USB disconnect, device number 78 [ 1007.878336][T30505] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1007.892537][T30507] Sensor A: ================= START STATUS ================= [ 1007.895249][T30507] Sensor A: Test Pattern: 75% Colorbar [ 1007.897327][T30507] Sensor A: Show Information: All [ 1007.899016][T30507] Sensor A: Vertical Flip: false [ 1007.900689][T30507] Sensor A: Horizontal Flip: false [ 1007.902565][T30507] Sensor A: Brightness: 3 [ 1007.904040][T30507] Sensor A: Contrast: 128 [ 1007.905563][T30507] Sensor A: Hue: 0 [ 1007.906904][T30507] Sensor A: Saturation: 128 [ 1007.910141][T30507] Sensor A: ================== END STATUS ================== [ 1007.981497][ T34] usb 12-1: new high-speed USB device number 61 using dummy_hcd [ 1008.119087][T30527] xt_SECMARK: invalid mode: 2 [ 1008.121431][T30527] xt_nat: multiple ranges no longer supported [ 1008.131681][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 1008.135597][ T34] usb 12-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1008.139443][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1008.147508][ T34] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1008.151965][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.155660][ T34] usb 12-1: Product: syz [ 1008.157269][ T34] usb 12-1: Manufacturer: syz [ 1008.159067][ T34] usb 12-1: SerialNumber: syz [ 1008.164584][ T34] usb 12-1: config 0 descriptor?? [ 1008.186521][T30532] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1008.300354][T30534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6494'. [ 1008.304350][T30534] tipc: Started in network mode [ 1008.306041][T30534] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 1008.316559][T30534] tipc: Enabled bearer , priority 10 [ 1008.385212][ T34] streamzap 12-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1008.393955][ T34] usb 12-1: USB disconnect, device number 61 [ 1008.398947][T30538] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6496'. [ 1008.448450][T30543] trusted_key: encrypted_key: insufficient parameters specified [ 1008.453077][T30543] trusted_key: encrypted_key: insufficient parameters specified [ 1008.460583][T30547] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1008.467386][T30546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1008.495852][T30549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6500'. [ 1008.536869][T30549] bridge0: port 1(veth5) entered blocking state [ 1008.539838][T30549] bridge0: port 1(veth5) entered disabled state [ 1008.543060][T30549] veth5: entered allmulticast mode [ 1008.554280][T30549] veth5: entered promiscuous mode [ 1008.572990][T30549] vlan5: entered allmulticast mode [ 1008.574791][T30549] batadv_slave_1: entered allmulticast mode [ 1008.576952][T30549] bridge0: port 2(vlan5) entered blocking state [ 1008.579116][T30549] bridge0: port 2(vlan5) entered disabled state [ 1008.582788][T30549] vlan5: entered promiscuous mode [ 1008.584622][T30549] batadv_slave_1: entered promiscuous mode [ 1008.766942][T30571] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1008.917514][T30577] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1009.046660][ T40] audit: type=1400 audit(5316248611.835:1369): avc: denied { watch watch_reads } for pid=30580 comm="syz.9.6511" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1009.331094][ T6804] tipc: Node number set to 4269801494 [ 1009.369885][T30619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.461605][T30626] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1009.516069][ T5933] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 1009.753256][ T34] usb 11-1: new low-speed USB device number 79 using dummy_hcd [ 1009.785067][T30642] sctp: [Deprecated]: syz.7.6529 (pid 30642) Use of int in max_burst socket option. [ 1009.785067][T30642] Use struct sctp_assoc_value instead [ 1009.913002][ T34] usb 11-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.916160][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1009.918257][ T34] usb 11-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1009.921330][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.925642][ T34] usb 11-1: config 0 descriptor?? [ 1010.284480][T30664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6536'. [ 1010.289695][T30664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6536'. [ 1010.331572][T30630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.336454][T30630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.347508][ T40] audit: type=1400 audit(5316248613.135:1370): avc: denied { write } for pid=30669 comm="syz.1.6538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1010.353427][ T34] usbhid 11-1:0.0: can't add hid device: -71 [ 1010.359182][ T34] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1010.367590][ T34] usb 11-1: USB disconnect, device number 79 [ 1010.383585][ T40] audit: type=1326 audit(5316248613.175:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30665 comm="syz.9.6537" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fbe79c629 code=0x0 [ 1010.623224][T30707] netlink: 'syz.1.6547': attribute type 4 has an invalid length. [ 1010.659281][T30707] netlink: 'syz.1.6547': attribute type 4 has an invalid length. [ 1011.051550][T20567] usb 14-1: new high-speed USB device number 62 using dummy_hcd [ 1011.078819][T14894] libceph: connect (1)[c::]:6789 error -101 [ 1011.081913][T14894] libceph: mon0 (1)[c::]:6789 connect error [ 1011.214579][T30740] ceph: No mds server is up or the cluster is laggy [ 1011.232397][T20567] usb 14-1: Using ep0 maxpacket: 8 [ 1011.240451][T20567] usb 14-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1011.253602][T20567] usb 14-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.270639][T20567] usb 14-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1011.275025][T20567] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.278175][T20567] usb 14-1: Product: syz [ 1011.279865][T20567] usb 14-1: Manufacturer: syz [ 1011.282808][T20567] usb 14-1: SerialNumber: syz [ 1011.297906][T20567] usb 14-1: config 0 descriptor?? [ 1011.302937][T20567] streamzap 14-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1011.510477][ T6804] usb 14-1: USB disconnect, device number 62 [ 1011.627628][T30785] __nla_validate_parse: 4 callbacks suppressed [ 1011.627657][T30785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6570'. [ 1011.648067][T30785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6570'. [ 1011.648913][T30787] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6571'. [ 1011.689736][T30792] netlink: 'syz.1.6572': attribute type 39 has an invalid length. [ 1011.735344][T30797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6573'. [ 1011.739027][T30797] netlink: 6 bytes leftover after parsing attributes in process `syz.6.6573'. [ 1011.849128][T30806] netlink: 'syz.6.6577': attribute type 8 has an invalid length. [ 1011.862157][T30806] netlink: 'syz.6.6577': attribute type 1 has an invalid length. [ 1011.865338][T30806] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6577'. [ 1011.869382][T30806] netlink: 'syz.6.6577': attribute type 5 has an invalid length. [ 1011.895119][T30808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30808 comm=syz.1.6578 [ 1011.913067][T30808] netlink: 'syz.1.6578': attribute type 1 has an invalid length. [ 1011.942036][T30806] mac80211_hwsim hwsim75 : renamed from wlan1 (while UP) [ 1011.956266][T30808] bond6: (slave bridge2): making interface the new active one [ 1011.959044][T30808] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 1011.971515][T30808] bond6: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1012.065104][T30821] netlink: 'syz.1.6584': attribute type 6 has an invalid length. [ 1012.068543][T30821] netlink: 'syz.1.6584': attribute type 6 has an invalid length. [ 1012.103834][T30824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6585'. [ 1012.107449][T30822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6582'. [ 1012.135288][T30827] overlayfs: failed to clone upperpath [ 1012.161157][ T6804] usb 12-1: new low-speed USB device number 62 using dummy_hcd [ 1012.175763][T30830] can0: slcan on pty38. [ 1012.264521][T30844] netlink: 'syz.1.6590': attribute type 39 has an invalid length. [ 1012.324726][ T6804] usb 12-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.328152][ T6804] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1012.330550][ T6804] usb 12-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1012.340382][ T6804] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.345704][ T6804] usb 12-1: config 0 descriptor?? [ 1012.752567][T30813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.756422][T30813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.762552][ T6804] usbhid 12-1:0.0: can't add hid device: -71 [ 1012.765426][ T6804] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 1012.772644][ T6804] usb 12-1: USB disconnect, device number 62 [ 1012.992369][T30818] can0 (unregistered): slcan off pty38. [ 1013.000113][T30861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6594'. [ 1013.003671][T30861] nbd: must specify at least one socket [ 1013.101850][T30876] xt_TCPMSS: Only works on TCP SYN packets [ 1013.103875][T30873] lo speed is unknown, defaulting to 1000 [ 1013.106625][T30873] xfrm0 speed is unknown, defaulting to 1000 [ 1013.192543][T30879] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6599'. [ 1013.449102][ T40] audit: type=1400 audit(5316248616.235:1372): avc: denied { connect } for pid=30899 comm="syz.7.6603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1013.631120][ T6804] usb 14-1: new low-speed USB device number 63 using dummy_hcd [ 1013.761041][ T6804] usb 14-1: device descriptor read/64, error -71 [ 1014.001271][ T6804] usb 14-1: new low-speed USB device number 64 using dummy_hcd [ 1014.131111][ T6804] usb 14-1: device descriptor read/64, error -71 [ 1014.201150][T10355] usb 11-1: new low-speed USB device number 80 using dummy_hcd [ 1014.233852][T30926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1014.233853][T30927] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1014.233881][T30927] overlayfs: missing 'lowerdir' [ 1014.238078][T30926] overlayfs: missing 'lowerdir' [ 1014.249341][ T6804] usb usb14-port1: attempt power cycle [ 1014.254480][T30927] overlayfs: failed to resolve 'verity=require': -2 [ 1014.315659][T30929] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1014.340666][T30929] bond7: (slave ip6gretap0): making interface the new active one [ 1014.346162][T30929] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1014.352511][T10355] usb 11-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.356348][T10355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1014.358559][T10355] usb 11-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1014.363273][T10355] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.367585][T30932] sctp: [Deprecated]: syz.7.6614 (pid 30932) Use of int in maxseg socket option. [ 1014.367585][T30932] Use struct sctp_assoc_value instead [ 1014.375268][T10355] usb 11-1: config 0 descriptor?? [ 1014.505071][T30942] xt_hashlimit: size too large, truncated to 1048576 [ 1014.518089][T30944] overlayfs: failed to resolve './file1': -2 [ 1014.550149][T30946] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1014.591034][ T6804] usb 14-1: new low-speed USB device number 65 using dummy_hcd [ 1014.611914][ T6804] usb 14-1: device descriptor read/8, error -71 [ 1014.654588][T30958] cgroup2: Unknown parameter 'func' [ 1014.784672][T30915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.787607][T30915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.794630][T10355] usbhid 11-1:0.0: can't add hid device: -71 [ 1014.796692][T10355] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1014.802695][T10355] usb 11-1: USB disconnect, device number 80 [ 1014.852351][ T6804] usb 14-1: new low-speed USB device number 66 using dummy_hcd [ 1014.871607][ T6804] usb 14-1: device descriptor read/8, error -71 [ 1014.981741][ T6804] usb usb14-port1: unable to enumerate USB device [ 1015.151052][T15082] usb 12-1: new high-speed USB device number 63 using dummy_hcd [ 1015.301278][T15082] usb 12-1: Using ep0 maxpacket: 8 [ 1015.306904][T15082] usb 12-1: config 3 has an invalid interface number: 4 but max is 0 [ 1015.310076][T15082] usb 12-1: config 3 has no interface number 0 [ 1015.320439][T15082] usb 12-1: New USB device found, idVendor=1bbb, idProduct=011e, bcdDevice=cf.10 [ 1015.324311][T15082] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.327767][T15082] usb 12-1: Product: syz [ 1015.329510][T15082] usb 12-1: Manufacturer: syz [ 1015.331758][T15082] usb 12-1: SerialNumber: syz [ 1015.359544][T30982] team0 (unregistering): Port device team_slave_0 removed [ 1015.365875][T30982] team0 (unregistering): Port device team_slave_1 removed [ 1015.539702][ T1326] usb 12-1: USB disconnect, device number 63 [ 1015.804130][T20054] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.807783][T20054] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.899277][T19088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1015.911367][T19088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1015.918805][T19088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1015.936174][T19088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1015.937834][T20054] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.939257][T19088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1015.942557][T20054] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.985998][T30996] lo speed is unknown, defaulting to 1000 [ 1015.986980][T31000] nbd: nbd64 already in use [ 1015.989572][T30996] xfrm0 speed is unknown, defaulting to 1000 [ 1015.993327][T25373] block nbd64: NBD_DISCONNECT [ 1016.032432][T31003] No source specified [ 1016.050540][T20054] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.054691][T20054] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.140744][T25373] udevd[25373]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1016.143412][T20054] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.147686][T20054] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.192248][T31018] netlink: 'syz.1.6641': attribute type 1 has an invalid length. [ 1016.237101][T30996] chnl_net:caif_netlink_parms(): no params data found [ 1016.340606][T31031] overlayfs: failed to resolve './file0': -2 [ 1016.390708][T30996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.394620][T30996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.397951][T30996] bridge_slave_0: entered allmulticast mode [ 1016.409663][T30996] bridge_slave_0: entered promiscuous mode [ 1016.413567][T30996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.415884][T30996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.418635][T30996] bridge_slave_1: entered allmulticast mode [ 1016.421539][T30996] bridge_slave_1: entered promiscuous mode [ 1016.485809][T20054] bridge_slave_1: left allmulticast mode [ 1016.487723][T20054] bridge_slave_1: left promiscuous mode [ 1016.489797][T20054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.497473][T20054] bridge_slave_0: left allmulticast mode [ 1016.499453][T20054] bridge_slave_0: left promiscuous mode [ 1016.501753][T20054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.680428][T20054] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1016.905813][T20054] bond3 (unregistering): (slave .`): Releasing active interface [ 1016.911420][T20054] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.916160][T20054] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.919887][T20054] .` (unregistering): Released all slaves [ 1016.925324][T20054] bond1 (unregistering): (slave veth3): Releasing active interface [ 1016.930447][T20054] bond1 (unregistering): Released all slaves [ 1016.945594][T20054] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1016.949238][T20054] batadv1: left promiscuous mode [ 1016.951511][T20054] batadv1: left allmulticast mode [ 1016.955615][T20054] bond2 (unregistering): (slave batadv2): Releasing active interface [ 1016.961209][T20054] bond2 (unregistering): Released all slaves [ 1016.972209][T20054] bond3 (unregistering): Released all slaves [ 1016.988118][T20054] bond0 (unregistering): Released all slaves [ 1017.001619][T20054] bond4 (unregistering): Released all slaves [ 1017.019000][T20054] bond5 (unregistering): Released all slaves [ 1017.029858][T20054] bond6 (unregistering): Released all slaves [ 1017.046425][T30996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.052342][T31062] IPv6: syztnl0: Disabled Multicast RS [ 1017.055321][T31063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.058437][T31063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.062910][T31063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.065442][T31063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.097750][T31066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=31066 comm=syz.9.6650 [ 1017.099535][T30996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.152469][T30996] team0: Port device team_slave_0 added [ 1017.164089][T30996] team0: Port device team_slave_1 added [ 1017.166472][T20054] !: left promiscuous mode [ 1017.241764][T30996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.244045][T30996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.253518][T30996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.258193][T30996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.270676][T30996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.283224][T30996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.344353][T31086] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1017.405859][T30996] hsr_slave_0: entered promiscuous mode [ 1017.408679][T30996] hsr_slave_1: entered promiscuous mode [ 1017.412154][T30996] debugfs: 'hsr0' already exists in 'hsr' [ 1017.414484][T30996] Cannot create hsr debugfs directory [ 1017.455705][T31097] __nla_validate_parse: 8 callbacks suppressed [ 1017.455722][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1017.641242][ T34] usb 14-1: new high-speed USB device number 67 using dummy_hcd [ 1017.791239][ T34] usb 14-1: Using ep0 maxpacket: 16 [ 1017.792702][ T34] usb 14-1: config index 0 descriptor too short (expected 65, got 36) [ 1017.798303][ T34] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.810908][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1017.825401][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1017.829681][ T34] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1017.836098][ T34] usb 14-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1017.840110][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.846333][T20054] hsr_slave_0: left promiscuous mode [ 1017.849737][ T34] usb 14-1: config 0 descriptor?? [ 1017.852682][T20054] hsr_slave_1: left promiscuous mode [ 1017.856624][T20054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.857879][ T34] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input106 [ 1017.860269][T20054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.872127][ T5325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.882920][T20054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.886126][T20054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.889599][ T5325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.893696][ T5325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.896965][ T5325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.900259][T20054] veth1_macvtap: left promiscuous mode [ 1017.903211][T20054] veth0_macvtap: left promiscuous mode [ 1017.905768][T20054] veth1_vlan: left promiscuous mode [ 1017.907906][T16143] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.908106][T20054] veth0_vlan: left promiscuous mode [ 1017.921546][ T5325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.937255][ T5325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.956841][ T5325] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1017.991197][ T5933] Bluetooth: hci2: command tx timeout [ 1018.055947][T31094] pxrc 14-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.102947][T10355] usb 12-1: new low-speed USB device number 64 using dummy_hcd [ 1018.181567][ T1326] usb 14-1: USB disconnect, device number 67 [ 1018.258475][T10355] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1018.261571][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1018.265320][T10355] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.269311][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1018.274616][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1018.279533][T10355] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1018.282764][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1018.286594][T10355] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.290550][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1018.294495][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1018.298984][T10355] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1018.302232][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1018.305593][T10355] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.309492][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1018.313544][T10355] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1018.319911][T10355] usb 12-1: string descriptor 0 read error: -22 [ 1018.322883][T10355] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1018.325903][T10355] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.337370][T10355] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1018.346438][T31129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6662'. [ 1018.586499][ T1326] usb 12-1: USB disconnect, device number 64 [ 1018.777355][T30996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1018.800278][T30996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1018.815993][T30996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1018.823238][T30996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1018.875225][ T40] audit: type=1400 audit(5316248621.665:1373): avc: denied { ioctl } for pid=31162 comm="syz.9.6666" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1018.935772][T30996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.948905][T30996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.954751][T20070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.957367][T20070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.969505][T20060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.971990][T20060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.012894][T31178] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6670'. [ 1019.016198][T31178] Unknown options in mask b7f2 [ 1019.043559][T20054] IPVS: stop unused estimator thread 0... [ 1019.061923][T31181] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6669'. [ 1019.090830][T31186] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1019.149470][T30996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.176077][T30996] veth0_vlan: entered promiscuous mode [ 1019.183101][T30996] veth1_vlan: entered promiscuous mode [ 1019.199416][T30996] veth0_macvtap: entered promiscuous mode [ 1019.204724][T30996] veth1_macvtap: entered promiscuous mode [ 1019.215309][T30996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.222853][T30996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.245418][T31204] xt_TCPMSS: Only works on TCP SYN packets [ 1019.246097][T20058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.264328][T20058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.276567][T20058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.279476][T20058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.359523][T20058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.364485][T20058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.401991][T20058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.405252][T20058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.484941][T31221] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1019.487538][T31221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.507956][T31221] macsec1: entered promiscuous mode [ 1019.509718][T31221] macsec1: entered allmulticast mode [ 1019.764414][T31251] qnx4: no qnx4 filesystem (no root dir). [ 1019.816467][T31270] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6686'. [ 1019.820233][T31270] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1019.837021][T31264] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6688' sets config #0 [ 1019.838236][ T5933] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1019.852541][T31264] geneve2: entered promiscuous mode [ 1019.854783][T31264] geneve2: entered allmulticast mode [ 1019.937530][T31278] tmpfs: Too small a size for current use [ 1020.071171][ T5933] Bluetooth: hci2: command tx timeout [ 1020.481295][T10355] usb 14-1: new high-speed USB device number 68 using dummy_hcd [ 1020.547217][T31332] program syz.0.6700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1020.565511][T31336] overlayfs: failed to resolve './file1': -2 [ 1020.671328][T10355] usb 14-1: Using ep0 maxpacket: 8 [ 1020.674328][T10355] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1020.678394][T10355] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 1020.691258][T10355] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 1020.698364][T10355] usb 14-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1020.702179][T10355] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.705167][T10355] usb 14-1: Product: syz [ 1020.706565][T10355] usb 14-1: Manufacturer: syz [ 1020.708115][T10355] usb 14-1: SerialNumber: syz [ 1020.722037][T10355] usb 14-1: config 0 descriptor?? [ 1020.732672][T31341] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6703'. [ 1020.771105][T10355] rc_core: IR keymap rc-streamzap not found [ 1020.773269][T10355] Registered IR keymap rc-empty [ 1020.781111][T10355] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0 [ 1020.791196][T10355] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0/input107 [ 1020.892087][ T1471] usb 12-1: new low-speed USB device number 65 using dummy_hcd [ 1020.935044][T10355] usb 14-1: USB disconnect, device number 68 [ 1021.043379][ T1471] usb 12-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.047106][ T1471] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1021.049517][ T1471] usb 12-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1021.053116][ T1471] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.066345][ T1471] usb 12-1: config 0 descriptor?? [ 1021.473094][T31344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.476142][T31344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.491531][ T1471] usbhid 12-1:0.0: can't add hid device: -71 [ 1021.494736][ T1471] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 1021.503424][ T1471] usb 12-1: USB disconnect, device number 65 [ 1021.813561][T31379] overlayfs: failed to resolve './file1': -2 [ 1021.953567][T31385] batman_adv: batadv0: Adding interface: dummy0 [ 1021.956070][T31385] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.964863][T31385] batman_adv: batadv0: Interface activated: dummy0 [ 1021.968854][T31385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6714'. [ 1022.046855][T31387] syzkaller1: entered promiscuous mode [ 1022.048731][T31387] syzkaller1: entered allmulticast mode [ 1022.151762][ T5933] Bluetooth: hci2: command tx timeout [ 1022.302414][T31398] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6719'. [ 1022.582187][T31410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32853 sclass=netlink_route_socket pid=31410 comm=syz.1.6724 [ 1023.679565][T31434] [ 1023.680590][T31434] ============================================ [ 1023.683089][T31434] WARNING: possible recursive locking detected [ 1023.685262][T31434] syzkaller #0 Tainted: G L [ 1023.687581][T31434] -------------------------------------------- [ 1023.689882][T31434] syz.9.6733/31434 is trying to acquire lock: [ 1023.691848][T31434] ffff88803539a0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 1023.695169][T31434] [ 1023.695169][T31434] but task is already holding lock: [ 1023.697647][T31434] ffff8880353998f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1023.700845][T31434] [ 1023.700845][T31434] other info that might help us debug this: [ 1023.703496][T31434] Possible unsafe locking scenario: [ 1023.703496][T31434] [ 1023.706028][T31434] CPU0 [ 1023.707128][T31434] ---- [ 1023.708253][T31434] lock(&dev->mutex#4); [ 1023.709688][T31434] lock(&dev->mutex#4); [ 1023.711128][T31434] [ 1023.711128][T31434] *** DEADLOCK *** [ 1023.711128][T31434] [ 1023.713636][T31434] May be due to missing lock nesting notation [ 1023.713636][T31434] [ 1023.716302][T31434] 1 lock held by syz.9.6733/31434: [ 1023.717989][T31434] #0: ffff8880353998f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1023.721180][T31434] [ 1023.721180][T31434] stack backtrace: [ 1023.723091][T31434] CPU: 0 UID: 0 PID: 31434 Comm: syz.9.6733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.723110][T31434] Tainted: [L]=SOFTLOCKUP [ 1023.723115][T31434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1023.723122][T31434] Call Trace: [ 1023.723128][T31434] [ 1023.723133][T31434] dump_stack_lvl+0x100/0x190 [ 1023.723382][T31434] print_deadlock_bug.cold+0xbd/0xca [ 1023.723431][T31434] __lock_acquire+0x12bb/0x2630 [ 1023.723535][T31434] lock_acquire+0x1cf/0x380 [ 1023.723553][T31434] ? comedi_do_insn+0x2e/0x360 [ 1023.723568][T31434] ? __pfx___might_resched+0x10/0x10 SYZFAIL: failed to recv rpc [ 1023.723583][T31434] __mutex_lock+0x1a2/0x1b90 [ 1023.723713][T31434] ? comedi_do_insn+0x2e/0x360 [ 1023.723727][T31434] ? comedi_do_insn+0x2e/0x360 [ 1023.723742][T31434] ? __pfx___mutex_lock+0x10/0x10 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1023.723755][T31434] ? __pfx___might_resched+0x10/0x10 [ 1023.723770][T31434] ? __up_read+0x2c5/0x700 [ 1023.723784][T31434] ? comedi_do_insn+0x2e/0x360 [ 1023.723796][T31434] comedi_do_insn+0x2e/0x360 [ 1023.723810][T31434] comedi_dio_bitfield2+0x3c0/0x420 [ 1023.723824][T31434] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 1023.723841][T31434] ? do_insn_ioctl+0xda/0x4e0 [ 1023.723855][T31434] ? stack_trace_save+0x8e/0xc0 [ 1023.723895][T31434] ? __pfx_stack_trace_save+0x10/0x10 [ 1023.723910][T31434] bonding_dio_insn_bits+0x2b9/0x570 [ 1023.723927][T31434] ? kasan_save_track+0x14/0x30 [ 1023.724010][T31434] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 1023.724027][T31434] ? __x64_sys_ioctl+0x18e/0x210 [ 1023.724044][T31434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.724057][T31434] insn_rw_emulate_bits+0x2a2/0x5e0 [ 1023.724081][T31434] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 1023.724105][T31434] ? comedi_check_chanlist+0x27e/0x300 [ 1023.724128][T31434] parse_insn+0x83f/0x19f0 [ 1023.724150][T31434] ? trace_kmalloc+0x101/0x130 [ 1023.724176][T31434] ? __pfx_parse_insn+0x10/0x10 [ 1023.724198][T31434] ? __kmalloc_noprof+0x320/0x850 [ 1023.724224][T31434] do_insn_ioctl+0x152/0x4e0 [ 1023.724242][T31434] comedi_unlocked_ioctl+0xf68/0x3310 [ 1023.724258][T31434] ? tomoyo_path_number_perm+0x188/0x580 [ 1023.724454][T31434] ? futex_wait+0x125/0x380 [ 1023.724475][T31434] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1023.724498][T31434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1023.724514][T31434] ? do_vfs_ioctl+0x226/0x13e0 [ 1023.724529][T31434] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1023.724543][T31434] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1023.724558][T31434] ? __fget_files+0x215/0x3d0 [ 1023.724568][T31434] ? hook_file_ioctl_common+0x146/0x410 [ 1023.724584][T31434] ? selinux_file_ioctl+0x139/0x290 [ 1023.724596][T31434] ? selinux_file_ioctl+0xb4/0x290 [ 1023.724608][T31434] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1023.724623][T31434] __x64_sys_ioctl+0x18e/0x210 [ 1023.724638][T31434] do_syscall_64+0x106/0xf80 [ 1023.724650][T31434] ? clear_bhb_loop+0x40/0x90 [ 1023.724663][T31434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.724674][T31434] RIP: 0033:0x7f3fbe79c629 [ 1023.724685][T31434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.724724][T31434] RSP: 002b:00007f3fbf64d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.724765][T31434] RAX: ffffffffffffffda RBX: 00007f3fbea15fa0 RCX: 00007f3fbe79c629 [ 1023.724773][T31434] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000008 [ 1023.724782][T31434] RBP: 00007f3fbe832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1023.724790][T31434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.724799][T31434] R13: 00007f3fbea16038 R14: 00007f3fbea15fa0 R15: 00007ffede47ede8 [ 1023.724811][T31434] [ 1023.752686][ T40] audit: type=1400 audit(5316248626.535:1374): avc: denied { write } for pid=5917 comm="syz-executor" path="pipe:[1889]" dev="pipefs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1023.911067][ T5933] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1023.914579][ T5933] Bluetooth: hci1: Injecting HCI hardware error event [ 1023.917806][ T5933] Bluetooth: hci1: hardware error 0x00 [ 1024.495451][T20064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.565876][T20064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.666869][T20064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.734791][T20064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.872862][T20064] bridge_slave_1: left allmulticast mode [ 1024.875448][T20064] bridge_slave_1: left promiscuous mode [ 1024.878017][T20064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.884566][T20064] bridge_slave_0: left allmulticast mode [ 1024.887044][T20064] bridge_slave_0: left promiscuous mode [ 1024.889553][T20064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.035041][T20064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.040380][T20064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.046059][T20064] bond0 (unregistering): Released all slaves [ 1025.387847][T20064] hsr_slave_0: left promiscuous mode [ 1025.390057][T20064] hsr_slave_1: left promiscuous mode [ 1025.392379][T20064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.394810][T20064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.397642][T20064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.400061][T20064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.402925][T20064] batman_adv: batadv0: Interface deactivated: dummy0 [ 1025.405223][T20064] batman_adv: batadv0: Removing interface: dummy0 [ 1025.410321][T20064] veth1_macvtap: left promiscuous mode [ 1025.415813][T20064] veth0_macvtap: left promiscuous mode [ 1025.417651][T20064] veth1_vlan: left promiscuous mode [ 1025.419382][T20064] veth0_vlan: left promiscuous mode [ 1025.488901][T20064] team0 (unregistering): Port device team_slave_1 removed [ 1025.498965][T20064] team0 (unregistering): Port device team_slave_0 removed [ 1025.957550][T20064] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.991549][ T5933] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1026.014335][T20064] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.085546][T20064] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.145098][T20064] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.251247][T20064] bridge_slave_1: left allmulticast mode [ 1026.253203][T20064] bridge_slave_1: left promiscuous mode [ 1026.255100][T20064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.258383][T20064] bridge_slave_0: left allmulticast mode [ 1026.260285][T20064] bridge_slave_0: left promiscuous mode [ 1026.262851][T20064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.403958][T20064] bond0 (unregistering): Released all slaves [ 1026.657696][T20064] hsr_slave_0: left promiscuous mode [ 1026.660117][T20064] hsr_slave_1: left promiscuous mode [ 1026.666283][T20064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.669416][T20064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.674305][T20064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.677482][T20064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.685421][T20064] veth1_macvtap: left promiscuous mode [ 1026.687646][T20064] veth0_macvtap: left promiscuous mode [ 1026.690102][T20064] veth1_vlan: left promiscuous mode [ 1026.695536][T20064] veth0_vlan: left promiscuous mode [ 1026.761408][T20064] team0 (unregistering): Port device team_slave_1 removed [ 1026.766241][T20064] team0 (unregistering): Port device team_slave_0 removed [ 1027.225388][T20064] IPVS: stop unused estimator thread 0...