last executing test programs: 59.541222673s ago: executing program 3 (id=80): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008845}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x699f}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x329}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc8}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4002) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r5, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10, 0x43}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000a00)={{r2, &(0x7f0000000840)='.\x00', 0x100, &(0x7f0000000880)={@_ha_fsid={[0x1, 0xf]}, {0xfffb, 0x2, 0x5, 0x80000000}}, 0x7, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x2}, {[0x8, 0x8000, 0x3ff]}, 0x2, 0x8d, &(0x7f0000000940)=""/141}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000a80)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000b00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @mcast1, 0xb682}, {0xa, 0x4e21, 0x7d38, @mcast2, 0x101}, r7, 0x7}}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, r9, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x8800) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000d00)=0x80000001) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x120, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_SSID={0x23, 0x34, @random="b795ad7ee383ba05849b66379593841f6e8bda7d08053018cb605fba386a35"}, @NL80211_ATTR_IE={0xd2, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @mesh_chsw={0x76, 0x6, {0x7, 0xa, 0x29, 0x7}}, @measure_req={0x26, 0x8f, {0x3, 0xa3, 0x4, "42e1f2ac6ef81b33895082e04734eff685a28a414c9922064e9999fabcc3908b8bd9c31d61232df5e0ce536b8ae157f06158e52658b682bee7b78c95b4c6cb1562ef0f18d616628917127c7710bb27ce227a6d128f06f2b29e6cc7412fa03bf70e939bb04999fa30526f4cc4106d3f5f910c182e14aaf69e64a686f2770bab2ccc02993310c9028031d3c997"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x8c, 0xa7}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x9, 0x1}}, @mic={0x8c, 0x10, {0x79, "e702480d6d89", @short="9250d6bf20407d76"}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000844}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x5300008}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x1c0, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x14c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "68e73ad3d05f3dbda0a1caa8d66d4f49"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d74a989cd5eecd46ab60d5c761239f44"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8eb2f19e9a918e147112b9f4fdb03e70"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6619f9178111c68cb9c7d6911ebf90d8426f3cfe4099241b2e3b0536e5a7747b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3a061078a25e8731acdbaf99925dd9e18bd09d17aaec0de90a926ee0f9e98634"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "953affaa3473a286bcdf427b72f5373a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e64563c8aac7f6d3c43d36b3edd961dc"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20048000) (async) close(r2) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000001200)={0x1, 'hsr0\x00', {}, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r6, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r6}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001340)=@o_path={&(0x7f0000001240)='./file0\x00', r11, 0x4000, r2}, 0x18) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r12, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c095}, 0x8084) 59.490550211s ago: executing program 3 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x958, 0x0, 0x3}, {0x913, 0x0, 0x200}, {0x374, 0x0, 0xbc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x84, 0x0, 0x0, 0x6}], "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"}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="b9250800000f322e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7c}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x0, 0x298, 0x0, 0xb8, 0xb8, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xd, @ipv4=@multicast1, 0x4e20}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x200, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x26000, 0x0, 0x1}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x125200) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000003c0)={0x7, @sliced={0x7ff, [0x4, 0x4d2, 0x8001, 0x3, 0x23, 0xffff, 0x81, 0x273b, 0x5, 0x7, 0x8, 0x8, 0x5, 0x6, 0xff, 0xfff, 0x401, 0x2, 0x2, 0x3, 0x972c, 0x4, 0x58cc, 0x4, 0xfff, 0x0, 0x6, 0x0, 0xfffb, 0x6, 0x8, 0x5, 0x9, 0x1, 0xd6, 0x7, 0x4, 0x1, 0x770, 0x200, 0x3ff, 0x9, 0xe85, 0x5, 0x5aa, 0x80, 0x1, 0x2], 0x7}}) 59.219649405s ago: executing program 3 (id=87): arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000012c0), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000200000000000000070000009500010000000000f9c1ef75a24967d1fc81e2ee1db06ace4a9dfec709e0479c407381f2b68d303f6d9089e87cd232578316bd91c87bdeca3711b65c88c9c9d376fb14260e96e1ad3fbf899c463a2dd602d714310abf840040508835c8f12173e5b85e160b923ea7a1e6eb02d16f37acbfcb9ffbcaacc34b7aae7f18c1e62cb0712dfa02c76b65271fca97d87b1007e3dedd0a614bca63bac91174a4d55471f5392bd688e352b9da71f006"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x24}, 0x94) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001300)=""/30) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) 59.141329978s ago: executing program 3 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x10000000) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x62, @multicast1, 0x4e23, 0x2, 'lblc\x00', 0x16, 0x9, 0x17}, {@remote, 0x4e24, 0x1003, 0x3, 0x5, 0x6}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x10000, 0x7, 0x2, 0x7e73, 0x7fffffffffffffff, 0x6, 0x95}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() kcmp(r7, r8, 0x0, r6, r6) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 59.05059087s ago: executing program 3 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {0x7}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) 58.514264299s ago: executing program 3 (id=99): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000001400000011"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x7, 0x800000, 0x7, 0x0, 0x7, 0x9, 0x6, 0x0, 0x45, 0x0, 0x2, 0x5e, 0x4d, 0x80, 0x80, [0x3, 0xffffffff]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x21}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5ad8d0b5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:faillog_t:s0\x00', 0x1f, 0x2) 58.445818906s ago: executing program 32 (id=99): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000001400000011"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x7, 0x800000, 0x7, 0x0, 0x7, 0x9, 0x6, 0x0, 0x45, 0x0, 0x2, 0x5e, 0x4d, 0x80, 0x80, [0x3, 0xffffffff]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x21}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5ad8d0b5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:faillog_t:s0\x00', 0x1f, 0x2) 32.801576271s ago: executing program 0 (id=553): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000080)=0x40000004, 0x10b, 0x4, 0x0, &(0x7f0000048000)=0x3fc, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) r2 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xb) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) setresuid(0x0, 0xee01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='!---\x00', 0x0, r4) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x8014) listen(r6, 0xfffffffd) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f00000001c0)={0x9, 0x7, 0x2, 0xfffffffd, 0x25, "3472579e854e16f25b307be82aad1751aac13e", 0x4, 0x5}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010026bd700000020057020000000c0001000100000000000000"], 0x20}}, 0x0) write$binfmt_misc(r8, 0x0, 0x0) exit(0x0) landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) exit(0x4) 31.979528305s ago: executing program 0 (id=576): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x871a15abc695f91d, 0x0, 0x25dfdbfb, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x5, 0x1, 0x3, 0x7ffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x105040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x7) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000280)={0x0, 0x2, 0x4}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000380)={0x3, 0x7, 0x2, 0x1, 0xc, "b11e8f6f3f199cc520aa8a20af4d898237ea00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x2, 0x1, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x3}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000240)={0x1, 0x8, 0x2, 0x16ffd0f9, 0x3, 0xffffffffffff6482}) 31.979126305s ago: executing program 0 (id=577): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x5392, &(0x7f0000000000)=@type=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0xa9) close_range(r2, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 30.361761916s ago: executing program 0 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0xb11, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 30.259060093s ago: executing program 0 (id=611): socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xff, {0x4, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0xe5ba, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f, 0x800}, 0x48) 29.811914953s ago: executing program 0 (id=613): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000180)={0x0, 0x0}) 29.737175416s ago: executing program 33 (id=613): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000180)={0x0, 0x0}) 12.873618096s ago: executing program 2 (id=650): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x240488c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x7, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x912}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78a8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) write$tcp_mem(r0, &(0x7f0000000340)={0x6, 0x20, 0x6, 0x20, 0xfffffffffffffff5}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x8f256d59cdfc7397, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x1a}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x30004000) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000b80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000580)={0x5a0, 0x1, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_VLAN={0x4}, @NFQA_PAYLOAD={0x84, 0xa, "73964ad6e4fc10c3372dcf9b94c31e7222765233ddca522fbf4d6381c53e02bc7ec58997f211b3a3352506d124ea16296c7c869f8ae2d8d447608228a3172a5495f4ee67c39a429116f99d8f880feb7866dec1b1933006b1cc403d6eb8b623d16a35c538ec99b46bb19f9dbfbfaa233cb0378accee27d3575b5b89095c0105f5"}, @NFQA_CT={0x184, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xd6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x86}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x802}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0x7}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_EXP={0x35c, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2ab9a8c6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf}, @CTA_EXPECT_NAT={0x23c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xd8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x20000000}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x8040}, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c40)={0x2e0, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x32}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffc0}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x73b4c654}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "1896ee513e0d642fb88cda2fff124d2464ec6313"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x158}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "66abc5c4a1e8756ca3ac500cbd606a6ccdc77a57c73518b291135d9927eb"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x49}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x19) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=@newchain={0x2c, 0x64, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {0xe, 0xe}, {0x3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008c10) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x5c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x39}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000013c0)={0x16, 0x98, 0xfa00, {&(0x7f0000001300), 0x3, r7, 0x10, 0x0, @in={0x2, 0x4e20, @remote}}}, 0xa0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001480)={0x0, "394ed2c94bff7d27712835a1482bb19d"}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002480)={r8, 0x9, 0x8}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]}, 0x24}}, 0x20000844) sendmsg$key(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002980)={0x2, 0xa, 0x42, 0x8, 0x29, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x4, 0x7, 0x1, 0x7, 0xffffffffffffff7f}, @sadb_key={0x16, 0x9, 0x510, 0x0, "16914721f6edbf8bf255d85431b0c7177622fcf5deff9c38338dae6918214fff981384e635a999d04a50bfb0b1e814c79e26d23067a61b4e3b91cd436352122e2097e49a7362a3fedaf8cd5d25bcd82ffadf8916e5e5640a7685f2537e515f6855a7cc98b2b51ff27a79eb02671e61de745224de60b82b81feffd43047c324f94b7cd5aa1ef46425fee7605aa8b4e1332060b1328733ba45932067780cd3da9a92e0"}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x0, 0x0, 0x20, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_address={0x5, 0x6, 0xf, 0x80, 0x0, @in6={0xa, 0x4e23, 0xec1, @empty, 0x3}}]}, 0x148}}, 0x40000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x60, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0x81) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000002dc0)={0x2, 0x1, 0x91, &(0x7f0000002d00)=""/145}) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000002e00)) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close_range(r10, r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002f00)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x3, 0x4e20, 0x5, 0xa, 0x60, 0x20, 0x2c, r3}, {0x9, 0x9, 0xfffffffffffffffe, 0x8, 0x3e7, 0x8, 0x5, 0x1}, {0x9, 0x6, 0x9, 0xfffffffffffff72f}, 0x6, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2, 0x4d5, 0xff}, 0xa, @in=@local, 0x0, 0x1, 0x3, 0x91, 0x3ff, 0x8}}, 0xe8) 12.775107449s ago: executing program 2 (id=652): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)={0x34c, 0x2e, 0x1, 0x70bd25, 0x0, "", [@nested={0x4, 0x119}, @nested={0x338, 0x11, 0x0, 0x1, [@nested={0x334, 0xcf, 0x0, 0x1, [@nested={0x32f, 0x146, 0x0, 0x1, [@generic="f5ef56146c91147563276660e594de86923b901b9c31b5127825f1868b4db9469c2df41906c1f5ee49", @typed={0x8, 0x124, 0x0, 0x0, @u32=0x7}, @nested={0x1f1, 0x6c, 0x0, 0x1, [@generic="8b82111c59", @nested={0x1d0, 0x10f, 0x0, 0x1, [@nested={0x1c9, 0x11b, 0x0, 0x1, [@generic="44e4ba7c0b0ff113b095b181686c69e6901606a6035b241060d1ba9b116c80da82d5b88cc6363112ecfcfe146d3396e45fbbf0a08b22fd28c11b96cceeebb143edb758f38e41e6198a4aac1b4f64403c1497fdc66d55feb17b3a47961e32432008a761d761630abd62e074f1aeda6ad0a673e1e2f1ef46c79d906ae0a1b56a1cb49371c5044e8535c676535532d332e91b4270db1184a76120ede03ed5473adf06033298dbeef6a61dc38f79dcbab66a59547791ab5c867c0e0244d06d7eeb09d3b84e9bad5626f647e62bd3f0", @typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0xfffffffffffffffd}, @typed={0xc1, 0x82, 0x0, 0x0, @binary="9da6d2cfd0d56814fd84a9b4e09bfefb7e71aa6b1338a2f4b0bcf5b7da34e38272c0fb396e8da9fe6bafa86982b217883dc0a99d6f8cc8d02d65ac33bf40d09bc28a90cbe72d692943aa8ec74169b9f54f99da2135cef1a3b948b4bb65653d617abfa325b7ece7ef3a395ab715205e14add6497c4d4ccd9950c466a2121433263671d206265ab7a4afb86bcfc88d39c8da199e34acdfd9f19a20d74af1508d9ef7e25cbdbcb597005c8fd2c532208d87b50f917122d979574773357159"}, @generic="ea8e54f0deb6d4df4fed8cacb160ad53bc0360eeda91dd56", @typed={0x8, 0xb8, 0x0, 0x0, @pid}]}]}, @nested={0x4, 0xef}, @nested={0x4}, @typed={0x4, 0xfe}, @nested={0x4, 0x62}, @nested={0x4, 0x87}, @nested={0x4, 0x76}]}, @typed={0x8, 0x65, 0x0, 0x0, @pid}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@multicast2}, @generic="db89061eb9fbad2bf82b2a9418649da868c869b4397ab66e7f39863979f0bdf348067f0b5606ca8cdcb5b5080280648f010c688d62984d051b094fe343cb1fa22295cdcf66ca2b1cc8152ecb85f43f28d04aa546812ddb957608dc2f3b52e0e98745cc4aa9b20ab28754d0d7c05b9139d8ff8509fbe0d7d56d5710ea94b935782d99259af1a87cf89bcca8f33c9878df0b153753b7ccc2d3d65b5d8e92f7230c8b3b3d434ce7cd2f1e8dbf2cbfca3103a770996f13ed41af6f046964853f276bf8c18987b616eb8c1c752f52389cd54b7a7874ba1d9b4d2612518c8c3c9220ded49fd5ff56d71b5b5569f9421c6d", @typed={0x8, 0xb8, 0x0, 0x0, @u32=0xfffffff8}]}]}]}]}, 0x34c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 12.573270191s ago: executing program 2 (id=655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) ftruncate(r0, 0xb3) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x3) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf253100000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20044011) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0xda4313adfe6a05a7}, 0x40) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0xf9b}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.513010357s ago: executing program 2 (id=659): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000000)={0x8, "26cf1b9e8fcdc8bd409bb46600683daa5563bb65b21e4565893af61dd66c2ad2badc9f24ce1c950cb9ac83f2989bae47a6aeff7f423cc801838cb607954cfb75"}) close_range(r0, 0xffffffffffffffff, 0x900) 12.392784315s ago: executing program 2 (id=661): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4e9f42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140001003a00010324bd7002fadbdf2540bf335a"], 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r9) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0xd9, 0x2b, 0x6, 0x1000}]}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000400)={[0x8000000000000001, 0x9, 0x3, 0x83, 0x2, 0x2, 0x4002004c8, 0x1004, 0x45c5, 0x20000c592, 0xfffffffffffffff9, 0xffffffffffffffff, 0x5e, 0x0, 0x80000004000000, 0x4], 0xffffffff, 0x2010d3}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 12.15149469s ago: executing program 2 (id=662): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040)=0xffff, 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) 1.507166706s ago: executing program 4 (id=786): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0xfdff, &(0x7f0000000200)={&(0x7f0000000480)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x0, 0x4000) 1.506829305s ago: executing program 4 (id=787): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) close_range(r0, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x5, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast1, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xcd, [@local, @multicast1]}, @noop, @lsrr={0x83, 0x13, 0xb8, [@remote, @empty, @multicast1, @rand_addr=0x64010101]}, @end, @cipso={0x86, 0x40, 0x0, [{0x6, 0x10, "d6ff059eea75800343b0abff8719"}, {0x0, 0xe, "06562c27bb4edb7cb1659a05"}, {0x2, 0xb, "6a41976680abe7b957"}, {0x6, 0x11, "534d31bbf375b760bc23603987adae"}]}]}}}}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r3, &(0x7f00000001c0)=""/240, 0xf0) getdents64(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x7, [@const={0xf, 0x0, 0x0, 0xa, 0x3}, @enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x6, [{0x2, 0x81, 0x4}, {0xe, 0x8, 0x100}, {0x10, 0x6, 0x410a}]}, @fwd={0x6}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x14, 0x2}, @var={0x7, 0x0, 0x0, 0xe, 0x4}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x1, 0x8}, {0xf, 0x4, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x0, 0x30, 0x30]}}, &(0x7f0000000380)=""/152, 0xb7, 0x98, 0x0, 0x5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xffff, 0x401, 0x5, 0x9800, r1, 0x8, '\x00', r2, r3, 0x4, 0x4, 0x3, 0x3, @value=r4}, 0x50) 1.447898712s ago: executing program 4 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, {0xa, 0x0, 0x2, @empty}, 0x0, {[0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6e]}}, 0x5c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c00078005001500a10bef53050005000a0000000900020073797a30000000000500040000000000050001000600000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x21}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x870}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1aa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x286}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1.447630034s ago: executing program 4 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d793000000000000000000000140004002e657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) (async, rerun: 32) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) (async, rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0xe, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000040)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x27dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x4000) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) 1.325644154s ago: executing program 4 (id=790): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000006000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1.325250986s ago: executing program 4 (id=791): r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0x2280) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) write$char_usb(r2, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x17, 0x2, &(0x7f0000000180)="952b"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x300, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000580)=""/32) syz_usb_ep_read(0xffffffffffffffff, 0xf, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f00000000c0)="ad") 1.233017682s ago: executing program 5 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2131}, [@IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e2e92b98f98b3e033773af02c498d121"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "25a1d8c1228acc14f9d6f9296a7b65de"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0x9, 0x2, '(\\&&\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000081}, 0x8000802) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80006}, 0xc) accept$alg(r2, 0x0, 0x0) 1.167501257s ago: executing program 5 (id=793): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 645.633042ms ago: executing program 1 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) open(&(0x7f00000001c0)='./file0\x00', 0x101000, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x591, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000240)={0x8, 0xfffffffb}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="170000006800010027bd7000fbdbdf25020002000000000004000b0006000700e5da9547000000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) 636.606789ms ago: executing program 1 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x0, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x2, 0x0, 0x7fe}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaa01aaaaaaaa000800450000380000000000019078640101b8ac1414aa0b009078032c0000000000000089000000000000ac1414aaa815a23da43974ff00000000"], 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 555.911029ms ago: executing program 1 (id=803): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@local, @multicast1, 0x0}, &(0x7f0000000100)=0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x101, '\x00', r2, r3, 0x1, 0x3, 0x1}, 0x50) 555.621309ms ago: executing program 1 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x6fde, 0x4}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB='6', @ANYRES8=r0], 0x20}}, 0x4000) (async) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000001300)={'nr0\x00'}) (async) r3 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x3, 0x6, 0x5000, 0x1000, &(0x7f0000ff0000/0x1000)=nil}) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000180)={r2}) (async) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000040)=0x100000, 0x4) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r7, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80054}, 0x8000) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) (async) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) 485.753152ms ago: executing program 1 (id=805): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r2, &(0x7f0000000980)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000240)={0x10000000000000e0, 0x0, [{0x22c, 0x0, 0x8001}, {0xaa8, 0x0, 0x5}, {0x8e2, 0x0, 0x1200}, {0x97c, 0x0, 0x3}]}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x800a, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x95, 0x6, 0x6, 0x3, 0x4, 0x6, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x12, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa0, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10002, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) shmget$private(0x0, 0x4000, 0x2, &(0x7f000074a000/0x4000)=nil) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}}], {0x14}}, 0x3c}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x8, 0x9, 0x8001, 0x1000, 0x8, 0x7, 0x8000}, &(0x7f00000000c0)={0x8, 0x7, 0x3, 0x10000, 0x6, 0x6}, &(0x7f0000000100)={0x7fffffff, 0x10, 0x7, 0x7, 0x4b94, 0x2, 0xe, 0x7c6}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) 295.073248ms ago: executing program 5 (id=806): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 294.163963ms ago: executing program 5 (id=807): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x5, 0x7, 0x8, 0x9, 0x8bf4}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2340, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x1, 0x400}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffd61, &(0x7f0000000300)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x400001, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40408d4}, 0x20004800) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)={0x2, 0x0, [{0xdddd0000, 0xea, &(0x7f00000002c0)=""/234}, {0x1, 0x4, &(0x7f0000000080)=""/4}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000540), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_enter(r10, 0x27e2, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x6ca1, &(0x7f00000003c0)={0x0, 0xcb61, 0x0, 0x0, 0xe2}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r10, 0x21, &(0x7f0000000440)={0x0, 0x1351, 0x8000, 0x20, 0x200281}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000580)=0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000038425bd7000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001700000000000500180001000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x80) 133.95178ms ago: executing program 5 (id=808): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, 0x2}) 1.020844ms ago: executing program 1 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x830}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x91e8d5c924b6df0f}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3fffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000007c0)={"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"}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 0s ago: executing program 5 (id=810): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x100000000000f7) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) read$watch_queue(0xffffffffffffffff, &(0x7f0000000100)=""/10, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r3, 0x2}], 0x1, 0x9f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000200)=0x5, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x15, 0x0, &(0x7f0000000280)) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r9, 0xfffffffffffffffe, 0x2) ioctl$EVIOCGABS3F(r9, 0x8018457f, &(0x7f0000000540)=""/233) syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000001c0)={'team0\x00', 0x400}) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) kernel console output (not intermixed with test programs): hich could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.467972][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.502367][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.504619][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.512525][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.530232][ T5939] hsr_slave_0: entered promiscuous mode [ 65.532995][ T5939] hsr_slave_1: entered promiscuous mode [ 65.546608][ T5926] hsr_slave_0: entered promiscuous mode [ 65.550139][ T5926] hsr_slave_1: entered promiscuous mode [ 65.553168][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 65.555744][ T5926] Cannot create hsr debugfs directory [ 65.609394][ T5928] hsr_slave_0: entered promiscuous mode [ 65.612991][ T5928] hsr_slave_1: entered promiscuous mode [ 65.615995][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 65.618466][ T5928] Cannot create hsr debugfs directory [ 65.647799][ T5925] hsr_slave_0: entered promiscuous mode [ 65.650275][ T5925] hsr_slave_1: entered promiscuous mode [ 65.652688][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 65.654637][ T5925] Cannot create hsr debugfs directory [ 66.018649][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.025512][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.029870][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.038565][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.074580][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.080934][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.094184][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.111953][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.153169][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.166490][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.172909][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.184224][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.230565][ T5935] Bluetooth: hci0: command tx timeout [ 66.230736][ T5938] Bluetooth: hci1: command tx timeout [ 66.230765][ T5286] Bluetooth: hci3: command tx timeout [ 66.230918][ T5286] Bluetooth: hci2: command tx timeout [ 66.263217][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.268400][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.275508][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.281758][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.298274][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.325577][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.352661][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.355895][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.371644][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.374305][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.393334][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.431139][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.450920][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.453907][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.457384][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.459993][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.478172][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.518443][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.521455][ T41] audit: type=1400 audit(1771838266.814:91): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.538193][ T5926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.542693][ T5926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.562405][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.567989][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.570374][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.577990][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.581176][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.605129][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.616216][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.619338][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.633832][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.637085][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.657340][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.740744][ T5939] veth0_vlan: entered promiscuous mode [ 66.755759][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.762239][ T5939] veth1_vlan: entered promiscuous mode [ 66.816595][ T5939] veth0_macvtap: entered promiscuous mode [ 66.825754][ T5939] veth1_macvtap: entered promiscuous mode [ 66.842588][ T5926] veth0_vlan: entered promiscuous mode [ 66.847394][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.855051][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.862795][ T5926] veth1_vlan: entered promiscuous mode [ 66.880865][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.893042][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.909205][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.913904][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.933073][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.971958][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.976663][ T5926] veth0_macvtap: entered promiscuous mode [ 67.001401][ T5926] veth1_macvtap: entered promiscuous mode [ 67.005308][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.012682][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.030558][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.057629][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.063127][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.066545][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.080249][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.084055][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.091636][ T1143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.106254][ T1143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.111857][ T5925] veth0_vlan: entered promiscuous mode [ 67.122158][ T5928] veth0_vlan: entered promiscuous mode [ 67.137124][ T5925] veth1_vlan: entered promiscuous mode [ 67.143507][ T5928] veth1_vlan: entered promiscuous mode [ 67.145273][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.200189][ T5928] veth0_macvtap: entered promiscuous mode [ 67.204533][ T5928] veth1_macvtap: entered promiscuous mode [ 67.214996][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.217619][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.227179][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.254528][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.269988][ T6016] x_tables: duplicate underflow at hook 1 [ 67.281376][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.283982][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.287119][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.287788][ T5925] veth0_macvtap: entered promiscuous mode [ 67.293653][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.295054][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.300294][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.313682][ T6016] process 'syz.3.5' launched './file0' with NULL argv: empty string added [ 67.319179][ T5925] veth1_macvtap: entered promiscuous mode [ 67.338854][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.384470][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.421095][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.424825][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.438710][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.439260][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.446882][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.451701][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.494640][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.549234][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.558222][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.569855][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 67.598835][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.600520][ T6026] netlink: 'syz.3.7': attribute type 7 has an invalid length. [ 67.606970][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.630756][ T6026] netlink: 'syz.3.7': attribute type 7 has an invalid length. [ 67.634106][ T6026] Zero length message leads to an empty skb [ 67.639246][ T1163] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.649002][ T1163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.654256][ T1163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.667694][ T1163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.734045][ T6032] syzkaller0: entered promiscuous mode [ 67.735022][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.736586][ T6032] syzkaller0: entered allmulticast mode [ 67.740163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.764671][ T6034] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 67.779172][ T6034] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.793589][ T6034] bridge_slave_0: left allmulticast mode [ 67.796345][ T6034] bridge_slave_0: left promiscuous mode [ 67.799045][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.823171][ T6034] bridge_slave_1: left allmulticast mode [ 67.825434][ T6034] bridge_slave_1: left promiscuous mode [ 67.828158][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.828648][ T6044] fuse: Bad value for 'fd' [ 67.836999][ T6034] bond0: (slave bond_slave_0): Releasing backup interface [ 67.838955][ T6045] netlink: 'syz.2.9': attribute type 10 has an invalid length. [ 67.847443][ T6034] bond0: (slave bond_slave_1): Releasing backup interface [ 67.871284][ T6034] team0: Port device team_slave_0 removed [ 67.886043][ T6034] team0: Port device team_slave_1 removed [ 67.889308][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.894687][ T6048] netlink: 'syz.2.9': attribute type 28 has an invalid length. [ 67.897876][ T6048] netlink: 'syz.2.9': attribute type 3 has an invalid length. [ 67.900924][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.903875][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9'. [ 67.911282][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.912168][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 67.914578][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.925645][ T6034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.949255][ T6045] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 67.955991][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.962315][ T6045] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.015738][ T6051] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 68.042432][ T6051] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.132682][ T6050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.309811][ T5938] Bluetooth: hci2: command tx timeout [ 68.309952][ T5935] Bluetooth: hci3: command tx timeout [ 68.312194][ T5938] Bluetooth: hci0: command tx timeout [ 68.315041][ T5942] Bluetooth: hci1: command tx timeout [ 68.347678][ T6074] Bluetooth: MGMT ver 1.23 [ 68.423638][ T6076] netlink: 'syz.2.19': attribute type 2 has an invalid length. [ 68.427136][ T6076] netlink: 244 bytes leftover after parsing attributes in process `syz.2.19'. [ 68.454392][ T6076] capability: warning: `syz.2.19' uses 32-bit capabilities (legacy support in use) [ 68.655337][ T6087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23'. [ 68.724750][ T6091] input: syz0 as /devices/virtual/input/input5 [ 68.764428][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 68.801594][ T6099] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure [ 68.890691][ T41] kauditd_printk_skb: 70 callbacks suppressed [ 68.890703][ T41] audit: type=1400 audit(1771838269.184:162): avc: denied { write } for pid=6101 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.912073][ T41] audit: type=1400 audit(1771838269.194:163): avc: denied { nlmsg_write } for pid=6101 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.924917][ T41] audit: type=1400 audit(1771838269.214:164): avc: denied { create } for pid=6110 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.933822][ T41] audit: type=1400 audit(1771838269.214:165): avc: denied { write } for pid=6110 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.984441][ T41] audit: type=1400 audit(1771838269.274:166): avc: denied { read } for pid=6116 comm="syz.1.33" name="cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.999808][ T41] audit: type=1400 audit(1771838269.274:167): avc: denied { open } for pid=6116 comm="syz.1.33" path="/dev/cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.009016][ T41] audit: type=1400 audit(1771838269.274:168): avc: denied { ioctl } for pid=6116 comm="syz.1.33" path="/dev/cec1" dev="devtmpfs" ino=975 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.040488][ T41] audit: type=1400 audit(1771838269.324:169): avc: denied { read append } for pid=6118 comm="syz.0.34" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.059555][ T41] audit: type=1400 audit(1771838269.324:170): avc: denied { ioctl open } for pid=6118 comm="syz.0.34" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.068934][ T41] audit: type=1400 audit(1771838269.324:171): avc: denied { mounton } for pid=6118 comm="syz.0.34" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.099760][ T6126] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 69.439699][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.475945][ T6155] netlink: 184 bytes leftover after parsing attributes in process `syz.3.48'. [ 69.524663][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.50'. [ 69.599685][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 69.604633][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.608946][ T9] usb 5-1: config 0 has no interfaces? [ 69.613527][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 69.617230][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 69.621368][ T9] usb 5-1: Product: syz [ 69.623194][ T9] usb 5-1: SerialNumber: syz [ 69.629033][ T9] usb 5-1: config 0 descriptor?? [ 69.906036][ T6137] kvm: emulating exchange as write [ 70.010971][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 70.025698][ T9] usb 5-1: USB disconnect, device number 2 [ 70.099663][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.208712][ T6189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.62'. [ 70.248037][ T6196] trusted_key: syz.3.65 sent an empty control message without MSG_MORE. [ 70.262783][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.266601][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.274626][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.280104][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.283925][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.293458][ T29] usb 7-1: config 0 descriptor?? [ 70.390060][ T5942] Bluetooth: hci2: command tx timeout [ 70.399628][ T5942] Bluetooth: hci1: command tx timeout [ 70.399688][ T5935] Bluetooth: hci3: command tx timeout [ 70.559378][ T6215] binder: 6214:6215 ioctl 40047459 200000000000 returned -22 [ 70.657234][ T6222] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 70.661622][ T6222] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 70.664569][ T6222] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 70.667150][ T6222] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 70.705455][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x6 [ 70.716831][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 70.965070][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.969419][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.973615][ T6170] mmap: syz.2.53 (6170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.003266][ T5932] usb 7-1: USB disconnect, device number 2 [ 71.188970][ T6241] input: syz0 as /devices/virtual/input/input8 [ 71.354109][ T6248] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 71.363204][ T6248] dlm: non-version read from control device 0 [ 71.526566][ T6259] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 71.785077][ T6276] netlink: 'syz.2.96': attribute type 10 has an invalid length. [ 71.899696][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.922153][ T5992] libceph: connect (1)[c::]:6789 error -101 [ 71.924514][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 72.029567][ T54] usb 6-1: device descriptor read/64, error -71 [ 72.180766][ T5992] libceph: connect (1)[c::]:6789 error -101 [ 72.183535][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 72.195577][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.200396][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.270399][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.273704][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.279898][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.301759][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.305533][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.308939][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.312902][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.316312][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.361302][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.365715][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.409813][ T54] usb 6-1: device descriptor read/64, error -71 [ 72.469632][ T5935] Bluetooth: hci1: command tx timeout [ 72.479841][ T5935] Bluetooth: hci2: command tx timeout [ 72.512388][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.517251][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.527577][ T6285] chnl_net:caif_netlink_parms(): no params data found [ 72.530568][ T54] usb usb6-port1: attempt power cycle [ 72.598014][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.600869][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.603976][ T6285] bridge_slave_0: entered allmulticast mode [ 72.607177][ T6285] bridge_slave_0: entered promiscuous mode [ 72.611660][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.614695][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.617420][ T6285] bridge_slave_1: entered allmulticast mode [ 72.621200][ T6285] bridge_slave_1: entered promiscuous mode [ 72.654470][ T6285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.663407][ T6285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.690651][ T10] libceph: connect (1)[c::]:6789 error -101 [ 72.693193][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 72.716301][ T6280] ceph: No mds server is up or the cluster is laggy [ 72.737090][ T101] bridge_slave_1: left allmulticast mode [ 72.741788][ T101] bridge_slave_1: left promiscuous mode [ 72.744877][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.757024][ T101] bridge_slave_0: left allmulticast mode [ 72.760454][ T101] bridge_slave_0: left promiscuous mode [ 72.763008][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.899723][ T54] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.920675][ T54] usb 6-1: device descriptor read/8, error -71 [ 73.037191][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.046270][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.050722][ T101] bond0 (unregistering): Released all slaves [ 73.059995][ T6285] team0: Port device team_slave_0 added [ 73.065259][ T6285] team0: Port device team_slave_1 added [ 73.101005][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.104094][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.115852][ T6285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.123065][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.126475][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.136725][ T6285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.174118][ T6285] hsr_slave_0: entered promiscuous mode [ 73.176733][ T6285] hsr_slave_1: entered promiscuous mode [ 73.179121][ T6285] debugfs: 'hsr0' already exists in 'hsr' [ 73.180040][ T54] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 73.182020][ T6285] Cannot create hsr debugfs directory [ 73.200600][ T54] usb 6-1: device descriptor read/8, error -71 [ 73.310386][ T54] usb usb6-port1: unable to enumerate USB device [ 73.381543][ T6325] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`!ކ;1 [ 73.455692][ T101] hsr_slave_0: left promiscuous mode [ 73.458848][ T101] hsr_slave_1: left promiscuous mode [ 73.462577][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.465542][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.471701][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.474603][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.487056][ T101] veth1_macvtap: left promiscuous mode [ 73.491621][ T101] veth0_macvtap: left promiscuous mode [ 73.494911][ T101] veth1_vlan: left promiscuous mode [ 73.496798][ T101] veth0_vlan: left promiscuous mode [ 73.667806][ T101] team0 (unregistering): Port device team_slave_1 removed [ 73.680843][ T101] team0 (unregistering): Port device team_slave_0 removed [ 73.789598][ T6285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.831263][ T6350] ======================================================= [ 73.831263][ T6350] WARNING: The mand mount option has been deprecated and [ 73.831263][ T6350] and is ignored by this kernel. Remove the mand [ 73.831263][ T6350] option from the mount to silence this warning. [ 73.831263][ T6350] ======================================================= [ 74.111037][ T41] kauditd_printk_skb: 80 callbacks suppressed [ 74.111048][ T41] audit: type=1400 audit(1771838274.404:252): avc: denied { create } for pid=6353 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.119109][ T41] audit: type=1400 audit(1771838274.404:253): avc: denied { write } for pid=6353 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.135569][ T6354] rtc_cmos 00:05: Alarms can be up to one day in the future [ 74.389968][ T5935] Bluetooth: hci3: command tx timeout [ 74.606110][ T6285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.611414][ T6285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.618134][ T6285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.665253][ T41] audit: type=1400 audit(1771838274.954:254): avc: denied { mounton } for pid=6362 comm="syz.1.115" path="/32/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.714934][ T6285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.731700][ T6285] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.746512][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.749442][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.770809][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.773082][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.778770][ T41] audit: type=1400 audit(1771838275.064:255): avc: denied { watch watch_reads } for pid=6364 comm="syz.2.116" path="pipe:[12047]" dev="pipefs" ino=12047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 74.834255][ T41] audit: type=1400 audit(1771838275.124:256): avc: denied { create } for pid=6364 comm="syz.2.116" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.853306][ T41] audit: type=1400 audit(1771838275.124:257): avc: denied { ioctl } for pid=6364 comm="syz.2.116" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12426 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.880629][ T41] audit: type=1400 audit(1771838275.174:258): avc: denied { remount } for pid=6362 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 74.936840][ T41] audit: type=1400 audit(1771838275.224:259): avc: denied { getopt } for pid=6362 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.959582][ T41] audit: type=1400 audit(1771838275.244:260): avc: denied { read } for pid=6362 comm="syz.1.115" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.982770][ T41] audit: type=1400 audit(1771838275.274:261): avc: denied { connect } for pid=6368 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.003015][ T6285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.182589][ T6285] veth0_vlan: entered promiscuous mode [ 75.187763][ T6285] veth1_vlan: entered promiscuous mode [ 75.207277][ T6285] veth0_macvtap: entered promiscuous mode [ 75.216746][ T6285] veth1_macvtap: entered promiscuous mode [ 75.227055][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.236898][ T6285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.247402][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.253458][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.258136][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.264316][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.306043][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.316833][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.330580][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.333654][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.383372][ T6407] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.471033][ T6416] __nla_validate_parse: 9 callbacks suppressed [ 75.471045][ T6416] netlink: 608 bytes leftover after parsing attributes in process `syz.4.119'. [ 75.582064][ T6418] (syz.4.120,6418,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 75.584583][ T6418] (syz.4.120,6418,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 75.586845][ T6418] (syz.4.120,6418,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 75.590392][ T6418] (syz.4.120,6418,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 75.841718][ T6445] usb usb9: usbfs: process 6445 (syz.1.124) did not claim interface 0 before use [ 75.875277][ T6450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.959056][ T6459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.073325][ T6476] [U] v3f"S/4:XTzWtlW= [ 76.075629][ T6476] [U] J"e:" [ 76.083065][ T6478] netlink: 'syz.1.133': attribute type 11 has an invalid length. [ 76.086385][ T6478] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'. [ 76.098707][ T6478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'. [ 76.102014][ T6478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'. [ 76.165749][ T6484] fuse: Unknown parameter 'fd' [ 76.267156][ T6500] misc userio: No port type given on /dev/userio [ 76.417100][ T6510] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.469960][ T5935] Bluetooth: hci3: command tx timeout [ 76.522428][ T5932] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.670919][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.674405][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.677616][ T5932] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.683441][ T5932] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.686512][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.693347][ T5932] usb 7-1: config 0 descriptor?? [ 76.715820][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.718295][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.107831][ T5932] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 77.197475][ T6450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.220897][ T6531] mkiss: ax0: crc mode is auto. [ 77.458939][ T6538] netlink: 'syz.1.155': attribute type 7 has an invalid length. [ 77.461057][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 77.473068][ T6500] usb 7-1: string descriptor 0 read error: -71 [ 77.473443][ T40] usb 7-1: USB disconnect, device number 3 [ 77.476077][ T6536] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -19 [ 77.839730][ T40] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 77.992274][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.995947][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.999176][ T40] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.003431][ T40] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.007281][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.013328][ T40] usb 7-1: config 0 descriptor?? [ 78.419746][ T40] plantronics 0003:047F:FFFF.0004: global environment stack underflow [ 78.425947][ T40] plantronics 0003:047F:FFFF.0004: item 0 4 1 11 parsing failed [ 78.428849][ T40] plantronics 0003:047F:FFFF.0004: parse failed [ 78.431135][ T40] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 78.559634][ T5935] Bluetooth: hci3: command tx timeout [ 78.626596][ T34] usb 7-1: USB disconnect, device number 4 [ 78.757603][ T6581] SELinux: failed to load policy [ 78.762962][ T6582] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 78.766421][ T6582] netlink: 224 bytes leftover after parsing attributes in process `syz.0.168'. [ 78.770706][ T6581] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 78.773826][ T6581] netlink: 224 bytes leftover after parsing attributes in process `syz.0.168'. [ 78.938127][ T6450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.991366][ T6450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.092038][ T1163] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.103748][ T1163] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.115860][ T1143] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.127534][ T1143] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.197182][ T41] kauditd_printk_skb: 56 callbacks suppressed [ 79.197197][ T41] audit: type=1400 audit(1771838279.484:318): avc: denied { listen } for pid=6590 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.225813][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 79.370763][ T41] audit: type=1400 audit(1771838279.664:319): avc: denied { read write } for pid=6602 comm="syz.2.173" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.379309][ T41] audit: type=1400 audit(1771838279.664:320): avc: denied { open } for pid=6602 comm="syz.2.173" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.389649][ T41] audit: type=1400 audit(1771838279.664:321): avc: denied { ioctl } for pid=6602 comm="syz.2.173" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.544127][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 79.646156][ T41] audit: type=1400 audit(1771838279.934:322): avc: denied { ioctl } for pid=6616 comm="syz.1.178" path="socket:[12918]" dev="sockfs" ino=12918 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.719631][ T41] audit: type=1400 audit(1771838280.004:323): avc: denied { create } for pid=6623 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.740561][ T41] audit: type=1400 audit(1771838280.034:324): avc: denied { write } for pid=6623 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.749765][ T41] audit: type=1400 audit(1771838280.034:325): avc: denied { nlmsg_write } for pid=6623 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.758300][ T41] audit: type=1400 audit(1771838280.044:326): avc: denied { prog_load } for pid=6625 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.766522][ T41] audit: type=1400 audit(1771838280.044:327): avc: denied { prog_run } for pid=6625 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.336577][ T6657] netlink: 'syz.4.189': attribute type 21 has an invalid length. [ 80.340990][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 80.356122][ T101] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.360193][ T6657] netlink: 'syz.4.189': attribute type 21 has an invalid length. [ 80.363347][ T101] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.368197][ T101] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.375028][ T101] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.559598][ T5932] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.604627][ T6676] __nla_validate_parse: 1 callbacks suppressed [ 80.604638][ T6676] netlink: 44 bytes leftover after parsing attributes in process `syz.2.196'. [ 80.639848][ T5935] Bluetooth: hci3: command tx timeout [ 80.671143][ T6673] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.711152][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 80.721638][ T5932] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 80.725198][ T5932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.729264][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.739568][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.743909][ T5932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.748643][ T5932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.756305][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.828991][ T6691] netlink: 'syz.2.203': attribute type 29 has an invalid length. [ 80.839292][ T6691] netlink: 'syz.2.203': attribute type 29 has an invalid length. [ 80.875122][ T6696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.205'. [ 81.039834][ T6700] Invalid ELF header magic: != ELF [ 81.132588][ T6712] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.142770][ T6712] CIFS mount error: No usable UNC path provided in device string! [ 81.142770][ T6712] [ 81.146246][ T6712] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.185292][ T40] usb 5-1: USB disconnect, device number 3 [ 81.242551][ T6718] netlink: 108 bytes leftover after parsing attributes in process `syz.0.211'. [ 81.288656][ T6723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.214'. [ 81.288683][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.214'. [ 81.296226][ T6723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.214'. [ 81.296253][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.214'. [ 81.679632][ T1455] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 81.850921][ T1455] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 81.853921][ T1455] usb 6-1: config 0 has no interface number 0 [ 81.856401][ T1455] usb 6-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.865167][ T1455] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 81.868369][ T1455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.872465][ T1455] usb 6-1: Product: syz [ 81.873934][ T1455] usb 6-1: Manufacturer: syz [ 81.875519][ T1455] usb 6-1: SerialNumber: syz [ 81.890313][ T1455] usb 6-1: config 0 descriptor?? [ 81.899804][ T1455] asix 6-1:0.251: probe with driver asix failed with error -22 [ 81.909883][ T6763] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 81.925892][ T2307] hid-generic FFFA:0005:0001.0005: item fetching failed at offset 18/43 [ 81.937497][ T2307] hid-generic FFFA:0005:0001.0005: probe with driver hid-generic failed with error -22 [ 82.052884][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 82.222151][ T6792] [U]  [ 82.284740][ T6796] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 82.285285][ T6795] cgroup: noprefix used incorrectly [ 82.303035][ T6798] cgroup: noprefix used incorrectly [ 82.572955][ T6829] kvm: user requested TSC rate below hardware speed [ 82.577096][ T6829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 82.596520][ T6833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.247'. [ 82.687220][ T6835] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.808077][ T6843] program syz.2.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.830005][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 82.920881][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.255'. [ 82.999579][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 83.005193][ T34] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 83.008566][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.008588][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.017977][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.029558][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.034844][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.038536][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.199702][ T6855] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 83.255934][ T6858] misc userio: The device must be registered before sending interrupts [ 83.509899][ T1455] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.663881][ T1455] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.667877][ T1455] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.671814][ T1455] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.677666][ T1455] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.677688][ T1455] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.683617][ T1455] usb 7-1: config 0 descriptor?? [ 83.704211][ T47] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.707171][ T47] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.707192][ T47] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.709198][ T47] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.844558][ T6882] program syz.0.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.854478][ T6882] xfrm1: entered allmulticast mode [ 84.024700][ T6889] vxcan1: entered promiscuous mode [ 84.098450][ T1455] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 84.109875][ T1455] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 84.118890][ T1455] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 84.173057][ T6895] usbtmc 9-1:16.0: simple usb_control_msg failed -32 [ 84.297114][ T41] kauditd_printk_skb: 32 callbacks suppressed [ 84.297131][ T41] audit: type=1400 audit(1771838284.584:360): avc: denied { lock } for pid=6854 comm="syz.2.258" path="socket:[16395]" dev="sockfs" ino=16395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 84.299734][ T1455] usb 7-1: USB disconnect, device number 5 [ 84.452038][ T34] usb 6-1: USB disconnect, device number 6 [ 84.577521][ T41] audit: type=1400 audit(1771838284.864:361): avc: denied { read write } for pid=6903 comm="syz.1.270" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.589887][ T41] audit: type=1400 audit(1771838284.864:362): avc: denied { open } for pid=6903 comm="syz.1.270" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.612900][ T6904] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 84.694530][ T6911] gtp0: entered promiscuous mode [ 84.972752][ T41] audit: type=1400 audit(1771838285.264:363): avc: denied { bind } for pid=6916 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.979559][ T41] audit: type=1400 audit(1771838285.264:364): avc: denied { write } for pid=6916 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.019867][ T41] audit: type=1400 audit(1771838285.304:365): avc: denied { mount } for pid=6920 comm="syz.0.276" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.034453][ T6921] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.035455][ T41] audit: type=1400 audit(1771838285.324:366): avc: denied { unlink } for pid=6920 comm="syz.0.276" name="#3" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.072795][ T41] audit: type=1400 audit(1771838285.364:367): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.354283][ T6913] syz.1.273 (6913): drop_caches: 2 [ 85.555373][ T2307] usb 9-1: USB disconnect, device number 2 [ 85.660468][ T6944] netlink: 'syz.1.285': attribute type 32 has an invalid length. [ 85.764728][ T6951] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 85.820339][ T6959] __nla_validate_parse: 1 callbacks suppressed [ 85.820356][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'. [ 85.834936][ T6959] vxcan1: entered allmulticast mode [ 85.853146][ T6962] binder: BINDER_SET_CONTEXT_MGR already set [ 85.855800][ T6962] binder: 6960:6962 ioctl 4018620d 200000000480 returned -16 [ 85.861761][ T41] audit: type=1400 audit(1771838286.154:368): avc: denied { map } for pid=6960 comm="syz.2.292" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.862070][ T6961] binder_alloc: binder_alloc_mmap_handler: 6960 200000ffd000-200001000000 already mapped failed -16 [ 85.862588][ T6962] binder_alloc: 6960: binder_alloc_buf, no vma [ 85.879613][ T41] audit: type=1400 audit(1771838286.154:369): avc: denied { call } for pid=6960 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.963442][ T2307] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 86.102226][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.106592][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.110078][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.121644][ T2307] usb 9-1: config 1 interface 0 has no altsetting 0 [ 86.126803][ T2307] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.131142][ T2307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.134610][ T2307] usb 9-1: Product: syz [ 86.136573][ T2307] usb 9-1: Manufacturer: syz [ 86.138601][ T2307] usb 9-1: SerialNumber: syz [ 86.273315][ T6970] infiniband syz2: set active [ 86.276481][ T1455] wg1 speed is unknown, defaulting to 1000 [ 86.277624][ T6970] infiniband syz2: added wg1 [ 86.325135][ T6970] RDS/IB: syz2: added [ 86.327215][ T6970] smc: adding ib device syz2 with port count 1 [ 86.333175][ T6970] smc: ib device syz2 port 1 has no pnetid [ 86.337577][ T40] wg1 speed is unknown, defaulting to 1000 [ 86.341849][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.453906][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.537785][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.550418][ T2307] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 86.630203][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.711321][ T6970] wg1 speed is unknown, defaulting to 1000 [ 86.719449][ T6992] max out of range [ 86.958008][ T39] cfg80211: failed to load regulatory.db [ 87.043109][ T7013] __vm_enough_memory: pid: 7013, comm: syz.2.304, bytes: 4503599627366400 not enough memory for the allocation [ 87.294348][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.299268][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.371929][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.375351][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.581601][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.587849][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.622276][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 87.842468][ T7071] ptrace attach of "/syz-executor exec"[7072] was attempted by "/syz-executor exec"[7071] [ 87.949644][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.103480][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 88.106696][ T29] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 88.109351][ T29] usb 5-1: config 0 has no interface number 0 [ 88.117128][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 88.121034][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.123629][ T29] usb 5-1: Product: syz [ 88.125107][ T29] usb 5-1: Manufacturer: syz [ 88.126778][ T29] usb 5-1: SerialNumber: syz [ 88.130320][ T29] usb 5-1: config 0 descriptor?? [ 88.136473][ T29] hub 5-1:0.132: bad descriptor, ignoring hub [ 88.138845][ T29] hub 5-1:0.132: probe with driver hub failed with error -5 [ 88.145745][ T29] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input11 [ 88.256379][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 88.265510][ T1143] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.265564][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 88.272490][ T1143] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.276875][ T1143] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.281439][ T1143] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.290233][ T7088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=7088 comm=syz.1.325 [ 88.295317][ T7088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=7088 comm=syz.1.325 [ 88.487893][ C2] usblp0: nonzero write bulk status received: -71 [ 88.488168][ T29] usb 9-1: USB disconnect, device number 3 [ 88.517643][ T29] usblp0: removed [ 88.649840][ T7123] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 88.799238][ T7141] syz.1.342 uses obsolete (PF_INET,SOCK_PACKET) [ 88.881080][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 88.999733][ T5932] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 89.137022][ T7160] sysfs: cannot create duplicate filename '/class/ieee80211/4π!FVluc'f`ކ;1x%MF-I' [ 89.148443][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.4.345 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.148476][ T7160] Tainted: [L]=SOFTLOCKUP [ 89.148483][ T7160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.148494][ T7160] Call Trace: [ 89.148501][ T7160] [ 89.148510][ T7160] dump_stack_lvl+0x100/0x190 [ 89.148556][ T7160] sysfs_warn_dup.cold+0x1c/0x28 [ 89.148577][ T7160] sysfs_do_create_link_sd+0x113/0x140 [ 89.148599][ T7160] sysfs_create_link+0x61/0xc0 [ 89.148617][ T7160] device_add+0x675/0x1950 [ 89.148644][ T7160] ? __pfx_device_add+0x10/0x10 [ 89.148667][ T7160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.148690][ T7160] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 89.148736][ T7160] wiphy_register+0x1e5b/0x2d30 [ 89.148758][ T7160] ? __rtnl_unlock+0xb9/0xf0 [ 89.148779][ T7160] ? netdev_run_todo+0x7e0/0x12c0 [ 89.148801][ T7160] ? __pfx_wiphy_register+0x10/0x10 [ 89.148820][ T7160] ? __asan_memset+0x23/0x50 [ 89.148836][ T7160] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 89.148864][ T7160] ieee80211_register_hw+0x2cfd/0x4140 [ 89.148892][ T7160] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 89.148907][ T7160] ? __pfx___debug_object_init+0x10/0x10 [ 89.148931][ T7160] ? find_held_lock+0x2b/0x80 [ 89.148950][ T7160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.148970][ T7160] ? __hrtimer_setup+0x178/0x280 [ 89.148989][ T7160] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 89.149024][ T7160] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 89.149046][ T7160] ? __asan_memcpy+0x3c/0x60 [ 89.149068][ T7160] hwsim_new_radio_nl+0xc1f/0x1340 [ 89.149088][ T7160] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 89.149113][ T7160] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 89.149135][ T7160] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 89.149162][ T7160] genl_family_rcv_msg_doit+0x214/0x300 [ 89.149184][ T7160] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 89.149214][ T7160] ? bpf_lsm_capable+0x9/0x10 [ 89.149230][ T7160] ? security_capable+0x80/0x260 [ 89.149257][ T7160] ? ns_capable+0xd2/0xf0 [ 89.149282][ T7160] genl_rcv_msg+0x560/0x800 [ 89.149310][ T7160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.149334][ T7160] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 89.149359][ T7160] ? __lock_acquire+0x4a5/0x2630 [ 89.149393][ T7160] netlink_rcv_skb+0x159/0x420 [ 89.149414][ T7160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.149439][ T7160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.149493][ T7160] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.149520][ T7160] genl_rcv+0x28/0x40 [ 89.149542][ T7160] netlink_unicast+0x5aa/0x870 [ 89.149568][ T7160] ? __pfx_netlink_unicast+0x10/0x10 [ 89.149602][ T7160] netlink_sendmsg+0x8b0/0xda0 [ 89.149630][ T7160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.149650][ T7160] ? __might_fault+0x20/0x140 [ 89.149684][ T7160] ____sys_sendmsg+0xa54/0xc30 [ 89.149733][ T7160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.149765][ T7160] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.149794][ T7160] ___sys_sendmsg+0x190/0x1e0 [ 89.149822][ T7160] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.149885][ T7160] __sys_sendmsg+0x170/0x220 [ 89.149906][ T7160] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.149924][ T7160] ? __x64_sys_futex+0x34f/0x4d0 [ 89.149963][ T7160] do_syscall_64+0x106/0xf80 [ 89.149982][ T7160] ? clear_bhb_loop+0x40/0x90 [ 89.150006][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.150025][ T7160] RIP: 0033:0x7f0de5b9c629 [ 89.150042][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.150062][ T7160] RSP: 002b:00007f0de69a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.150081][ T7160] RAX: ffffffffffffffda RBX: 00007f0de5e15fa0 RCX: 00007f0de5b9c629 [ 89.150094][ T7160] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 89.150106][ T7160] RBP: 00007f0de5c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 89.150117][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.150127][ T7160] R13: 00007f0de5e16038 R14: 00007f0de5e15fa0 R15: 00007ffcb1676808 [ 89.150155][ T7160] [ 89.169852][ T5932] usb 7-1: Using ep0 maxpacket: 8 [ 89.331353][ T5932] usb 7-1: config 1 interface 0 altsetting 232 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.339564][ T5932] usb 7-1: config 1 interface 0 has no altsetting 0 [ 89.351906][ T5932] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 89.355654][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.359043][ T5932] usb 7-1: Product: 곲ꭹᎣ吜ނ셌霤᏾賦햨㧷ᒕ䖌뛰뇭页舄⭺厀菣敎㒪쪢輮௬ꦔ쟞ૐ䲥씉㑬掋꥿몑億艉Ў奬膑爑욡䗵꽆捳⩦ᠭ⛚綔ꠈㇿ쥚殤젳⤊콺Ⴄ兖䢝褐ղ튓⮳뷹㚝椚뀹楦】뗈╼䅛蹩蟹勞㈒剂瑷䃗⋓᠂颬㵙⵰販썮➚䶇挃頣૮눻렡픙棜ᖬ [ 89.359173][ T41] kauditd_printk_skb: 34 callbacks suppressed [ 89.359188][ T41] audit: type=1400 audit(1771838289.644:404): avc: denied { read } for pid=7184 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.372996][ T5932] usb 7-1: Manufacturer: 葪䣏蛥蘥ﹰ狚铮妹짅쭙韄엨꒐쪴짚屓狍ꎟ킈팜ᤰ嫱跘묛ᄀ⠋⍃ꨤﰡ돡䤋ఌ⡼⺬㕒锟滑㢷ꣾ歷泈﫫䟭鹙낌㹢㙡톉⯌匽幑慝哊ꮠ瓟몁᠗툘잃땐웆㶳᳌뮲ᱟ딭걽ဥ찀 [ 89.373025][ T5932] usb 7-1: SerialNumber: 䟛﷕궔ኌஏ锤蒚ꧾ퇚䎌캞轧塂董✚췑㲰휤孂ဩ宆ࠠ였끝骺變팸勀뽵◱옞㌶檄ೆ풽ꅆ沕뽉哑⪥镮웉淰鮋䜝鴧⯾灃툴닛몿⬬ۘၞఛ쓥洢旼甐쟋봊莏찿漛琢諿췭뻡ಟㄑ⿬꣰ꙿ쒫䷸籀﹒노ᯖ㬦ﴔ崂 [ 89.414942][ T41] audit: type=1400 audit(1771838289.654:405): avc: granted { setsecparam } for pid=7184 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 89.541268][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 89.560800][ T7197] bond1: entered promiscuous mode [ 89.563298][ T7197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.570786][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 89.574872][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 89.578632][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.357'. [ 89.591471][ T5932] usbhid 7-1:1.0: can't add hid device: -71 [ 89.594163][ T5932] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 89.594443][ T41] audit: type=1400 audit(1771838289.884:406): avc: denied { bind } for pid=7196 comm="syz.0.357" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.603392][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 89.605347][ T5932] usb 7-1: USB disconnect, device number 6 [ 89.612903][ T41] audit: type=1400 audit(1771838289.884:407): avc: denied { node_bind } for pid=7196 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 89.615048][ T7202] No source specified [ 89.671531][ T41] audit: type=1400 audit(1771838289.964:408): avc: denied { listen } for pid=7207 comm="syz.4.360" lport=131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.684798][ T7208] nbd: must specify a size in bytes for the device [ 89.690925][ T41] audit: type=1400 audit(1771838289.974:409): avc: denied { accept } for pid=7207 comm="syz.4.360" lport=131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.842076][ T7218] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 90.004871][ T7229] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 90.007331][ T41] audit: type=1400 audit(1772362578.303:410): avc: denied { create } for pid=7207 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.136702][ T41] audit: type=1400 audit(1772362578.433:411): avc: denied { bind } for pid=7236 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.213134][ T7243] fuse: Unknown parameter 'group_id00000000000000000000' [ 90.229266][ T7244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.250333][ T7244] macvlan2: entered promiscuous mode [ 90.252557][ T7244] macvlan2: entered allmulticast mode [ 90.255653][ T7244] bond1: entered promiscuous mode [ 90.258277][ T7244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.279535][ T7244] bond1: left promiscuous mode [ 90.292813][ T7241] sp0: Synchronizing with TNC [ 90.300262][ T41] audit: type=1400 audit(1772362578.593:412): avc: denied { read write } for pid=7240 comm="syz.4.375" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.309038][ T41] audit: type=1400 audit(1772362578.603:413): avc: denied { open } for pid=7240 comm="syz.4.375" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.317581][ T7248] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 90.343345][ T7249] xt_bpf: check failed: parse error [ 90.575806][ T7276] fuse: Unknown parameter 'group_id00000000000000000000' [ 91.015963][ T7318] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 91.034518][ T7318] bond2: entered promiscuous mode [ 91.037280][ T7318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.096721][ T7318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.099338][ T7318] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.103643][ T7318] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 91.112614][ T7318] bond2: (slave vxcan3): making interface the new active one [ 91.115461][ T7318] vxcan3: entered promiscuous mode [ 91.118668][ T7318] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 91.166015][ T7328] __nla_validate_parse: 5 callbacks suppressed [ 91.166027][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 91.172718][ T7328] netlink: 'syz.1.401': attribute type 13 has an invalid length. [ 91.187669][ T7328] gretap0: refused to change device tx_queue_len [ 91.190027][ T7328] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.388360][ T7344] fuse: Bad value for 'user_id' [ 91.390104][ T7344] fuse: Bad value for 'user_id' [ 91.425710][ T7348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7348 comm=syz.0.407 [ 91.430962][ T7348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7348 comm=syz.0.407 [ 91.471942][ T7348] IPVS: persistence engine module ip_vs_pe_s not found [ 91.476514][ T7351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7351 comm=syz.0.407 [ 91.626677][ T7360] loop2: detected capacity change from 0 to 7 [ 91.631640][ T7360] Dev loop2: unable to read RDB block 7 [ 91.633603][ T7360] loop2: AHDI p1 p2 p3 [ 91.634985][ T7360] loop2: partition table partially beyond EOD, truncated [ 91.638458][ T7360] loop2: p1 start 1601398130 is beyond EOD, truncated [ 91.640799][ T7360] loop2: p2 start 1702059890 is beyond EOD, truncated [ 91.809071][ T7368] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 91.839938][ T7368] bond2: entered promiscuous mode [ 91.841751][ T7368] bond2: entered allmulticast mode [ 91.843626][ T7368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.851787][ T7368] erspan1: entered allmulticast mode [ 91.855845][ T7368] bond2: (slave erspan1): making interface the new active one [ 91.858258][ T7368] erspan1: entered promiscuous mode [ 91.860906][ T7368] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 92.076851][ T1455] usb 5-1: USB disconnect, device number 4 [ 92.197934][ T7401] could not allocate digest TFM handle cryptd(blake2b-160) [ 92.201620][ T7412] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 92.293977][ T7428] fuse: Bad value for 'fd' [ 92.297071][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 92.443907][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.437'. [ 92.456443][ T7453] loop2: detected capacity change from 0 to 7 [ 92.462452][ T5931] Dev loop2: unable to read RDB block 7 [ 92.465345][ T5931] loop2: AHDI p1 p2 p3 [ 92.467206][ T5931] loop2: partition table partially beyond EOD, truncated [ 92.470833][ T5931] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.473910][ T5931] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.481416][ T7453] Dev loop2: unable to read RDB block 7 [ 92.484172][ T7453] loop2: AHDI p1 p2 p3 [ 92.486093][ T7453] loop2: partition table partially beyond EOD, truncated [ 92.489243][ T7453] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.492142][ T7453] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.538474][ T5334] Dev loop2: unable to read RDB block 7 [ 92.541310][ T5334] loop2: AHDI p1 p2 p3 [ 92.543152][ T5334] loop2: partition table partially beyond EOD, truncated [ 92.548302][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.551081][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.555841][ T7459] fuse: Bad value for 'fd' [ 92.602010][ T5334] Dev loop2: unable to read RDB block 7 [ 92.604512][ T5334] loop2: AHDI p1 p2 p3 [ 92.606316][ T5334] loop2: partition table partially beyond EOD, truncated [ 92.608852][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.611632][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.663777][ T5334] Dev loop2: unable to read RDB block 7 [ 92.666027][ T5334] loop2: AHDI p1 p2 p3 [ 92.667408][ T5334] loop2: partition table partially beyond EOD, truncated [ 92.670477][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.673199][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.703903][ T5334] Dev loop2: unable to read RDB block 7 [ 92.706238][ T5334] loop2: AHDI p1 p2 p3 [ 92.707976][ T5334] loop2: partition table partially beyond EOD, truncated [ 92.711055][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.714083][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.744893][ T5334] Dev loop2: unable to read RDB block 7 [ 92.747426][ T5334] loop2: AHDI p1 p2 p3 [ 92.749389][ T5334] loop2: partition table partially beyond EOD, truncated [ 92.753176][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.756239][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.854680][ T5334] Dev loop2: unable to read RDB block 7 [ 92.856793][ T5334] loop2: AHDI p1 p2 p3 [ 92.858213][ T5334] loop2: partition table partially beyond EOD, truncated [ 92.860959][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.863935][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.895235][ T7486] fuse: Bad value for 'fd' [ 92.909833][ T5334] Dev loop2: unable to read RDB block 7 [ 92.912189][ T5334] loop2: AHDI p1 p2 p3 [ 92.916210][ T5334] loop2: partition table partially beyond EOD, truncated [ 92.921338][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.925213][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.996567][ T5334] Dev loop2: unable to read RDB block 7 [ 92.999373][ T5334] loop2: AHDI p1 p2 p3 [ 93.001370][ T5334] loop2: partition table partially beyond EOD, truncated [ 93.005180][ T5334] loop2: p1 start 1601398130 is beyond EOD, truncated [ 93.008189][ T5334] loop2: p2 start 1702059890 is beyond EOD, truncated [ 93.084787][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.454'. [ 93.088538][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.454'. [ 93.094623][ T7498] tipc: Enabling of bearer rejected, media not registered [ 93.463525][ T7508] IPv6: Can't replace route, no match found [ 93.630332][ T7511] binder: BINDER_SET_CONTEXT_MGR already set [ 93.632548][ T7511] binder: 7510:7511 ioctl 4018620d 200000000040 returned -16 [ 93.687492][ T5993] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 93.824825][ T7520] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 93.863666][ T5993] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 93.866895][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.871435][ T5993] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.876949][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.876980][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.877341][ T7523] netlink: 'syz.1.466': attribute type 11 has an invalid length. [ 93.877373][ T7523] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.466'. [ 93.877899][ T5993] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 93.877966][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.877994][ T5993] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.878014][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.878035][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.883682][ T5993] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 93.883717][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.883736][ T5993] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.883755][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.883773][ T5993] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.886321][ T5993] usb 9-1: string descriptor 0 read error: -22 [ 93.926546][ T7525] netlink: 15 bytes leftover after parsing attributes in process `syz.0.467'. [ 93.929062][ T5993] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 93.933700][ T39] IPVS: starting estimator thread 0... [ 93.937749][ T5993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.946343][ T5993] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 93.951518][ T7530] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 94.057231][ T7532] IPVS: using max 44 ests per chain, 105600 per kthread [ 94.349072][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.474'. [ 94.353009][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 94.512155][ T41] kauditd_printk_skb: 31 callbacks suppressed [ 94.512166][ T41] audit: type=1400 audit(1772362582.694:445): avc: denied { watch_sb } for pid=7560 comm="syz.0.475" path="/111" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.676712][ T7568] trusted_key: encrypted_key: master key parameter '0' is invalid [ 94.775909][ T7572] fuse: Bad value for 'fd' [ 95.054087][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 95.165468][ T7588] fuse: Unknown parameter 'XJ.F' [ 95.375363][ T7597] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 95.915961][ T7614] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.919270][ T41] audit: type=1400 audit(1772362584.070:446): avc: denied { ioctl } for pid=7615 comm="syz.0.496" path="socket:[17316]" dev="sockfs" ino=17316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.955471][ T7626] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 4, id = 0 [ 96.034999][ T41] audit: type=1400 audit(1772362584.177:447): avc: denied { sys_admin } for pid=7635 comm="syz.0.501" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 96.089280][ T7643] vlan2: entered promiscuous mode [ 96.091533][ T7643] bridge0: entered promiscuous mode [ 96.207297][ T41] audit: type=1400 audit(1772362584.353:448): avc: denied { getopt } for pid=7650 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.214746][ T41] audit: type=1400 audit(1772362584.353:449): avc: denied { write } for pid=7650 comm="syz.0.507" path="socket:[17343]" dev="sockfs" ino=17343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.227197][ T5993] usb 9-1: USB disconnect, device number 4 [ 96.248118][ T41] audit: type=1400 audit(1772362584.392:450): avc: denied { ioctl } for pid=7650 comm="syz.0.507" path="socket:[17343]" dev="sockfs" ino=17343 ioctlcmd=0x641b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.402579][ T7659] wg1 speed is unknown, defaulting to 1000 [ 96.644101][ T41] audit: type=1400 audit(1772362584.773:451): avc: denied { read } for pid=7669 comm="syz.4.512" path="socket:[17878]" dev="sockfs" ino=17878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.685337][ T41] audit: type=1400 audit(1772362584.822:452): avc: denied { ioctl } for pid=7671 comm="syz.0.513" path="socket:[17390]" dev="sockfs" ino=17390 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.697221][ T7672] can0: slcan on ttynull. [ 96.752828][ T7675] __nla_validate_parse: 7 callbacks suppressed [ 96.752840][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 96.794858][ T7671] can0 (unregistered): slcan off ttynull. [ 96.803219][ T41] audit: type=1400 audit(1772362584.930:453): avc: denied { create } for pid=7676 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.805043][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'. [ 96.811479][ T41] audit: type=1400 audit(1772362584.939:454): avc: denied { ioctl } for pid=7676 comm="syz.4.515" path="socket:[17399]" dev="sockfs" ino=17399 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.904206][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.515'. [ 96.908209][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 96.911350][ T7682] tipc: Started in network mode [ 96.913048][ T7682] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 96.918437][ T7682] tipc: Enabled bearer , priority 10 [ 96.923109][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 96.952554][ T7684] xt_hashlimit: size too large, truncated to 1048576 [ 97.009091][ T7689] x9: renamed from bridge_slave_0 (while UP) [ 97.027466][ T7690] lo: entered promiscuous mode [ 97.082931][ T7695] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 97.103025][ T7698] netlink: 620 bytes leftover after parsing attributes in process `syz.4.523'. [ 97.104717][ T7695] bond2: entered promiscuous mode [ 97.108657][ T7695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.145806][ T7695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.148239][ T7695] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 97.152179][ T7695] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 97.157610][ T7695] bond2: (slave vti0): making interface the new active one [ 97.160333][ T7695] vti0: entered promiscuous mode [ 97.163360][ T7695] bond2: (slave vti0): Enslaving as an active interface with an up link [ 97.167167][ T7704] lo speed is unknown, defaulting to 1000 [ 97.169271][ T7704] lo speed is unknown, defaulting to 1000 [ 97.182647][ T7704] lo speed is unknown, defaulting to 1000 [ 97.188267][ T7704] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.196857][ T7704] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 97.247271][ T7704] lo speed is unknown, defaulting to 1000 [ 97.254099][ T7713] netlink: 620 bytes leftover after parsing attributes in process `syz.0.528'. [ 97.255170][ T7704] lo speed is unknown, defaulting to 1000 [ 97.260271][ T7704] lo speed is unknown, defaulting to 1000 [ 97.262878][ T7704] lo speed is unknown, defaulting to 1000 [ 97.388064][ T7731] netlink: 620 bytes leftover after parsing attributes in process `syz.4.534'. [ 97.431334][ T7734] hpfs: Bad magic ... probably not HPFS [ 97.435288][ T7734] hpfs: Bad magic ... probably not HPFS [ 97.475850][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.489602][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 97.496355][ T7734] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.496648][ T7741] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 97.499863][ T7734] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 97.508447][ T7746] hpfs: Bad magic ... probably not HPFS [ 97.511689][ T7745] hpfs: Bad magic ... probably not HPFS [ 97.593846][ T7756] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 97.596884][ T7757] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 97.643359][ T7761] comedi comedi1: comedi_bond: 0:2 attached, 24 channels from 1 devices [ 97.652968][ T7763] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.656046][ T7763] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 97.659327][ T7763] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.663343][ T7763] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 97.731669][ T7770] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 97.828847][ T7786] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 97.838092][ T7786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7786 comm=syz.1.554 [ 97.872016][ T7787] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 97.877554][ T7787] SELinux: failed to load policy [ 97.950867][ T7799] netlink: 'syz.4.560': attribute type 6 has an invalid length. [ 97.981555][ T7802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 97.984609][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 97.989989][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 97.995648][ T7803] vhci_hcd vhci_hcd.0: port 0 already used [ 98.013979][ T7809] vhci_hcd: connection closed [ 98.031417][ T47] vhci_hcd vhci_hcd.2: stop threads [ 98.041920][ T47] vhci_hcd vhci_hcd.2: release socket [ 98.051737][ T47] vhci_hcd vhci_hcd.2: disconnect device [ 98.066252][ T39] tipc: Node number set to 4269801494 [ 98.099570][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 98.324361][ T7847] sysfs: cannot create duplicate filename '/class/ieee80211/4π!FVluc'f`ކ;1x%MF-I' [ 98.329079][ T7847] CPU: 2 UID: 0 PID: 7847 Comm: syz.2.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.329098][ T7847] Tainted: [L]=SOFTLOCKUP [ 98.329102][ T7847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.329109][ T7847] Call Trace: [ 98.329113][ T7847] [ 98.329118][ T7847] dump_stack_lvl+0x100/0x190 [ 98.329150][ T7847] sysfs_warn_dup.cold+0x1c/0x28 [ 98.329167][ T7847] sysfs_do_create_link_sd+0x113/0x140 [ 98.329192][ T7847] sysfs_create_link+0x61/0xc0 [ 98.329213][ T7847] device_add+0x675/0x1950 [ 98.329239][ T7847] ? __pfx_device_add+0x10/0x10 [ 98.329255][ T7847] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.329273][ T7847] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 98.329309][ T7847] wiphy_register+0x1e5b/0x2d30 [ 98.329322][ T7847] ? __rtnl_unlock+0xb9/0xf0 [ 98.329336][ T7847] ? netdev_run_todo+0x7e0/0x12c0 [ 98.329351][ T7847] ? __pfx_wiphy_register+0x10/0x10 [ 98.329365][ T7847] ? __asan_memset+0x23/0x50 [ 98.329379][ T7847] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 98.329442][ T7847] ieee80211_register_hw+0x2cfd/0x4140 [ 98.329465][ T7847] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 98.329478][ T7847] ? __pfx___debug_object_init+0x10/0x10 [ 98.329495][ T7847] ? find_held_lock+0x2b/0x80 [ 98.329510][ T7847] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.329527][ T7847] ? __hrtimer_setup+0x178/0x280 [ 98.329539][ T7847] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 98.329569][ T7847] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 98.329587][ T7847] ? __asan_memcpy+0x3c/0x60 [ 98.329608][ T7847] hwsim_new_radio_nl+0xc1f/0x1340 [ 98.329628][ T7847] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 98.329654][ T7847] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 98.329675][ T7847] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 98.329707][ T7847] genl_family_rcv_msg_doit+0x214/0x300 [ 98.329734][ T7847] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 98.329764][ T7847] ? bpf_lsm_capable+0x9/0x10 [ 98.329779][ T7847] ? security_capable+0x80/0x260 [ 98.329808][ T7847] ? ns_capable+0xd2/0xf0 [ 98.329831][ T7847] genl_rcv_msg+0x560/0x800 [ 98.329850][ T7847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.329864][ T7847] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 98.329878][ T7847] ? __lock_acquire+0x4a5/0x2630 [ 98.329897][ T7847] netlink_rcv_skb+0x159/0x420 [ 98.329909][ T7847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.329923][ T7847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.329944][ T7847] ? netlink_deliver_tap+0x1ae/0xcc0 [ 98.329959][ T7847] genl_rcv+0x28/0x40 [ 98.329977][ T7847] netlink_unicast+0x5aa/0x870 [ 98.329995][ T7847] ? __pfx_netlink_unicast+0x10/0x10 [ 98.330018][ T7847] netlink_sendmsg+0x8b0/0xda0 [ 98.330040][ T7847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.330057][ T7847] ? __might_fault+0x20/0x140 [ 98.330077][ T7847] ____sys_sendmsg+0xa54/0xc30 [ 98.330093][ T7847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.330109][ T7847] ? __pfx_futex_wake_mark+0x10/0x10 [ 98.330125][ T7847] ___sys_sendmsg+0x190/0x1e0 [ 98.330141][ T7847] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.330173][ T7847] __sys_sendmsg+0x170/0x220 [ 98.330184][ T7847] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.330194][ T7847] ? __x64_sys_futex+0x34f/0x4d0 [ 98.330213][ T7847] do_syscall_64+0x106/0xf80 [ 98.330224][ T7847] ? clear_bhb_loop+0x40/0x90 [ 98.330237][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.330249][ T7847] RIP: 0033:0x7f042979c629 [ 98.330260][ T7847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.330270][ T7847] RSP: 002b:00007f04279f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.330282][ T7847] RAX: ffffffffffffffda RBX: 00007f0429a15fa0 RCX: 00007f042979c629 [ 98.330289][ T7847] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 98.330297][ T7847] RBP: 00007f0429832b39 R08: 0000000000000000 R09: 0000000000000000 [ 98.330304][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.330310][ T7847] R13: 00007f0429a16038 R14: 00007f0429a15fa0 R15: 00007ffda5ec6bd8 [ 98.330326][ T7847] [ 98.502154][ T7854] misc userio: Can't change port type on an already running userio instance [ 98.507089][ T7854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.566703][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.576025][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.679096][ T7862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.978496][ T5992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.130826][ T5992] usb 5-1: Using ep0 maxpacket: 16 [ 99.134551][ T5992] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 99.137761][ T5992] usb 5-1: config 0 has no interface number 0 [ 99.144351][ T5992] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 99.148204][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.154385][ T5992] usb 5-1: Product: syz [ 99.156050][ T5992] usb 5-1: Manufacturer: syz [ 99.157941][ T5992] usb 5-1: SerialNumber: syz [ 99.163176][ T5992] usb 5-1: config 0 descriptor?? [ 99.173149][ T5992] hub 5-1:0.132: bad descriptor, ignoring hub [ 99.178731][ T5992] hub 5-1:0.132: probe with driver hub failed with error -5 [ 99.186260][ T5992] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input13 [ 99.387673][ T7897] fuse: Unknown parameter 'use00000000000000000000' [ 99.427509][ T7900] binder: 7899:7900 ioctl 40046205 0 returned -22 [ 99.633541][ T41] kauditd_printk_skb: 21 callbacks suppressed [ 99.633558][ T41] audit: type=1400 audit(1772362587.712:476): avc: denied { write } for pid=7919 comm="syz.4.599" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.714416][ T7920] kvm: MWAIT instruction emulated as NOP! [ 99.763095][ T40] usb 5-1: USB disconnect, device number 5 [ 99.819355][ T7925] program syz.4.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.819395][ T7924] program syz.4.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.919534][ T7931] fuse: Unknown parameter 'use00000000000000000000' [ 100.281855][ T41] audit: type=1400 audit(1772362588.341:477): avc: denied { getopt } for pid=7942 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.298716][ T41] audit: type=1400 audit(1772362588.361:478): avc: denied { ioctl } for pid=7942 comm="syz.4.606" path="socket:[18956]" dev="sockfs" ino=18956 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.658477][ T54] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 100.822602][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 100.826653][ T54] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.830500][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.834425][ T54] usb 9-1: Product: syz [ 100.835869][ T54] usb 9-1: Manufacturer: syz [ 100.837440][ T54] usb 9-1: SerialNumber: syz [ 100.857448][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.861445][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.925442][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.928760][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.986889][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.990349][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.060122][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.063859][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.068260][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.072042][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.074906][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.094176][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.099616][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.120589][ T7969] wg1 speed is unknown, defaulting to 1000 [ 101.240669][ T60] bridge_slave_1: left allmulticast mode [ 101.242761][ T60] bridge_slave_1: left promiscuous mode [ 101.244805][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.255738][ T60] bridge_slave_0: left allmulticast mode [ 101.258244][ T60] bridge_slave_0: left promiscuous mode [ 101.260901][ T54] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 101.261243][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.334545][ T41] audit: type=1400 audit(1772362589.383:479): avc: denied { setopt } for pid=7980 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.368236][ T60] bond2 (unregistering): (slave vti0): Releasing backup interface [ 101.371012][ T60] vti0 (unregistering): left promiscuous mode [ 101.535105][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.540726][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.546438][ T60] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 101.552029][ T60] bond0 (unregistering): Released all slaves [ 101.559328][ T60] bond1 (unregistering): Released all slaves [ 101.567176][ T60] bond2 (unregistering): Released all slaves [ 101.573367][ T7969] lo speed is unknown, defaulting to 1000 [ 101.630753][ T60] tipc: Disabling bearer [ 101.655730][ T60] tipc: Left network mode [ 101.679662][ T54] wg1 speed is unknown, defaulting to 1000 [ 101.682231][ T54] syz2: Port: 1 Link DOWN [ 101.701667][ T54] wg1 speed is unknown, defaulting to 1000 [ 101.717270][ T7997] fuse: Unknown parameter 'user_i00000000000000000000' [ 101.752413][ T41] audit: type=1400 audit(1772362589.786:480): avc: denied { mount } for pid=7995 comm="syz.2.622" name="/" dev="autofs" ino=19010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 101.763206][ T7969] chnl_net:caif_netlink_parms(): no params data found [ 101.865398][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.869921][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.872225][ T7969] bridge_slave_0: entered allmulticast mode [ 101.874961][ T7969] bridge_slave_0: entered promiscuous mode [ 101.904578][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.907468][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.912525][ T7969] bridge_slave_1: entered allmulticast mode [ 101.916528][ T7969] bridge_slave_1: entered promiscuous mode [ 101.950157][ T7969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.955090][ T8023] __nla_validate_parse: 8 callbacks suppressed [ 101.955101][ T8023] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.627'. [ 101.969482][ T7969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.986688][ T7969] team0: Port device team_slave_0 added [ 101.990271][ T7969] team0: Port device team_slave_1 added [ 102.001726][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.006010][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.030247][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.046500][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.056073][ T7969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.062867][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.071729][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.080836][ T7969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.091439][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.095130][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.133034][ T7969] hsr_slave_0: entered promiscuous mode [ 102.135323][ T7969] hsr_slave_1: entered promiscuous mode [ 102.140149][ T60] hsr_slave_0: left promiscuous mode [ 102.143747][ T60] hsr_slave_1: left promiscuous mode [ 102.147570][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.150579][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.165162][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.167903][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.176449][ T60] veth1_macvtap: left promiscuous mode [ 102.178440][ T60] veth0_macvtap: left promiscuous mode [ 102.180527][ T60] veth1_vlan: left promiscuous mode [ 102.182238][ T60] veth0_vlan: left promiscuous mode [ 102.306380][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.309961][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.335091][ T60] team0 (unregistering): Port device team_slave_1 removed [ 102.342291][ T60] team0 (unregistering): Port device team_slave_0 removed [ 102.371777][ T101] smc: removing ib device syz2 [ 102.477205][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 102.586253][ T41] audit: type=1400 audit(1772362590.613:481): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 102.618476][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 102.833143][ T8058] overlayfs: failed to clone lowerpath [ 102.837209][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'. [ 102.840245][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 102.887234][ T41] audit: type=1400 audit(1772362590.908:482): avc: denied { setopt } for pid=8067 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.985470][ T7969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.999092][ T7969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.011181][ T7969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.016639][ T7969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.021741][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 103.136073][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.155199][ T7969] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.158406][ T5935] Bluetooth: hci0: command tx timeout [ 103.163215][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.166407][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.179155][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.182504][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.229631][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 103.240316][ C0] usblp0: nonzero write bulk status received: -71 [ 103.240698][ T29] usb 9-1: USB disconnect, device number 5 [ 103.254231][ T29] usblp0: removed [ 103.278862][ T8110] overlayfs: unescaped trailing colons in lowerdir mount option. [ 103.337529][ T8118] fuse: Unknown parameter 'user_id00000000000000000000' [ 103.347661][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.504374][ T7969] veth0_vlan: entered promiscuous mode [ 103.510469][ T7969] veth1_vlan: entered promiscuous mode [ 103.525958][ T7969] veth0_macvtap: entered promiscuous mode [ 103.530541][ T7969] veth1_macvtap: entered promiscuous mode [ 103.539132][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.545746][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.551760][ T1163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.556250][ T1163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.560353][ T1163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.568054][ T1163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.604513][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.610520][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.626254][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.629380][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.643323][ T41] audit: type=1400 audit(1772362591.647:483): avc: denied { mounton } for pid=7969 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 103.653147][ T41] audit: type=1400 audit(1772362591.647:484): avc: denied { mounton } for pid=7969 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 105.257220][ T5935] Bluetooth: hci0: command tx timeout [ 107.363516][ T5935] Bluetooth: hci0: command tx timeout [ 109.465377][ T5935] Bluetooth: hci0: command tx timeout [ 117.822895][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 117.829210][ T8174] batman_adv: batadv0: Adding interface: gretap1 [ 117.831398][ T8174] batman_adv: batadv0: Interface activated: gretap1 [ 117.838921][ T8174] autofs: Bad value for 'fd' [ 117.852303][ T8179] sysfs: cannot create duplicate filename '/class/ieee80211/4π!FVluc'f`ކ;1x%MF-I' [ 117.857809][ T8179] CPU: 2 UID: 0 PID: 8179 Comm: syz.2.652 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.857838][ T8179] Tainted: [L]=SOFTLOCKUP [ 117.857844][ T8179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.857854][ T8179] Call Trace: [ 117.857860][ T8179] [ 117.857868][ T8179] dump_stack_lvl+0x100/0x190 [ 117.857901][ T8179] sysfs_warn_dup.cold+0x1c/0x28 [ 117.857925][ T8179] sysfs_do_create_link_sd+0x113/0x140 [ 117.857951][ T8179] sysfs_create_link+0x61/0xc0 [ 117.857973][ T8179] device_add+0x675/0x1950 [ 117.857999][ T8179] ? __pfx_device_add+0x10/0x10 [ 117.858018][ T8179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.858045][ T8179] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 117.858076][ T8179] wiphy_register+0x1e5b/0x2d30 [ 117.858095][ T8179] ? __rtnl_unlock+0xb9/0xf0 [ 117.858114][ T8179] ? netdev_run_todo+0x7e0/0x12c0 [ 117.858138][ T8179] ? __pfx_wiphy_register+0x10/0x10 [ 117.858157][ T8179] ? __asan_memset+0x23/0x50 [ 117.858178][ T8179] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 117.858206][ T8179] ieee80211_register_hw+0x2cfd/0x4140 [ 117.858237][ T8179] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 117.858255][ T8179] ? __pfx___debug_object_init+0x10/0x10 [ 117.858280][ T8179] ? find_held_lock+0x2b/0x80 [ 117.858302][ T8179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.858326][ T8179] ? __hrtimer_setup+0x178/0x280 [ 117.858344][ T8179] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 117.858380][ T8179] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 117.858400][ T8179] ? __asan_memcpy+0x3c/0x60 [ 117.858423][ T8179] hwsim_new_radio_nl+0xc1f/0x1340 [ 117.858444][ T8179] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.858480][ T8179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 117.858503][ T8179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 117.858552][ T8179] genl_family_rcv_msg_doit+0x214/0x300 [ 117.858577][ T8179] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.858608][ T8179] ? bpf_lsm_capable+0x9/0x10 [ 117.858624][ T8179] ? security_capable+0x80/0x260 [ 117.858649][ T8179] ? ns_capable+0xd2/0xf0 [ 117.858670][ T8179] genl_rcv_msg+0x560/0x800 [ 117.858695][ T8179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.858715][ T8179] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.858735][ T8179] ? __lock_acquire+0x4a5/0x2630 [ 117.858763][ T8179] netlink_rcv_skb+0x159/0x420 [ 117.858782][ T8179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.858803][ T8179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.858831][ T8179] ? netlink_deliver_tap+0x1ae/0xcc0 [ 117.858852][ T8179] genl_rcv+0x28/0x40 [ 117.858870][ T8179] netlink_unicast+0x5aa/0x870 [ 117.858892][ T8179] ? __pfx_netlink_unicast+0x10/0x10 [ 117.858919][ T8179] netlink_sendmsg+0x8b0/0xda0 [ 117.858941][ T8179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.858958][ T8179] ? __might_fault+0x20/0x140 [ 117.858987][ T8179] ____sys_sendmsg+0xa54/0xc30 [ 117.859011][ T8179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.859037][ T8179] ? __pfx_futex_wake_mark+0x10/0x10 [ 117.859060][ T8179] ___sys_sendmsg+0x190/0x1e0 [ 117.859083][ T8179] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.859133][ T8179] __sys_sendmsg+0x170/0x220 [ 117.859149][ T8179] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.859165][ T8179] ? __x64_sys_futex+0x34f/0x4d0 [ 117.859195][ T8179] do_syscall_64+0x106/0xf80 [ 117.859211][ T8179] ? clear_bhb_loop+0x40/0x90 [ 117.859231][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.859249][ T8179] RIP: 0033:0x7f042979c629 [ 117.859264][ T8179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.859279][ T8179] RSP: 002b:00007f04279f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.859296][ T8179] RAX: ffffffffffffffda RBX: 00007f0429a15fa0 RCX: 00007f042979c629 [ 117.859306][ T8179] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 117.859316][ T8179] RBP: 00007f0429832b39 R08: 0000000000000000 R09: 0000000000000000 [ 117.859326][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.859342][ T8179] R13: 00007f0429a16038 R14: 00007f0429a15fa0 R15: 00007ffda5ec6bd8 [ 117.859371][ T8179] [ 118.123562][ T8200] fuse: Unknown parameter 'user_id00000000000000000000' [ 118.172613][ T41] audit: type=1326 audit(1772362606.052:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.660" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0de5b9c629 code=0x0 [ 118.222183][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 118.229050][ T8207] bond0: entered promiscuous mode [ 118.231376][ T8207] bond_slave_0: entered promiscuous mode [ 118.234034][ T8207] bond_slave_1: entered promiscuous mode [ 118.238342][ T8207] batadv_slave_0: entered promiscuous mode [ 118.241276][ T8207] batadv_slave_0: left promiscuous mode [ 118.244272][ T8207] bond0: left promiscuous mode [ 118.246365][ T8207] bond_slave_0: left promiscuous mode [ 118.248696][ T8207] bond_slave_1: left promiscuous mode [ 118.382650][ T41] audit: type=1400 audit(1772362606.261:486): avc: denied { block_suspend } for pid=8208 comm="syz.2.661" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.392421][ T5992] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 118.544816][ T5992] usb 10-1: config 1 interface 0 has no altsetting 0 [ 118.548634][ T5992] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.551643][ T5992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.554454][ T5992] usb 10-1: Product: syz [ 118.555987][ T5992] usb 10-1: Manufacturer: syz [ 118.557579][ T5992] usb 10-1: SerialNumber: syz [ 118.969152][ T5992] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 118.993397][ T41] audit: type=1400 audit(1772362606.858:487): avc: denied { setattr } for pid=8217 comm="syz.1.663" name="" dev="pipefs" ino=19918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 119.091899][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 119.133852][ T8230] Cannot find del_set index 4 as target [ 119.686060][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.689525][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.756617][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.761318][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.879307][ T8240] fuse: Unknown parameter 'user_id00000000000000000000' [ 119.969731][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.972595][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.915025][ C3] usblp0: nonzero write bulk status received: -71 [ 120.915361][ T5992] usb 10-1: USB disconnect, device number 2 [ 120.938761][ T8192] usblp0: removed [ 121.127186][ T8278] netlink: 608 bytes leftover after parsing attributes in process `syz.4.684'. [ 121.146838][ T8280] macsec1: entered promiscuous mode [ 121.325291][ T8297] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 121.349877][ T8297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.363844][ T8297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=8297 comm=syz.1.690 [ 121.446742][ T8303] netlink: 14 bytes leftover after parsing attributes in process `syz.1.692'. [ 121.454465][ T8303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.460711][ T8303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.464662][ T8303] bond0 (unregistering): Released all slaves [ 121.693042][ T8319] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.698'. [ 121.697915][ T8319] netlink: 64 bytes leftover after parsing attributes in process `syz.1.698'. [ 122.150692][ T29] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 122.322842][ T29] usb 10-1: config 1 interface 0 has no altsetting 0 [ 122.327680][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.331275][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.334617][ T29] usb 10-1: Product: syz [ 122.336303][ T29] usb 10-1: Manufacturer: syz [ 122.337813][ T29] usb 10-1: SerialNumber: syz [ 122.752343][ T29] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 123.051748][ T8357] netlink: 'syz.1.712': attribute type 21 has an invalid length. [ 123.054628][ T8357] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.057751][ T8357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.060400][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 123.062791][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 123.065397][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 123.069649][ T8357] netlink: 'syz.1.712': attribute type 21 has an invalid length. [ 123.072283][ T8357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.471188][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.476118][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.558949][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.562150][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.772151][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.777311][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.700839][ C0] usblp0: nonzero write bulk status received: -71 [ 124.701121][ T5932] usb 10-1: USB disconnect, device number 3 [ 124.712799][ T8325] usblp0: removed [ 125.343531][ T8367] afs: Unknown parameter 'danL' [ 125.471950][ T8348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.584025][ T41] audit: type=1400 audit(1772362613.429:488): avc: denied { getopt } for pid=8372 comm="syz.5.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.607825][ T8374] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.618454][ T8374] rtc_cmos 00:05: Alarms can be up to one day in the future [ 125.627880][ T8374] netlink: 44 bytes leftover after parsing attributes in process `syz.5.717'. [ 125.666423][ T41] audit: type=1400 audit(1772362613.509:489): avc: denied { read } for pid=8372 comm="syz.5.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.666813][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 125.672333][ T41] audit: type=1400 audit(1772362613.509:490): avc: denied { getopt } for pid=8372 comm="syz.5.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.672361][ T41] audit: type=1400 audit(1772362613.509:491): avc: denied { ioctl } for pid=8372 comm="syz.5.717" path="socket:[21825]" dev="sockfs" ino=21825 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.763186][ T8395] kAFS: Can only specify source 'none' with -o dyn [ 125.903986][ T41] audit: type=1400 audit(1772362613.738:492): avc: denied { validate_trans } for pid=8413 comm="syz.5.732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.941152][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 125.955006][ T8420] fuse: Unknown parameter '0x0000000000000004' [ 125.975087][ T5932] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 126.135775][ T5932] usb 9-1: Using ep0 maxpacket: 8 [ 126.139629][ T5932] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.144306][ T5932] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.148834][ T5932] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.152798][ T5932] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.157871][ T5932] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.161540][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.220766][ T8433] syzkaller0: entered promiscuous mode [ 126.222986][ T8433] syzkaller0: entered allmulticast mode [ 126.229351][ T8433] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 126.283213][ T8435] lo speed is unknown, defaulting to 1000 [ 126.389831][ T5932] usb 9-1: GET_CAPABILITIES returned 0 [ 126.392243][ T5932] usbtmc 9-1:16.0: can't read capabilities [ 126.430811][ T8439] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.433360][ T8439] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 126.436348][ T8439] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.439791][ T8439] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 126.510794][ T8445] fuse: Unknown parameter '0x0000000000000004' [ 126.572833][ T41] audit: type=1400 audit(1772362614.406:493): avc: denied { module_request } for pid=8446 comm="syz.1.743" kmod="ip_set_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 126.597528][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.601234][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.604618][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.607580][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.610779][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.613589][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.617030][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.620182][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.629550][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.632785][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.636368][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.639957][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.669609][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.673633][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.676470][ T41] audit: type=1400 audit(1772362614.505:494): avc: denied { setopt } for pid=8452 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 126.677530][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.677566][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 126.678482][ C3] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 126.701580][ T2307] usb 9-1: USB disconnect, device number 6 [ 126.769334][ T8458] netlink: 620 bytes leftover after parsing attributes in process `syz.1.746'. [ 127.011267][ T1455] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 127.045827][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 127.152723][ T8471] fuse: Unknown parameter '0x0000000000000004' [ 127.239476][ T1455] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.244452][ T1455] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.248765][ T1455] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.254875][ T1455] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.258327][ T1455] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.263715][ T1455] usb 10-1: config 0 descriptor?? [ 127.359345][ T8484] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 127.382927][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.496212][ T8484] bond0: (slave veth5): Enslaving as an active interface with a down link [ 127.536957][ T8494] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 127.542863][ T8494] bond0: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 127.600767][ T8498] FAULT_INJECTION: forcing a failure. [ 127.600767][ T8498] name failslab, interval 1, probability 0, space 0, times 0 [ 127.604876][ T8498] CPU: 3 UID: 0 PID: 8498 Comm: syz.4.759 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.604894][ T8498] Tainted: [L]=SOFTLOCKUP [ 127.604897][ T8498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.604904][ T8498] Call Trace: [ 127.604908][ T8498] [ 127.604913][ T8498] dump_stack_lvl+0x100/0x190 [ 127.604933][ T8498] should_fail_ex.cold+0x5/0xa [ 127.604948][ T8498] should_failslab+0xc2/0x120 [ 127.604965][ T8498] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 127.604979][ T8498] ? skb_clone+0x190/0x400 [ 127.604991][ T8498] skb_clone+0x190/0x400 [ 127.605002][ T8498] netlink_deliver_tap+0xaed/0xcc0 [ 127.605017][ T8498] netlink_unicast+0x650/0x870 [ 127.605030][ T8498] ? __pfx_netlink_unicast+0x10/0x10 [ 127.605047][ T8498] netlink_sendmsg+0x8b0/0xda0 [ 127.605061][ T8498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.605078][ T8498] sock_write_iter+0x566/0x610 [ 127.605092][ T8498] ? __pfx_sock_write_iter+0x10/0x10 [ 127.605109][ T8498] ? bpf_lsm_file_permission+0x9/0x10 [ 127.605124][ T8498] ? security_file_permission+0x76/0x210 [ 127.605138][ T8498] ? rw_verify_area+0xce/0x6d0 [ 127.605153][ T8498] vfs_write+0x6ac/0x1070 [ 127.605169][ T8498] ? __pfx_sock_write_iter+0x10/0x10 [ 127.605182][ T8498] ? __pfx_vfs_write+0x10/0x10 [ 127.605197][ T8498] ? find_held_lock+0x2b/0x80 [ 127.605219][ T8498] ksys_write+0x1f8/0x250 [ 127.605234][ T8498] ? __pfx_ksys_write+0x10/0x10 [ 127.605253][ T8498] do_syscall_64+0x106/0xf80 [ 127.605263][ T8498] ? clear_bhb_loop+0x40/0x90 [ 127.605276][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.605287][ T8498] RIP: 0033:0x7f0de5b9c629 [ 127.605297][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.605307][ T8498] RSP: 002b:00007f0de69a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.605318][ T8498] RAX: ffffffffffffffda RBX: 00007f0de5e15fa0 RCX: 00007f0de5b9c629 [ 127.605324][ T8498] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 127.605331][ T8498] RBP: 00007f0de69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.605337][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.605343][ T8498] R13: 00007f0de5e16038 R14: 00007f0de5e15fa0 R15: 00007ffcb1676808 [ 127.605357][ T8498] [ 127.626788][ T8500] fuse: Bad value for 'fd' [ 127.684907][ T1455] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.691530][ T41] audit: type=1400 audit(1772362615.532:495): avc: denied { kexec_image_load } for pid=8501 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 127.691876][ T1455] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.714581][ T8504] lo speed is unknown, defaulting to 1000 [ 127.725218][ T1455] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 128.004473][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.008408][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.112514][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.115495][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.118690][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.121610][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.342580][ T8524] netlink: 'syz.1.768': attribute type 11 has an invalid length. [ 128.351851][ T8524] netlink: 'syz.1.768': attribute type 11 has an invalid length. [ 128.356770][ T8524] overlayfs: failed to clone upperpath [ 128.647420][ T8537] netlink: 608 bytes leftover after parsing attributes in process `syz.4.773'. [ 128.683074][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 128.773608][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 128.928406][ T8561] ucma_write: process 387 (syz.4.782) changed security contexts after opening file descriptor, this is not allowed. [ 128.934983][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 129.001212][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.784'. [ 129.072122][ T41] audit: type=1400 audit(1772362616.898:496): avc: denied { write } for pid=8567 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.072220][ T8568] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.083796][ T41] audit: type=1400 audit(1772362616.918:497): avc: denied { accept } for pid=8567 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 129.084041][ T8568] comedi: No check for data length of config insn id 279 is implemented [ 129.096573][ T8568] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 129.100428][ T8568] comedi: Assuming n=15 is correct [ 129.254349][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.262179][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.265734][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.274268][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.278700][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.281372][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.284088][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.287153][ T8579] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 129.606130][ T34] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 129.701947][ T5993] usb 10-1: USB disconnect, device number 4 [ 129.758313][ T34] usb 9-1: config 1 interface 0 has no altsetting 0 [ 129.763770][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.769212][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.773042][ T34] usb 9-1: Product: syz [ 129.774905][ T34] usb 9-1: Manufacturer: syz [ 129.777678][ T34] usb 9-1: SerialNumber: syz [ 129.841086][ T8598] xt_bpf: check failed: parse error [ 129.967808][ T8604] fuse: Unknown parameter 'fd0x0000000000000004' [ 130.191634][ T34] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 130.662610][ T8632] __nla_validate_parse: 33 callbacks suppressed [ 130.662624][ T8632] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.809'. [ 130.673736][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 130.756608][ T8638] [ 130.757473][ T8638] ============================================ [ 130.759586][ T8638] WARNING: possible recursive locking detected [ 130.761752][ T8638] syzkaller #0 Tainted: G L [ 130.764089][ T8638] -------------------------------------------- [ 130.766647][ T8638] syz.5.810/8638 is trying to acquire lock: [ 130.768628][ T8638] ffff888034c6f8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 130.771748][ T8638] [ 130.771748][ T8638] but task is already holding lock: [ 130.774285][ T8638] ffff888034c6f0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 130.777439][ T8638] [ 130.777439][ T8638] other info that might help us debug this: [ 130.780140][ T8638] Possible unsafe locking scenario: [ 130.780140][ T8638] [ 130.782575][ T8638] CPU0 [ 130.783669][ T8638] ---- [ 130.784816][ T8638] lock(&dev->mutex#4); [ 130.786228][ T8638] lock(&dev->mutex#4); [ 130.787654][ T8638] [ 130.787654][ T8638] *** DEADLOCK *** [ 130.787654][ T8638] [ 130.790271][ T8638] May be due to missing lock nesting notation [ 130.790271][ T8638] [ 130.792998][ T8638] 1 lock held by syz.5.810/8638: [ 130.794546][ T8638] #0: ffff888034c6f0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 130.797905][ T8638] [ 130.797905][ T8638] stack backtrace: [ 130.799895][ T8638] CPU: 2 UID: 0 PID: 8638 Comm: syz.5.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.799913][ T8638] Tainted: [L]=SOFTLOCKUP [ 130.799917][ T8638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.799925][ T8638] Call Trace: [ 130.799929][ T8638] [ 130.799935][ T8638] dump_stack_lvl+0x100/0x190 [ 130.799955][ T8638] print_deadlock_bug.cold+0xbd/0xca [ 130.799972][ T8638] __lock_acquire+0x12bb/0x2630 [ 130.799993][ T8638] lock_acquire+0x1cf/0x380 [ 130.800008][ T8638] ? comedi_do_insn+0x2e/0x360 [ 130.800020][ T8638] ? __pfx___might_resched+0x10/0x10 [ 130.800033][ T8638] __mutex_lock+0x1a2/0x1b90 [ 130.800045][ T8638] ? comedi_do_insn+0x2e/0x360 [ 130.800056][ T8638] ? comedi_do_insn+0x2e/0x360 [ 130.800068][ T8638] ? __pfx___mutex_lock+0x10/0x10 [ 130.800079][ T8638] ? __pfx___might_resched+0x10/0x10 [ 130.800091][ T8638] ? __up_read+0x2c5/0x700 [ 130.800103][ T8638] ? comedi_do_insn+0x2e/0x360 [ 130.800113][ T8638] comedi_do_insn+0x2e/0x360 [ 130.800126][ T8638] comedi_dio_bitfield2+0x3c0/0x420 [ 130.800137][ T8638] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 130.800151][ T8638] ? do_insn_ioctl+0xda/0x4e0 [ 130.800164][ T8638] ? stack_trace_save+0x8e/0xc0 [ 130.800177][ T8638] ? __pfx_stack_trace_save+0x10/0x10 [ 130.800191][ T8638] bonding_dio_insn_bits+0x2b9/0x570 [ 130.800205][ T8638] ? kasan_save_track+0x14/0x30 [ 130.800220][ T8638] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 130.800233][ T8638] ? __x64_sys_ioctl+0x18e/0x210 [ 130.800247][ T8638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.800260][ T8638] insn_rw_emulate_bits+0x2a2/0x5e0 [ 130.800277][ T8638] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 130.800295][ T8638] ? comedi_check_chanlist+0x27e/0x300 [ 130.800311][ T8638] parse_insn+0x83f/0x19f0 [ 130.800323][ T8638] ? trace_kmalloc+0x101/0x130 [ 130.800341][ T8638] ? __pfx_parse_insn+0x10/0x10 [ 130.800353][ T8638] ? __kmalloc_noprof+0x320/0x850 [ 130.800371][ T8638] do_insn_ioctl+0x152/0x4e0 [ 130.800391][ T8638] comedi_unlocked_ioctl+0xf68/0x3310 [ 130.800414][ T8638] ? tomoyo_path_number_perm+0x188/0x580 [ 130.800438][ T8638] ? futex_wake+0x1ad/0x530 [ 130.800457][ T8638] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 130.800481][ T8638] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.800504][ T8638] ? do_vfs_ioctl+0x226/0x13e0 [ 130.800527][ T8638] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 130.800550][ T8638] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 130.800574][ T8638] ? __fget_files+0x215/0x3d0 [ 130.800595][ T8638] ? hook_file_ioctl_common+0x146/0x410 [ 130.800623][ T8638] ? selinux_file_ioctl+0x139/0x290 [ 130.800642][ T8638] ? selinux_file_ioctl+0xb4/0x290 [ 130.800662][ T8638] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 130.800683][ T8638] __x64_sys_ioctl+0x18e/0x210 [ 130.800705][ T8638] do_syscall_64+0x106/0xf80 [ 130.800723][ T8638] ? clear_bhb_loop+0x40/0x90 [ 130.800745][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.800764][ T8638] RIP: 0033:0x7ff90059c629 [ 130.800780][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.800798][ T8638] RSP: 002b:00007ff9013c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.800817][ T8638] RAX: ffffffffffffffda RBX: 00007ff900816090 RCX: 00007ff90059c629 [ 130.800830][ T8638] RDX: 0000200000000000 RSI: 000000008028640c RDI: 000000000000000b [ 130.800842][ T8638] RBP: 00007ff900632b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.800853][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.800864][ T8638] R13: 00007ff900816128 R14: 00007ff900816090 R15: 00007fff80505fb8 [ 130.800883][ T8638] [ 131.004955][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.008390][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.070338][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.074146][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.286780][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.290583][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.065385][ C1] usblp0: nonzero write bulk status received: -71 [ 132.065456][ T5932] usb 9-1: USB disconnect, device number 7 [ 132.074711][ T8584] usblp0: removed [ 138.647090][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.650037][ T1416] ieee802154 phy1 wpan1: encryption failed: -22