last executing test programs: 8m23.377975807s ago: executing program 2 (id=1579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x43, 0x8, "af3234cbb2fdaaa65c2e78e1c49d45a16112ed9f665448cc42b3525a251a466e55e78eee1c4e441334d6e4789e161fde55a7a48df4f820cc9ca2707ee095ff"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x20044010) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44014) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000380)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000580), &(0x7f00000005c0)=0x4) close(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000700)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000740)={0x0, 0xffff, 0x10, 0x7, 0x6}, &(0x7f0000000780)=0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a00)={&(0x7f00000009c0)=[{0x7b3, 0x10, 0x13, &(0x7f00000007c0)="556581a8b801f5e5f66b11fdb41aa4752c2a84"}, {0xff01, 0x200, 0x8d, &(0x7f0000000800)="8d408849eb565ce5d7ee5cddbf3eedf91b2eb5ebdb441dfe1a2274113afa456f92d6f0a101c03fb4775985baeef751dbf678e0f854ce349602a9f02ebf57786e0802a4b3ae5763e565273160869243a41141d0c4a12e0894411d8e19a7281a47b9db400c617c48940c4cb014e8424d1217bd25e9ed40d274c6c14567f76ece47697fa32aadadf8a4c3eb9afe0c"}, {0x7f, 0x8000, 0x62, &(0x7f00000008c0)="7e76e5eee3b244e381edf404c199aff8f04b7033a0d5cfc3ffcc2920140d38810d3dca5022c48c06b6052a85f4584d99c21f790d8f44ae153165e43691291f0340d492eb2e336eb39752f8c1000d31aea4445c9c8a59dbea587c71a84fe9669b5397"}, {0x7e77, 0x0, 0x6c, &(0x7f0000000940)="a99fdda8c1ae8a6175c8f361385018959c48851ae2b085531c50d845b55b1f6fb69d89fa81c600be12ae2de5e4115b1d8f3a2c42e4b81887602f21f96899cffd639c5936117f5f520b760270eefe8313119428d35beeb57f7748f5bbf580d0ebeda87ad531e9d21dbb4eaf51"}], 0x4}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000a40)=0x2, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x610, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4004040) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c80)={0xa8, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000d40), &(0x7f0000000d80)=0x8) r5 = signalfd4(r4, &(0x7f0000000dc0)={[0xc, 0x5]}, 0x8, 0x180000) getsockname$inet(r5, &(0x7f0000000e00)={0x2, 0x0, @loopback}, &(0x7f0000000e40)=0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000e80)) sendmsg$AUDIT_USER(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x94, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfc, "d62555ccb0e4c05c743c7248dc480ef4cfba6989b33ec8d7873efb353dd8070a41acc0eb17c84071647fc27f682627004c352525c01874e7d26ce1b626bd6f46ef63b1255cf0d9030f7d3090b8791ff1dfc0b18df6e11a10ea48acf407a4a215d261363c92ab64c1ef4522abdcac73bf6f0f3fd9286a7f6b84aed52e7db90d2474d462ce", ["", "", "", "", "", "", "", "", "", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4048005) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_macvtap\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x4000810) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r5) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000015c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001300)={0x24c, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x80}, 0x4c001) 8m23.200026211s ago: executing program 2 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) process_vm_writev(r5, &(0x7f0000000140)=[{&(0x7f0000019300)=""/192, 0xc0}, {&(0x7f0000000040)=""/73, 0x49}], 0x2, &(0x7f0000019880)=[{&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000193c0)=""/232, 0xe8}, {&(0x7f00000194c0)=""/180, 0xb4}, {&(0x7f0000019580)=""/170, 0xaa}, {&(0x7f0000019640)=""/25, 0x19}, {&(0x7f0000019680)=""/16, 0x10}, {&(0x7f00000196c0)=""/45, 0x2d}, {&(0x7f0000019700)=""/224, 0xe0}, {&(0x7f0000019800)=""/116, 0x74}], 0xa, 0x0) 8m21.823129329s ago: executing program 2 (id=1585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) close(r0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34e}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x802, 0x1) write(r9, &(0x7f0000000000)="08001800000020a3", 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 8m21.54389613s ago: executing program 2 (id=1587): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x2000288}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 8m21.501885664s ago: executing program 2 (id=1588): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)=0x3f) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f08", 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000500)={"a02200", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', '2\x00', "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\x00 \x00', "2c09000000ffd8ffffff02ff"]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18c0}}, 0x44041) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x4000836) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000400)=@req3={0x4, 0xffffff7e, 0xb9f, 0x9, 0xb, 0x7, 0x37}, 0x1c) gettid() ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x21c) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 8m21.292341997s ago: executing program 2 (id=1592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) 8m21.02870275s ago: executing program 32 (id=1592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) 8m18.591041458s ago: executing program 4 (id=1594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) process_vm_writev(r5, &(0x7f0000000140)=[{&(0x7f0000019300)=""/192, 0xc0}, {&(0x7f0000000040)=""/73, 0x49}], 0x2, &(0x7f0000019880)=[{&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000193c0)=""/232, 0xe8}, {&(0x7f00000194c0)=""/180, 0xb4}, {&(0x7f0000019580)=""/170, 0xaa}, {&(0x7f0000019640)=""/25, 0x19}, {&(0x7f0000019680)=""/16, 0x10}, {&(0x7f00000196c0)=""/45, 0x2d}, {&(0x7f0000019700)=""/224, 0xe0}, {&(0x7f0000019800)=""/116, 0x74}], 0xa, 0x0) 8m17.023150163s ago: executing program 3 (id=1611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x8b, 0x0, 0x42}, {0x960, 0x0, 0xdf}, {0x40000325}]}) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) process_vm_writev(r7, &(0x7f0000000140)=[{&(0x7f0000019300)=""/192, 0xc0}, {&(0x7f0000000040)=""/73, 0x49}], 0x2, &(0x7f0000019880)=[{&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000193c0)=""/232, 0xe8}, {&(0x7f00000194c0)=""/180, 0xb4}, {&(0x7f0000019580)=""/170, 0xaa}, {&(0x7f0000019640)=""/25, 0x19}, {&(0x7f0000019680)=""/16, 0x10}, {&(0x7f00000196c0)=""/45, 0x2d}, {&(0x7f0000019700)=""/224, 0xe0}, {&(0x7f0000019800)=""/116, 0x74}], 0xa, 0x0) 8m16.232222132s ago: executing program 4 (id=1615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x8b, 0x0, 0x42}, {0x960, 0x0, 0xdf}, {0x40000325}]}) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) 8m15.703414066s ago: executing program 3 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x43, 0x8, "af3234cbb2fdaaa65c2e78e1c49d45a16112ed9f665448cc42b3525a251a466e55e78eee1c4e441334d6e4789e161fde55a7a48df4f820cc9ca2707ee095ff"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x20044010) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44014) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000380)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000580), &(0x7f00000005c0)=0x4) close(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}}, [0xa1, 0x3, 0x1, 0xfffffffffffffffb, 0x3, 0x200, 0x834, 0xc, 0x0, 0x7, 0x11566cec, 0x6, 0x2, 0x80000000]}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000740)={r4, 0xffff, 0x10, 0x7, 0x6}, &(0x7f0000000780)=0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a00)={&(0x7f00000009c0)=[{0x7b3, 0x10, 0x13, &(0x7f00000007c0)="556581a8b801f5e5f66b11fdb41aa4752c2a84"}, {0xff01, 0x200, 0x8d, &(0x7f0000000800)="8d408849eb565ce5d7ee5cddbf3eedf91b2eb5ebdb441dfe1a2274113afa456f92d6f0a101c03fb4775985baeef751dbf678e0f854ce349602a9f02ebf57786e0802a4b3ae5763e565273160869243a41141d0c4a12e0894411d8e19a7281a47b9db400c617c48940c4cb014e8424d1217bd25e9ed40d274c6c14567f76ece47697fa32aadadf8a4c3eb9afe0c"}, {0x7f, 0x8000, 0x62, &(0x7f00000008c0)="7e76e5eee3b244e381edf404c199aff8f04b7033a0d5cfc3ffcc2920140d38810d3dca5022c48c06b6052a85f4584d99c21f790d8f44ae153165e43691291f0340d492eb2e336eb39752f8c1000d31aea4445c9c8a59dbea587c71a84fe9669b5397"}, {0x7e77, 0x0, 0x6c, &(0x7f0000000940)="a99fdda8c1ae8a6175c8f361385018959c48851ae2b085531c50d845b55b1f6fb69d89fa81c600be12ae2de5e4115b1d8f3a2c42e4b81887602f21f96899cffd639c5936117f5f520b760270eefe8313119428d35beeb57f7748f5bbf580d0ebeda87ad531e9d21dbb4eaf51"}], 0x4}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000a40)=0x2, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x610, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4004040) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c80)={0xa8, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000d40), &(0x7f0000000d80)=0x8) r6 = signalfd4(r5, &(0x7f0000000dc0)={[0xc, 0x5]}, 0x8, 0x180000) getsockname$inet(r6, &(0x7f0000000e00)={0x2, 0x0, @loopback}, &(0x7f0000000e40)=0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000e80)) sendmsg$AUDIT_USER(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x94, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfc, "d62555ccb0e4c05c743c7248dc480ef4cfba6989b33ec8d7873efb353dd8070a41acc0eb17c84071647fc27f682627004c352525c01874e7d26ce1b626bd6f46ef63b1255cf0d9030f7d3090b8791ff1dfc0b18df6e11a10ea48acf407a4a215d261363c92ab64c1ef4522abdcac73bf6f0f3fd9286a7f6b84aed52e7db90d2474d462ce", ["", "", "", "", "", "", "", "", "", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4048005) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000010c0)={'veth0_macvtap\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x4000810) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r6) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000015c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001300)={0x24c, r9, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x80}, 0x4c001) 8m15.702471768s ago: executing program 3 (id=1618): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)=0x3f) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f08", 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000500)={"a02200", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', '2\x00', "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\x00 \x00', "2c09000000ffd8ffffff02ff"]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x44041) openat$sndseq(0xffffff9c, 0x0, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x4000836) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000400)=@req3={0x4, 0xffffff7e, 0xb9f, 0x9, 0xb, 0x7, 0x37}, 0x1c) gettid() ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x21c) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 8m15.441198072s ago: executing program 3 (id=1619): socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x2000288}, &(0x7f0000000280), &(0x7f00000001c0)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 8m15.303955219s ago: executing program 3 (id=1620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x1e}, 0x1, 0x0, 0x0, 0x2004c801}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 8m15.204016373s ago: executing program 3 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x1e}, 0x1, 0x0, 0x0, 0x2004c801}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 8m15.075218313s ago: executing program 33 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x1e}, 0x1, 0x0, 0x0, 0x2004c801}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 8m13.833098688s ago: executing program 4 (id=1627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x43, 0x8, "af3234cbb2fdaaa65c2e78e1c49d45a16112ed9f665448cc42b3525a251a466e55e78eee1c4e441334d6e4789e161fde55a7a48df4f820cc9ca2707ee095ff"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x20044010) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44014) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000380)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000580), &(0x7f00000005c0)=0x4) close(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}}, [0xa1, 0x3, 0x1, 0xfffffffffffffffb, 0x3, 0x200, 0x834, 0xc, 0x0, 0x7, 0x11566cec, 0x6, 0x2, 0x80000000]}, &(0x7f0000000700)=0xfc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000780)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a00)={&(0x7f00000009c0)=[{0x7b3, 0x10, 0x13, &(0x7f00000007c0)="556581a8b801f5e5f66b11fdb41aa4752c2a84"}, {0xff01, 0x200, 0x8d, &(0x7f0000000800)="8d408849eb565ce5d7ee5cddbf3eedf91b2eb5ebdb441dfe1a2274113afa456f92d6f0a101c03fb4775985baeef751dbf678e0f854ce349602a9f02ebf57786e0802a4b3ae5763e565273160869243a41141d0c4a12e0894411d8e19a7281a47b9db400c617c48940c4cb014e8424d1217bd25e9ed40d274c6c14567f76ece47697fa32aadadf8a4c3eb9afe0c"}, {0x7f, 0x8000, 0x62, &(0x7f00000008c0)="7e76e5eee3b244e381edf404c199aff8f04b7033a0d5cfc3ffcc2920140d38810d3dca5022c48c06b6052a85f4584d99c21f790d8f44ae153165e43691291f0340d492eb2e336eb39752f8c1000d31aea4445c9c8a59dbea587c71a84fe9669b5397"}, {0x7e77, 0x0, 0x6c, &(0x7f0000000940)="a99fdda8c1ae8a6175c8f361385018959c48851ae2b085531c50d845b55b1f6fb69d89fa81c600be12ae2de5e4115b1d8f3a2c42e4b81887602f21f96899cffd639c5936117f5f520b760270eefe8313119428d35beeb57f7748f5bbf580d0ebeda87ad531e9d21dbb4eaf51"}], 0x4}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000a40)=0x2, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x610, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4004040) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c80)={0xa8, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000d40), &(0x7f0000000d80)=0x8) r5 = signalfd4(r4, &(0x7f0000000dc0)={[0xc, 0x5]}, 0x8, 0x180000) getsockname$inet(r5, &(0x7f0000000e00)={0x2, 0x0, @loopback}, &(0x7f0000000e40)=0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000e80)) sendmsg$AUDIT_USER(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x94, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfc, "d62555ccb0e4c05c743c7248dc480ef4cfba6989b33ec8d7873efb353dd8070a41acc0eb17c84071647fc27f682627004c352525c01874e7d26ce1b626bd6f46ef63b1255cf0d9030f7d3090b8791ff1dfc0b18df6e11a10ea48acf407a4a215d261363c92ab64c1ef4522abdcac73bf6f0f3fd9286a7f6b84aed52e7db90d2474d462ce", ["", "", "", "", "", "", "", "", "", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4048005) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_macvtap\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x4000810) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r5) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000015c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001300)={0x24c, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x80}, 0x4c001) 8m13.752879867s ago: executing program 4 (id=1629): socket$can_raw(0x1d, 0x3, 0x1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 8m13.693687744s ago: executing program 4 (id=1630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setpriority(0x0, 0x0, 0xacf0165) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) signalfd4(r3, &(0x7f0000000040)={[0x1ff, 0xd]}, 0x8, 0x80800) 8m12.721533141s ago: executing program 4 (id=1634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x8b, 0x0, 0x42}, {0x960, 0x0, 0xdf}, {0x40000325}]}) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) 8m12.40867737s ago: executing program 34 (id=1634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x8b, 0x0, 0x42}, {0x960, 0x0, 0xdf}, {0x40000325}]}) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) 8m12.227791553s ago: executing program 1 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x43, 0x8, "af3234cbb2fdaaa65c2e78e1c49d45a16112ed9f665448cc42b3525a251a466e55e78eee1c4e441334d6e4789e161fde55a7a48df4f820cc9ca2707ee095ff"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x20044010) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44014) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000380)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000580), &(0x7f00000005c0)=0x4) close(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}}, [0xa1, 0x3, 0x1, 0xfffffffffffffffb, 0x3, 0x200, 0x834, 0xc, 0x0, 0x7, 0x11566cec, 0x6, 0x2, 0x80000000]}, &(0x7f0000000700)=0xfc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000780)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a00)={&(0x7f00000009c0)=[{0x7b3, 0x10, 0x13, &(0x7f00000007c0)="556581a8b801f5e5f66b11fdb41aa4752c2a84"}, {0xff01, 0x200, 0x8d, &(0x7f0000000800)="8d408849eb565ce5d7ee5cddbf3eedf91b2eb5ebdb441dfe1a2274113afa456f92d6f0a101c03fb4775985baeef751dbf678e0f854ce349602a9f02ebf57786e0802a4b3ae5763e565273160869243a41141d0c4a12e0894411d8e19a7281a47b9db400c617c48940c4cb014e8424d1217bd25e9ed40d274c6c14567f76ece47697fa32aadadf8a4c3eb9afe0c"}, {0x7f, 0x8000, 0x62, &(0x7f00000008c0)="7e76e5eee3b244e381edf404c199aff8f04b7033a0d5cfc3ffcc2920140d38810d3dca5022c48c06b6052a85f4584d99c21f790d8f44ae153165e43691291f0340d492eb2e336eb39752f8c1000d31aea4445c9c8a59dbea587c71a84fe9669b5397"}, {0x7e77, 0x0, 0x6c, &(0x7f0000000940)="a99fdda8c1ae8a6175c8f361385018959c48851ae2b085531c50d845b55b1f6fb69d89fa81c600be12ae2de5e4115b1d8f3a2c42e4b81887602f21f96899cffd639c5936117f5f520b760270eefe8313119428d35beeb57f7748f5bbf580d0ebeda87ad531e9d21dbb4eaf51"}], 0x4}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000a40)=0x2, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x610, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4004040) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c80)={0xa8, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000d40), &(0x7f0000000d80)=0x8) r5 = signalfd4(r4, &(0x7f0000000dc0)={[0xc, 0x5]}, 0x8, 0x180000) getsockname$inet(r5, &(0x7f0000000e00)={0x2, 0x0, @loopback}, &(0x7f0000000e40)=0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000e80)) sendmsg$AUDIT_USER(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x94, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfc, "d62555ccb0e4c05c743c7248dc480ef4cfba6989b33ec8d7873efb353dd8070a41acc0eb17c84071647fc27f682627004c352525c01874e7d26ce1b626bd6f46ef63b1255cf0d9030f7d3090b8791ff1dfc0b18df6e11a10ea48acf407a4a215d261363c92ab64c1ef4522abdcac73bf6f0f3fd9286a7f6b84aed52e7db90d2474d462ce", ["", "", "", "", "", "", "", "", "", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4048005) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_macvtap\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x4000810) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r5) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000015c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001300)={0x24c, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x80}, 0x4c001) 8m12.093642415s ago: executing program 1 (id=1637): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x40000002) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40855}, 0x20004000) read$msr(0xffffffffffffffff, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x72, 0x0, &(0x7f0000000340)="cbb4415213c9173f632e12c7b56bd7ece4e9f881ec131ea3e49b06c4352eb1ae0443d4a124b9af53135c751fa7ebc63dd6e5df2c31945a29f7631028039de7d23b87971c38d9b21911d10fe99426aef5f930d4ef5a751677dc04559f21d9f1b1dd77342b9eedc764c8a4e444e76c6f0ca009", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fchown(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000400)='syzkaller\x00'}, 0x94) r0 = socket(0x1a, 0x6, 0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) socket$kcm(0x10, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 8m11.173599183s ago: executing program 1 (id=1638): mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x1) fsmount(r0, 0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x8, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c200280050001"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m10.43698285s ago: executing program 1 (id=1640): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 8m10.305917657s ago: executing program 1 (id=1641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setpriority(0x0, 0x0, 0xacf0165) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) signalfd4(r3, &(0x7f0000000040)={[0x1ff, 0xd]}, 0x8, 0x80800) 8m9.360491384s ago: executing program 1 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) fstat(r0, &(0x7f0000000240)) 8m9.180495698s ago: executing program 35 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) fstat(r0, &(0x7f0000000240)) 7m11.943410228s ago: executing program 0 (id=1961): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea0800", @ANYRES32=r0, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0xffff0000, 0x2000c094}, 0x4040080) 7m11.86812093s ago: executing program 0 (id=1963): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000004880)=[{{&(0x7f0000000400)=@caif=@dgm, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000000c0)=""/49, 0x31}], 0x2, &(0x7f0000000600)=""/239, 0xef}, 0xd1}, {{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/94, 0x5e}], 0x2, &(0x7f00000008c0)=""/122, 0x7a}, 0x2}, {{&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000009c0)=""/231, 0xe7}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/47, 0x2f}, {&(0x7f0000000b80)=""/13, 0xd}], 0x4, &(0x7f0000000c00)=""/46, 0x2e}, 0xffffffff}, {{&(0x7f0000000c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/129, 0x81}, {&(0x7f0000000e00)=""/198, 0xc6}, {&(0x7f0000000f00)=""/75, 0x4b}, {&(0x7f0000000f80)=""/233, 0xe9}, {&(0x7f0000001080)=""/47, 0x2f}, {&(0x7f00000010c0)=""/162, 0xa2}, {&(0x7f0000001180)=""/114, 0x72}], 0x8, &(0x7f0000001240)=""/238, 0xee}, 0x4}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f0000003700)=[{&(0x7f00000013c0)=""/196, 0xc4}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000015c0)=""/180, 0xb4}, {&(0x7f0000001680)=""/63, 0x3f}, {&(0x7f00000016c0)=""/27, 0x1b}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x7, &(0x7f0000003740)}, 0x5}, {{&(0x7f0000003780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003800)=""/4096, 0x1000}], 0x1, &(0x7f0000004840)=""/52, 0x34}, 0x1}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0x1, 0x509480) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004940)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f", @ANYRES32=r1, @ANYRES16=r2, @ANYRESHEX=r3, @ANYRES64=r3], 0x38}}, 0x810) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x80000}, &(0x7f0000000340), 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000004800)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r7], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000080)={r9, 0xffff, 0x30, 0x6, 0x6}, &(0x7f0000000280)=0x18) 7m10.950590267s ago: executing program 0 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delchain={0x24, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xb, 0xc}, {0xffed}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m10.711340105s ago: executing program 0 (id=1971): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, 0x0, 0x0, 0x1000810, 0x0) 7m10.481167844s ago: executing program 0 (id=1973): mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = fsopen(0x0, 0x1) fsmount(r0, 0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x8, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c200280050001"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 7m9.63261861s ago: executing program 0 (id=1977): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)=0x3f) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f08", 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000500)={"a02200", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', '2\x00', "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\x00 \x00', "2c09000000ffd8ffffff02ff"]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x44041) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x4000836) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000400)=@req3={0x4, 0xffffff7e, 0xb9f, 0x9, 0xb, 0x7, 0x37}, 0x1c) gettid() ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x21c) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 7m9.547002289s ago: executing program 36 (id=1977): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)=0x3f) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f08", 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000500)={"a02200", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', '2\x00', "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\x00 \x00', "2c09000000ffd8ffffff02ff"]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x44041) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x4000836) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000400)=@req3={0x4, 0xffffff7e, 0xb9f, 0x9, 0xb, 0x7, 0x37}, 0x1c) gettid() ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x21c) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 34.306543027s ago: executing program 5 (id=3609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) setreuid(0x0, 0xee00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x8002) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 34.203835701s ago: executing program 5 (id=3611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x8b, 0x0, 0x42}, {0x960, 0x0, 0xdf}, {0x40000325}]}) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) process_vm_writev(r7, &(0x7f0000000140)=[{&(0x7f0000019300)=""/192, 0xc0}, {&(0x7f0000000040)=""/73, 0x49}], 0x2, &(0x7f0000019880)=[{&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000193c0)=""/232, 0xe8}, {&(0x7f00000194c0)=""/180, 0xb4}, {&(0x7f0000019640)=""/25, 0x19}, {&(0x7f0000019680)=""/16, 0x10}, {&(0x7f00000196c0)=""/45, 0x2d}, {&(0x7f0000019700)=""/224, 0xe0}, {&(0x7f0000019800)=""/116, 0x74}], 0x9, 0x0) 31.404578447s ago: executing program 5 (id=3617): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) unshare(0x8000000) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000040)=0x6e) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x124, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0xfffffffffffffffd, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0xffffffffffffff3b}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xf8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f00000000c0)=0xa4) r5 = syz_open_dev$vim2m(&(0x7f0000000400), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000440)={0x0, 0x20e8d, 0x1, {0x1, @win={{0x0, 0xffffffff, 0x100000, 0x4}, 0xf, 0x5231e6c0, 0x0, 0x0, 0x0, 0x6}}}) 31.163312115s ago: executing program 5 (id=3618): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) (fail_nth: 1) 31.033245101s ago: executing program 5 (id=3619): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000007c0)={'syz1\x00', {0x7, 0x0, 0xfffb, 0x8001}, 0x3d, [0x3, 0x0, 0x1, 0x6, 0x2, 0x0, 0x2, 0x7, 0xffffffff, 0x4, 0x7, 0xc, 0x33cf, 0x1, 0x7, 0x0, 0x306, 0x0, 0x7, 0x9, 0x2, 0x6, 0x1, 0x0, 0x6, 0x7, 0x2, 0x0, 0x2, 0x10000, 0xc, 0x6, 0x10001, 0x2, 0x1000000, 0x1, 0x4, 0x8, 0x7, 0x2, 0xf, 0x3, 0xc643ecb1, 0x8, 0x5, 0x4, 0x200008a1, 0x401, 0x7, 0x6d, 0x5, 0xc, 0x6, 0x249a, 0x6, 0x5a30, 0xe788, 0x8001, 0x2, 0x5, 0xab, 0x7, 0x4, 0x6], [0x200, 0x139, 0x6, 0x271, 0x2, 0x9a9, 0x3, 0x4, 0x5, 0x5, 0x9, 0x10000, 0x10001, 0x8, 0x2, 0x0, 0xfff, 0x8, 0x6, 0x8, 0xc, 0x75b1, 0x0, 0x9d, 0x6, 0xb, 0x1, 0x8, 0x16f4, 0x1, 0x400, 0x5, 0x5, 0x953b, 0x8, 0x9, 0x8, 0x10000001, 0xec2, 0xbd, 0x9, 0xff, 0x6596, 0x8, 0x4, 0x7f, 0xb, 0x6, 0x3, 0x9, 0x8, 0x0, 0xf78, 0xd, 0x35ce0cb3, 0x0, 0x0, 0x8, 0x5b0, 0x18f, 0x10, 0x8000007, 0x3, 0xc], [0x222e, 0xa, 0x2, 0x30993f35, 0x6f083aad, 0x5, 0x0, 0x1, 0xfffffffd, 0x0, 0x7d, 0x8000000, 0x1, 0x101, 0x2, 0x7ff, 0x3, 0x9, 0x1e, 0x3162, 0x800, 0x101, 0x100, 0x0, 0x6, 0x2c, 0x7, 0xfffffff8, 0xffffffff, 0x80000000, 0x3, 0x6, 0x7, 0x0, 0x4a, 0x575b089f, 0xbd3e, 0x6, 0x1, 0x9bd7, 0x3, 0x0, 0x9, 0x6, 0x7, 0x7, 0xfff, 0x4, 0x401, 0xa55, 0x6, 0x3, 0xfffffffe, 0xfff, 0x40000000, 0x5, 0x7, 0x4, 0x7, 0x800, 0xffffffff, 0x81, 0x6, 0xd], [0x25, 0x8000, 0x1, 0x9, 0x3, 0xb, 0x7, 0x10000, 0x5, 0xe47f, 0x117, 0x4, 0x33, 0x3f47, 0x8000006, 0x8, 0x3, 0x1, 0x0, 0x601f, 0x2, 0x9, 0xd, 0x1, 0x9, 0x1000ff, 0x6, 0x10001, 0x5, 0x2, 0x1000, 0x10, 0x4, 0xd8, 0x2, 0x8, 0xa, 0x2, 0x7fffffff, 0x9, 0x40, 0xfffffff3, 0x7, 0x7fff, 0x7, 0x1, 0x3, 0x9, 0x2, 0x8, 0x3, 0x27, 0x1a00000, 0x4, 0x5, 0x2, 0x1, 0x4, 0xc000000, 0x7fffffff, 0x40, 0x3, 0x2, 0x4000006]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x95}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$msr(r1, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x822f01) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r7, 0x0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) socket$xdp(0x2c, 0x3, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x40}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) write$P9_RVERSION(r8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYRES8=r5, @ANYRESDEC], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 30.815612741s ago: executing program 5 (id=3621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xec, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x80, 0x0, 0x2c, 0x0, 0xee00}, {@in6=@local, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x5, 0x143}, {0x7, 0x8000000000000003}, {0x0, 0x0, 0x3}, 0x70bd2c, 0x3504, 0x2, 0x4, 0x0, 0x50}}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffff7}]}) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x1, 0x3, 0xa, 0x0, 0x5, 0x5, @none}]}}}}, 0x1d) 14.902907042s ago: executing program 37 (id=3621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xec, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x80, 0x0, 0x2c, 0x0, 0xee00}, {@in6=@local, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x5, 0x143}, {0x7, 0x8000000000000003}, {0x0, 0x0, 0x3}, 0x70bd2c, 0x3504, 0x2, 0x4, 0x0, 0x50}}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffff7}]}) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x1, 0x3, 0xa, 0x0, 0x5, 0x5, @none}]}}}}, 0x1d) 4.834241813s ago: executing program 8 (id=3737): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 4.758050778s ago: executing program 8 (id=3738): r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delchain={0x394, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xb, 0xc}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffc}, @filter_kind_options=@f_cgroup={{0xb}, {0x330, 0x2, [@TCA_CGROUP_EMATCHES={0x32c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0xaf}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x49}, {0x0, 0x9, 0x4, 0x0, 0x6, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xa}, {0x5, 0x6, 0x1, "9afbafb0172f"}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd0}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x100, 0x3, 0x9}, {0x6, 0x2, 0x2, 0x4cf}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x97b}, {0x1, 0x8, 0x1, "04e2d9becb60933c"}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x0, 0x25, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="3089", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0xd9a2}, {0x23dc, 0xd468, 0x7ff, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x2ef8}, {0xffffffffffffffff, 0x5, 0x5}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x40, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x5}, {0x1, 0x4, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x76}, {0x9b, 0x8, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x100}, {0x14aa, 0x4, 0x2, "e8bd1980"}}}]}, @TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0xbf80, 0x0, 0x80}, "a8c45fda6d658c2d0ba86c3c093cb1a7f7838eef7274ab161cf927e871024bef2a5e7f"}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0xe0, 0x0, 0x2}, "33cc7693c9916961c79386c91b2ae219231f1a32c3d6e2f7c6ae8f0ea9fc79bfe47d832cfd942a96bb606dfb6e"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0xe}, {0x3, 0x101, 0x5, 0x5, 0xa, 0x2, 0x1}}}, @TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x6c, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb03, 0x84}, {0x255, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="e31455"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x7ff, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="41c082e229", @TCF_META_TYPE_VAR="082c04a730", @TCF_META_TYPE_VAR="524cc2a4"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9ac, 0x2, 0x10}, {0x1ff}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x99a4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8303", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5436d58f40bf68"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffd, 0x5}, {0x10, 0x3, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x81}, {0xe790, 0x7f, 0xff72, 0x4, 0x6, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x3e}, {0x3, 0x9, 0x7e3, 0x6, 0xf, 0x2, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x394}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.747336081s ago: executing program 8 (id=3740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) write$evdev(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000000)={0x3}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000035c0)={{0x2, 0xffff, @multicast2}, {0x0, @random="d8046de4e402"}, 0x4, {0x2, 0x0, @private=0xa010100}, 'wg2\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e2648313719000000403bfaa3210dbb71b269bd6efb2502eaf60d00270002", 0x2e}], 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f00000001c0), &(0x7f0000000300)) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f00000006c0)=""/200, 0xc8}, {0x0}], 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd2(0x1, 0x0) eventfd2(0xe, 0x0) 3.504915289s ago: executing program 7 (id=3744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x20, r1, 0x3, 0x70bd2a, 0x25dfdbf6, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) (fail_nth: 3) 3.398871066s ago: executing program 7 (id=3745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800b494d8fd2e38000000e40000000000000000000095000000a1000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r9 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r9, &(0x7f0000000340)=""/71, 0x47) unlinkat(r9, &(0x7f0000000040)='./control\x00', 0x200) rmdir(&(0x7f00000002c0)='./control\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r5, 0x8f5, 0x100000000000000) read$FUSE(r4, &(0x7f00000003c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r10, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r11, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.234067458s ago: executing program 9 (id=3746): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 3.098003993s ago: executing program 9 (id=3748): r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delchain={0x394, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xb, 0xc}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffc}, @filter_kind_options=@f_cgroup={{0xb}, {0x330, 0x2, [@TCA_CGROUP_EMATCHES={0x32c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0xaf}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x49}, {0x0, 0x9, 0x4, 0x0, 0x6, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xa}, {0x5, 0x6, 0x1, "9afbafb0172f"}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd0}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x100, 0x3, 0x9}, {0x6, 0x2, 0x2, 0x4cf}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x97b}, {0x1, 0x8, 0x1, "04e2d9becb60933c"}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x0, 0x25, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="3089", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0xd9a2}, {0x23dc, 0xd468, 0x7ff, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x2ef8}, {0xffffffffffffffff, 0x5, 0x5}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x40, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x5}, {0x1, 0x4, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x76}, {0x9b, 0x8, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x100}, {0x14aa, 0x4, 0x2, "e8bd1980"}}}]}, @TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0xbf80, 0x0, 0x80}, "a8c45fda6d658c2d0ba86c3c093cb1a7f7838eef7274ab161cf927e871024bef2a5e7f"}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0xe0, 0x0, 0x2}, "33cc7693c9916961c79386c91b2ae219231f1a32c3d6e2f7c6ae8f0ea9fc79bfe47d832cfd942a96bb606dfb6e"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0xe}, {0x3, 0x101, 0x5, 0x5, 0xa, 0x2, 0x1}}}, @TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x6c, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb03, 0x84}, {0x255, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="e31455"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x7ff, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="41c082e229", @TCF_META_TYPE_VAR="082c04a730", @TCF_META_TYPE_VAR="524cc2a4"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9ac, 0x2, 0x10}, {0x1ff}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x99a4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8303", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5436d58f40bf68"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffd, 0x5}, {0x10, 0x3, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x81}, {0xe790, 0x7f, 0xff72, 0x4, 0x6, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x3e}, {0x3, 0x9, 0x7e3, 0x6, 0xf, 0x2, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x394}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.097369012s ago: executing program 6 (id=3749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000810}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x800) r5 = syz_open_dev$vcsa(&(0x7f0000000480), 0x7, 0x80000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4e41}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1000}, 0x40000080) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000680)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r5, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa8, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x404c003}, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x100) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40040c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1a0, r10, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x44}, 0xc810) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000e00)=0x2, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000e80)={0x1120, 0x30, 0x300, 0x70bd2c, 0x25dfdbfd, {0xf}, [@nested={0xc, 0xe, 0x0, 0x1, [@typed={0x4, 0x134}, @typed={0x4, 0xf1}]}, @nested={0x100, 0xa4, 0x0, 0x1, [@generic="9ae581e55684e08fc23ce3503367a1c3c3be9c11aa8710e63b2c7bedb0643cc2014568b58a8f7732f716694d0a1db7dd59e4948f649534a44eaa566104ec192c2654789c60edf8c14d0d4f2eaf2b17dc14c4c641e0783e2f82226c53fcd263492bcc8c46c24f74d5278dc5e0efc56e4fd91c63ff08be42fa99e77a0b27b689c384bf6c335beac5ef22aff63dec187310806e1795e1e3d62ed8aaf0c11eb77cc3045edb403fe65872b6008266638d1c8247ea5720f8f718920fecf4ee5e75c07163cf4c80211572e7a061c159a4c711e7ba7a1ed969f7cc80de168bbacc2da9167499b3bb4461f884960f0043abcde6c7", @nested={0x4, 0xb3}, @nested={0x4, 0x85}, @nested={0x4, 0x127}]}, @generic="bf8ff33b73e278298acc2360f54e96b26c5a8a75069fa6d60ef9335e0da29e15408dd113b3d3ddd5796820ce858064d1cc442671c59558b78eaa8baa486304d29e1351518797a8a23589d42c64c1ea3c967eb3121a8866973114d1c21f2c17ea00c9167a03a30c919f275fdd5f7cbab28114d28567f85e4ee7156965f4dd9b3fd2f4534aee67bd70111c88128c41a1d66c252cd8964f80ef08623c1ca369744bd7b5cc36795804d01e27afa590fbf852f826b663de956fce838ee8abadcfb82d05f0cd49123c55c6f89870dfe93c3d9119a57a603be6386e5607702e826045bd534872dec83d63243a9994c91713559c1176ba89edf4e2605dc864ef6e871621aff126c4639159422b9b56486e94e72ecb1c37a2c821438867764b8825a766fedd4af0b40242f4a84b919360d3d2749b18716c407add25930ad26c847e1e002a5740e6c061cd85f39d108fe12f29f2c70f826384b8285a6c61d19b7eb375a72669126b6476564b68dc99c95b52965f0f0069172098ba81657533b6c4739421095dd875d672802585a360b2ca53ed9fe84d222303750644d135d85e688acb7123f9d87929aafa98acbc94a9fe6b183f9cd99c96bbfce7a8deec8126b864d2f691397332de1a6759f48defc2449673bfdbdcfc2eb961854cd635102e52c2bf6b153b09679817b8aa3ccc3247b015dad3fcbdd6afd66be4bfaa0f91ba8cc02fa66588056518feae654530a9488604e06fb783714acb8b757813bd4a74bf3f3b15c64557d703d07237b7221a3190ea1d2cfc0dde8d9c82e90ab459a818ccf54f4976372ae88e1dd65e77f2dc102aa5af5818a896e9bc04fe109b7dfa8c8eb0741ab25703bdd6673052e438843191cc49271380f38771031d2c59610ff8d7fdf1ac9f9dd27dcaf47590face96023b44d766ee4e834a3b6ccb38b42f2e0afb2d58c03dfb9e73aa9b1ea8795b0904c229740707a1adea94b21191c9c18d57c92b83023f65ef17995f087847054c5f86351f8578a60bf999d779b64009f755b72231b291d030461d211ef65ef3bd22bb936396d73b68e2fde797a7b29f084eeb1a8926aab18a0c282f70b4ded2bf374a88b8819e8b3f6943ad6e7de9d41955f656bd0e75a750ba5c07e13c71ac2e295dfc7ccc2e6bbfb713e908e18dbe9349b4f130db7f4580bc55d9e50d444eed712fe04beb5aecf2b4d682ff37bc3f57cb7eb1bcd00809cf5a4d4d5d403c36d342fb2398a2e5cf8ea586f7aab9b95b840c56383348055d71a88ab4f8c578ebf470cba9728dc5100913f7a81a099acd3b1a815a4401bd2e3544ab08f1bfd5c4bf1039242020cfc05f222bd3f68b094bf687b837d09b701a0d1161eafd796d638ae8aa608b9203a97d10b054e16eee7bbb11d21b5628e2501be26b19fcfe59a0bcc1a8a4c11a00b3f334bc2365f02b365125ad8605878fb0b5918df7804463464807ba035a25ff474845080fd74ea160f9779c1d7f4abb12be1d83aa06620ad8975eec691598eb71d60a1be254b87181db80eb1d67920838d257cecb9345adbf06435e8fc42c9955f457273a99901cd6087a325f86b07460510ab285e845686688ddd05f21735479549ae6c2c571fe86ab938136385ee73da69276f92f62dbd48c15f773643055e3eb0d2b73bfac1e2103c0661bf3e9c5f0f99831ce0691fb77dd65c030b35da95318f148a9198d3ccf504dc0ad3ed377d27d358a5c25dac38e7c8754015fe41b64a27f157e1756da7d5b62e69b0c2b30d627470525e5dc3c857ef755aa814577669a564e3751b02d88abb7ef0064ff169e269dcfdaccdf4b343b134f228d0d293c9b49439e894a05f19e11333d059a8bef5fe1a410881f53eebf7fadbba3f8f0c60b57f4fc61476c022d4e801e1ca7681bb8f32b39d8b3ab2fa496144fb33fcd701ad03e667345e4b60ef15ee7b56fde23621c8797ef7863dc0e5302ebe0253cb3c995b82102d11981bb7e338d6d961ba433b0a2c8fe371d2caf098ffd0367caa7f4b97b7fdabc206e1d4006274ee475d69f41e7118003fa0c9233a0b1074ed6b7a4d01a3005c2d152435c167c01bb6778ad653ea6ea56c410114b70595024a20678032d3416df36489ad3c0874964428c0c2c330d449041cfed270b5828d23b3ae91ff01f2f7fa9789fff529aab3e73acab455f40f62775ec98e5dc102133bf75c15270c565d52a42bbf34b1fbdfe27364efc344118f6ad90d94871bed0094308000f36867f779a0fff929a04e485480ca97771f1fabae828c3d6f242381c5b5c4f7417912a03e9fd55511c19d742ef8302a8c8beaad78c2dbec8f4b80db5b726686a2c5ee590d85c53aa7082359b37fad04d40bf830daab0e0a7e849265808f1ae4f93f68070b8f8ad9b26f68f0b9f9dfec2850ec4887c26b27bcfca53e73a692dc77b81a19dda0286c59227617bae28c2575503766e28593013bb38f05534bb1393270417e8dd70a39282a9b838614998eefd5c97f2b3c25e924725b89f482d9a38a0f3ba62b145905342ff42edc335d21aedf7b12bf686dd602f05f755918b9df3ef79ce33f6c63a59931ae398063dab4baf96a02964a7ca10f5aa04d862c9b6647a4c97f37409f2bfe47ee900df6a5006351b62bbfc1907543c1b495bece363f8aec3a2284294e0b3d757414fbb81f91f4ee37075372510a474aa27007f8acd46475108afc82b3ff105fa5299a516070d7bb47e397f98db0166137a26624251c54aa107f00fd8ff60c504f18f74c0e5da896ba92c9f5d8fc2ebd9355d7cba6e3d29f854a93e8a181063853a310b9c86b45f6af90479e85589b0734d9d2f78bd7a7958d490f0e4d864a028ce0bfa686cb55b263b34158c793290861083df5502136ed719b760d10364b995092d76e86f814921f6b46f44793105494d18a56805ec4bf3ba837e39e2f4dd30c05ece3ff1db99d9cf92430811abb2e33f869f7e40d880c575d672fe7a8a983f0f46656ff5ea72bedcd9c26130fe180c51253bc9894125649a0b339c1859efe759bd079729c238a5ea1715db79bcc3f88a01c47cd46ae4b4b99bb8f3185cc431a94e37cd8601876047b640a173b0b0d60496a1a5263e93fa2c18487e2a76054b99c3320bb9c3b6445bef18d3aef2a2fe214cebc434fc6bb36f9329f4aeacdbc21c25e17f6336fbd3cfe1d7fd530cc9713bf1577306b21344fbd161cd93c60be60f849700c6fd39fc657e41d08cc1adc781d6fca9b7ffacdc96f42dc2289f292092b020de188722335f96de134cd32f0d7d4497a3afea02ebbed1b7f5090c5866c5fc4067c05befc161e3ddae4c9d2ccd86f51ae1d219e0b1c1ac02e69b94546b1ca0cf376d3e3517b72999d091c1af50df5774ffa896dd2c218e1f53b573fd5bfa155b0de37738d78f919211fc475fe73deb48a48b183c06d8e1dd4f340cd7a691903e70c8830184dd1d4282040e06c80a0c17ed31014e1f53bbc03261572f9ad7e300f2ab5b59f5b628324fd366914ea685a695046886586d9e84f8868649e44ddccee5e383e0dc28a7b93a98225603c39bafaec5aa870483970c16ef59071b0ae0085f818267917e7b693ccefada860c71c7e9c5109e40ec7556403052c69e56f597e283406b55083651bd8414795f7d0e6a8e1b418077dc9e21f724b0596a3e88e01d580e55fcf038b90d7eba7fa604f475fde139b3c45251c8b612edc6fbd8805d86962e3f1ce6d6397b192c1a65eefcf6d24bdb154fcf18fa9c354a57b97d553fe481f1b7d4e090d29984babc4b739f7d60fa2f6af35a0dcb7405d97820460b2a3a8024f10c991ceaeffbe7f0162d300f7f484848775b4f1cbd0c9c4d160f6f7b0dd8a3c02af8161df0307a6481c012ac8a33d1c0f401eac44aa9c34eeb0bae1ccf583c0e716f827afdb5497ed3e51259a24fc7379977e09bd2965d54ff51fb6936b04c0acfbbc33980c79f2f0bb1ab862e9d147c93aac6fa93b3d44573493e7d81ac7b55fa3005490532d351e7ea41b9ccdeeef4dbe9322a006960d696845f8dcdc417154f58b39b7403ed21945b96fce7cf6c5351cd51064dd489a08e2a9cf43bfb1b36194393225477c0b447d2d5291586420bd6111499621b424cac150eda0f5a6d0e75e5ae2b476f6457d5fd14f9efce84dc75a59885dca5dc218147b4073dbceaf1ccd637bc181232a6fe1560ecfd5361d6b3b99b0385834f520cb7fd677cbd7e6000a0f41fad7fbcec2c6e846f24a3b5cfe1b91869d2642ed55f961b1f90016ca94f8593fbc09209aa8bd75453a7e89443e7534dd2af0a8cf0106423822126514c15b7ba639fe09d265e0b69e99a38fe6b5e8b7bf69ad8f63a06efb29e3189f70a32bbdc16cdfa4422ecf9efd481ea33d4c299b4fecf8b7bb79ec4b8269c4fbfca1d82a26cc323c0639a32340d53784c1c99e765ca8acd0b082b7464f57d6936fed1cc368dd448ae0fac00f286b94c9a5c228f99d352a73d5f0b3c69b7ac56f298140c63d11d7695a2cabb7f9df651dae5eb1307a54ff8c8cf965ede3152fd2480cdae5fa6049724822576bcb1e97770ae431e9eedcf06d92d7f7f73e6822c937ebc8af2171cb19eb44008adcfb358d2ce30189b9054f8d7756a81ad68f1155a8ab0728cb1ed8d217948ff137c19c06c5f035d5108009a0b29f097018ed4ccdaa0dc033d3ccd96faa21e4073a2cb6a6ec8a864d4786f3c2db435ce8777c13ef8296474a86c26153c77fb189c3cd20349eb0c1c8027c09148302e9a15bf2cbef8a4444513b2b3190a4f9cb11d5b7664875842fd1e74032078bfb5959b6abd9f821bd75d20e6912afd17bad7fa929392e6c9a898c6ca40a88d2159eb7d743335a1958c28d89e0526f8254a4cf536969b4acd814637643a7e4d2c2629494d620d67293e9fae7ca93d195d2a2c5bc501be51754e1eb4ac7a8e37b3adc26af8ad04ad8af1d640f3658fba200054a8896dc537698fd02355335ffe4ac94fe3bc29206647b3de44e300b950ad737f7b9d3775f2d02f49f86856caaea3c0fc06513903b139353b1a691b33400a3f5083ffe235a28d597806c3c01de906591ba8f0604acb6e699c8481f72b295a22ba3dab1b770edae27dde7bd054ea9b0e17382d3e3eac99719f1741b9c93bd40882edbda8c002dff79117c2bc400a1ab3c0343f81c7b19c10fd61bd55a046d6cb1e7e36a3bc0be1a65253bbbe876503066c752c1c8a9d188585af94c585cb791b49bfff5e6609642e4127a82a81dd97ea037392855566674f24b2fb87fbe1e75e5b369cc5ae2a0011a369394ab44545d18e22d82f37bc234185ac89f5289ee4b4a04824444760d0198baa939aa2efc55c690c55e05f5d4c76f2a141cbc901c80649edd90e0305525bbb8394dbc988e60b51b1cd9a5cf6c07f8eeffcff7b4dd4197daeefc8a9b2f557d429e96ff460bf89b337062c75b35e174c9023755ed12a0f07ea5b483318fb87042dd87acfa193dcd0232fc17601bf4c6e2ecb08f1cd339a219351edab9eb0f7c2a818dbc5f22b6c0a11c18a8261dee235cee459b6e2285b276300aaf0905900e475d0fa83547ca4539540749be570554ebe79d0fbff601ca2a9472f6576a93506ac6f250eb6f9143008ebbd560b4ea942f4dac134d07a48085eeaf60daea8656e99b61cffbb967df9c5f43c48ca015e3189fa6347cbff1ccc21b66b150165bb084fed32824af7cf31147b5ae6dcedf8f22ab0b992c83912529fa2f12a2cde92ad56dcbf18f528f24f964fe7752d44f109372dd1f526b3136617b28becd144de333b698b372ffb9684765b"]}, 0x1120}, 0x1, 0x0, 0x0, 0x40000080}, 0x20040004) r11 = accept4$ax25(r5, &(0x7f0000002040)={{0x3, @default}, [@netrom, @netrom, @rose, @bcast, @bcast, @null, @bcast, @netrom]}, &(0x7f00000020c0)=0x48, 0x80800) sendto(r11, &(0x7f0000002100)="3c430318c34a755ff9f585666dfc23dd7737e2ffb0b78375c7ed33ca8fcebb960e7754cfe786dcffe7494d47663960e2be7b02eeb0acbf3503dfc105b01acb4e843a7d47e0b2a7a9bea6c62bee5763d686b5fc2f69b047297054b1ed4882c84ad26c92f93d41082e87ea6b9c1473fdfc65408e3172e2644a0b2e1f9a54319629b23d86e525f857927c0345a9ded7a100538328eb5cfe11763ee75a4381e2163af842353f47ea480f13c98abc3091291be39bdfa8baa354464d2f762b61", 0xbd, 0x20000000, &(0x7f00000021c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000002240)={0xb, 0x2b}) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000002280)=0x5) r12 = accept4$ax25(r11, &(0x7f00000022c0)={{0x3, @bcast}, [@null, @remote, @remote, @null, @null, @default, @rose, @bcast]}, &(0x7f0000002340)=0x48, 0x800) getsockname$ax25(r12, &(0x7f0000002380)={{0x3, @null}, [@netrom, @null, @remote, @bcast, @netrom, @default, @null, @default]}, &(0x7f0000002400)=0x48) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002600)={&(0x7f0000002480)={0x16c, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x35) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000002680)={'veth0_to_batadv\x00'}) 2.979076961s ago: executing program 6 (id=3750): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) (fail_nth: 3) 2.978137912s ago: executing program 9 (id=3751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) process_vm_writev(r5, &(0x7f0000000140)=[{&(0x7f0000019300)=""/192, 0xc0}, {&(0x7f0000000040)=""/73, 0x49}], 0x2, &(0x7f0000019880)=[{&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000193c0)=""/232, 0xe8}, {&(0x7f00000194c0)=""/180, 0xb4}, {0x0}, {&(0x7f0000019640)=""/25, 0x19}, {&(0x7f0000019680)=""/16, 0x10}, {&(0x7f00000196c0)=""/45, 0x2d}, {&(0x7f0000019700)=""/224, 0xe0}, {&(0x7f0000019800)=""/116, 0x74}], 0xa, 0x0) 2.879451621s ago: executing program 6 (id=3752): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfc}, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0xff, 0xf}, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3, &(0x7f0000002080)=ANY=[@ANYBLOB="eb005feade8287c21b1ccbc3a5b0e1f6b7fd322b675c0b81ef12ab91dbb71657b204b3b2"]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1c31}}, {0x2, &(0x7f0000001900)=ANY=[@ANYBLOB]}, {0x1f, &(0x7f00000019c0)=ANY=[@ANYBLOB="1f03caa55aa465add4665172d446680609008d085b180050ae78d1ff9baf05"]}, {0x95, &(0x7f0000001a00)=@string={0x95, 0x3, "19545cd88b20105939d5669c5375f941d1729eea8a613021f237acdd78f682271bdcd127c90991e4df0fcbefe81b52d55e71a97b1db3c5834c5347f35fce5dec6ecf96e1b0454fc1d4d7f8d71c4ea0ea437024954c9e5f967b08042de57239a9bf69f1aca405e275e4210d5576b34c77bab2c059d520e1206dd37ab0d8ba7d8c12605f54c42458291dbc9a6166f08d655bdd0d"}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) userfaultfd(0x80001) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x9000000) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x48, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x1d, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x5, 0x6c}}}}}]}}]}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 2.342691279s ago: executing program 7 (id=3753): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="4000050000000500b1a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x84100) 2.25888359s ago: executing program 8 (id=3754): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x64}}, 0x24000000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r2, 0x0, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0xc) timer_delete(0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_SRC_IF={0x8, 0x9, r5}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delchain={0x2bc, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {0xb, 0xc}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffc}, @filter_kind_options=@f_cgroup={{0xb}, {0x258, 0x2, [@TCA_CGROUP_EMATCHES={0x254, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0xaf}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x49}, {0x0, 0x9, 0x4, 0x0, 0x6, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xa}, {0x5, 0x6, 0x1, "9afbafb0172f"}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd0}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x100, 0x3, 0x9}, {0x6, 0x2, 0x2, 0x4cf}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x97b}, {0x1, 0x8, 0x1, "04e2d9becb60933c"}}}]}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x0, 0x25, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="3089", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0xd9a2}, {0x23dc, 0xd468, 0x7ff, 0x2}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x40, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x5}, {0x1, 0x4, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x76}, {0x9b, 0x8, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x100}, {0x14aa, 0x4, 0x2, "e8bd1980"}}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x28, 0x2, 0x0, 0x0, {{0xbf80, 0x0, 0x80}, "a8c45fda6d658c2d0ba86c3c093cb1a7f7838eef7274ab161cf927"}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0xe0, 0x0, 0x2}, "33cc7693c9916961c79386c91b2ae219231f1a32c3d6e2f7c6ae8f0ea9fc79bfe47d832cfd942a96"}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0xe}, {0x3, 0x101, 0x5, 0x5, 0xa, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x3e}, {0x3, 0x9, 0x7e3, 0x6, 0xf, 0x2, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.169053866s ago: executing program 8 (id=3755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x8b, 0x0, 0x42}, {0x960, 0x0, 0xdf}, {0x40000325}]}) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000019300)=""/192, 0xc0}, {0x0}], 0x2, &(0x7f0000019880)=[{&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000193c0)=""/232, 0xe8}, {&(0x7f00000194c0)=""/180, 0xb4}, {&(0x7f0000019580)=""/170, 0xaa}, {&(0x7f0000019640)=""/25, 0x19}, {0x0}, {&(0x7f0000019700)=""/224, 0xe0}, {&(0x7f0000019800)=""/116, 0x74}], 0x9, 0x0) 556.441614ms ago: executing program 9 (id=3756): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 528.276784ms ago: executing program 6 (id=3757): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x400, 0x640, 0xf0, 0x600, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x3ff, 0xfffffffe}, {}, {0xfffffffe}, {0x0, 0xffffffff}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1004000, 0x400, 0x0, 0x3, 0x16, 0x200, 0x0, 0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r2) ptrace$pokeuser(0x6, r2, 0x118, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r2, r3, 0x2, r1, r0) writev(r1, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 500.246943ms ago: executing program 9 (id=3758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000b00)={0xa, 0xfdf6, 0x9323, @mcast2, 0x9}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) 469.227605ms ago: executing program 7 (id=3759): r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delchain={0x394, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xb, 0xc}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffc}, @filter_kind_options=@f_cgroup={{0xb}, {0x330, 0x2, [@TCA_CGROUP_EMATCHES={0x32c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0xaf}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x49}, {0x0, 0x9, 0x4, 0x0, 0x6, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xa}, {0x5, 0x6, 0x1, "9afbafb0172f"}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd0}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x100, 0x3, 0x9}, {0x6, 0x2, 0x2, 0x4cf}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x97b}, {0x1, 0x8, 0x1, "04e2d9becb60933c"}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x0, 0x25, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="3089", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0xd9a2}, {0x23dc, 0xd468, 0x7ff, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x2ef8}, {0xffffffffffffffff, 0x5, 0x5}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x40, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x5}, {0x1, 0x4, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x76}, {0x9b, 0x8, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x100}, {0x14aa, 0x4, 0x2, "e8bd1980"}}}]}, @TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0xbf80, 0x0, 0x80}, "a8c45fda6d658c2d0ba86c3c093cb1a7f7838eef7274ab161cf927e871024bef2a5e7f"}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0xe0, 0x0, 0x2}, "33cc7693c9916961c79386c91b2ae219231f1a32c3d6e2f7c6ae8f0ea9fc79bfe47d832cfd942a96bb606dfb6e"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0xe}, {0x3, 0x101, 0x5, 0x5, 0xa, 0x2, 0x1}}}, @TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x6c, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb03, 0x84}, {0x255, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="e31455"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x7ff, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="41c082e229", @TCF_META_TYPE_VAR="082c04a730", @TCF_META_TYPE_VAR="524cc2a4"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9ac, 0x2, 0x10}, {0x1ff}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x99a4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8303", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5436d58f40bf68"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffd, 0x5}, {0x10, 0x3, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x81}, {0xe790, 0x7f, 0xff72, 0x4, 0x6, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x3e}, {0x3, 0x9, 0x7e3, 0x6, 0xf, 0x2, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x394}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 466.541361ms ago: executing program 9 (id=3760): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000380)={0xf, "44302befb69df5d6fc9b1fe48c8c28f3265f4972879a8126131690377952b8de", 0x3, 0xf81c, 0x7, 0x320000, 0x8}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@ipv6_newrule={0x4c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x14, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x100000000) io_setup(0x1, &(0x7f0000000000)) 463.911875ms ago: executing program 6 (id=3761): unshare(0x2c020400) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 300.686289ms ago: executing program 6 (id=3762): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x104) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ttynull(0xffffff9c, 0x0, 0x24800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040005) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f28704000300000008001b00000000000500100004000000bcc977dc7eb305bfa29453e4c6cc8cf4aad3afb3b5f9979989e7ed215d319e241d5bd391d43df4d3aba8d61895511ced86a717e6a09961b49d7fe188335a08e0fc35e9786cd3bf16c600b42de404c87ebd2bda02d6af4f242c7db22c2ad06f637c2ea5a6c41282edda5aab7f0d77e050e3332c7ead71cdc3d9d9b6a1a7176cc613262343adc34d315aaa91416a67b70b08202040ce2f2db97336f5822f920f9729c4ddbd0a79ae74eb56c98c6c3388729aff30d50b7a96e800950e7bb2f9863883d579199bcddc87daea1bfec5978f858e73805dd5eba31246c4430419490702ede0c03a4e"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 300.213111ms ago: executing program 7 (id=3763): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x64}}, 0x24000000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r2, 0x0, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0xc) timer_delete(0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_SRC_IF={0x8, 0x9, r5}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delchain={0x2bc, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {0xb, 0xc}, {0xffed}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffc}, @filter_kind_options=@f_cgroup={{0xb}, {0x258, 0x2, [@TCA_CGROUP_EMATCHES={0x254, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0xaf}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x49}, {0x0, 0x9, 0x4, 0x0, 0x6, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xa}, {0x5, 0x6, 0x1, "9afbafb0172f"}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd0}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x100, 0x3, 0x9}, {0x6, 0x2, 0x2, 0x4cf}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x97b}, {0x1, 0x8, 0x1, "04e2d9becb60933c"}}}]}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x0, 0x25, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="3089", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0xd9a2}, {0x23dc, 0xd468, 0x7ff, 0x2}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x40, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x5}, {0x1, 0x4, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x76}, {0x9b, 0x8, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x100}, {0x14aa, 0x4, 0x2, "e8bd1980"}}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x28, 0x2, 0x0, 0x0, {{0xbf80, 0x0, 0x80}, "a8c45fda6d658c2d0ba86c3c093cb1a7f7838eef7274ab161cf927"}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0xe0, 0x0, 0x2}, "33cc7693c9916961c79386c91b2ae219231f1a32c3d6e2f7c6ae8f0ea9fc79bfe47d832cfd942a96"}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0xe}, {0x3, 0x101, 0x5, 0x5, 0xa, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x3e}, {0x3, 0x9, 0x7e3, 0x6, 0xf, 0x2, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 260.57538ms ago: executing program 7 (id=3764): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0xb6e, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000036000701fcffffffdef70a878046e131b1ffe2000c00018006000600"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 8 (id=3765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) write$evdev(r0, 0x0, 0x0) r1 = getpid() socket(0x28, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000092000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000000)={0x3}) sendmmsg$unix(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)="6a4283ea86ecfd0288856f5e1f9ecb69bed36c955ae7357a843347ac1f7740deaa0aa3907e857862d22daa7182ea2edce71c6e6193905f554782387bac7b1f235c2b9d035ced4e8d5bb09b6eb2db0ef9429fda219663cf42913386f0a97a20", 0x5f}, {&(0x7f0000000280)="04819b9174bdad1a7d40ff6a224230873101e4079d570834", 0x18}, {&(0x7f0000000800)}, {&(0x7f0000000a80)="d587f7a6add5c76bb98fbde156012a8d2ad02ff2ce1468faae766764c562cd15fc4476f4bb5291a092b064c3868b4ac3d1149be37380e631c0c9d7592589b4225fd68fce031e56bacbd92828041efe7c02e25c89960afb2185fc94b64da7d5fa3e047d58f11e8905268b5c3b", 0x6c}, {&(0x7f0000001480)="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", 0x1000}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="e9a79b43bd262c9cea2dc340b3af83050234df3deb90d4cf274751ee8bd98582208829bee02594236dbb07cb45591d889f6c4b22ba130a0c5564da35a40cd9020ce7c2a3feff52270ff1679ea83e166d8e7dc61f49230825b9b1f7156d8d54f677e66c8d165af8f0ae426f14ae35b81303cfe1a38405bb5fb1a99e1f2faa82a392692ecef3c4447c4a1ebbaa8bf570f0bf87f7c9bcd46af9c413a8d6cc974a50c7cb497391889b153146da9c253fd9b3cc5a3ed52cfa2279011595e9a2363670", 0xc0}, {&(0x7f0000000e00)="fcee5b091a42d0544a3ad0e7ff091cf2edc3d56b877ba3c31ca63c04159cad293016238d9299e70637d3e59e60f6338b099c6e89eafd4a97fdff9d311d09c725902bce5fc6ddb10f6369d2af34df20a5d063d8ae5b3a5086998fcef24f8bcd06e3000a948f6c6d673513cb426bf35c9d0c17bf63c59f9d08077fa54c1d8c7f68329ebb0768b47632aa9e3f8e4d9bc2cd849d4eb9c64fe357d6eefe9d811e853b", 0xa0}, {&(0x7f0000000d40)="f38c57bb77423fbf6561f082b22add19615b30614efda32296ff79145022f90c10d3676d85afedd0f00195cc1771a9a3", 0x30}], 0x3, 0x0, 0x0, 0x80}}], 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0xffff, @multicast2}, {0x0, @random="07000000001e"}, 0x4, {0x2, 0x22, @private=0xa010100}, 'wg2\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e2648313719000000403bfaa3210dbb71b269bd6efb2502eaf60d00270002", 0x2e}], 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x40497, &(0x7f0000000900)={0x0, 0x465f, 0x10000, 0x1, 0x31d}, &(0x7f00000001c0), &(0x7f0000000300)) readv(r6, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f00000006c0)=""/200, 0xc8}, {0x0}], 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x99}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 820.661071][ T55] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.665550][ T55] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 820.668724][ T55] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.702535][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3193'. [ 820.741610][T11964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.744473][T11964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.875611][T17306] futex_wake_op: syz.5.3197 tries to shift op by -1; fix this program [ 820.894660][ T55] usb 13-1: GET_CAPABILITIES returned 0 [ 820.897257][ T55] usbtmc 13-1:16.0: can't read capabilities [ 820.937875][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'. [ 821.197817][ T55] usb 13-1: USB disconnect, device number 7 [ 821.609104][T17321] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 821.611438][T17321] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 821.614244][T17321] vhci_hcd vhci_hcd.0: Device attached [ 821.622543][T13941] Bluetooth: hci1: command 0x0406 tx timeout [ 821.893325][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3204'. [ 821.902223][ T34] usb 50-1: SetAddress Request (26) to port 0 [ 821.905034][ T34] usb 50-1: new SuperSpeed USB device number 26 using vhci_hcd [ 822.262349][T17322] vhci_hcd: connection reset by peer [ 822.265082][ T1172] vhci_hcd vhci_hcd.6: stop threads [ 822.266870][ T1172] vhci_hcd vhci_hcd.6: release socket [ 822.268813][ T1172] vhci_hcd vhci_hcd.6: disconnect device [ 823.009524][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3213'. [ 824.133612][T11033] usb 52-1: device descriptor read/8, error -110 [ 824.295466][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'. [ 824.654297][T11033] usb usb52-port1: attempt power cycle [ 824.882059][T17353] digital: digital_start_poll: Unknown protocol [ 825.241039][T17361] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3212'. [ 825.243539][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3216'. [ 825.247153][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3216'. [ 825.272789][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.276320][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.291508][T11033] usb usb52-port1: unable to enumerate USB device [ 826.259466][T17371] netlink: 'syz.6.3219': attribute type 12 has an invalid length. [ 826.263161][T17371] netlink: 1100 bytes leftover after parsing attributes in process `syz.6.3219'. [ 826.359166][T17375] overlayfs: upper fs does not support file handles, falling back to index=off. [ 826.368532][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3217'. [ 826.405316][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3220'. [ 826.654536][ T40] audit: type=1326 audit(1766854075.255:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.726698][ T40] audit: type=1326 audit(1766854075.255:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.737638][ T40] audit: type=1326 audit(1766854075.265:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.746778][ T40] audit: type=1326 audit(1766854075.265:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.755762][ T40] audit: type=1326 audit(1766854075.265:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.767172][ T40] audit: type=1326 audit(1766854075.265:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.775669][ T40] audit: type=1326 audit(1766854075.265:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.784230][ T40] audit: type=1326 audit(1766854075.265:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.796425][ T40] audit: type=1326 audit(1766854075.265:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.805887][ T40] audit: type=1326 audit(1766854075.265:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17382 comm="syz.6.3222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 826.979781][ T34] usb 50-1: device descriptor read/8, error -110 [ 827.380842][ T34] usb usb50-port1: attempt power cycle [ 827.739603][T17386] netlink: 'syz.6.3223': attribute type 10 has an invalid length. [ 827.745318][T17386] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 827.933328][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3224'. [ 827.940632][ T34] usb usb50-port1: unable to enumerate USB device [ 828.038029][T17392] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3225'. [ 828.986227][T17399] digital: digital_start_poll: Unknown protocol [ 829.085726][T17403] netlink: 'syz.7.3229': attribute type 12 has an invalid length. [ 829.093024][T17403] netlink: 1100 bytes leftover after parsing attributes in process `syz.7.3229'. [ 829.225363][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3230'. [ 829.679087][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3228'. [ 829.707942][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.713926][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.020280][T17422] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3233'. [ 830.151520][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3234'. [ 831.318727][T17427] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 831.321478][T17427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 831.324894][T17427] vhci_hcd vhci_hcd.0: Device attached [ 831.560272][T17428] vhci_hcd: connection closed [ 831.560666][ T1142] vhci_hcd vhci_hcd.6: stop threads [ 831.565325][ T1142] vhci_hcd vhci_hcd.6: release socket [ 831.567959][ T1142] vhci_hcd vhci_hcd.6: disconnect device [ 831.607444][T12201] usb 50-1: enqueue for inactive port 0 [ 831.764535][T17434] comedi comedi0: Minor 2 could not be opened [ 832.128582][T12201] usb usb50-port1: attempt power cycle [ 832.148930][T17451] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3238'. [ 832.456336][T17457] netlink: 'syz.7.3240': attribute type 12 has an invalid length. [ 832.460647][T17457] netlink: 1100 bytes leftover after parsing attributes in process `syz.7.3240'. [ 832.813435][T12201] usb usb50-port1: unable to enumerate USB device [ 833.433957][T17469] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 833.436789][T17469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 833.442201][T17469] vhci_hcd vhci_hcd.0: Device attached [ 833.716341][ T6035] usb 54-1: SetAddress Request (39) to port 0 [ 833.718600][ T6035] usb 54-1: new SuperSpeed USB device number 39 using vhci_hcd [ 834.410320][T17497] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3249'. [ 835.147549][T17470] vhci_hcd: connection reset by peer [ 835.150537][ T1142] vhci_hcd vhci_hcd.8: stop threads [ 835.152886][ T1142] vhci_hcd vhci_hcd.8: release socket [ 835.155573][ T1142] vhci_hcd vhci_hcd.8: disconnect device [ 835.159765][T17504] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3252'. [ 835.164607][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3252'. [ 835.337322][T17505] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3250'. [ 836.227839][T17515] binder: 17514:17515 ioctl 4018620d 0 returned -22 [ 836.250344][T17517] binder: 17516:17517 ioctl 4018620d 0 returned -22 [ 836.256498][T17517] FAULT_INJECTION: forcing a failure. [ 836.256498][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 836.262244][T17517] CPU: 0 UID: 0 PID: 17517 Comm: syz.6.3257 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.262274][T17517] Tainted: [L]=SOFTLOCKUP [ 836.262282][T17517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 836.262293][T17517] Call Trace: [ 836.262300][T17517] [ 836.262307][T17517] dump_stack_lvl+0x16c/0x1f0 [ 836.262339][T17517] should_fail_ex+0x512/0x640 [ 836.262364][T17517] ? fs_reclaim_acquire+0xae/0x150 [ 836.262397][T17517] should_failslab+0xc2/0x120 [ 836.262423][T17517] __kmalloc_noprof+0xeb/0x910 [ 836.262445][T17517] ? tomoyo_encode2+0x100/0x3e0 [ 836.262473][T17517] ? tomoyo_encode2+0x100/0x3e0 [ 836.262494][T17517] tomoyo_encode2+0x100/0x3e0 [ 836.262521][T17517] tomoyo_encode+0x29/0x50 [ 836.262544][T17517] tomoyo_realpath_from_path+0x18f/0x6e0 [ 836.262575][T17517] tomoyo_path_number_perm+0x245/0x580 [ 836.262594][T17517] ? tomoyo_path_number_perm+0x237/0x580 [ 836.262617][T17517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 836.262662][T17517] ? find_held_lock+0x2b/0x80 [ 836.262686][T17517] ? hook_file_ioctl_common+0x144/0x410 [ 836.262713][T17517] ? __fget_files+0x20e/0x3c0 [ 836.262735][T17517] ? __fput_deferred+0x430/0x480 [ 836.262759][T17517] security_file_ioctl_compat+0x9b/0x240 [ 836.262783][T17517] __ia32_compat_sys_ioctl+0xc3/0x370 [ 836.262807][T17517] __do_fast_syscall_32+0xe8/0x680 [ 836.262837][T17517] do_fast_syscall_32+0x32/0x80 [ 836.262855][T17517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 836.262877][T17517] RIP: 0023:0xf701d579 [ 836.262890][T17517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 836.262939][T17517] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 836.262956][T17517] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 836.262969][T17517] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 836.262979][T17517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.262989][T17517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 836.263001][T17517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.263028][T17517] [ 836.263048][T17517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 836.353822][T17520] binder: 17514:17520 ioctl c008ae09 80000040 returned -22 [ 836.543176][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3258'. [ 837.034736][ T34] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 837.204540][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 837.347818][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3262'. [ 837.904174][ T55] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 838.054093][ T55] usb 12-1: Using ep0 maxpacket: 32 [ 838.201004][ T34] usb 11-1: unable to get BOS descriptor or descriptor too short [ 838.205213][ T34] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 838.210461][ T34] usb 11-1: can't read configurations, error -71 [ 838.247999][ T55] usb 12-1: unable to get BOS descriptor or descriptor too short [ 838.261536][ T55] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 838.271655][ T55] usb 12-1: can't read configurations, error -71 [ 838.310825][T17561] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 838.313580][T17561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 838.317795][T17561] vhci_hcd vhci_hcd.0: Device attached [ 838.603905][T12201] usb 48-1: SetAddress Request (31) to port 0 [ 838.606208][T12201] usb 48-1: new SuperSpeed USB device number 31 using vhci_hcd [ 838.690329][T17562] vhci_hcd: connection reset by peer [ 838.692673][T13841] vhci_hcd vhci_hcd.5: stop threads [ 838.695518][T13841] vhci_hcd vhci_hcd.5: release socket [ 838.698004][T13841] vhci_hcd vhci_hcd.5: disconnect device [ 838.802564][T17570] macsec1: entered promiscuous mode [ 838.804461][T17570] macsec1: entered allmulticast mode [ 838.808053][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3267'. [ 838.817603][ T6035] usb 54-1: device descriptor read/8, error -110 [ 838.909323][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3268'. [ 839.333511][ T55] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 839.404830][ T6035] usb usb54-port1: attempt power cycle [ 839.490477][ T55] usb 12-1: Using ep0 maxpacket: 8 [ 839.494624][ T55] usb 12-1: config 0 interface 0 has no altsetting 0 [ 839.497174][ T55] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 839.501165][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.505773][ T55] usb 12-1: config 0 descriptor?? [ 839.598286][T17585] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3270'. [ 839.946372][ T55] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 839.953276][ T6783] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 840.123141][ T6783] usb 10-1: Using ep0 maxpacket: 32 [ 840.147937][T17576] FAULT_INJECTION: forcing a failure. [ 840.147937][T17576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.152879][ T6035] usb usb54-port1: unable to enumerate USB device [ 840.159620][T17576] CPU: 2 UID: 0 PID: 17576 Comm: syz.7.3269 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.159640][T17576] Tainted: [L]=SOFTLOCKUP [ 840.159644][T17576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 840.159651][T17576] Call Trace: [ 840.159655][T17576] [ 840.159660][T17576] dump_stack_lvl+0x16c/0x1f0 [ 840.159693][T17576] should_fail_ex+0x512/0x640 [ 840.159709][T17576] _copy_from_user+0x2e/0xd0 [ 840.159724][T17576] compat_i2cdev_ioctl+0x3fe/0x530 [ 840.159741][T17576] ? hook_file_ioctl_common+0x144/0x410 [ 840.159757][T17576] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 840.159774][T17576] ? __fget_files+0x20e/0x3c0 [ 840.159790][T17576] ? __fput_deferred+0x430/0x480 [ 840.159804][T17576] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 840.159821][T17576] __ia32_compat_sys_ioctl+0x242/0x370 [ 840.159837][T17576] __do_fast_syscall_32+0xe8/0x680 [ 840.159857][T17576] do_fast_syscall_32+0x32/0x80 [ 840.159868][T17576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.159882][T17576] RIP: 0023:0xf706d579 [ 840.159891][T17576] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 840.159903][T17576] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 840.159920][T17576] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 840.159927][T17576] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 840.159934][T17576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.159940][T17576] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 840.159946][T17576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.159961][T17576] [ 840.230427][ T34] usb 12-1: USB disconnect, device number 12 [ 840.316125][T17602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.334849][T17602] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3273'. [ 840.481380][T17605] FAULT_INJECTION: forcing a failure. [ 840.481380][T17605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.486322][T17605] CPU: 1 UID: 0 PID: 17605 Comm: syz.8.3274 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.486352][T17605] Tainted: [L]=SOFTLOCKUP [ 840.486359][T17605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 840.486369][T17605] Call Trace: [ 840.486377][T17605] [ 840.486384][T17605] dump_stack_lvl+0x16c/0x1f0 [ 840.486416][T17605] should_fail_ex+0x512/0x640 [ 840.486441][T17605] _copy_from_user+0x2e/0xd0 [ 840.486462][T17605] move_addr_to_kernel+0x65/0x170 [ 840.486482][T17605] __sys_bind+0x11b/0x260 [ 840.486501][T17605] ? __pfx___sys_bind+0x10/0x10 [ 840.486516][T17605] ? __fget_files+0x20e/0x3c0 [ 840.486550][T17605] ? __pfx_ksys_write+0x10/0x10 [ 840.486580][T17605] __ia32_sys_bind+0x71/0xb0 [ 840.486596][T17605] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.486623][T17605] __do_fast_syscall_32+0xe8/0x680 [ 840.486652][T17605] do_fast_syscall_32+0x32/0x80 [ 840.486669][T17605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.486691][T17605] RIP: 0023:0xf7f96579 [ 840.486705][T17605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 840.486759][T17605] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 840.486778][T17605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 840.486790][T17605] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 840.486802][T17605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.486812][T17605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 840.486823][T17605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.486849][T17605] [ 840.854758][ T6783] usb 10-1: unable to get BOS descriptor or descriptor too short [ 840.860459][ T6783] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 840.864290][ T6783] usb 10-1: can't read configurations, error -71 [ 840.904339][T17613] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 840.907286][T17613] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 840.910634][T17613] vhci_hcd vhci_hcd.0: Device attached [ 841.161046][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3278'. [ 841.202769][ T55] usb 54-1: SetAddress Request (43) to port 0 [ 841.205427][ T55] usb 54-1: new SuperSpeed USB device number 43 using vhci_hcd [ 841.451191][T17624] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 841.453463][T17624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 841.459231][T17624] vhci_hcd vhci_hcd.0: Device attached [ 841.615069][T17614] vhci_hcd: connection reset by peer [ 841.617771][ T13] vhci_hcd vhci_hcd.8: stop threads [ 841.620222][ T13] vhci_hcd vhci_hcd.8: release socket [ 841.622727][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 841.697322][T17631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3280'. [ 841.942195][T12083] usb 52-1: SetAddress Request (39) to port 0 [ 841.944293][T12083] usb 52-1: new SuperSpeed USB device number 39 using vhci_hcd [ 842.040490][T17625] vhci_hcd: connection closed [ 842.232050][ T1142] vhci_hcd vhci_hcd.7: stop threads [ 842.236599][ T1142] vhci_hcd vhci_hcd.7: release socket [ 842.239051][ T1142] vhci_hcd vhci_hcd.7: disconnect device [ 842.313379][T12083] usb 52-1: enqueue for inactive port 0 [ 842.582944][T17644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 842.693692][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3286'. [ 842.702783][T12083] usb usb52-port1: attempt power cycle [ 843.062608][ T1120] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 843.068743][ T1120] sr 2:0:0:0: [sr0] tag#10 Sense Key : Illegal Request [current] [ 843.072495][ T1120] sr 2:0:0:0: [sr0] tag#10 Add. Sense: Invalid command operation code [ 843.075772][ T1120] sr 2:0:0:0: [sr0] tag#10 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 843.079648][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 843.084571][ T1120] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 843.273154][T12083] usb usb52-port1: unable to enumerate USB device [ 843.278376][ T34] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 843.401915][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3289'. [ 843.441414][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 843.444592][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 843.447382][ T34] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 843.451852][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.460911][ T34] usb 11-1: config 0 descriptor?? [ 843.708998][T12201] usb 48-1: device descriptor read/8, error -110 [ 844.111895][T12201] usb usb48-port1: attempt power cycle [ 844.141079][ T6783] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 844.284327][T17673] overlay: ./file0 is not a directory [ 844.311171][ T6783] usb 10-1: Using ep0 maxpacket: 32 [ 844.429349][ T34] usbhid 11-1:0.0: can't add hid device: -71 [ 844.434213][ T34] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 844.440067][ T34] usb 11-1: USB disconnect, device number 11 [ 844.701213][T12201] usb usb48-port1: unable to enumerate USB device [ 845.241654][ T6783] usb 10-1: unable to get BOS descriptor or descriptor too short [ 845.245958][ T6783] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 845.255231][ T6783] usb 10-1: can't read configurations, error -71 [ 845.821148][T12083] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 845.948332][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3295'. [ 845.970147][T12083] usb 11-1: Using ep0 maxpacket: 32 [ 846.224430][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3296'. [ 846.250260][ T55] usb 54-1: device descriptor read/8, error -110 [ 846.334733][T12083] usb 11-1: unable to get BOS descriptor or descriptor too short [ 846.340088][T12083] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 846.344733][T12083] usb 11-1: can't read configurations, error -71 [ 846.660930][ T55] usb usb54-port1: attempt power cycle [ 847.093001][T17732] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3299'. [ 847.289606][ T55] usb usb54-port1: unable to enumerate USB device [ 847.788219][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3300'. [ 848.012214][T17741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3310'. [ 849.937870][T12083] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 850.108408][T12083] usb 13-1: Using ep0 maxpacket: 32 [ 850.239887][T17777] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3306'. [ 850.254070][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3305'. [ 850.629820][T12083] usb 13-1: unable to get BOS descriptor or descriptor too short [ 850.633162][T12083] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 850.635680][T12083] usb 13-1: can't read configurations, error -71 [ 850.719631][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3309'. [ 851.485586][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3311'. [ 851.504244][T17788] overlayfs: failed to resolve './file2': -2 [ 852.138367][T17797] fuse: Bad value for 'user_id' [ 852.140528][T17797] fuse: Bad value for 'user_id' [ 853.861433][T17805] FAULT_INJECTION: forcing a failure. [ 853.861433][T17805] name failslab, interval 1, probability 0, space 0, times 0 [ 853.867369][T17805] CPU: 0 UID: 0 PID: 17805 Comm: syz.6.3316 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.867389][T17805] Tainted: [L]=SOFTLOCKUP [ 853.867393][T17805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 853.867400][T17805] Call Trace: [ 853.867404][T17805] [ 853.867409][T17805] dump_stack_lvl+0x16c/0x1f0 [ 853.867431][T17805] should_fail_ex+0x512/0x640 [ 853.867443][T17805] ? kmem_cache_alloc_noprof+0x62/0x770 [ 853.867459][T17805] should_failslab+0xc2/0x120 [ 853.867477][T17805] kmem_cache_alloc_noprof+0x83/0x770 [ 853.867490][T17805] ? __get_fs_type+0x12c/0x170 [ 853.867501][T17805] ? getname_kernel+0x52/0x370 [ 853.867515][T17805] ? getname_kernel+0x52/0x370 [ 853.867524][T17805] getname_kernel+0x52/0x370 [ 853.867536][T17805] kern_path+0x1d/0x50 [ 853.867551][T17805] tomoyo_mount_acl+0x624/0x850 [ 853.867567][T17805] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 853.867587][T17805] ? kernel_text_address+0x8d/0x100 [ 853.867601][T17805] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 853.867615][T17805] ? arch_stack_walk+0xa6/0x100 [ 853.867644][T17805] ? tomoyo_domain+0xba/0x150 [ 853.867660][T17805] ? tomoyo_profile+0x47/0x60 [ 853.867678][T17805] tomoyo_mount_permission+0x16d/0x420 [ 853.867692][T17805] ? tomoyo_mount_permission+0x14f/0x420 [ 853.867707][T17805] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 853.867730][T17805] security_sb_mount+0x9b/0x260 [ 853.867743][T17805] path_mount+0x158/0x23a0 [ 853.867754][T17805] ? rcu_is_watching+0x12/0xc0 [ 853.867771][T17805] ? __pfx_path_mount+0x10/0x10 [ 853.867782][T17805] ? kmem_cache_free+0x2d8/0x770 [ 853.867796][T17805] ? putname+0xf5/0x1a0 [ 853.867808][T17805] ? putname+0xf5/0x1a0 [ 853.867820][T17805] ? __ia32_sys_mount+0x291/0x310 [ 853.867830][T17805] __ia32_sys_mount+0x291/0x310 [ 853.867842][T17805] ? __pfx___ia32_sys_mount+0x10/0x10 [ 853.867854][T17805] ? do_user_addr_fault+0x843/0x1370 [ 853.867870][T17805] __do_fast_syscall_32+0xe8/0x680 [ 853.867890][T17805] do_fast_syscall_32+0x32/0x80 [ 853.867900][T17805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.867914][T17805] RIP: 0023:0xf701d579 [ 853.867923][T17805] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 853.867934][T17805] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 853.867946][T17805] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000040 [ 853.867953][T17805] RDX: 0000000080000200 RSI: 000000000221000d RDI: 0000000000000000 [ 853.867960][T17805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 853.867966][T17805] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 853.867973][T17805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 853.867988][T17805] [ 854.082123][T17811] tipc: Started in network mode [ 854.083960][T17811] tipc: Node identity da97555154e1, cluster identity 4711 [ 854.087346][T17811] tipc: Enabled bearer , priority 0 [ 854.090263][T17811] syzkaller0: entered promiscuous mode [ 854.092159][T17811] syzkaller0: entered allmulticast mode [ 854.104344][T17811] FAULT_INJECTION: forcing a failure. [ 854.104344][T17811] name failslab, interval 1, probability 0, space 0, times 0 [ 854.110190][T17811] CPU: 0 UID: 0 PID: 17811 Comm: syz.5.3319 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.110210][T17811] Tainted: [L]=SOFTLOCKUP [ 854.110215][T17811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 854.110222][T17811] Call Trace: [ 854.110226][T17811] [ 854.110231][T17811] dump_stack_lvl+0x16c/0x1f0 [ 854.110252][T17811] should_fail_ex+0x512/0x640 [ 854.110266][T17811] ? fs_reclaim_acquire+0xae/0x150 [ 854.110285][T17811] should_failslab+0xc2/0x120 [ 854.110303][T17811] __kmalloc_noprof+0xeb/0x910 [ 854.110316][T17811] ? tomoyo_encode2+0x100/0x3e0 [ 854.110334][T17811] ? tomoyo_encode2+0x100/0x3e0 [ 854.110348][T17811] tomoyo_encode2+0x100/0x3e0 [ 854.110365][T17811] tomoyo_encode+0x29/0x50 [ 854.110379][T17811] tomoyo_realpath_from_path+0x18f/0x6e0 [ 854.110396][T17811] ? tomoyo_profile+0x47/0x60 [ 854.110414][T17811] tomoyo_path_number_perm+0x245/0x580 [ 854.110426][T17811] ? tomoyo_path_number_perm+0x237/0x580 [ 854.110440][T17811] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 854.110468][T17811] ? find_held_lock+0x2b/0x80 [ 854.110482][T17811] ? hook_file_ioctl_common+0x144/0x410 [ 854.110499][T17811] ? __fget_files+0x20e/0x3c0 [ 854.110514][T17811] ? __fput_deferred+0x430/0x480 [ 854.110528][T17811] security_file_ioctl_compat+0x9b/0x240 [ 854.110543][T17811] __ia32_compat_sys_ioctl+0xc3/0x370 [ 854.110560][T17811] __do_fast_syscall_32+0xe8/0x680 [ 854.110579][T17811] do_fast_syscall_32+0x32/0x80 [ 854.110590][T17811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 854.110604][T17811] RIP: 0023:0xf7f07579 [ 854.110613][T17811] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 854.110624][T17811] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 854.110636][T17811] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 854.110643][T17811] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 854.110650][T17811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 854.110656][T17811] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 854.110662][T17811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 854.110677][T17811] [ 854.110689][T17811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 854.190382][T17811] tipc: Resetting bearer [ 854.193922][T17810] tipc: Resetting bearer [ 854.217950][T17810] tipc: Disabling bearer [ 854.235860][T17813] binder_alloc: 17812: binder_alloc_buf, no vma [ 854.383855][T17822] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.3322'. [ 854.417074][T17823] netlink: 772 bytes leftover after parsing attributes in process `syz.7.3324'. [ 854.652615][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3328'. [ 854.941301][T17842] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 854.944164][T17842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 854.948170][T17842] vhci_hcd vhci_hcd.0: Device attached [ 854.958749][T17841] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 854.961540][T17841] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 854.965249][T17841] vhci_hcd vhci_hcd.0: Device attached [ 855.215709][T12083] usb 48-1: SetAddress Request (35) to port 0 [ 855.226037][T12201] usb 52-1: SetAddress Request (43) to port 0 [ 855.228253][T12083] usb 48-1: new SuperSpeed USB device number 35 using vhci_hcd [ 855.233659][T12201] usb 52-1: new SuperSpeed USB device number 43 using vhci_hcd [ 855.366705][T17843] vhci_hcd: connection reset by peer [ 855.369132][T12555] vhci_hcd vhci_hcd.5: stop threads [ 855.371326][T12555] vhci_hcd vhci_hcd.5: release socket [ 855.373663][T12555] vhci_hcd vhci_hcd.5: disconnect device [ 855.430805][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3330'. [ 855.597737][T17845] vhci_hcd: connection reset by peer [ 855.600146][T14391] vhci_hcd vhci_hcd.7: stop threads [ 855.602475][T14391] vhci_hcd vhci_hcd.7: release socket [ 855.604929][T14391] vhci_hcd vhci_hcd.7: disconnect device [ 858.644490][T17892] netlink: 'syz.8.3338': attribute type 1 has an invalid length. [ 858.647059][T17892] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3338'. [ 858.650911][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 858.650926][ T40] audit: type=1326 audit(1766854107.261:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.673871][ T40] audit: type=1326 audit(1766854107.261:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.681039][ T40] audit: type=1326 audit(1766854107.271:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.690017][ T40] audit: type=1326 audit(1766854107.271:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.699875][ T40] audit: type=1326 audit(1766854107.281:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.709508][ T40] audit: type=1326 audit(1766854107.281:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.765470][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3340'. [ 858.808742][ T40] audit: type=1326 audit(1766854107.421:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.840213][ T40] audit: type=1326 audit(1766854107.451:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96598 code=0x7ffc0000 [ 858.847709][ T40] audit: type=1326 audit(1766854107.451:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.855506][ T40] audit: type=1326 audit(1766854107.451:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.8.3338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 858.857722][T17898] /dev/sr0: Can't open blockdev [ 858.946770][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3343'. [ 858.996053][T17903] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 858.998641][T17903] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 859.002443][T17903] vhci_hcd vhci_hcd.0: Device attached [ 859.268137][T17919] loop3: detected capacity change from 0 to 7 [ 859.276094][T16477] Dev loop3: unable to read RDB block 7 [ 859.278910][T16477] loop3: unable to read partition table [ 859.281264][T16477] loop3: partition table beyond EOD, truncated [ 859.293663][T17919] Dev loop3: unable to read RDB block 7 [ 859.295988][T17919] loop3: unable to read partition table [ 859.298221][T17919] loop3: partition table beyond EOD, truncated [ 859.303500][T17919] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 859.461871][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3347'. [ 859.634630][T17908] vhci_hcd: connection closed [ 859.635599][T12555] vhci_hcd vhci_hcd.5: stop threads [ 859.639894][T12555] vhci_hcd vhci_hcd.5: release socket [ 859.642125][T12555] vhci_hcd vhci_hcd.5: disconnect device [ 860.036008][T17917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 860.040302][T17917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 860.051079][T17917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 860.053339][T17917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 860.058193][T17917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 860.323398][T12083] usb 48-1: device descriptor read/8, error -110 [ 860.326240][T12201] usb 52-1: device descriptor read/8, error -110 [ 860.718229][T17938] binder: 17936:17938 ioctl 84009422 80000c40 returned -22 [ 860.964406][T12201] usb usb52-port1: attempt power cycle [ 861.212685][T12083] usb usb48-port1: attempt power cycle [ 861.231601][T17940] overlay: filesystem on ./file0 not supported as upperdir [ 861.283001][ T5965] Bluetooth: hci2: command 0x0406 tx timeout [ 861.371965][T17946] syzkaller0: entered promiscuous mode [ 861.375675][T17946] syzkaller0: entered allmulticast mode [ 861.379641][T17946] trusted_key: syz.5.3355 sent an empty control message without MSG_MORE. [ 861.383310][T17946] 9pnet_virtio: no channels available for device syz [ 861.760784][T17965] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 861.763363][T17965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 861.778059][T17965] vhci_hcd vhci_hcd.0: Device attached [ 861.782251][ T34] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 861.842442][T12083] usb 48-1: SetAddress Request (37) to port 0 [ 861.844781][T12083] usb 48-1: new SuperSpeed USB device number 37 using vhci_hcd [ 861.932175][ T34] usb 12-1: Using ep0 maxpacket: 32 [ 861.935192][ T34] usb 12-1: config 0 has an invalid interface number: 238 but max is 0 [ 861.938557][ T34] usb 12-1: config 0 has no interface number 0 [ 861.940714][ T34] usb 12-1: too many endpoints for config 0 interface 238 altsetting 186: 60, using maximum allowed: 30 [ 861.944756][ T34] usb 12-1: config 0 interface 238 altsetting 186 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 861.949390][ T34] usb 12-1: config 0 interface 238 has no altsetting 0 [ 861.950901][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3359'. [ 861.957874][ T34] usb 12-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 861.961348][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.964164][ T34] usb 12-1: Product: syz [ 861.965603][ T34] usb 12-1: Manufacturer: syz [ 861.967322][ T34] usb 12-1: SerialNumber: syz [ 861.971188][ T34] usb 12-1: config 0 descriptor?? [ 862.072996][T12201] usb usb52-port1: unable to enumerate USB device [ 862.082131][ T5965] Bluetooth: hci3: command 0x0406 tx timeout [ 862.082153][T13941] Bluetooth: hci1: command 0x0406 tx timeout [ 862.294182][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3356'. [ 862.374436][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3356'. [ 862.384200][T17966] vhci_hcd: connection reset by peer [ 862.386403][T13841] vhci_hcd vhci_hcd.5: stop threads [ 862.388336][T13841] vhci_hcd vhci_hcd.5: release socket [ 862.390734][T13841] vhci_hcd vhci_hcd.5: disconnect device [ 862.404975][ T34] usb 12-1: USB disconnect, device number 13 [ 863.215622][T17983] overlay: filesystem on ./file0 not supported as upperdir [ 863.511513][T12201] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 863.721573][T12201] usb 10-1: Using ep0 maxpacket: 32 [ 863.817321][T12201] usb 10-1: unable to get BOS descriptor or descriptor too short [ 863.824181][T12201] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 863.826902][T12201] usb 10-1: can't read configurations, error -71 [ 863.828985][T17993] FAULT_INJECTION: forcing a failure. [ 863.828985][T17993] name failslab, interval 1, probability 0, space 0, times 0 [ 863.829010][T17993] CPU: 0 UID: 0 PID: 17993 Comm: syz.7.3366 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.829026][T17993] Tainted: [L]=SOFTLOCKUP [ 863.829030][T17993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 863.829037][T17993] Call Trace: [ 863.829041][T17993] [ 863.829046][T17993] dump_stack_lvl+0x16c/0x1f0 [ 863.829067][T17993] should_fail_ex+0x512/0x640 [ 863.829080][T17993] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 863.829096][T17993] should_failslab+0xc2/0x120 [ 863.829114][T17993] kmem_cache_alloc_node_noprof+0x86/0x800 [ 863.829135][T17993] ? __alloc_skb+0x156/0x410 [ 863.829152][T17993] ? __alloc_skb+0x35d/0x410 [ 863.829173][T17993] ? __alloc_skb+0x156/0x410 [ 863.829190][T17993] __alloc_skb+0x156/0x410 [ 863.829202][T17993] ? __alloc_skb+0x35d/0x410 [ 863.829220][T17993] ? __pfx___alloc_skb+0x10/0x10 [ 863.829247][T17993] netlink_ack+0x15d/0xb80 [ 863.829279][T17993] netlink_rcv_skb+0x332/0x420 [ 863.829300][T17993] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 863.829321][T17993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.829356][T17993] ? ns_capable+0xd7/0x110 [ 863.829380][T17993] nfnetlink_rcv+0x1b3/0x430 [ 863.829397][T17993] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 863.829411][T17993] ? netlink_deliver_tap+0x1ae/0xd30 [ 863.829439][T17993] netlink_unicast+0x5aa/0x870 [ 863.829465][T17993] ? __pfx_netlink_unicast+0x10/0x10 [ 863.829498][T17993] netlink_sendmsg+0x8c8/0xdd0 [ 863.829521][T17993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.829548][T17993] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 863.829580][T17993] ____sys_sendmsg+0xa5d/0xc30 [ 863.829604][T17993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.829629][T17993] ? get_compat_msghdr+0x11a/0x170 [ 863.829660][T17993] ___sys_sendmsg+0x134/0x1d0 [ 863.829683][T17993] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.829711][T17993] ? find_held_lock+0x2b/0x80 [ 863.829748][T17993] __sys_sendmsg+0x16d/0x220 [ 863.829770][T17993] ? __pfx___sys_sendmsg+0x10/0x10 [ 863.829800][T17993] ? do_user_addr_fault+0x843/0x1370 [ 863.829820][T17993] __do_fast_syscall_32+0xe8/0x680 [ 863.829848][T17993] do_fast_syscall_32+0x32/0x80 [ 863.829864][T17993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.829902][T17993] RIP: 0023:0xf706d579 [ 863.829914][T17993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 863.829928][T17993] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 863.829949][T17993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 863.829960][T17993] RDX: 0000000000004880 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.829970][T17993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.829980][T17993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 863.829990][T17993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.830017][T17993] [ 863.866554][T17995] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 864.171138][T13941] Bluetooth: hci3: command 0x0406 tx timeout [ 864.305767][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3368'. [ 864.504977][T18012] overlayfs: upper fs does not support file handles, falling back to index=off. [ 864.556551][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3373'. [ 864.674295][T18019] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 865.690393][T12201] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 865.769624][T18051] binder: BINDER_SET_CONTEXT_MGR already set [ 865.772762][T18051] binder: 18050:18051 ioctl 4018620d 80000040 returned -16 [ 865.850230][T12201] usb 11-1: Using ep0 maxpacket: 32 [ 866.003535][T18056] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 866.338919][T12201] usb 11-1: unable to get BOS descriptor or descriptor too short [ 866.351130][T12201] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 866.353728][T12201] usb 11-1: can't read configurations, error -71 [ 866.879911][T12083] usb 48-1: device descriptor read/8, error -110 [ 867.270477][T12083] usb usb48-port1: unable to enumerate USB device [ 867.301224][T18060] netlink: 772 bytes leftover after parsing attributes in process `syz.6.3383'. [ 867.611144][T18071] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3385'. [ 867.612410][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 868.405434][T18093] binder: BINDER_SET_CONTEXT_MGR already set [ 868.407638][T18093] binder: 18092:18093 ioctl 4018620d 80000040 returned -16 [ 869.354797][T18098] overlayfs: upper fs does not support file handles, falling back to index=off. [ 869.412785][T18101] xt_CT: No such helper "snmp" [ 869.631526][T18113] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 869.633769][T18113] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 869.638577][T18113] vhci_hcd vhci_hcd.0: Device attached [ 869.658397][T12201] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 869.666961][T18117] binder: BINDER_SET_CONTEXT_MGR already set [ 869.672711][T18117] binder: 18116:18117 ioctl 4018620d 80000040 returned -16 [ 869.800817][T18114] vhci_hcd: connection closed [ 869.801072][T11964] vhci_hcd vhci_hcd.8: stop threads [ 869.805000][T11964] vhci_hcd vhci_hcd.8: release socket [ 869.807466][T11964] vhci_hcd vhci_hcd.8: disconnect device [ 869.818499][T12201] usb 12-1: Using ep0 maxpacket: 16 [ 869.824867][T12201] usb 12-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 869.828981][T12201] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.832756][T12201] usb 12-1: Product: syz [ 869.834723][T12201] usb 12-1: Manufacturer: syz [ 869.836825][T12201] usb 12-1: SerialNumber: syz [ 869.841678][T12201] usb 12-1: config 0 descriptor?? [ 869.846329][T12201] ssu100 12-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 869.940803][T18123] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3401'. [ 870.054974][T18129] overlayfs: upper fs does not support file handles, falling back to index=off. [ 870.084145][T18131] FAULT_INJECTION: forcing a failure. [ 870.084145][T18131] name failslab, interval 1, probability 0, space 0, times 0 [ 870.090574][T18131] CPU: 2 UID: 0 PID: 18131 Comm: syz.5.3405 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.090631][T18131] Tainted: [L]=SOFTLOCKUP [ 870.090637][T18131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 870.090647][T18131] Call Trace: [ 870.090654][T18131] [ 870.090661][T18131] dump_stack_lvl+0x16c/0x1f0 [ 870.090694][T18131] should_fail_ex+0x512/0x640 [ 870.090714][T18131] ? fs_reclaim_acquire+0xae/0x150 [ 870.090741][T18131] should_failslab+0xc2/0x120 [ 870.090766][T18131] __kmalloc_noprof+0xeb/0x910 [ 870.090803][T18131] ? tomoyo_encode2+0x100/0x3e0 [ 870.090832][T18131] ? tomoyo_encode2+0x100/0x3e0 [ 870.090864][T18131] tomoyo_encode2+0x100/0x3e0 [ 870.090892][T18131] tomoyo_encode+0x29/0x50 [ 870.090912][T18131] tomoyo_realpath_from_path+0x18f/0x6e0 [ 870.090943][T18131] tomoyo_path_number_perm+0x245/0x580 [ 870.090964][T18131] ? tomoyo_path_number_perm+0x237/0x580 [ 870.090988][T18131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 870.091034][T18131] ? d_alloc_parallel+0xb4e/0x1510 [ 870.091056][T18131] ? current_check_access_path+0x33b/0x460 [ 870.091083][T18131] ? __pfx_current_check_access_path+0x10/0x10 [ 870.091114][T18131] tomoyo_path_mknod+0x10c/0x190 [ 870.091138][T18131] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 870.091165][T18131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 870.091196][T18131] security_path_mknod+0x161/0x310 [ 870.091216][T18131] lookup_open.isra.0+0xc10/0x1780 [ 870.091242][T18131] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 870.091272][T18131] ? find_held_lock+0x2b/0x80 [ 870.091299][T18131] ? __pfx_down_write+0x10/0x10 [ 870.091321][T18131] path_openat+0xa95/0x3140 [ 870.091355][T18131] ? __pfx_path_openat+0x10/0x10 [ 870.091394][T18131] do_filp_open+0x20b/0x470 [ 870.091420][T18131] ? __pfx_do_filp_open+0x10/0x10 [ 870.091461][T18131] ? alloc_fd+0x471/0x7d0 [ 870.091495][T18131] do_sys_openat2+0x121/0x290 [ 870.091517][T18131] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.091535][T18131] ? __fget_files+0x20e/0x3c0 [ 870.091564][T18131] __ia32_sys_creat+0xcb/0x120 [ 870.091586][T18131] ? __pfx___ia32_sys_creat+0x10/0x10 [ 870.091612][T18131] ? __pfx_ksys_write+0x10/0x10 [ 870.091639][T18131] ? do_user_addr_fault+0x843/0x1370 [ 870.091664][T18131] ? rcu_is_watching+0x12/0xc0 [ 870.091688][T18131] ? __do_fast_syscall_32+0x9a/0x680 [ 870.091719][T18131] __do_fast_syscall_32+0xe8/0x680 [ 870.091746][T18131] do_fast_syscall_32+0x32/0x80 [ 870.091760][T18131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 870.091779][T18131] RIP: 0023:0xf7f07579 [ 870.091796][T18131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 870.091814][T18131] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 870.091831][T18131] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000 [ 870.091841][T18131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.091850][T18131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 870.091860][T18131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 870.091869][T18131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.091896][T18131] [ 870.091996][T18131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 870.168388][T12201] ssu100 12-1:0.0: probe with driver ssu100 failed with error -110 [ 870.272908][T18133] syzkaller0: entered promiscuous mode [ 870.274860][T18133] syzkaller0: entered allmulticast mode [ 870.668995][T18147] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 870.671618][T18147] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 870.675317][T18147] vhci_hcd vhci_hcd.0: Device attached [ 870.801033][T18150] dvmrp1: entered allmulticast mode [ 870.947811][ T55] usb 54-1: SetAddress Request (48) to port 0 [ 870.950724][ T55] usb 54-1: new SuperSpeed USB device number 48 using vhci_hcd [ 871.289404][T18148] vhci_hcd: connection reset by peer [ 871.292421][ T1227] vhci_hcd vhci_hcd.8: stop threads [ 871.295101][ T1227] vhci_hcd vhci_hcd.8: release socket [ 871.297741][ T1227] vhci_hcd vhci_hcd.8: disconnect device [ 871.715260][T18146] x_tables: duplicate underflow at hook 1 [ 872.148221][T18160] overlayfs: upper fs does not support file handles, falling back to index=off. [ 872.399483][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'. [ 872.399759][T12083] usb 12-1: USB disconnect, device number 14 [ 873.894306][ T6783] hid_parser_main: 22 callbacks suppressed [ 873.894319][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.899690][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.905109][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.910362][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.913082][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.915957][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.919295][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.921927][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.924453][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.927549][ T6783] hid-generic 0000:0000:0001.0010: unknown main item tag 0x0 [ 873.936229][ T6783] hid-generic 0000:0000:0001.0010: hidraw1: HID v0.00 Device [sy] on syz0 [ 873.978594][T18191] fido_id[18191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 874.062403][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 874.062483][ T40] audit: type=1326 audit(1766854122.679:869): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.7.3424" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d579 code=0x0 [ 874.105399][T18190] Bluetooth: MGMT ver 1.23 [ 874.574012][T18204] FAULT_INJECTION: forcing a failure. [ 874.574012][T18204] name failslab, interval 1, probability 0, space 0, times 0 [ 874.580075][T18204] CPU: 3 UID: 0 PID: 18204 Comm: syz.6.3427 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.580105][T18204] Tainted: [L]=SOFTLOCKUP [ 874.580112][T18204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 874.580121][T18204] Call Trace: [ 874.580137][T18204] [ 874.580145][T18204] dump_stack_lvl+0x16c/0x1f0 [ 874.580194][T18204] should_fail_ex+0x512/0x640 [ 874.580220][T18204] ? fs_reclaim_acquire+0xae/0x150 [ 874.580248][T18204] should_failslab+0xc2/0x120 [ 874.580292][T18204] __kmalloc_noprof+0xeb/0x910 [ 874.580314][T18204] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 874.580344][T18204] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 874.580365][T18204] tomoyo_realpath_from_path+0xc2/0x6e0 [ 874.580392][T18204] ? tomoyo_profile+0x47/0x60 [ 874.580421][T18204] tomoyo_path_number_perm+0x245/0x580 [ 874.580441][T18204] ? tomoyo_path_number_perm+0x237/0x580 [ 874.580462][T18204] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 874.580507][T18204] ? find_held_lock+0x2b/0x80 [ 874.580530][T18204] ? hook_file_ioctl_common+0x144/0x410 [ 874.580558][T18204] ? __fget_files+0x20e/0x3c0 [ 874.580581][T18204] ? __fput_deferred+0x430/0x480 [ 874.580599][T18204] security_file_ioctl_compat+0x9b/0x240 [ 874.580622][T18204] __ia32_compat_sys_ioctl+0xc3/0x370 [ 874.580653][T18204] __do_fast_syscall_32+0xe8/0x680 [ 874.580684][T18204] do_fast_syscall_32+0x32/0x80 [ 874.580701][T18204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 874.580721][T18204] RIP: 0023:0xf701d579 [ 874.580735][T18204] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 874.580753][T18204] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 874.580771][T18204] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 874.580783][T18204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.580794][T18204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 874.580806][T18204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 874.580817][T18204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 874.580840][T18204] [ 874.580906][T18204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 874.848123][T18207] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3428'. [ 874.854109][T18207] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3428'. [ 874.958145][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.067238][T18212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 875.995247][ T55] usb 54-1: device descriptor read/8, error -110 [ 876.385520][ T55] usb usb54-port1: attempt power cycle [ 876.678924][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3440'. [ 876.959267][ T55] usb usb54-port1: unable to enumerate USB device [ 877.164695][T18265] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 877.167172][T18265] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 877.172021][T18265] vhci_hcd vhci_hcd.0: Device attached [ 877.424644][T18270] syz_tun: entered allmulticast mode [ 877.484433][T11744] usb 50-1: SetAddress Request (34) to port 0 [ 877.486642][T11744] usb 50-1: new SuperSpeed USB device number 34 using vhci_hcd [ 877.627411][T18266] vhci_hcd: connection reset by peer [ 877.630328][ T1172] vhci_hcd vhci_hcd.6: stop threads [ 877.632396][ T1172] vhci_hcd vhci_hcd.6: release socket [ 877.634400][ T1172] vhci_hcd vhci_hcd.6: disconnect device [ 877.924287][T11745] usb 13-1: new full-speed USB device number 10 using dummy_hcd [ 878.076060][T11745] usb 13-1: unable to get BOS descriptor or descriptor too short [ 878.079064][T11745] usb 13-1: not running at top speed; connect to a high speed hub [ 878.082642][T11745] usb 13-1: config 13 has an invalid interface number: 90 but max is 0 [ 878.085579][T11745] usb 13-1: config 13 has no interface number 0 [ 878.087810][T11745] usb 13-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 878.094114][T11745] usb 13-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 878.097271][T11745] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.100133][T11745] usb 13-1: Product: syz [ 878.101621][T11745] usb 13-1: Manufacturer: syz [ 878.103162][T11745] usb 13-1: SerialNumber: syz [ 878.352630][T18290] binder: BINDER_SET_CONTEXT_MGR already set [ 878.355937][T18290] binder: 18289:18290 ioctl 4018620d 80000040 returned -16 [ 878.395892][T18294] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3454'. [ 878.413260][T11745] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 878.436077][T11745] snd-usb-audio 13-1:13.90: probe with driver snd-usb-audio failed with error -2 [ 878.443024][T11745] usb 13-1: USB disconnect, device number 10 [ 878.455232][T18301] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3454'. [ 878.460107][T16477] udevd[16477]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.658630][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3458'. [ 878.821383][T18320] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 878.859718][T18322] binder: BINDER_SET_CONTEXT_MGR already set [ 878.862105][T18322] binder: 18321:18322 ioctl 4018620d 80000040 returned -16 [ 878.972160][T18323] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 878.974626][T18323] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 878.977844][T18323] vhci_hcd vhci_hcd.0: Device attached [ 879.053475][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3465'. [ 879.057120][T18331] FAULT_INJECTION: forcing a failure. [ 879.057120][T18331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.061728][T18331] CPU: 2 UID: 0 PID: 18331 Comm: syz.6.3465 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.061756][T18331] Tainted: [L]=SOFTLOCKUP [ 879.061763][T18331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 879.061776][T18331] Call Trace: [ 879.061783][T18331] [ 879.061791][T18331] dump_stack_lvl+0x16c/0x1f0 [ 879.061822][T18331] should_fail_ex+0x512/0x640 [ 879.061855][T18331] _copy_to_user+0x32/0xd0 [ 879.061877][T18331] simple_read_from_buffer+0xcb/0x170 [ 879.061905][T18331] proc_fail_nth_read+0x197/0x240 [ 879.061935][T18331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 879.061967][T18331] ? rw_verify_area+0xcf/0x6c0 [ 879.061990][T18331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 879.062018][T18331] vfs_read+0x1e4/0xcf0 [ 879.062044][T18331] ? __pfx___mutex_lock+0x10/0x10 [ 879.062074][T18331] ? __pfx_vfs_read+0x10/0x10 [ 879.062096][T18331] ? find_held_lock+0x2b/0x80 [ 879.062126][T18331] ? __fget_files+0x20e/0x3c0 [ 879.062160][T18331] ksys_read+0x12a/0x250 [ 879.062184][T18331] ? __pfx_ksys_read+0x10/0x10 [ 879.062235][T18331] __do_fast_syscall_32+0xe8/0x680 [ 879.062265][T18331] do_fast_syscall_32+0x32/0x80 [ 879.062282][T18331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 879.062303][T18331] RIP: 0023:0xf701d579 [ 879.062317][T18331] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 879.062335][T18331] RSP: 002b:00000000f540d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 879.062353][T18331] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f540d620 [ 879.062365][T18331] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 879.062376][T18331] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 879.062387][T18331] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 879.062398][T18331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 879.062424][T18331] [ 879.263618][T12083] usb 52-1: SetAddress Request (47) to port 0 [ 879.265740][T12083] usb 52-1: new SuperSpeed USB device number 47 using vhci_hcd [ 879.296317][T18340] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3466'. [ 879.377473][T18326] vhci_hcd: connection reset by peer [ 879.379614][ T1172] vhci_hcd vhci_hcd.7: stop threads [ 879.381480][ T1172] vhci_hcd vhci_hcd.7: release socket [ 879.383486][ T1172] vhci_hcd vhci_hcd.7: disconnect device [ 880.610925][T18353] binder: BINDER_SET_CONTEXT_MGR already set [ 880.613713][T18353] binder: 18352:18353 ioctl 4018620d 80000040 returned -16 [ 882.243046][ T54] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 882.312959][T18378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 882.885033][T11744] usb 50-1: device descriptor read/8, error -110 [ 882.892753][ T54] usb 13-1: Using ep0 maxpacket: 32 [ 883.393220][T11744] usb usb50-port1: attempt power cycle [ 883.442009][ T54] usb 13-1: unable to get BOS descriptor or descriptor too short [ 883.455314][ T54] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 883.466387][ T54] usb 13-1: can't read configurations, error -71 [ 883.495608][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3483'. [ 883.728186][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3486'. [ 883.971995][T11744] usb usb50-port1: unable to enumerate USB device [ 884.311116][T12083] usb 52-1: device descriptor read/8, error -110 [ 884.721420][T12083] usb usb52-port1: attempt power cycle [ 885.281082][T12083] usb usb52-port1: unable to enumerate USB device [ 885.630392][ T54] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 885.860192][ T54] usb 13-1: Using ep0 maxpacket: 32 [ 885.902851][T18437] netlink: 'syz.5.3488': attribute type 4 has an invalid length. [ 885.910624][T18437] netlink: 'syz.5.3488': attribute type 4 has an invalid length. [ 886.800619][T11745] hid_parser_main: 20 callbacks suppressed [ 886.800639][T11745] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 886.807873][T11745] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz0] on syz0 [ 886.819592][ T54] usb 13-1: unable to get BOS descriptor or descriptor too short [ 886.830419][ T54] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 886.833866][ T54] usb 13-1: can't read configurations, error -71 [ 886.837269][ T54] usb usb13-port1: attempt power cycle [ 887.119711][ T6075] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 887.279829][ T6075] usb 12-1: Using ep0 maxpacket: 32 [ 887.289199][ T6075] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 887.294284][ T6075] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 887.299911][ T6075] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 887.305800][ T6075] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 887.319520][ T55] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 887.323749][ T6075] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 887.323872][ T6075] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.390733][ T6075] usb 12-1: Product: syz [ 887.469627][ T55] usb 10-1: Using ep0 maxpacket: 32 [ 887.472484][ T6075] usb 12-1: Manufacturer: syz [ 887.477035][ T6075] usb 12-1: SerialNumber: syz [ 887.655475][ C1] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 887.680643][ T6075] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input179 [ 887.869394][ T6075] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 887.886421][ T6075] (id 0x00) [ 887.949214][ T6075] rc_core: IR keymap rc-imon-pad not found [ 887.958871][ T6075] Registered IR keymap rc-empty [ 887.969475][ T6075] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 887.986683][ T6075] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 888.078181][T18449] syzkaller1: entered allmulticast mode [ 888.087748][T18449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.093554][T18449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.156978][ T6075] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 888.183594][ T6075] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input180 [ 888.214826][ T6075] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:15> initialized [ 888.229566][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3500'. [ 888.265656][ T55] usb 10-1: unable to get BOS descriptor or descriptor too short [ 888.290048][ T55] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 888.303053][ T55] usb 10-1: can't read configurations, error -71 [ 890.008333][ T55] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 890.181354][ T55] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 890.186583][ T55] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 890.191177][ T55] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 890.195195][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.226890][T18501] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 890.234273][ T55] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 890.263154][T11745] usb 12-1: USB disconnect, device number 15 acpid: input device has been disconnected, fd 3 acpid: input device has been disconnected, fd 9 [ 890.350946][T18511] FAULT_INJECTION: forcing a failure. [ 890.350946][T18511] name failslab, interval 1, probability 0, space 0, times 0 [ 890.355927][T18511] CPU: 2 UID: 0 PID: 18511 Comm: syz.8.3507 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.355962][T18511] Tainted: [L]=SOFTLOCKUP [ 890.355969][T18511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 890.355982][T18511] Call Trace: [ 890.355990][T18511] [ 890.355998][T18511] dump_stack_lvl+0x16c/0x1f0 [ 890.356034][T18511] should_fail_ex+0x512/0x640 [ 890.356058][T18511] ? fs_reclaim_acquire+0xae/0x150 [ 890.356089][T18511] should_failslab+0xc2/0x120 [ 890.356122][T18511] __kmalloc_noprof+0xeb/0x910 [ 890.356146][T18511] ? tomoyo_encode2+0x100/0x3e0 [ 890.356176][T18511] ? tomoyo_encode2+0x100/0x3e0 [ 890.356200][T18511] tomoyo_encode2+0x100/0x3e0 [ 890.356228][T18511] tomoyo_encode+0x29/0x50 [ 890.356252][T18511] tomoyo_realpath_from_path+0x18f/0x6e0 [ 890.356287][T18511] tomoyo_path_number_perm+0x245/0x580 [ 890.356310][T18511] ? tomoyo_path_number_perm+0x237/0x580 [ 890.356336][T18511] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 890.356386][T18511] ? find_held_lock+0x2b/0x80 [ 890.356411][T18511] ? hook_file_ioctl_common+0x144/0x410 [ 890.356447][T18511] ? __fget_files+0x20e/0x3c0 [ 890.356471][T18511] ? __fput_deferred+0x430/0x480 [ 890.356499][T18511] security_file_ioctl_compat+0x9b/0x240 [ 890.356526][T18511] __ia32_compat_sys_ioctl+0xc3/0x370 [ 890.356552][T18511] __do_fast_syscall_32+0xe8/0x680 [ 890.356584][T18511] do_fast_syscall_32+0x32/0x80 [ 890.356601][T18511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 890.356624][T18511] RIP: 0023:0xf7f96579 [ 890.356661][T18511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 890.356680][T18511] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 890.356699][T18511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 890.356712][T18511] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 890.356724][T18511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 890.356736][T18511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 890.356748][T18511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 890.356776][T18511] [ 890.356845][T18511] ERROR: Out of memory at tomoyo_realpath_from_path. [ 890.608608][T11745] usb 11-1: USB disconnect, device number 16 [ 891.028542][T18531] binder: 18528:18531 ioctl c0306201 80000640 returned -22 [ 891.147976][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3514'. [ 891.258592][T18536] overlayfs: upper fs does not support file handles, falling back to index=off. [ 891.637410][T12083] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 891.799281][T12083] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 891.803267][T12083] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 891.808172][T12083] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 891.812157][T12083] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 891.816914][T12083] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 891.822804][T12083] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 891.826324][T12083] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 891.830169][T12083] usb 12-1: Product: syz [ 891.832032][T12083] usb 12-1: Manufacturer: syz [ 891.839849][T12083] cdc_wdm 12-1:1.0: skipping garbage [ 891.842251][T12083] cdc_wdm 12-1:1.0: skipping garbage [ 891.846165][T12083] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 891.848884][T12083] cdc_wdm 12-1:1.0: Unknown control protocol [ 891.957188][ T55] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 892.108628][ T55] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 892.112686][ T55] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 892.117395][ T55] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 892.122057][ T55] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 892.127111][ T55] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 892.133867][ T55] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 892.138631][ T55] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 892.142426][ T55] usb 11-1: Product: syz [ 892.144354][ T55] usb 11-1: Manufacturer: syz [ 892.151734][ T55] cdc_wdm 11-1:1.0: skipping garbage [ 892.154201][ T55] cdc_wdm 11-1:1.0: skipping garbage [ 892.158723][ T55] cdc_wdm 11-1:1.0: cdc-wdm1: USB WDM device [ 892.161474][ T55] cdc_wdm 11-1:1.0: Unknown control protocol [ 892.461538][T18562] comedi comedi0: Minor 67108864 is invalid! [ 892.527549][T12083] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 892.563270][T18564] netlink: 'syz.5.3527': attribute type 1 has an invalid length. [ 892.566104][T18564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.697656][T12083] usb 13-1: Using ep0 maxpacket: 8 [ 892.701498][T12083] usb 13-1: config 0 interface 0 has no altsetting 0 [ 892.704280][T12083] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 892.707714][T12083] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.715222][T12083] usb 13-1: config 0 descriptor?? [ 892.927430][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 892.927607][ T6075] usb 12-1: USB disconnect, device number 16 [ 892.929766][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 892.933910][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 893.156572][T12201] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 893.316567][T12201] usb 10-1: Using ep0 maxpacket: 8 [ 893.319532][T12201] usb 10-1: no configurations [ 893.321619][T12201] usb 10-1: can't read configurations, error -22 [ 893.456397][T12201] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 893.508675][T12083] usbhid 13-1:0.0: can't add hid device: -71 [ 893.510746][T12083] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 893.518279][T12083] usb 13-1: USB disconnect, device number 14 [ 893.606427][T12201] usb 10-1: Using ep0 maxpacket: 8 [ 893.608852][T12201] usb 10-1: no configurations [ 893.610724][T12201] usb 10-1: can't read configurations, error -22 [ 893.613388][T12201] usb usb10-port1: attempt power cycle [ 893.781943][T18590] netlink: 'syz.7.3535': attribute type 12 has an invalid length. [ 893.785391][T18590] netlink: 'syz.7.3535': attribute type 29 has an invalid length. [ 893.789365][T18590] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3535'. [ 893.793351][T18590] netlink: 'syz.7.3535': attribute type 1 has an invalid length. [ 893.796772][T18590] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3535'. [ 893.801875][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3535'. [ 893.946233][T12201] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 893.966922][T12201] usb 10-1: Using ep0 maxpacket: 8 [ 893.969524][T12201] usb 10-1: no configurations [ 893.971391][T12201] usb 10-1: can't read configurations, error -22 [ 894.001207][T18595] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 894.004473][T18595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 894.007694][T18595] vhci_hcd vhci_hcd.0: Device attached [ 894.096118][T12201] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 894.115406][T18596] vhci_hcd: connection closed [ 894.115831][ T12] vhci_hcd vhci_hcd.7: stop threads [ 894.120381][ T12] vhci_hcd vhci_hcd.7: release socket [ 894.122322][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 894.126943][T12201] usb 10-1: Using ep0 maxpacket: 8 [ 894.129340][T12201] usb 10-1: no configurations [ 894.131181][T12201] usb 10-1: can't read configurations, error -22 [ 894.133835][T12201] usb usb10-port1: unable to enumerate USB device [ 894.298869][T18601] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 894.301776][T18601] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 894.305454][T18601] vhci_hcd vhci_hcd.0: Device attached [ 894.566142][ T55] usb 54-1: SetAddress Request (52) to port 0 [ 894.568443][ T55] usb 54-1: new SuperSpeed USB device number 52 using vhci_hcd [ 894.717847][T18608] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3539'. [ 894.755164][T11745] usb 11-1: USB disconnect, device number 17 [ 894.921609][T18615] bridge_slave_0: invalid flags given to default FDB implementation [ 895.007884][T18620] overlayfs: upper fs does not support file handles, falling back to index=off. [ 895.057278][T18623] overlayfs: upper fs does not support file handles, falling back to index=off. [ 895.243408][T18625] create_pit_timer: 9 callbacks suppressed [ 895.243422][T18625] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 895.243865][T18602] vhci_hcd: connection reset by peer [ 895.250968][T12555] vhci_hcd vhci_hcd.8: stop threads [ 895.253628][T12555] vhci_hcd vhci_hcd.8: release socket [ 895.256506][T12555] vhci_hcd vhci_hcd.8: disconnect device [ 895.296821][T18625] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 895.302411][T18625] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 895.306296][T18625] kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 895.462014][T18630] binder: 18629:18630 ioctl 7a9 80000080 returned -22 [ 895.533378][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3549'. [ 896.156222][T18649] overlayfs: upper fs does not support file handles, falling back to index=off. [ 897.204651][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3558'. [ 898.088664][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3559'. [ 898.244160][ T6035] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 898.893773][ T6035] usb 13-1: Using ep0 maxpacket: 32 [ 898.909887][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3561'. [ 898.988065][ T6035] usb 13-1: unable to get BOS descriptor or descriptor too short [ 898.992300][ T6035] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 898.996133][ T6035] usb 13-1: can't read configurations, error -71 [ 899.587161][T18681] netlink: 'syz.6.3565': attribute type 2 has an invalid length. [ 899.593370][T18681] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3565'. [ 899.598472][T18681] block nbd0: not configured, cannot reconfigure [ 899.645623][T18687] FAULT_INJECTION: forcing a failure. [ 899.645623][T18687] name failslab, interval 1, probability 0, space 0, times 0 [ 899.649945][T18687] CPU: 0 UID: 0 PID: 18687 Comm: syz.8.3568 Tainted: G L syzkaller #0 PREEMPT(full) [ 899.649965][T18687] Tainted: [L]=SOFTLOCKUP [ 899.649969][T18687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 899.649976][T18687] Call Trace: [ 899.649981][T18687] [ 899.649986][T18687] dump_stack_lvl+0x16c/0x1f0 [ 899.650007][T18687] should_fail_ex+0x512/0x640 [ 899.650019][T18687] ? __kmalloc_cache_noprof+0x5f/0x800 [ 899.650034][T18687] should_failslab+0xc2/0x120 [ 899.650052][T18687] __kmalloc_cache_noprof+0x80/0x800 [ 899.650065][T18687] ? fl_init+0x45/0x2c0 [ 899.650078][T18687] ? __pfx_fl_classify+0x10/0x10 [ 899.650090][T18687] ? fl_init+0x45/0x2c0 [ 899.650099][T18687] ? __raw_spin_lock_init+0x3a/0x110 [ 899.650112][T18687] fl_init+0x45/0x2c0 [ 899.650123][T18687] tc_new_tfilter+0x114a/0x2340 [ 899.650145][T18687] ? unwind_get_return_address+0x59/0xa0 [ 899.650160][T18687] ? arch_stack_walk+0xa6/0x100 [ 899.650174][T18687] ? __pfx_tc_new_tfilter+0x10/0x10 [ 899.650195][T18687] ? __lock_acquire+0x436/0x2890 [ 899.650225][T18687] ? find_held_lock+0x2b/0x80 [ 899.650241][T18687] ? __pfx_tc_new_tfilter+0x10/0x10 [ 899.650257][T18687] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 899.650273][T18687] ? __pfx_tc_new_tfilter+0x10/0x10 [ 899.650290][T18687] rtnetlink_rcv_msg+0x95e/0xe90 [ 899.650307][T18687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.650350][T18687] ? __lock_acquire+0x436/0x2890 [ 899.650368][T18687] netlink_rcv_skb+0x158/0x420 [ 899.650384][T18687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.650401][T18687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.650423][T18687] ? netlink_deliver_tap+0x1ae/0xd30 [ 899.650441][T18687] netlink_unicast+0x5aa/0x870 [ 899.650459][T18687] ? __pfx_netlink_unicast+0x10/0x10 [ 899.650475][T18687] ? __pfx___might_resched+0x10/0x10 [ 899.650496][T18687] netlink_sendmsg+0x8c8/0xdd0 [ 899.650514][T18687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.650532][T18687] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 899.650554][T18687] ____sys_sendmsg+0xa5d/0xc30 [ 899.650574][T18687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.650590][T18687] ? get_compat_msghdr+0x11a/0x170 [ 899.650611][T18687] ___sys_sendmsg+0x134/0x1d0 [ 899.650627][T18687] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.650648][T18687] ? find_held_lock+0x2b/0x80 [ 899.650676][T18687] __sys_sendmsg+0x16d/0x220 [ 899.650690][T18687] ? __pfx___sys_sendmsg+0x10/0x10 [ 899.650711][T18687] ? do_user_addr_fault+0x843/0x1370 [ 899.650727][T18687] __do_fast_syscall_32+0xe8/0x680 [ 899.650747][T18687] do_fast_syscall_32+0x32/0x80 [ 899.650757][T18687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 899.650772][T18687] RIP: 0023:0xf7f96579 [ 899.650782][T18687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 899.650793][T18687] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 899.650804][T18687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 899.650811][T18687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 899.650818][T18687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 899.650824][T18687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 899.650831][T18687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 899.650846][T18687] [ 899.663420][ T55] usb 54-1: device descriptor read/8, error -110 [ 899.859507][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3570'. [ 899.884390][T11745] usb 11-1: new full-speed USB device number 18 using dummy_hcd [ 900.044258][T11745] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.047758][T11745] usb 11-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 900.052128][T11745] usb 11-1: config 1 interface 0 has no altsetting 0 [ 900.055640][T11745] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 900.058769][T11745] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 900.073167][T11745] usb 11-1: SerialNumber: syz [ 900.163540][ T55] usb usb54-port1: attempt power cycle [ 900.184706][T18700] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 900.433632][T11745] usb 11-1: bad CDC descriptors [ 900.448836][T11745] usb 11-1: USB disconnect, device number 18 [ 900.724037][ T55] usb usb54-port1: unable to enumerate USB device [ 901.308436][T18719] netlink: 'syz.5.3578': attribute type 1 has an invalid length. [ 901.374538][T18721] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3578'. [ 901.385368][T18721] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3578'. [ 901.812673][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3580'. [ 901.869744][T18730] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 901.904339][T18730] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 902.267304][ T6075] libceph: connect (1)[c::]:6789 error -101 [ 902.271496][ T6075] libceph: mon0 (1)[c::]:6789 connect error [ 902.282173][ T55] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 902.286369][T18734] ceph: No mds server is up or the cluster is laggy [ 902.453892][ T55] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.458685][ T55] usb 10-1: config 0 has no interfaces? [ 902.461220][ T55] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.482205][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.487839][ T55] usb 10-1: config 0 descriptor?? [ 902.647325][T18749] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 902.649447][T18749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 902.661999][T18749] vhci_hcd vhci_hcd.0: Device attached [ 902.696446][T12201] usb 10-1: USB disconnect, device number 17 [ 902.931703][ T55] usb 54-1: SetAddress Request (56) to port 0 [ 902.934260][ T55] usb 54-1: new SuperSpeed USB device number 56 using vhci_hcd [ 903.261991][T18750] vhci_hcd: connection reset by peer [ 903.267963][T14391] vhci_hcd vhci_hcd.8: stop threads [ 903.275935][T14391] vhci_hcd vhci_hcd.8: release socket [ 903.280123][T14391] vhci_hcd vhci_hcd.8: disconnect device [ 904.038150][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3587'. [ 904.588014][T18766] input: syz0 as /devices/virtual/input/input183 [ 905.156099][T18772] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 905.158522][T18772] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 905.170622][T18772] vhci_hcd vhci_hcd.0: Device attached [ 905.342484][T18776] vhci_hcd: connection closed [ 905.343115][T18778] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 905.345375][ T91] vhci_hcd vhci_hcd.8: stop threads [ 905.348057][T18778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 905.348260][T18778] vhci_hcd vhci_hcd.0: Device attached [ 905.351447][ T91] vhci_hcd vhci_hcd.8: release socket [ 905.357539][ T91] vhci_hcd vhci_hcd.8: disconnect device [ 905.581487][T18779] vhci_hcd: connection closed [ 905.582311][ T91] vhci_hcd vhci_hcd.5: stop threads [ 905.582600][ T91] vhci_hcd vhci_hcd.5: release socket [ 905.582640][ T91] vhci_hcd vhci_hcd.5: disconnect device [ 905.640414][ T6035] usb 48-1: enqueue for inactive port 0 [ 906.630040][T12201] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 906.779898][T12201] usb 12-1: Using ep0 maxpacket: 32 [ 907.601761][T12201] usb 12-1: unable to get BOS descriptor or descriptor too short [ 907.606485][T12201] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 907.609688][T12201] usb 12-1: can't read configurations, error -71 [ 907.979285][ T55] usb 54-1: device descriptor read/8, error -110 [ 908.380342][ T55] usb usb54-port1: attempt power cycle [ 908.807330][ T6035] usb usb48-port1: attempt power cycle [ 908.847915][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3602'. [ 908.949558][T18820] FAULT_INJECTION: forcing a failure. [ 908.949558][T18820] name failslab, interval 1, probability 0, space 0, times 0 [ 908.954615][T18820] CPU: 3 UID: 0 PID: 18820 Comm: syz.7.3599 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.954663][T18820] Tainted: [L]=SOFTLOCKUP [ 908.954670][T18820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 908.954700][T18820] Call Trace: [ 908.954707][T18820] [ 908.954715][T18820] dump_stack_lvl+0x16c/0x1f0 [ 908.954749][T18820] should_fail_ex+0x512/0x640 [ 908.954770][T18820] ? fs_reclaim_acquire+0xae/0x150 [ 908.954801][T18820] should_failslab+0xc2/0x120 [ 908.954830][T18820] __kmalloc_noprof+0xeb/0x910 [ 908.954852][T18820] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 908.954882][T18820] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 908.954906][T18820] tomoyo_realpath_from_path+0xc2/0x6e0 [ 908.954933][T18820] ? tomoyo_profile+0x47/0x60 [ 908.954963][T18820] tomoyo_path_number_perm+0x245/0x580 [ 908.954982][T18820] ? tomoyo_path_number_perm+0x237/0x580 [ 908.955003][T18820] ? lock_acquire+0x124/0x330 [ 908.955022][T18820] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 908.955044][T18820] ? finish_task_switch.isra.0+0x202/0xbd0 [ 908.955095][T18820] ? find_held_lock+0x2b/0x80 [ 908.955118][T18820] ? hook_file_ioctl_common+0x144/0x410 [ 908.955146][T18820] ? __fget_files+0x20e/0x3c0 [ 908.955170][T18820] ? __fput_deferred+0x430/0x480 [ 908.955194][T18820] security_file_ioctl_compat+0x9b/0x240 [ 908.955220][T18820] __ia32_compat_sys_ioctl+0xc3/0x370 [ 908.955247][T18820] __do_fast_syscall_32+0xe8/0x680 [ 908.955285][T18820] do_fast_syscall_32+0x32/0x80 [ 908.955303][T18820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 908.955325][T18820] RIP: 0023:0xf706d579 [ 908.955341][T18820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 908.955358][T18820] RSP: 002b:00000000f541b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 908.955377][T18820] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448c8 [ 908.955389][T18820] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 908.955400][T18820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 908.955411][T18820] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 908.955422][T18820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 908.955447][T18820] [ 908.955530][T18820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 908.988801][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3600'. [ 909.085069][ T55] usb usb54-port1: unable to enumerate USB device [ 909.929499][ T6035] usb usb48-port1: unable to enumerate USB device [ 909.966087][T18835] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 909.969056][T18835] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 909.972911][T18835] vhci_hcd vhci_hcd.0: Device attached [ 910.130032][T18845] vhci_hcd: connection closed [ 910.130274][ T91] vhci_hcd vhci_hcd.8: stop threads [ 910.134952][ T91] vhci_hcd vhci_hcd.8: release socket [ 910.137567][ T91] vhci_hcd vhci_hcd.8: disconnect device [ 910.222384][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3611'. [ 910.700611][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3613'. [ 910.850113][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3612'. [ 911.489641][T18872] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3615'. [ 911.587411][ T6783] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 911.751515][ T6783] usb 12-1: Using ep0 maxpacket: 32 [ 912.567891][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3616'. [ 912.769699][ T6783] usb 12-1: unable to get BOS descriptor or descriptor too short [ 912.773360][ T6783] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 912.775913][ T6783] usb 12-1: can't read configurations, error -71 [ 913.183515][T18884] FAULT_INJECTION: forcing a failure. [ 913.183515][T18884] name failslab, interval 1, probability 0, space 0, times 0 [ 913.188718][T18884] CPU: 2 UID: 0 PID: 18884 Comm: syz.5.3618 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.188740][T18884] Tainted: [L]=SOFTLOCKUP [ 913.188744][T18884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 913.188752][T18884] Call Trace: [ 913.188757][T18884] [ 913.188763][T18884] dump_stack_lvl+0x16c/0x1f0 [ 913.188785][T18884] should_fail_ex+0x512/0x640 [ 913.188800][T18884] ? fs_reclaim_acquire+0xae/0x150 [ 913.188836][T18884] should_failslab+0xc2/0x120 [ 913.188856][T18884] __kmalloc_noprof+0xeb/0x910 [ 913.188870][T18884] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 913.188890][T18884] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 913.188906][T18884] tomoyo_realpath_from_path+0xc2/0x6e0 [ 913.188924][T18884] ? tomoyo_profile+0x47/0x60 [ 913.188944][T18884] tomoyo_path_number_perm+0x245/0x580 [ 913.188957][T18884] ? tomoyo_path_number_perm+0x237/0x580 [ 913.188972][T18884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 913.189002][T18884] ? find_held_lock+0x2b/0x80 [ 913.189018][T18884] ? hook_file_ioctl_common+0x144/0x410 [ 913.189037][T18884] ? __fget_files+0x20e/0x3c0 [ 913.189053][T18884] ? __fput_deferred+0x430/0x480 [ 913.189068][T18884] security_file_ioctl_compat+0x9b/0x240 [ 913.189084][T18884] __ia32_compat_sys_ioctl+0xc3/0x370 [ 913.189102][T18884] __do_fast_syscall_32+0xe8/0x680 [ 913.189123][T18884] do_fast_syscall_32+0x32/0x80 [ 913.189144][T18884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 913.189160][T18884] RIP: 0023:0xf7f07579 [ 913.189170][T18884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 913.189182][T18884] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 913.189197][T18884] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008916 [ 913.189207][T18884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.189214][T18884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.189233][T18884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 913.189241][T18884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.189258][T18884] [ 913.189317][T18884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 914.181887][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3622'. [ 914.314365][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3623'. [ 914.995720][T12201] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 915.145595][T12201] usb 12-1: Using ep0 maxpacket: 32 [ 915.357811][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3625'. [ 915.481246][T12201] usb 12-1: unable to get BOS descriptor or descriptor too short [ 915.486597][T12201] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 915.489217][T12201] usb 12-1: can't read configurations, error -71 [ 916.545038][T12201] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 916.694809][T12201] usb 12-1: Using ep0 maxpacket: 32 [ 916.699001][T12201] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 916.703010][T12201] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 916.707803][T12201] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 916.711915][T12201] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 916.716639][T12201] usb 12-1: config 0 interface 0 has no altsetting 0 [ 916.721564][T12201] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 916.726046][T12201] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 916.729162][T12201] usb 12-1: Product: syz [ 916.730628][T12201] usb 12-1: Manufacturer: syz [ 916.732264][T12201] usb 12-1: SerialNumber: syz [ 916.735135][T12201] usb 12-1: config 0 descriptor?? [ 916.740153][T12201] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 916.746982][T12201] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 916.991059][T18920] bond0: (slave bridge0): Releasing backup interface [ 916.996891][T18920] bridge_slave_0: left allmulticast mode [ 916.999466][T18920] bridge_slave_0: left promiscuous mode [ 917.002256][T18920] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.009132][T18920] bridge_slave_1: left allmulticast mode [ 917.011828][T18920] bridge_slave_1: left promiscuous mode [ 917.014591][T18920] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.022294][T18920] bond1: (slave veth0_to_bond): Releasing active interface [ 917.028838][T18920] bond0: (slave bond_slave_0): Releasing backup interface [ 917.035290][T18920] bond0: (slave bond_slave_1): Releasing backup interface [ 917.041606][T18920] team0: Port device team_slave_0 removed [ 917.050327][T18912] ldusb 12-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 917.051408][ T6035] usb 12-1: USB disconnect, device number 22 [ 917.053763][ C1] ldusb 12-1:0.0: usb_submit_urb failed (-19) [ 917.053831][T18913] ldusb 12-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 917.053997][T18923] netlink: 'syz.6.3630': attribute type 10 has an invalid length. [ 917.066494][T18920] team0: Port device team_slave_1 removed [ 917.067534][ T6035] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 917.069832][T18920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.081857][T18920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.087994][T18920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 917.122647][T18923] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 917.235096][T18931] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 917.238373][T18931] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 917.253651][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3634'. [ 917.381738][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3635'. [ 917.590400][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3637'. [ 919.446320][ T40] audit: type=1326 audit(1766854168.092:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18959 comm="syz.7.3643" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d579 code=0x0 [ 919.821281][T18969] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3646'. [ 920.620407][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3652'. [ 920.695930][T18986] /dev/sr0: Can't open blockdev [ 921.601932][T18992] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 921.604687][T18992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 921.608473][T18992] vhci_hcd vhci_hcd.0: Device attached [ 921.882477][T11744] usb 52-1: SetAddress Request (51) to port 0 [ 921.885791][T11744] usb 52-1: new SuperSpeed USB device number 51 using vhci_hcd [ 922.037154][ T40] audit: type=1326 audit(1766854170.683:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.052462][ T40] audit: type=1326 audit(1766854170.683:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.062098][ T40] audit: type=1326 audit(1766854170.683:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.071243][ T40] audit: type=1326 audit(1766854170.683:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.082213][ T40] audit: type=1326 audit(1766854170.683:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.089596][ T40] audit: type=1326 audit(1766854170.683:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.098870][ T40] audit: type=1326 audit(1766854170.683:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.108535][ T40] audit: type=1326 audit(1766854170.683:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.120267][ T40] audit: type=1326 audit(1766854170.683:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18998 comm="syz.6.3655" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 922.451039][T19004] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 922.454053][T19004] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 922.461666][T19007] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 922.463898][T19007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 922.466894][T19007] vhci_hcd vhci_hcd.0: Device attached [ 922.490142][T19004] vhci_hcd vhci_hcd.0: Device attached [ 922.741944][ T6783] usb 54-1: SetAddress Request (61) to port 0 [ 922.745037][ T6783] usb 54-1: new SuperSpeed USB device number 61 using vhci_hcd [ 922.762067][ T55] usb 50-1: SetAddress Request (38) to port 0 [ 922.765049][ T55] usb 50-1: new SuperSpeed USB device number 38 using vhci_hcd [ 922.854347][T18993] vhci_hcd: connection reset by peer [ 922.856687][ T1227] vhci_hcd vhci_hcd.7: stop threads [ 922.858795][ T1227] vhci_hcd vhci_hcd.7: release socket [ 922.860802][ T1227] vhci_hcd vhci_hcd.7: disconnect device [ 923.031642][T19008] vhci_hcd: connection reset by peer [ 923.033731][ T1227] vhci_hcd vhci_hcd.8: stop threads [ 923.035548][ T1227] vhci_hcd vhci_hcd.8: release socket [ 923.051583][ T1227] vhci_hcd vhci_hcd.8: disconnect device [ 923.058521][T19005] vhci_hcd: connection reset by peer [ 923.062172][ T1227] vhci_hcd vhci_hcd.6: stop threads [ 923.064823][ T1227] vhci_hcd vhci_hcd.6: release socket [ 923.066885][ T1227] vhci_hcd vhci_hcd.6: disconnect device [ 923.644038][T19018] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3659'. [ 923.649250][T19018] IPVS: Error connecting to the multicast addr [ 923.951276][T13064] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 924.112710][T13064] usb 13-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 924.116659][T13064] usb 13-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.124855][T13064] usb 13-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 924.128647][T13064] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.132401][T13064] usb 13-1: Product: syz [ 924.134356][T13064] usb 13-1: Manufacturer: syz [ 924.136439][T13064] usb 13-1: SerialNumber: syz [ 924.144451][T19021] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 924.149122][T13064] usblp0: Disabling reads from problematic bidirectional printer [ 924.181896][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3664'. [ 924.357146][T13064] usblp 13-1:4.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 924.563884][T12201] usb 13-1: USB disconnect, device number 17 [ 924.569895][T12201] usblp0: removed [ 924.740538][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 924.745652][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 925.510672][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 925.580675][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 926.092170][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 926.095012][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 926.215035][T19034] ceph: No mds server is up or the cluster is laggy [ 926.552328][T19058] FAULT_INJECTION: forcing a failure. [ 926.552328][T19058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.558303][T19058] CPU: 2 UID: 0 PID: 19058 Comm: syz.7.3672 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.558331][T19058] Tainted: [L]=SOFTLOCKUP [ 926.558338][T19058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 926.558350][T19058] Call Trace: [ 926.558357][T19058] [ 926.558364][T19058] dump_stack_lvl+0x16c/0x1f0 [ 926.558396][T19058] should_fail_ex+0x512/0x640 [ 926.558419][T19058] _copy_from_user+0x2e/0xd0 [ 926.558439][T19058] vhost_vring_ioctl+0xa77/0x1520 [ 926.558465][T19058] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 926.558489][T19058] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 926.558515][T19058] ? vhost_dev_ioctl+0x16c/0xe20 [ 926.558559][T19058] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 926.558587][T19058] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 926.558615][T19058] vhost_vsock_dev_ioctl+0x8a9/0xb30 [ 926.558640][T19058] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 926.558662][T19058] ? hook_file_ioctl_common+0x144/0x410 [ 926.558689][T19058] ? __fget_files+0x20e/0x3c0 [ 926.558712][T19058] ? __fput_deferred+0x430/0x480 [ 926.558731][T19058] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 926.558755][T19058] compat_ptr_ioctl+0x6e/0xa0 [ 926.558775][T19058] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 926.558795][T19058] __ia32_compat_sys_ioctl+0x242/0x370 [ 926.558820][T19058] __do_fast_syscall_32+0xe8/0x680 [ 926.558850][T19058] do_fast_syscall_32+0x32/0x80 [ 926.558866][T19058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 926.558888][T19058] RIP: 0023:0xf706d579 [ 926.558902][T19058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 926.558918][T19058] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 926.558936][T19058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af10 [ 926.558946][T19058] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.558957][T19058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 926.558966][T19058] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 926.558977][T19058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 926.559002][T19058] [ 926.629924][T12201] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 926.700820][T19064] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3674'. [ 926.711713][T19060] qrtr: Invalid version 0 [ 926.799764][T12201] usb 11-1: Using ep0 maxpacket: 8 [ 926.803949][T12201] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 926.809540][T12201] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 926.816729][T12201] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 926.821170][T12201] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.824766][T12201] usb 11-1: Product: ⠉ [ 926.826739][T12201] usb 11-1: Manufacturer: ❾绛如瑵Ⓝষ遀ꮢ癿먈ﻗ뚡묛䦷꿴괾kஊ㺀೒稧␾ꔲ豮夕ɋ᥃ꩺ狼䚁䟟ޠБ洮ہ뚛觼㋻쟬⁛荫唿駇肑ᛧ᷷뵈Ą텖䎓뒏【維䘺묤먧䬱잚秪뤢啝䝰켧昻⁆몒阀⯂⅒銳㳢恴缂采쉀뚢憪叅黿⤜ᩰ햵힕囁㾡Ჿ⦔㌂刔ᅖ皚଱ﰟ﮹ [ 926.840424][T12201] usb 11-1: SerialNumber: ﳿ [ 926.842916][T19068] gfs2: gfs2 mount does not exist [ 926.929966][T11744] usb 52-1: device descriptor read/8, error -110 [ 927.071902][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3677'. [ 927.175314][T12201] cdc_ncm 11-1:1.0: bind() failure [ 927.190299][T12201] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 927.193373][T12201] cdc_ncm 11-1:1.1: bind() failure [ 927.199027][T12201] usb 11-1: USB disconnect, device number 19 [ 927.335761][T11744] usb usb52-port1: attempt power cycle [ 927.670026][T19081] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 927.774061][T19088] FAULT_INJECTION: forcing a failure. [ 927.774061][T19088] name failslab, interval 1, probability 0, space 0, times 0 [ 927.779944][T19088] CPU: 0 UID: 0 PID: 19088 Comm: syz.8.3683 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.779977][T19088] Tainted: [L]=SOFTLOCKUP [ 927.779983][T19088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 927.780002][T19088] Call Trace: [ 927.780008][T19088] [ 927.780013][T19088] dump_stack_lvl+0x16c/0x1f0 [ 927.780036][T19088] should_fail_ex+0x512/0x640 [ 927.780049][T19088] ? __kvmalloc_node_noprof+0x129/0xa40 [ 927.780068][T19088] should_failslab+0xc2/0x120 [ 927.780088][T19088] __kvmalloc_node_noprof+0x14a/0xa40 [ 927.780104][T19088] ? __pfx__mutex_trylock_nest_lock+0x10/0x10 [ 927.780124][T19088] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 927.780146][T19088] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 927.780168][T19088] file_tty_write.constprop.0+0x6f3/0x9b0 [ 927.780186][T19088] ? rw_verify_area+0xcf/0x6c0 [ 927.780204][T19088] vfs_write+0x7d3/0x11d0 [ 927.780221][T19088] ? __pfx_tty_write+0x10/0x10 [ 927.780239][T19088] ? __pfx_vfs_write+0x10/0x10 [ 927.780254][T19088] ? find_held_lock+0x2b/0x80 [ 927.780281][T19088] ksys_write+0x12a/0x250 [ 927.780297][T19088] ? __pfx_ksys_write+0x10/0x10 [ 927.780319][T19088] __do_fast_syscall_32+0xe8/0x680 [ 927.780339][T19088] do_fast_syscall_32+0x32/0x80 [ 927.780350][T19088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 927.780366][T19088] RIP: 0023:0xf7f96579 [ 927.780376][T19088] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 927.780389][T19088] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 927.780401][T19088] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 927.780409][T19088] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 927.780418][T19088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 927.780425][T19088] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 927.780432][T19088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 927.780448][T19088] [ 927.782229][T19089] netlink: 340 bytes leftover after parsing attributes in process `syz.6.3682'. [ 927.867179][ T6783] usb 54-1: device descriptor read/8, error -110 [ 927.870019][ T55] usb 50-1: device descriptor read/8, error -110 [ 927.873227][T19090] netlink: 340 bytes leftover after parsing attributes in process `syz.6.3682'. [ 927.909915][T11744] usb usb52-port1: unable to enumerate USB device [ 928.271629][ T55] usb usb50-port1: attempt power cycle [ 928.281898][ T6783] usb usb54-port1: attempt power cycle [ 928.698910][T13064] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 928.830361][ T55] usb usb50-port1: unable to enumerate USB device [ 928.849823][T13064] usb 13-1: Using ep0 maxpacket: 32 [ 928.854294][ T6783] usb usb54-port1: unable to enumerate USB device [ 928.856882][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3687'. [ 929.033540][T13064] usb 13-1: unable to get BOS descriptor or descriptor too short [ 929.039417][T13064] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 929.042129][T13064] usb 13-1: can't read configurations, error -71 [ 929.578962][T18822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 929.585720][T18822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 929.590353][T18822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 929.596537][T18822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 929.600618][T18822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 929.801726][T19130] netlink: 'syz.8.3691': attribute type 8 has an invalid length. [ 929.805240][T19130] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3691'. [ 929.948570][T19118] chnl_net:caif_netlink_parms(): no params data found [ 929.999428][T19118] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.001965][T19118] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.004387][T19118] bridge_slave_0: entered allmulticast mode [ 930.007345][T19118] bridge_slave_0: entered promiscuous mode [ 930.013324][T19118] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.016696][T19118] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.019753][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3694'. [ 930.024335][T19118] bridge_slave_1: entered allmulticast mode [ 930.028632][T19118] bridge_slave_1: entered promiscuous mode [ 930.044700][T19118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.050545][T19118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.077767][T19118] team0: Port device team_slave_0 added [ 930.086623][T19118] team0: Port device team_slave_1 added [ 930.111681][T19118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.114245][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.133327][T19118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.138929][T19118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.141372][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.150218][T19118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.178826][T19118] hsr_slave_0: entered promiscuous mode [ 930.181604][T19118] hsr_slave_1: entered promiscuous mode [ 930.184010][T19118] debugfs: 'hsr0' already exists in 'hsr' [ 930.185970][T19118] Cannot create hsr debugfs directory [ 930.304438][T19162] random: crng reseeded on system resumption [ 930.544905][T19118] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 930.556432][T19118] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 930.772647][T19118] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 931.185435][T19118] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 931.276686][T19168] Restarting kernel threads ... [ 931.280435][T19168] Done restarting kernel threads. [ 931.657553][ T5965] Bluetooth: hci4: command tx timeout [ 931.672988][T19118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.755466][T19118] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.764339][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.767018][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.776201][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.778854][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.819199][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 931.819216][ T40] audit: type=1326 audit(1766854180.468:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19180 comm="syz.7.3704" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d579 code=0x0 [ 932.005340][T19118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.153267][T19118] veth0_vlan: entered promiscuous mode [ 932.158969][T19118] veth1_vlan: entered promiscuous mode [ 932.178314][T19118] veth0_macvtap: entered promiscuous mode [ 932.182968][T19118] veth1_macvtap: entered promiscuous mode [ 932.192715][T19118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.202941][T19118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.211229][ T1227] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.214389][ T1227] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.218273][ T1227] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.221428][ T1227] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.272093][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.275370][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.295711][T14391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.299676][T14391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.680681][T19203] random: crng reseeded on system resumption [ 932.782312][T19203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.031611][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3712'. [ 933.138492][T19221] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 933.141362][T19221] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 933.156267][T19221] vhci_hcd vhci_hcd.0: Device attached [ 933.493979][ T6783] usb 52-1: SetAddress Request (55) to port 0 [ 933.498157][ T6783] usb 52-1: new SuperSpeed USB device number 55 using vhci_hcd [ 933.650101][T19226] FAULT_INJECTION: forcing a failure. [ 933.650101][T19226] name failslab, interval 1, probability 0, space 0, times 0 [ 933.656138][T19226] CPU: 0 UID: 0 PID: 19226 Comm: syz.8.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.656160][T19226] Tainted: [L]=SOFTLOCKUP [ 933.656164][T19226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 933.656172][T19226] Call Trace: [ 933.656177][T19226] [ 933.656183][T19226] dump_stack_lvl+0x16c/0x1f0 [ 933.656222][T19226] should_fail_ex+0x512/0x640 [ 933.656237][T19226] ? kmem_cache_alloc_noprof+0x62/0x770 [ 933.656255][T19226] should_failslab+0xc2/0x120 [ 933.656274][T19226] kmem_cache_alloc_noprof+0x83/0x770 [ 933.656288][T19226] ? rcu_is_watching+0x12/0xc0 [ 933.656305][T19226] ? alloc_empty_file+0x55/0x1e0 [ 933.656321][T19226] ? alloc_empty_file+0x55/0x1e0 [ 933.656333][T19226] alloc_empty_file+0x55/0x1e0 [ 933.656346][T19226] dentry_open+0x46/0xd0 [ 933.656359][T19226] big_key_read+0x1e1/0x350 [ 933.656376][T19226] ? down_read+0x13d/0x460 [ 933.656388][T19226] ? __pfx_big_key_read+0x10/0x10 [ 933.656405][T19226] ? keyctl_read_key+0x232/0x4f0 [ 933.656420][T19226] keyctl_read_key+0x2c0/0x4f0 [ 933.656433][T19226] __ia32_compat_sys_keyctl+0x407/0x540 [ 933.656451][T19226] __do_fast_syscall_32+0xe8/0x680 [ 933.656472][T19226] do_fast_syscall_32+0x32/0x80 [ 933.656483][T19226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.656498][T19226] RIP: 0023:0xf7f96579 [ 933.656508][T19226] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 933.656520][T19226] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 933.656532][T19226] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000011676a80 [ 933.656540][T19226] RDX: 00000000800010c0 RSI: 0000000000001000 RDI: 0000000000000000 [ 933.656547][T19226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.656554][T19226] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 933.656561][T19226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.656577][T19226] [ 933.732793][ T5965] Bluetooth: hci4: command tx timeout [ 934.039415][T19222] vhci_hcd: connection reset by peer [ 934.046433][ T1248] vhci_hcd vhci_hcd.7: stop threads [ 934.048214][ T1248] vhci_hcd vhci_hcd.7: release socket [ 934.050077][ T1248] vhci_hcd vhci_hcd.7: disconnect device [ 935.815581][ T5965] Bluetooth: hci4: command tx timeout [ 936.102892][T19249] netlink: 'syz.9.3716': attribute type 29 has an invalid length. [ 936.115123][T19249] netlink: 'syz.9.3716': attribute type 9 has an invalid length. [ 936.614865][T11745] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 936.764859][T11745] usb 11-1: Using ep0 maxpacket: 16 [ 936.770626][T11745] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.775867][T11745] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.780462][T11745] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 936.786362][T11745] usb 11-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 936.790415][T11745] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.797539][T11745] usb 11-1: config 0 descriptor?? [ 936.952433][T19260] binder: 19259:19260 ioctl c0306201 0 returned -14 [ 937.376293][T19280] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 937.378807][T19280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 937.397699][T19280] vhci_hcd vhci_hcd.0: Device attached [ 937.578745][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3730'. [ 937.634341][ T55] usb 49-1: new low-speed USB device number 6 using vhci_hcd [ 937.894536][ T5965] Bluetooth: hci4: command tx timeout [ 938.524017][ T6783] usb 52-1: device descriptor read/8, error -110 [ 938.931322][ T6783] usb usb52-port1: attempt power cycle [ 939.355646][T19305] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3735'. [ 939.359577][T19305] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3735'. [ 939.423061][T19281] vhci_hcd: connection reset by peer [ 939.426133][T11745] usbhid 11-1:0.0: can't add hid device: -71 [ 939.428241][T11745] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 939.428752][T14391] vhci_hcd vhci_hcd.6: stop threads [ 939.440487][T14391] vhci_hcd vhci_hcd.6: release socket [ 939.443724][T11745] usb 11-1: USB disconnect, device number 20 [ 939.450341][T14391] vhci_hcd vhci_hcd.6: disconnect device [ 939.549951][ T6783] usb usb52-port1: unable to enumerate USB device [ 939.816746][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 939.908921][T19319] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3740'. [ 941.341459][T19347] FAULT_INJECTION: forcing a failure. [ 941.341459][T19347] name failslab, interval 1, probability 0, space 0, times 0 [ 941.347283][T19347] CPU: 1 UID: 0 PID: 19347 Comm: syz.6.3750 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.347328][T19347] Tainted: [L]=SOFTLOCKUP [ 941.347335][T19347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 941.347347][T19347] Call Trace: [ 941.347354][T19347] [ 941.347362][T19347] dump_stack_lvl+0x16c/0x1f0 [ 941.347395][T19347] should_fail_ex+0x512/0x640 [ 941.347417][T19347] ? __kmalloc_cache_noprof+0x5f/0x800 [ 941.347441][T19347] should_failslab+0xc2/0x120 [ 941.347469][T19347] __kmalloc_cache_noprof+0x80/0x800 [ 941.347490][T19347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 941.347517][T19347] ? snd_ctl_elem_add_compat+0x51/0x3f0 [ 941.347548][T19347] ? snd_ctl_elem_add_compat+0x51/0x3f0 [ 941.347574][T19347] snd_ctl_elem_add_compat+0x51/0x3f0 [ 941.347604][T19347] snd_ctl_ioctl_compat+0xac1/0xc70 [ 941.347633][T19347] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 941.347659][T19347] ? find_held_lock+0x2b/0x80 [ 941.347683][T19347] ? hook_file_ioctl_common+0x144/0x410 [ 941.347712][T19347] ? __fget_files+0x20e/0x3c0 [ 941.347737][T19347] ? __fput_deferred+0x430/0x480 [ 941.347761][T19347] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 941.347789][T19347] __ia32_compat_sys_ioctl+0x242/0x370 [ 941.347817][T19347] __do_fast_syscall_32+0xe8/0x680 [ 941.347849][T19347] do_fast_syscall_32+0x32/0x80 [ 941.347867][T19347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.347890][T19347] RIP: 0023:0xf701d579 [ 941.347905][T19347] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 941.347923][T19347] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 941.347941][T19347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105517 [ 941.347954][T19347] RDX: 0000000080001340 RSI: 0000000000000000 RDI: 0000000000000000 [ 941.347965][T19347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 941.347976][T19347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 941.347987][T19347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 941.348012][T19347] [ 942.033174][T12083] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 942.232118][T12083] usb 11-1: Using ep0 maxpacket: 32 [ 942.250570][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3751'. [ 942.268557][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3755'. [ 942.432197][ T6043] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 942.586004][ T6043] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.590001][ T6043] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.603039][ T6043] usb 12-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 942.614457][ T6043] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.632016][ T6043] usb 12-1: config 0 descriptor?? [ 942.751884][ T55] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 943.065717][T19373] ntfs3(nullb0): Primary boot signature is not NTFS. [ 943.072930][T19373] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 943.088418][ T6043] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 943.102513][ T6043] hid-steam 0003:28DE:1142.0012: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 943.171565][ T6043] hid-steam 0003:28DE:1142.0012: Steam wireless receiver connected [ 943.183865][ T6043] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 943.193876][ T6043] hid-steam 0003:28DE:1142.0013: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 943.296953][T12083] usb 11-1: unable to get BOS descriptor or descriptor too short [ 943.300886][T12083] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 943.304586][T12083] usb 11-1: can't read configurations, error -71 [ 943.364068][T11745] usb 12-1: USB disconnect, device number 23 [ 943.378036][T11745] hid-steam 0003:28DE:1142.0012: Steam wireless receiver disconnected [ 944.231498][ T40] audit: type=1804 audit(1766854192.884:946): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3760" name="/newroot/14/file0" dev="tmpfs" ino=90 res=1 errno=0 [ 944.501588][T19406] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 944.504345][T19406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 944.508092][T19406] vhci_hcd vhci_hcd.0: Device attached [ 944.549277][T19406] ================================================================== [ 944.552258][T19406] BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa94/0xb30 [ 944.555166][T19406] Read of size 1 at addr ffff88805b27fd50 by task syz.6.3762/19406 [ 944.560312][T19406] [ 944.561899][T19406] CPU: 3 UID: 0 PID: 19406 Comm: syz.6.3762 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.562060][T19406] Tainted: [L]=SOFTLOCKUP [ 944.562069][T19406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 944.562080][T19406] Call Trace: [ 944.562086][T19406] [ 944.562093][T19406] dump_stack_lvl+0x116/0x1f0 [ 944.562119][T19406] print_report+0xcd/0x630 [ 944.562142][T19406] ? __virt_addr_valid+0x81/0x610 [ 944.562165][T19406] ? __phys_addr+0xe8/0x180 [ 944.562192][T19406] ? ieee80211_add_virtual_monitor+0xa94/0xb30 [ 944.562212][T19406] kasan_report+0xe0/0x110 [ 944.562233][T19406] ? ieee80211_add_virtual_monitor+0xa94/0xb30 [ 944.562254][T19406] ieee80211_add_virtual_monitor+0xa94/0xb30 [ 944.562275][T19406] ieee80211_do_stop+0x1de1/0x2520 [ 944.562298][T19406] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 944.562317][T19406] ? do_raw_spin_lock+0x12c/0x2b0 [ 944.562336][T19406] ? mark_held_locks+0x49/0x80 [ 944.562349][T19406] ? __pfx_ieee80211_stop+0x10/0x10 [ 944.562366][T19406] ieee80211_stop+0x169/0x320 [ 944.562383][T19406] ? __pfx_ieee80211_stop+0x10/0x10 [ 944.562399][T19406] __dev_close_many+0x29b/0x700 [ 944.562421][T19406] ? __pfx___dev_close_many+0x10/0x10 [ 944.562443][T19406] ? __local_bh_enable_ip+0xa4/0x120 [ 944.562463][T19406] __dev_change_flags+0x4d8/0x6f0 [ 944.562481][T19406] ? __pfx___dev_change_flags+0x10/0x10 [ 944.562497][T19406] ? rtnl_is_locked+0x15/0x20 [ 944.562510][T19406] ? __pfx_netif_state_change+0x10/0x10 [ 944.562530][T19406] ? __pfx_validate_linkmsg+0x10/0x10 [ 944.562549][T19406] netif_change_flags+0x8d/0x160 [ 944.562567][T19406] do_setlink.constprop.0+0xb53/0x4380 [ 944.562588][T19406] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 944.562607][T19406] ? __lock_acquire+0x436/0x2890 [ 944.562619][T19406] ? fib6_rule_lookup+0x1a3/0x720 [ 944.562632][T19406] ? stack_depot_save_flags+0x29/0x9b0 [ 944.562651][T19406] ? lock_acquire+0x179/0x330 [ 944.562664][T19406] ? __pfx___might_resched+0x10/0x10 [ 944.562682][T19406] ? rcu_is_watching+0x12/0xc0 [ 944.562701][T19406] ? trace_contention_end+0xdd/0x110 [ 944.562714][T19406] ? __mutex_lock+0x27b/0x1ca0 [ 944.562735][T19406] ? rtnl_newlink+0x5f6/0x1f50 [ 944.562752][T19406] ? __nla_validate_parse+0x600/0x2880 [ 944.562772][T19406] ? __pfx___mutex_lock+0x10/0x10 [ 944.562792][T19406] ? apparmor_capable+0x1d7/0x4e0 [ 944.562811][T19406] rtnl_newlink+0x1807/0x1f50 [ 944.562832][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.562849][T19406] ? __kernel_text_address+0xd/0x40 [ 944.562864][T19406] ? unwind_get_return_address+0x59/0xa0 [ 944.562881][T19406] ? arch_stack_walk+0xa6/0x100 [ 944.562901][T19406] ? __lock_acquire+0x436/0x2890 [ 944.562913][T19406] ? stack_depot_save_flags+0x29/0x9b0 [ 944.562930][T19406] ? stack_trace_save+0x8e/0xc0 [ 944.562950][T19406] ? __pfx_stack_trace_save+0x10/0x10 [ 944.562973][T19406] ? find_held_lock+0x2b/0x80 [ 944.562989][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.563006][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.563023][T19406] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 944.563041][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.563059][T19406] rtnetlink_rcv_msg+0x95e/0xe90 [ 944.563078][T19406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 944.563099][T19406] ? __lock_acquire+0x436/0x2890 [ 944.563112][T19406] netlink_rcv_skb+0x158/0x420 [ 944.563132][T19406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 944.563150][T19406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 944.563178][T19406] ? netlink_deliver_tap+0x1ae/0xd30 [ 944.563199][T19406] netlink_unicast+0x5aa/0x870 [ 944.563220][T19406] ? __pfx_netlink_unicast+0x10/0x10 [ 944.563243][T19406] netlink_sendmsg+0x8c8/0xdd0 [ 944.563264][T19406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.563285][T19406] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 944.563310][T19406] ____sys_sendmsg+0xa5d/0xc30 [ 944.563330][T19406] ? iterate_inodes_from_logical+0xd0/0x220 [ 944.563350][T19406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.563369][T19406] ? get_compat_msghdr+0x11a/0x170 [ 944.563388][T19406] ? __pfx_futex_wake_mark+0x10/0x10 [ 944.563408][T19406] ___sys_sendmsg+0x134/0x1d0 [ 944.563425][T19406] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.563441][T19406] ? futex_private_hash_put+0x160/0x1b0 [ 944.563458][T19406] ? find_held_lock+0x2b/0x80 [ 944.563480][T19406] __sys_sendmsg+0x16d/0x220 [ 944.563496][T19406] ? __pfx___sys_sendmsg+0x10/0x10 [ 944.563512][T19406] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 944.563534][T19406] __do_fast_syscall_32+0xe8/0x680 [ 944.563556][T19406] do_fast_syscall_32+0x32/0x80 [ 944.563568][T19406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 944.563585][T19406] RIP: 0023:0xf701d579 [ 944.563598][T19406] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 944.563611][T19406] RSP: 002b:00000000f53cb55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 944.563625][T19406] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000140 [ 944.563638][T19406] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.563646][T19406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 944.563655][T19406] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 944.563664][T19406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 944.563678][T19406] [ 944.563683][T19406] [ 944.738884][T19406] The buggy address belongs to the physical page: [ 944.741090][T19406] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805b27fa80 pfn:0x5b27c [ 944.744360][T19406] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 944.747058][T19406] memcg:ffff88804bf12c02 [ 944.748402][T19406] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 944.750933][T19406] page_type: f8(unknown) [ 944.752396][T19406] raw: 04fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 944.755300][T19406] raw: ffff88805b27fa80 0000000000000000 00000000f8000000 ffff88804bf12c02 [ 944.758387][T19406] head: 04fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 944.761757][T19406] head: ffff88805b27fa80 0000000000000000 00000000f8000000 ffff88804bf12c02 [ 944.764612][T19406] head: 04fff00000000002 ffffea00016c9f01 00000000ffffffff 00000000ffffffff [ 944.767446][T19406] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 944.770335][T19406] page dumped because: kasan: bad access detected [ 944.772451][T19406] page_owner tracks the page as allocated SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 944.774905][T19406] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 18920, tgid 18919 (syz.6.3630), ts 917193103618, free_ts 917097483484 [ 944.782181][T19406] post_alloc_hook+0x1af/0x220 [ 944.783799][T19406] get_page_from_freelist+0xd0b/0x31a0 [ 944.785688][T19406] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 944.787654][T19406] alloc_pages_mpol+0x1fb/0x550 [ 944.789274][T19406] ___kmalloc_large_node+0x10c/0x150 [ 944.791057][T19406] __kmalloc_large_node_noprof+0x1c/0x70 [ 944.792911][T19406] __kvmalloc_node_noprof.cold+0xf/0x8e [ 944.794794][T19406] alloc_netdev_mqs+0xd7/0x1550 [ 944.796488][T19406] ieee80211_if_add+0x18a/0x1a10 [ 944.798242][T19406] ieee80211_add_iface+0xaf/0x560 [ 944.800080][T19406] nl80211_new_interface+0x6ba/0x1100 [ 944.801897][T19406] genl_family_rcv_msg_doit+0x209/0x2f0 [ 944.803728][T19406] genl_rcv_msg+0x55c/0x800 [ 944.805210][T19406] netlink_rcv_skb+0x158/0x420 [ 944.806781][T19406] genl_rcv+0x28/0x40 [ 944.808119][T19406] netlink_unicast+0x5aa/0x870 [ 944.809701][T19406] page last free pid 18923 tgid 18919 stack trace: [ 944.811861][T19406] __free_frozen_pages+0x7df/0x1170 [ 944.813698][T19406] __put_partials+0x130/0x170 [ 944.815435][T19406] qlist_free_all+0x4c/0xf0 [ 944.817228][T19406] kasan_quarantine_reduce+0x195/0x1e0 [ 944.819102][T19406] __kasan_slab_alloc+0x69/0x90 [ 944.820761][T19406] kmem_cache_alloc_node_noprof+0x298/0x800 [ 944.822769][T19406] __alloc_skb+0x156/0x410 [ 944.824292][T19406] rtmsg_ifinfo_build_skb+0x81/0x280 [ 944.826094][T19406] rtnetlink_event+0xf3/0x1f0 [ 944.827662][T19406] notifier_call_chain+0xbc/0x3e0 [ 944.829345][T19406] call_netdevice_notifiers_info+0xbe/0x110 [ 944.831362][T19406] call_netdevice_notifiers+0x7c/0xb0 [ 944.831622][T19413] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3765'. [ 944.833277][T19406] bond_set_dev_addr+0x194/0x1e0 [ 944.833304][T19406] bond_enslave+0x16fa/0x5fa0 [ 944.833318][T19406] do_set_master+0x40f/0x730 [ 944.833332][T19406] do_setlink.constprop.0+0xbd8/0x4380 [ 944.833350][T19406] [ 944.833354][T19406] Memory state around the buggy address: [ 944.833362][T19406] ffff88805b27fc00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 944.849602][T19406] ffff88805b27fc80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 944.852150][T19406] >ffff88805b27fd00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 944.854671][T19406] ^ [ 944.856824][T19406] ffff88805b27fd80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 944.859519][T19406] ffff88805b27fe00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 944.862194][T19406] ================================================================== [ 944.866747][T19406] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 944.869149][T19406] CPU: 3 UID: 0 PID: 19406 Comm: syz.6.3762 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.873118][T19406] Tainted: [L]=SOFTLOCKUP [ 944.874787][T19406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 944.878535][T19406] Call Trace: [ 944.879661][T19406] [ 944.880687][T19406] dump_stack_lvl+0x3d/0x1f0 [ 944.882247][T19406] vpanic+0x640/0x6f0 [ 944.883566][T19406] panic+0xca/0xd0 [ 944.884815][T19406] ? __pfx_panic+0x10/0x10 [ 944.886443][T19406] ? ieee80211_add_virtual_monitor+0xa94/0xb30 [ 944.888600][T19406] ? preempt_schedule_common+0x44/0xc0 [ 944.890520][T19406] ? preempt_schedule_thunk+0x16/0x30 [ 944.892363][T19406] check_panic_on_warn+0xab/0xb0 [ 944.894026][T19406] end_report+0x107/0x160 [ 944.895468][T19406] kasan_report+0xee/0x110 [ 944.896961][T19406] ? ieee80211_add_virtual_monitor+0xa94/0xb30 [ 944.899123][T19406] ieee80211_add_virtual_monitor+0xa94/0xb30 [ 944.901467][T19406] ieee80211_do_stop+0x1de1/0x2520 [ 944.903183][T19406] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 944.905192][T19406] ? do_raw_spin_lock+0x12c/0x2b0 [ 944.907089][T19406] ? mark_held_locks+0x49/0x80 [ 944.908842][T19406] ? __pfx_ieee80211_stop+0x10/0x10 [ 944.910628][T19406] ieee80211_stop+0x169/0x320 [ 944.912210][T19406] ? __pfx_ieee80211_stop+0x10/0x10 [ 944.913947][T19406] __dev_close_many+0x29b/0x700 [ 944.915565][T19406] ? __pfx___dev_close_many+0x10/0x10 [ 944.917652][T19406] ? __local_bh_enable_ip+0xa4/0x120 [ 944.919688][T19406] __dev_change_flags+0x4d8/0x6f0 [ 944.921774][T19406] ? __pfx___dev_change_flags+0x10/0x10 [ 944.923866][T19406] ? rtnl_is_locked+0x15/0x20 [ 944.925821][T19406] ? __pfx_netif_state_change+0x10/0x10 [ 944.928096][T19406] ? __pfx_validate_linkmsg+0x10/0x10 [ 944.930380][T19406] netif_change_flags+0x8d/0x160 [ 944.932075][T19406] do_setlink.constprop.0+0xb53/0x4380 [ 944.934036][T19406] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 944.936593][T19406] ? __lock_acquire+0x436/0x2890 [ 944.938950][T19406] ? fib6_rule_lookup+0x1a3/0x720 [ 944.941663][T19406] ? stack_depot_save_flags+0x29/0x9b0 [ 944.944327][T19406] ? lock_acquire+0x179/0x330 [ 944.946445][T19406] ? __pfx___might_resched+0x10/0x10 [ 944.948762][T19406] ? rcu_is_watching+0x12/0xc0 [ 944.950829][T19406] ? trace_contention_end+0xdd/0x110 [ 944.953001][T19406] ? __mutex_lock+0x27b/0x1ca0 [ 944.955190][T19406] ? rtnl_newlink+0x5f6/0x1f50 [ 944.957319][T19406] ? __nla_validate_parse+0x600/0x2880 [ 944.959761][T19406] ? __pfx___mutex_lock+0x10/0x10 [ 944.962060][T19406] ? apparmor_capable+0x1d7/0x4e0 [ 944.964306][T19406] rtnl_newlink+0x1807/0x1f50 [ 944.966259][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.968513][T19406] ? __kernel_text_address+0xd/0x40 [ 944.970969][T19406] ? unwind_get_return_address+0x59/0xa0 [ 944.973473][T19406] ? arch_stack_walk+0xa6/0x100 [ 944.975679][T19406] ? __lock_acquire+0x436/0x2890 [ 944.977880][T19406] ? stack_depot_save_flags+0x29/0x9b0 [ 944.980332][T19406] ? stack_trace_save+0x8e/0xc0 [ 944.982644][T19406] ? __pfx_stack_trace_save+0x10/0x10 [ 944.985065][T19406] ? find_held_lock+0x2b/0x80 [ 944.987240][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.989536][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.991868][T19406] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 944.994066][T19406] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.996328][T19406] rtnetlink_rcv_msg+0x95e/0xe90 [ 944.998593][T19406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.001048][T19406] ? __lock_acquire+0x436/0x2890 [ 945.003293][T19406] netlink_rcv_skb+0x158/0x420 [ 945.005414][T19406] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.008073][T19406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.010450][T19406] ? netlink_deliver_tap+0x1ae/0xd30 [ 945.012785][T19406] netlink_unicast+0x5aa/0x870 [ 945.014969][T19406] ? __pfx_netlink_unicast+0x10/0x10 [ 945.017186][T19406] netlink_sendmsg+0x8c8/0xdd0 [ 945.019342][T19406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.021985][T19406] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 945.024831][T19406] ____sys_sendmsg+0xa5d/0xc30 [ 945.026849][T19406] ? iterate_inodes_from_logical+0xd0/0x220 [ 945.029099][T19406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.031466][T19406] ? get_compat_msghdr+0x11a/0x170 [ 945.033684][T19406] ? __pfx_futex_wake_mark+0x10/0x10 [ 945.036072][T19406] ___sys_sendmsg+0x134/0x1d0 [ 945.038226][T19406] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.040598][T19406] ? futex_private_hash_put+0x160/0x1b0 [ 945.043086][T19406] ? find_held_lock+0x2b/0x80 [ 945.045229][T19406] __sys_sendmsg+0x16d/0x220 [ 945.047442][T19406] ? __pfx___sys_sendmsg+0x10/0x10 [ 945.049785][T19406] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 945.052292][T19406] __do_fast_syscall_32+0xe8/0x680 [ 945.054380][T19406] do_fast_syscall_32+0x32/0x80 [ 945.056483][T19406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.059316][T19406] RIP: 0023:0xf701d579 [ 945.061188][T19406] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 945.067933][T19406] RSP: 002b:00000000f53cb55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 945.070700][T19406] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000140 [ 945.073454][T19406] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.077113][T19406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.081041][T19406] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 945.084735][T19406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.088329][T19406] [ 945.090576][T19406] Kernel Offset: disabled [ 945.092542][T19406] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:37:05 Registers: info registers vcpu 0 CPU#0 RAX=00000000027a0479 RBX=0000000000000000 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca977 RDI=ffffffff8bf2b580 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088e8d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7393600 CR3=000000005f781000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffffc900077bf8e8 RCX=ffffffff89408c83 RDX=ffff8880218324c0 RSI=0000000000000000 RDI=0000000000000001 RBP=1ffff92000ef7ed6 RSP=ffffc900077bf6a8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff888021832ff0 R12=ffffc900077bf8f0 R13=ffffc900077bfd48 R14=0000000000000000 R15=ffff8880137f0b98 RIP=ffffffff81be58f0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7427250 CR3=000000005f781000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000f4dd4209 RCX=ffffffff84ab4024 RDX=ffff88802569a4c0 RSI=ffffffff84ab3fb5 RDI=0000000000000007 RBP=ffff88805e6ee739 RSP=ffffc900043af170 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000008c7 R11=ffff88802569aff0 R12=dffffc0000000000 R13=00000000000008c6 R14=00000000000008c6 R15=ffffc900043af3f0 RIP=ffffffff81be5956 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fa6e5c CR3=000000004f0fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7446ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85301205 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc90003a76670 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=000000000000005b R14=ffffffff9aed9220 R15=ffffffff853011a0 RIP=ffffffff8530122f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005825d4c0 CR3=000000005f781000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000