last executing test programs: 13m7.363006872s ago: executing program 3 (id=849): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40302, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0xffffffffffffffff, 0x100}, {0x8, 0xffffffff}, 0xff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) socket(0x1, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40302, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0xffffffffffffffff, 0x100}, {0x8, 0xffffffff}, 0xff}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) (async) socket(0x1, 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async) 13m7.306286283s ago: executing program 3 (id=851): r0 = syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) setresgid(0x0, 0xee01, 0xffffffffffffffff) setuid(0xee00) r1 = msgget$private(0x0, 0x383) msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ff"], 0x8, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) 13m6.437650749s ago: executing program 3 (id=872): gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) timer_create(0x7, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13m6.317659647s ago: executing program 3 (id=873): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x1000, 0x0, 0x42}, &(0x7f0000000200), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/49, 0x31}], &(0x7f0000000180)=[0xfffffffffffffff9], 0x1}, 0x20) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x12, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000805900", [0x8, 0xffffffff9673e35d]}}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r8, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 13m5.746731353s ago: executing program 3 (id=874): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r1, 0x2) mlockall(0x7) capset(&(0x7f00000000c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000100)={0x9, 0x1b, 0x1000005, 0x2, 0x6, 0xffe}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907"], 0xfdef) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000014c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x182c8101}, 0xc, &(0x7f0000001480)={&(0x7f0000001900)=ANY=[@ANYBLOB='`\n\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0xa60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 13m5.746401365s ago: executing program 3 (id=875): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x7, 0x3da38}) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_io_uring_setup(0x5a94, &(0x7f00000000c0)={0x0, 0x41d7, 0x8000, 0x0, 0x267, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r3 = syz_ublk_setup_io_uring(0xf45, &(0x7f0000000200)={0x0, 0x2e04, 0x800, 0x2, 0x39a, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, r4, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x64, 0x0, @fd_index=0x1, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, r5, r0}}) landlock_restrict_self(r0, 0xc) read$hiddev(r0, &(0x7f00000003c0), 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000001840)={0x6, &(0x7f0000001780)=[{0x7, 0xc2, &(0x7f0000000440)="7130fefbfd4bb7a79aad520e9ee7e41d38553596e2511c4fce4ec3c925d6421c2e24541b4b58c60e26124e5e250d4989710008ac0e3b444590e160185690385c8d75acb15fdf512f025688ce0cfee527b207a86b93a1531be4ada46aca9837ed9dcf5f8ea7458a190530eca0f0007a211da3e59d49e3fa30bf9f369994bf467da513fc435fe483f3aa9a1fe9e4de2e4c709a691e4a4522cd0e28ef9f34dc72328615230532ec7c3a733a72c41ec9c245cd774f28e335c2941e46c58bceae7e6014e3", 0x0, 0x1}, {0x7ff, 0x4f, &(0x7f0000000540)="431ee1091e6e3debcec58634910b1a16f5473fcf44c5c846234775cfc28eb5c6b355c7c58a23dce271a931cabacf4f1e98b6c2cac1a012bbc6812a095d59acf440791e913ef45176cb246f92dbdc4b", 0x1, 0x1}, {0x72, 0x1000, &(0x7f00000005c0)="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", 0x1, 0x1}, {0xee1, 0x2c, &(0x7f00000015c0)="054c402a3f2b1ae55609eea6236f48fc65e7600b188a305d3d226f4b4d50bdf512395792b35ef05d17a16e63", 0x0, 0x1}, {0x5, 0x7f, &(0x7f0000001600)="c246e45f4c8705dbefa1bf8bd97ab8db79c346088aff8abe67543351d8795eff70f4bd09c6295ee4ab4d4afa7944072d53d36307b639e6220ef3dfa6d0d77cf01b136a6672f4a931b6ea254b28bf406191d3b7c308f2336d8f0d60d407dad1ad0aa30554a3a86bae8e47c36c64a37d1028906ba7b8aa07e61ab70e8792549e", 0x1}, {0x6, 0xff, &(0x7f0000001680)="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", 0x0, 0x1}]}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) write$nci(r8, &(0x7f00000018c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x18, {0x0, 0x4}}, 0x5) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000001900)={0x3, 0x2, 0x2, 0x1, 0x4, 0x7}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001940)) sendmsg$nl_route_sched(r7, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0x9}, {0x10}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a80), 0x400002, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r9, 0x4008f510, &(0x7f0000001ac0)=0x5) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000001b00)=""/4096) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000002b00)={'bridge0\x00'}) sendfile(r8, r3, &(0x7f0000002b40)=0x9, 0x8) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000002b80)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000002bc0)={0x48, 0x1, r10, 0x0, 0x9, 0xb735}) newfstatat(0xffffffffffffff9c, &(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write$FUSE_CREATE_OPEN(r6, &(0x7f0000002d00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0xf88, 0x6, 0xb2, 0x7, {0x4, 0xbbc, 0xb, 0x7f, 0x3, 0x1, 0x0, 0x1, 0x3, 0xa000, 0x0, 0x0, r11, 0x281, 0x8000}}, {0x0, 0x15}}}, 0xa0) vmsplice(r1, &(0x7f00000030c0)=[{&(0x7f0000002dc0)="c6d94a918f0a5a7009d4581b75dad486e020b0bcd0e57fef0a7fd97c3b0e3933a5fdfc88831413ac243f2fc0d837c5010d313873d1c47fa733357c0f70223f991f1c7b18ea2a33edabcdfe292d0cefec9e24b1c4ccc90ebeecb704dd21ad2480c4fc23eb954bc2a264ea61ecb0", 0x6d}, {&(0x7f0000002e40)="cbb5f5e6f53cf277e73ae9cc212827e1f7c44b2ae05cf32040ae8fb079e24a3e17c13a77852978d2322b003a1d2d3f2f40a80e0868b6430df790317c76f9b843f1eb57ea2df6ad9e6063b3d221abe7df71e0a0a0404cf07d0c5e3f91470b2f4ad74011e19dfb4d9d6f5e02833993d54560d03eb752109ba4cda600358821df57de76d12a97d0c92bc7c3e2", 0x8b}, {&(0x7f0000002f00)="0ebf04ec1ed6b5313324c566f3545afe6207f2de0acefe40c966bc0bc4bf222b6f214babeb96ef26710cf22527d37a9cb6b1c217a21d9003ca629e883afbead9f7e364c18555ac71950dcbccd0d6f5da922e45a3474f6cea21b99e4b67bd69ca9a07fe30290a41771e3ad3bb6ce4fdc550711a4ec6aa0f33b8544ff53b1d9c7b7ec8080d9e22be9be4807ab611729900df2cf3222173814e1e12857667cdc8b57f3c4e22ec9f8d9dd68a57c4b0e4e4b07115d05c4295a40b182477a0dbf96194ab1677a8f295568829c80de6", 0xcc}, {&(0x7f0000003000)="e99a308575cd6b45b307d3f21e268464d5427865a16b2404c88583913b65dfabd5453a268ac8db386d30f9791e6349f9cf335372233e7100f78dea16d77742c1a5e38f2d5f838e2878467d96274dd3ea9061320f15030ab45cb0c24d8e9c1333c33fcf55d295dba3e60705c6495f5d2113031f2ff6bd62088d7b3ea106966f5c0ea49c292d74bb8ae4db0b503f11c5f5df4858", 0x93}], 0x4, 0x1) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000003100), &(0x7f0000003140)={0x0, 0xfb, 0xc9, 0x4, 0x3c, "e73d4318b5f7c58294d99aff486f3a0b", "3bc9e084a095d9b7a21d60ffe7b9689c5cc2425ba1d19109313611f348d8e067ad7d0fd98d8cca791f77cc6c8fe8d149ff1002f7b35aa3bbcb91f5d0a0aec739d3488282ce9f67ae14593a9f18f14d7d9bb7af9175820deb0585e3349330917c7a288aab9bda43b112253eca0e6b67ae95ee4dc9a998eda8845570cdffc3da18f553dcd6b895df1adb397221f6a10502fa1f205012d5a60909a0a0948ae7ec3e8bd4abc77fe77f006be29500215532d2b8420283"}, 0xc9, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000003240)="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") r12 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r12, 0x1, 0x39, &(0x7f0000003340), &(0x7f0000003380)=0x8) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000033c0), &(0x7f0000003400)=0x4) 13m5.667241766s ago: executing program 32 (id=875): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x7, 0x3da38}) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_io_uring_setup(0x5a94, &(0x7f00000000c0)={0x0, 0x41d7, 0x8000, 0x0, 0x267, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r3 = syz_ublk_setup_io_uring(0xf45, &(0x7f0000000200)={0x0, 0x2e04, 0x800, 0x2, 0x39a, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, r4, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x64, 0x0, @fd_index=0x1, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, r5, r0}}) landlock_restrict_self(r0, 0xc) read$hiddev(r0, &(0x7f00000003c0), 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000001840)={0x6, &(0x7f0000001780)=[{0x7, 0xc2, &(0x7f0000000440)="7130fefbfd4bb7a79aad520e9ee7e41d38553596e2511c4fce4ec3c925d6421c2e24541b4b58c60e26124e5e250d4989710008ac0e3b444590e160185690385c8d75acb15fdf512f025688ce0cfee527b207a86b93a1531be4ada46aca9837ed9dcf5f8ea7458a190530eca0f0007a211da3e59d49e3fa30bf9f369994bf467da513fc435fe483f3aa9a1fe9e4de2e4c709a691e4a4522cd0e28ef9f34dc72328615230532ec7c3a733a72c41ec9c245cd774f28e335c2941e46c58bceae7e6014e3", 0x0, 0x1}, {0x7ff, 0x4f, &(0x7f0000000540)="431ee1091e6e3debcec58634910b1a16f5473fcf44c5c846234775cfc28eb5c6b355c7c58a23dce271a931cabacf4f1e98b6c2cac1a012bbc6812a095d59acf440791e913ef45176cb246f92dbdc4b", 0x1, 0x1}, {0x72, 0x1000, &(0x7f00000005c0)="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", 0x1, 0x1}, {0xee1, 0x2c, &(0x7f00000015c0)="054c402a3f2b1ae55609eea6236f48fc65e7600b188a305d3d226f4b4d50bdf512395792b35ef05d17a16e63", 0x0, 0x1}, {0x5, 0x7f, &(0x7f0000001600)="c246e45f4c8705dbefa1bf8bd97ab8db79c346088aff8abe67543351d8795eff70f4bd09c6295ee4ab4d4afa7944072d53d36307b639e6220ef3dfa6d0d77cf01b136a6672f4a931b6ea254b28bf406191d3b7c308f2336d8f0d60d407dad1ad0aa30554a3a86bae8e47c36c64a37d1028906ba7b8aa07e61ab70e8792549e", 0x1}, {0x6, 0xff, &(0x7f0000001680)="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", 0x0, 0x1}]}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) write$nci(r8, &(0x7f00000018c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x18, {0x0, 0x4}}, 0x5) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000001900)={0x3, 0x2, 0x2, 0x1, 0x4, 0x7}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001940)) sendmsg$nl_route_sched(r7, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0x9}, {0x10}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a80), 0x400002, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r9, 0x4008f510, &(0x7f0000001ac0)=0x5) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000001b00)=""/4096) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000002b00)={'bridge0\x00'}) sendfile(r8, r3, &(0x7f0000002b40)=0x9, 0x8) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000002b80)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000002bc0)={0x48, 0x1, r10, 0x0, 0x9, 0xb735}) newfstatat(0xffffffffffffff9c, &(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write$FUSE_CREATE_OPEN(r6, &(0x7f0000002d00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0xf88, 0x6, 0xb2, 0x7, {0x4, 0xbbc, 0xb, 0x7f, 0x3, 0x1, 0x0, 0x1, 0x3, 0xa000, 0x0, 0x0, r11, 0x281, 0x8000}}, {0x0, 0x15}}}, 0xa0) vmsplice(r1, &(0x7f00000030c0)=[{&(0x7f0000002dc0)="c6d94a918f0a5a7009d4581b75dad486e020b0bcd0e57fef0a7fd97c3b0e3933a5fdfc88831413ac243f2fc0d837c5010d313873d1c47fa733357c0f70223f991f1c7b18ea2a33edabcdfe292d0cefec9e24b1c4ccc90ebeecb704dd21ad2480c4fc23eb954bc2a264ea61ecb0", 0x6d}, {&(0x7f0000002e40)="cbb5f5e6f53cf277e73ae9cc212827e1f7c44b2ae05cf32040ae8fb079e24a3e17c13a77852978d2322b003a1d2d3f2f40a80e0868b6430df790317c76f9b843f1eb57ea2df6ad9e6063b3d221abe7df71e0a0a0404cf07d0c5e3f91470b2f4ad74011e19dfb4d9d6f5e02833993d54560d03eb752109ba4cda600358821df57de76d12a97d0c92bc7c3e2", 0x8b}, {&(0x7f0000002f00)="0ebf04ec1ed6b5313324c566f3545afe6207f2de0acefe40c966bc0bc4bf222b6f214babeb96ef26710cf22527d37a9cb6b1c217a21d9003ca629e883afbead9f7e364c18555ac71950dcbccd0d6f5da922e45a3474f6cea21b99e4b67bd69ca9a07fe30290a41771e3ad3bb6ce4fdc550711a4ec6aa0f33b8544ff53b1d9c7b7ec8080d9e22be9be4807ab611729900df2cf3222173814e1e12857667cdc8b57f3c4e22ec9f8d9dd68a57c4b0e4e4b07115d05c4295a40b182477a0dbf96194ab1677a8f295568829c80de6", 0xcc}, {&(0x7f0000003000)="e99a308575cd6b45b307d3f21e268464d5427865a16b2404c88583913b65dfabd5453a268ac8db386d30f9791e6349f9cf335372233e7100f78dea16d77742c1a5e38f2d5f838e2878467d96274dd3ea9061320f15030ab45cb0c24d8e9c1333c33fcf55d295dba3e60705c6495f5d2113031f2ff6bd62088d7b3ea106966f5c0ea49c292d74bb8ae4db0b503f11c5f5df4858", 0x93}], 0x4, 0x1) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000003100), &(0x7f0000003140)={0x0, 0xfb, 0xc9, 0x4, 0x3c, "e73d4318b5f7c58294d99aff486f3a0b", "3bc9e084a095d9b7a21d60ffe7b9689c5cc2425ba1d19109313611f348d8e067ad7d0fd98d8cca791f77cc6c8fe8d149ff1002f7b35aa3bbcb91f5d0a0aec739d3488282ce9f67ae14593a9f18f14d7d9bb7af9175820deb0585e3349330917c7a288aab9bda43b112253eca0e6b67ae95ee4dc9a998eda8845570cdffc3da18f553dcd6b895df1adb397221f6a10502fa1f205012d5a60909a0a0948ae7ec3e8bd4abc77fe77f006be29500215532d2b8420283"}, 0xc9, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000003240)="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") r12 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r12, 0x1, 0x39, &(0x7f0000003340), &(0x7f0000003380)=0x8) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000033c0), &(0x7f0000003400)=0x4) 11m25.315252848s ago: executing program 0 (id=2066): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x5, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) 11m25.315080492s ago: executing program 0 (id=2067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc020) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) 11m25.255197452s ago: executing program 0 (id=2069): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) 11m25.186380394s ago: executing program 0 (id=2071): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x200880, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) renameat2(r4, &(0x7f0000000780)='./file0\x00', r1, &(0x7f0000000000)='./file7/file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r5, &(0x7f0000000240)=""/157, 0x9d) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x200880, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) renameat2(r4, &(0x7f0000000780)='./file0\x00', r1, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) (async) getdents64(r5, &(0x7f0000000240)=""/157, 0x9d) (async) 11m25.132536151s ago: executing program 0 (id=2072): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0xc, 0x7}, {0xe, 0x80000000}]}, 0x18, 0x0) syz_80211_join_ibss(&(0x7f0000000580)='wlan0\x00', &(0x7f00000005c0)=@default_ibss_ssid, 0x6, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r6 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$sg(&(0x7f0000000680), 0x7, 0x4100) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000700)) ioctl$SG_GET_COMMAND_Q(r10, 0x2270, &(0x7f00000006c0)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r9) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x18) syz_80211_join_ibss(&(0x7f0000000600)='wlan1\x00', &(0x7f0000000640)=@default_ap_ssid, 0x6, 0x0) 11m24.875072597s ago: executing program 0 (id=2074): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x5, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) (fail_nth: 3) 11m24.810441879s ago: executing program 33 (id=2074): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x5, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) (fail_nth: 3) 2m38.082106349s ago: executing program 2 (id=6834): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x1, 0x89, 0x8, &(0x7f0000000240)={0x1b, "0021000700000000000000200000000000ac00"}}) 2m36.70098896s ago: executing program 2 (id=6841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x31, 0x3, 0x5, 0x7}}]}]}}}]}, 0x70}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', r4, 0x29, 0x9, 0x1, 0x7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x1, 0x2, 0x400}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0xfa, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x7f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r11, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1d0, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20006804}, 0x80) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r12 = socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}) ioctl$PPPIOCSFLAGS(r12, 0x40047459, &(0x7f0000000000)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r13, 0x500, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) sendto$packet(r1, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @local}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002403000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000018e808116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m35.777350359s ago: executing program 2 (id=6847): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000019c0)={&(0x7f0000000700)="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", &(0x7f0000001700)=""/72, &(0x7f0000001780)="61b8ca224c5b94dec0f2b58caa0cd17de13466587d111ee7490dc01f36dc5d2bd8d6ea818adf376ff2da21b3a84df9ba2f353df588391df4176a502e216b6292ab1f63f444dba1f5e71c23c8053cd59d89711c2b9f3254391d0f438634a4305aff5f8d6711e9ddbc250e830b11b7277a184649f9e511783f1db8162a584c429d91fb29eb83c1ab71750b86dab62f7ff2fddc19552649976f798db33de6e40ca88dff142f2554696d8bd9472ec61624c030d9f33c0515132afb217bcf5f0f0068c1", &(0x7f0000001880)="e5318fc9a3cedc17ed7246c71e5c0dbf754d309db54d00ae581a8a75d6a236e086d7dd65846f7dfe481fbc23ea30b964f4efc9fecc29b7237db94cf34771138ca69e6f73539f0c8dae9fd098b7e946f509bd6d57e72bcff680adf492d1dd63c0b8b5291171f7785987ef397e6d6f661ab8081f93b912dcc669df61d7024a6566e42fce58", 0x4e, r0, 0x4}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0x8000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) close_range(r3, r3, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010004000000000000000a"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000180a05000000000000000000020000001c0003801800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a30"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x44, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x60}, @NL80211_ATTR_PMKID={0x14, 0x55, "b9566f6833ec2ecacf8b3321ce6bd728"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80080a4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2m35.77700826s ago: executing program 2 (id=6848): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = dup3(r0, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000980)=ANY=[@ANYBLOB="060000003a000000080100000200000000000000fbd39524", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000900)={@fallback=r3, 0xffffffffffffffff, 0x2c, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x34, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="03"], 0xfd1, 0x800) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r11, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x9, 0x3745bd, 0x2131db}) 2m35.698690672s ago: executing program 2 (id=6850): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x13, &(0x7f0000000040)=[{0x23, '\x00', @st={0x4, [{0x1, @svalue=0x7}, {0x3, @uvalue=0x3}, {0x0, @svalue=0x5}, {0x2, @uvalue=0x1}]}, 0x1}]}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) creat(&(0x7f0000000000)='./file1\x00', 0x4) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000040)) 2m35.638148737s ago: executing program 2 (id=6853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x10, 0x3, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000280)=""/112, &(0x7f0000000300)=0x70) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r5, 0x9, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 2m20.645675118s ago: executing program 34 (id=6853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x10, 0x3, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000280)=""/112, &(0x7f0000000300)=0x70) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r5, 0x9, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 2m11.706537777s ago: executing program 1 (id=7078): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000001a40)=[{0x68d, 0x200, 0x0, 0x0}], 0x1}) 2m10.468348284s ago: executing program 1 (id=7085): r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f00000001c0)=[@out_dx={0x6a, 0x28, {0xfed1, 0x0, 0x64}}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x9e, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16, 0x5a, 0x401}}, @wr_crn={0x67, 0x20, {0x3, 0x5}}], 0xe8}) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f00000004c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0xa, 0x3, 0x3a) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, 0x0, &(0x7f0000000200)) io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0x6, 0x10}, {0xff, 0x101, 0xff, 0x3, [0x56e, 0x8, 0xffff, 0x1000]}}}}, 0x1d) 2m9.690008549s ago: executing program 1 (id=7091): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x6, 0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x0, 0x1, {0x4, 0x1}, {0x2a, 0xffff}, @cond=[{0x10, 0x10, 0xcf, 0x8, 0x1, 0x3}, {0x271e, 0x4, 0x1, 0x7f, 0xfffe, 0x7ff}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r6, &(0x7f0000000040)="ec", 0x15ee) sendmsg$NFT_BATCH(r3, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x2d4, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0xcd, 0x6, "d9513c95006f9e0ff3704e198662db69cdaa2031a61473e988cb2faa68fa3301dc0901d4fc9356ded30116c0e337813fb946c72d79e8c9920aeacbe95aa11a77a47ff39d32b1ddc2583b3d72785f92fef5b6cb0cf5b6ccfc41116f85ed14f24c57ba6a9ff1c1d92bfcaba82c937099cd5b4ffe5bb0d1628728ffa17284d5e770a5db496f576a391f540237c9abae7fed52cf67a700d88d2aa6c16084a66c7f380240541fb2b37980bb4fe4dbf8a64c86bf2ec8b5079e6c6f6269141401578a0279c64f696153eeceec"}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "95a37a9f49b8a1de40e3edd006a6188ca22100e05fcce4a4bc58436a16b86f7c8ff6ce7cb9045c2103aa6dec67a29eba47bcb118c7e4e328fdd1e8cc0e8775aab7376fbe49305ed0b6c64c138e7c7f4c808427b95ffa588b8363d39c905d6af6655116b5697aecae4ee3cbbbf8da40264d6dd7f9066312b3de27c508b9d170b834e5b7ac4609ecc7e58720d6b767900d3af4b96113d334fbc27223a17d8bab1172045543d1e6cb66fb6c6f43afba96dc9628fb624d4d7d058d0e9845c000d82362cf58e81b49688fea22b6dd1efaf8a75d4022f9f4830abe2dbff262864761add854be6301e8c4b3a5146f379600f7b902a9e5a0702ae4fb6f"}, @NFTA_TABLE_USERDATA={0x28, 0x6, "80f3ead129b661b12b6f8dbaedb86cfce05886009b24635eb7ec2091a9722e237e6a793c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xad, 0x6, "8a3b61f8d8083d10fa88d5d5998b36c19ffed25a54ad694069599383d3138584f959c5f4002adca8e344f6bf21d00cfb54ca8f1f1af5e90242cdb69cc546bf18108ecb41decfd255d00db1fb930d888b82566503a5e27cda40af490a717bb81ce518e03834a1a63992d05eb85a26607587bdbdc6f11c8c9cb18c871b74d852d627c59e67112d537b30fa50225d56744a16e087ef59f8f3e7da787ca3556c8a9af90bc1cb28952f3cb1"}]}, @NFT_MSG_DELFLOWTABLE={0xec, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ed8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x305, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xae, 0xc, "5acd124021998eacea07a7f1d8312941ccc3d6138233cd262ebb5747bef9565dd75dcabeafb561b1c45793ac615b02b39486c1f149ebfe4c97cdbf34e2178a60ebe4bc41bef23ec36a228a05bcbc85c497f0410e2dcf91f1bc3e0b647b036352e3eed83f1b93577ece6bff165f54b27f8aa5f2c0d76a405733601404ffee40f40ae3e67cc9127bf70e5fd6838422368b14b450b39f7334f6c2ef8dd970a32a3e2117a26ae913cae04f7f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x558}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20020804) 2m8.817478268s ago: executing program 1 (id=7101): openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x2d4, 0x31, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x100e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa3e}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x953}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) 2m8.723524098s ago: executing program 1 (id=7102): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x30}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)="a5dd44ab24538f9278a1b03e88fb", 0xe}], 0x1}, 0x0) 2m8.336986096s ago: executing program 1 (id=7104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x2800, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) setuid(0xee00) prlimit64(0xffffffffffffffff, 0xb62f5c8e468bc9c2, &(0x7f0000000000)={0x8, 0x5}, &(0x7f00000000c0)) write$binfmt_format(r1, &(0x7f0000000080)='0\x00', 0x2) 2m8.232596823s ago: executing program 35 (id=7104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x2800, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) setuid(0xee00) prlimit64(0xffffffffffffffff, 0xb62f5c8e468bc9c2, &(0x7f0000000000)={0x8, 0x5}, &(0x7f00000000c0)) write$binfmt_format(r1, &(0x7f0000000080)='0\x00', 0x2) 2m2.137941292s ago: executing program 6 (id=7160): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x22) kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f93", 0x8f, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9", 0xdf, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd", 0xe7, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)}, {&(0x7f0000000740)}], 0x3}, 0x41) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c753", 0x4}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 2m1.928074806s ago: executing program 6 (id=7161): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34fffff0", @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c00"], 0x34}}, 0x20048054) 2m1.927826719s ago: executing program 6 (id=7162): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="a5dd44ab24538f9278a1b03e892f", 0xe}], 0x1}, 0x0) 2m1.896814814s ago: executing program 6 (id=7163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x2) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffd, 0x3, 0xffffffff, 0x7}) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000080)=0x17, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x10002, 0x0, 0x2c}, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r4, r5, 0x0, 0xffffffff004) write$dsp(r5, &(0x7f0000000300)="cd8a9d9e9f010000001bab8aee1c5469a9496fac165024448ebd090f0dd6f6ac92278ee02178881f339cb801ea1e970518b55e40669b", 0x36) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f00000002c0)={0xe480000000000000, 0x5000, 0xfffffffffffffffd}) 2m0.988164121s ago: executing program 6 (id=7167): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000190000007f000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r3], 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r4, r5, 0x0, 0xffffffff004) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) 2m0.416110609s ago: executing program 6 (id=7172): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_open_dev$vim2m(&(0x7f0000000040), 0x400008, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x200000001}) 2m0.3485923s ago: executing program 36 (id=7172): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_open_dev$vim2m(&(0x7f0000000040), 0x400008, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x200000001}) 1m7.467684565s ago: executing program 4 (id=7662): r0 = socket$netlink(0x10, 0x3, 0xe) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x301a}) r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) munmap(&(0x7f0000aa0000/0x2000)=nil, 0x2000) sendfile(r0, r0, 0x0, 0x30) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f00000000c0)={0x1, 0x40, 0x80002000, 0x1, 0x2080000000, 0xa, 0xb, 0x1a, 0x0, 0x3, 0x1aca00, 0x5}) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'macvlan0\x00', {0x2}, 0x108}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r5, &(0x7f0000000280)='A', 0x1, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x4}, 0x3}) 1m4.437275605s ago: executing program 4 (id=7687): ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0xc, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x80, 0xff, 0x0, 0x5, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x87, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x80b00, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b7d0510"], 0xe) 1m4.436984218s ago: executing program 4 (id=7688): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x20}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) set_mempolicy(0xc005, 0x0, 0x5) recvfrom(r0, &(0x7f0000000080)=""/36, 0x24, 0x60, 0x0, 0x16) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @any, 0x0, 0x9, 0x4, 0x4, 0x0, 0x0, 0x9386}) close_range(r0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x0}, &(0x7f00000004c0)="c2", 0xf, 0xfffffffffffffffb) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 1m4.297526234s ago: executing program 4 (id=7689): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x27, 0x3, 0x7f, "71100c5a53dc1a2018273e412643bde8", "e2ee9712520d54abc0fec1b071a531f97bcd"}, 0x27, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000300)={{@local, 0x800044}, @local, 0x0, 0x8001, 0x4, 0xfffffffffffffffb, 0x4, 0x8000000}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, @any, 0x0, 0x7, 0x4, 0x8000000000000001, 0x8, 0xe, 0x9388}) 1m4.164814152s ago: executing program 4 (id=7690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000022c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1654}, 0x1, 0x0, 0x0, 0x10000800}, 0x24000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x59888, 0x55085}, [@IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="68000000170a030000000000000000000a000004340003800800000008000240000000080800024000008000180003801400010076657468305f746f5f627269646765000900010073797a310000000008000740000000000900010073797a3100000000e9257f2b9420b28c6062"], 0x68}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xac, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x84, 0x4}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x40, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x38, 0x2, "931efb985ae41e347eec3cec1bcc50c51d6cadf120c8186ffce879a0525972369bce61cca9eb62b3029f02bb76b941ddf65e3669"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0xac}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x824}, 0x8010) 1m3.935923121s ago: executing program 4 (id=7691): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000097e968be5519d736b6248fef617c7638913a55c8740fd781414c0593f04f09323cc38be284371793f17f41ac8d7d4ef9eb56bb192599d9d013802282fed9b5ed80aa895f"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000001a40)=[{0x68d, 0x200, 0x0, 0x0}, {0xb0, 0x800, 0x0, 0x0}], 0x2}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 1m3.886979526s ago: executing program 37 (id=7691): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000097e968be5519d736b6248fef617c7638913a55c8740fd781414c0593f04f09323cc38be284371793f17f41ac8d7d4ef9eb56bb192599d9d013802282fed9b5ed80aa895f"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000001a40)=[{0x68d, 0x200, 0x0, 0x0}, {0xb0, 0x800, 0x0, 0x0}], 0x2}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 4.166007589s ago: executing program 9 (id=8269): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x7, 0xff]) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0) r2 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x18, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x30, @string={0x0, 0x3, "fd0a78034cf6448fb4e6533ede5a356c1d8569df6da7fffab998da1277effd79e2dcfab08e1d39445e13f6c58af7d334fc4f5b69c94fb7315ab401104e741d757089158c944695e00ba8fcb73328ae70b59d720f5ad9bce13339"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="efffffffffffffff"], 0x0, 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x80, 0x20, 0xa, 0x7fff, "8033034f14d7888ed628f50f77a3a770fdc16eaf0fee966d84027493960fa651"}) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.583478314s ago: executing program 9 (id=8282): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) pselect6(0x40, &(0x7f0000000100)={0x6, 0xfefdffff, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.916480732s ago: executing program 7 (id=8285): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x5, 0x80000000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) 1.916104173s ago: executing program 7 (id=8286): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.865944074s ago: executing program 7 (id=8287): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)='5', 0x1}], 0x1}}], 0x3, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000ac0)={0x1, 0x0, @raw_data=[0xdc, 0x8000, 0x7f, 0x3c000, 0x80, 0x2, 0x8, 0x2, 0x6d, 0x7, 0x97, 0x7fffffff, 0x1000, 0x0, 0x2]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x178, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x148, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x0, 0x80000001, 0x15, 0x15, 0x19, 0x6}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x61}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x2, 0x8, 0x0, 0x1e, 0x11, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x40000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b36b7445e98fbba8"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "92ce91e7bf60703e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="083469fe31af8e9c5b4002b0d946dc08"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6c4b9b6bb4fbb754948e9e54e661ca67"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6414e2b3147749b874fb50e194fa2e50"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fef2d016fdee0988"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="46e95eaeb1a097412fd2ff750bd09b3a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa62d0adebb4d43144faf90dd15c636e"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dd7c4096b37d73d8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0f3e2d8122b1063d3e7c879658652ad5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6ee0f8f2ca56adb3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "51e7064722ae07be"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2fb1e672e8652ac4dc8a32ad9f1a7b03efc38f7fa5f529c5158a1071f0e261b1"}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.646008025s ago: executing program 7 (id=8289): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.644617873s ago: executing program 7 (id=8291): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x7, 0xff]) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0) r2 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x18, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x30, @string={0x0, 0x3, "fd0a78034cf6448fb4e6533ede5a356c1d8569df6da7fffab998da1277effd79e2dcfab08e1d39445e13f6c58af7d334fc4f5b69c94fb7315ab401104e741d757089158c944695e00ba8fcb73328ae70b59d720f5ad9bce13339"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="efffffffffffffff"], 0x0, 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x80, 0x20, 0xa, 0x7fff, "8033034f14d7888ed628f50f77a3a770fdc16eaf0fee966d84027493960fa651"}) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.576079937s ago: executing program 8 (id=8293): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x6, 0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x0, 0x1, {0x4, 0x1}, {0x2a, 0xffff}, @cond=[{0x10, 0x10, 0xcf, 0x8, 0x1, 0x3}, {0x271e, 0x4, 0x1, 0x7f, 0xfffe, 0x7ff}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r6, &(0x7f0000000040)="ec", 0x15ee) sendmsg$NFT_BATCH(r3, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x2cc, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0xcd, 0x6, "d9513c95006f9e0ff3704e198662db69cdaa2031a61473e988cb2faa68fa3301dc0901d4fc9356ded30116c0e337813fb946c72d79e8c9920aeacbe95aa11a77a47ff39d32b1ddc2583b3d72785f92fef5b6cb0cf5b6ccfc41116f85ed14f24c57ba6a9ff1c1d92bfcaba82c937099cd5b4ffe5bb0d1628728ffa17284d5e770a5db496f576a391f540237c9abae7fed52cf67a700d88d2aa6c16084a66c7f380240541fb2b37980bb4fe4dbf8a64c86bf2ec8b5079e6c6f6269141401578a0279c64f696153eeceec"}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "95a37a9f49b8a1de40e3edd006a6188ca22100e05fcce4a4bc58436a16b86f7c8ff6ce7cb9045c2103aa6dec67a29eba47bcb118c7e4e328fdd1e8cc0e8775aab7376fbe49305ed0b6c64c138e7c7f4c808427b95ffa588b8363d39c905d6af6655116b5697aecae4ee3cbbbf8da40264d6dd7f9066312b3de27c508b9d170b834e5b7ac4609ecc7e58720d6b767900d3af4b96113d334fbc27223a17d8bab1172045543d1e6cb66fb6c6f43afba96dc9628fb624d4d7d058d0e9845c000d82362cf58e81b49688fea22b6dd1efaf8a75d4022f9f4830abe2dbff262864761add854be6301e8c4b3a5146f379600f7b902a9e5a0702ae4fb6f"}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "80f3ead129b661b12b6f8dbaedb86cfce05886009b24635eb7ec20"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xad, 0x6, "8a3b61f8d8083d10fa88d5d5998b36c19ffed25a54ad694069599383d3138584f959c5f4002adca8e344f6bf21d00cfb54ca8f1f1af5e90242cdb69cc546bf18108ecb41decfd255d00db1fb930d888b82566503a5e27cda40af490a717bb81ce518e03834a1a63992d05eb85a26607587bdbdc6f11c8c9cb18c871b74d852d627c59e67112d537b30fa50225d56744a16e087ef59f8f3e7da787ca3556c8a9af90bc1cb28952f3cb1"}]}, @NFT_MSG_DELSETELEM={0x58, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xec, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ed8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x305, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xae, 0xc, "5acd124021998eacea07a7f1d8312941ccc3d6138233cd262ebb5747bef9565dd75dcabeafb561b1c45793ac615b02b39486c1f149ebfe4c97cdbf34e2178a60ebe4bc41bef23ec36a228a05bcbc85c497f0410e2dcf91f1bc3e0b647b036352e3eed83f1b93577ece6bff165f54b27f8aa5f2c0d76a405733601404ffee40f40ae3e67cc9127bf70e5fd6838422368b14b450b39f7334f6c2ef8dd970a32a3e2117a26ae913cae04f7f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5a8}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20020804) 1.356080634s ago: executing program 9 (id=8299): syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x6b26, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$generic(r0, 0x0, 0x2c, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x700, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.28588945s ago: executing program 9 (id=8300): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) socket(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', '', [], 0x8, "2c36ce35fe800000000040009d94165f433d388e6577f86274e326d04670000000002c00"}, 0x5ac) 1.285261547s ago: executing program 9 (id=8302): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0xc, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x80, 0xff, 0x0, 0x5, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x87, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x5, 0x0, 0xddd55000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{}, 0x1, 0x0, 0x4d}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x2d, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x8, {0x4, 0x1, 0x8000000000, 0x9, 0xebd, 0x0, {0x5, 0x0, 0x4, 0x0, 0x20000, 0x20000, 0x3, 0x0, 0x0, 0x4000, 0x0, r7, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@newsa={0x1a0, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x4e24, 0x2, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3c, 0x0, r7}, {@in6=@private2, 0x4d6, 0xff}, @in=@empty, {0x8000000000000000, 0x5, 0x8e, 0xc, 0x800, 0x77, 0x101}, {0xffffffffffffffff, 0x10001, 0xe, 0x7}, {0xb, 0x5, 0x10}, 0x70bd2a, 0x0, 0xa, 0x0, 0x7, 0x6}, [@algo_aead={0x72, 0x12, {{'aegis128l-generic\x00'}, 0x130, 0xc0, "dbbae1b80a46dfc7cb69a2fe3425dd9a52dbd2fa02ca416a1829d20f7ae6ce83aa1c9cee8ef4"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1ff}, @policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x3, 0x4}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000040}, 0x280c0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x2000800) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.045939477s ago: executing program 5 (id=8304): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@remote, @dev={0xfe, 0x80, '\x00', 0x2f}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000940)=0x9, 0x4) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x800}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) 1.045627329s ago: executing program 5 (id=8305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x64, r1, 0x1, 0x70bd28, 0x1000000, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 976.385545ms ago: executing program 5 (id=8306): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x3fffffffff, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) 685.076834ms ago: executing program 8 (id=8307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x3d, 0x6}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x7, @local, 0x22}}, 0x0, 0x0, 0x47, 0x0, "d97ecad505a019c18aa0b7ec202a00010000df587e617d0300000066cbce92dd6562350f9821110b2c3be785859d4a8f0fe1e1b24900000000000000000100"}, 0xd8) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 625.001344ms ago: executing program 8 (id=8308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x64, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) (fail_nth: 8) 624.877009ms ago: executing program 8 (id=8309): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b00140000000002e700000000000700000007038b0100000000"], 0x38}, 0x0) 555.032252ms ago: executing program 8 (id=8310): syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "00001000", "dba30c001ed2f13f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000700000a0000040900010073797a310000000008000540000000020900020073797a31000001000000000000000000140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x3) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x4) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000002b40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @loopback}}}], 0x15}}, {{&(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000280)="b67f75ff74a7218b1250ab0c157a69a7728ebb94e20b51343b3d96732d55ab73ce18dd727052a99ef28eca538515ea041be38603c53f11f10fda41ead7345852ddc276a5a56cc1868a338946cf74ab362bc1b494c47bd301d7ded6eadfdb2d9ac33634af21c7d82255f6644075f5da6dd4b354a1a2f484ac73d2b8dc5ccfbee3ee230590faaec832be7fcae3905ff4bb8390b55dd03a8108711b89740fa70ac5bb20b570336611daf38d554917063b3076701fafc973e0a76ee852114dbc2a3a2f9d19b19f48a0ddfe405625c5ddbbed87dc0b943704640a09335994eee7706e72", 0xe1}, {&(0x7f0000000380)='6', 0x1}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="c02d49f61e04e3a5d5a2823bc7977f1951a2df76ff2774bce689ab8070cb27028bf17d42839860a24d7193f5d639bfd9777273e3c03ea4dd65b6754d2321b5f952df56dbdda0e00cd1f5faaff3265732c99089387e2d0157cd523acb8e22b526411b5d5f4aefd54188ae74d6ecf5dd24b4dafc9c2e3b62bb24da3e495f", 0x7d}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000580)="98a702388fd40c36ca293d64490bdb963fbf84b902929b0de18f8e48c4601241474be3c37cbfd63afb1623675990f5783e3e24d4254c7ff88e92c56348eeb60b21852c71b15a8a3c47025b2d80a654970821a10f", 0x54}, {&(0x7f0000001fc0)="252d685c43eb0c6c2d63ef086fe51ce3ea5c64b6ef0d5a9efb70d180f447586a1250e473476c42bcbcd31b0ce3b14ed08319c933ace51e5148342941f36b51da3163a0d01ec4d15d53f3d4458ce9962c5dc7e880275434754782a5e591cacb857e0bcd2151fca3d0802886c0d96d43478db236d9cd9c54", 0x77}], 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0a01010264010102000000001100000000000000000000000100000002000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="e0040001ac1e010100000710000000000000", @ANYRES32=r8, @ANYBLOB="e0000001e0000001000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac1414bbac1414bb00000000140000000000000000000000010000000900000000000000"], 0x1b8}}, {{&(0x7f0000002280)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000002480)=[{&(0x7f00000022c0)="dddaa2d0b90803aff6ade61de87568cf5943f0d3f9cf8b2c0fe07234c8b9ed33fc8ca5e96560974ebd2093ae5b4112de7d675d631fda0156b0d7341d3e50329f2fef884e9ac26a3c6ab395782ba224f7b71776b591872b7340f9bea9b0449d9685ff6587d4db3f9ce301ad71440c34b23f009c525d8bae881f9934a3913abef11b9e8eb9bbc54cc80c1f24", 0x8b}, {&(0x7f0000002380)="16d6bd341ffbcc4cdd68793bd42ce2bbbeacec6cc02240c89fb0f6c2400cdfb693acc63d06c5fb481c752a73afe7b73a4c93a38797becc42e3c58892dea1a9d2ea4a991594b9189a47a7233d", 0x4c}, {&(0x7f0000002400)="81baaa151cd86490120d1254d079d56e7781b233509db98bff60b3424094f73fdffd2664971fd1f87aa87b8a4f670c18634f29591bda2bd1dbf54eb27c6ec67980f014c9d3e7a2653be68bfcc75bd3da8166d1edbaf6dc", 0xffffffffffffff17}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000000000010000000800000000000000140000000000000000000000010000005200000000000000831b60ac1414bbac1414aaac1414aaffffffff0a0101020a010100940543bcd1862100000003070b61bc1beff0965e042101104d0b072c49315e5ebae439ac465c44143301ac1414aa00000083ac1414aa00000001000000140000000000000000000000010000000500000000000000280000000000000000000000070000008917417f000001ffffffff64010100ac1414aa0000000000110000000000000000000000010000006d00000000000000000000000000000000bec7a45378c80800000000000000"], 0xf0}}, {{&(0x7f00000025c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002600)="1395323c520c9fb6375d", 0xa}, {&(0x7f0000002640)="936f88db0a08451d1936ca774cb68f2903e51cf0b2dc274b2a084fd9d804131a8094c147eeda1d0894c12c46f941d6217fa4b8a6e5c6a792b83a15e598faeeb22dd1aa263906b05449bf9365710375751435f3958919de6f47c09ef99014e8ebc991fcbc100eb4c037ad61597378d16ccbb212469117234bb5cb12d29a4a81f082fceac1f7ce0675fda905382b87f05f2b8f30757758b569a3cef96d58f4c123fcbd62eb24", 0xa5}], 0x2}}, {{&(0x7f0000002740)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000002780)="45ed0a68e90d670bc5226cf8a3561d6a20fe623b6acde68dcc60e6b26f309c7d421101885adf2d150be81d98155c3170ab8b4e3dba131fbaaf51a0ecf10f9d8343ff11f9834e695e1e0dcb4ba2a31effff6d331f7f9d4a1524d3ade390b4527b8b721f5b466361c3de85779cf36070c2e05d64594adacd7bc6db7f0cc55b8efbeebbc74bdbe46570fe1372e42b02705f7fc43be4fef6b3dc1fcccb71c6b60ebc017475e836d51e101d4e45e60290afe5e065720d870c781bcc2486d7bb754ea3a348c001c4c200", 0xc7}, {&(0x7f0000002880)="a6e0dca681ede62c6987e78953a1e0f7637bf2f22164f8d058f1965c9454857cd3dd91ce88f0cafe3c0bee666f19d8e019d77c5deb7d5b5bcc33a71c5d32cd1dd5f583dbf4b138039f21c4bbbbabc7965e0bdaaa50e76302b5ba0071da4849e750d749ce34be384e4c4fb5c3ab7b20121566c973baeb54e4379599acc2d934e0c7867404c3036237a825a2e663472d802b210385ef42229ef5fe579a249ec72404dde3bb98d9ce8aad6554b9de0f22847f343ea94f36c4540a5755cec0d205dd0f5b8a4cd1412f7fc6dae1", 0xcb}, {&(0x7f0000002980)="7c9ecaa94208c116f2ee4d16ee063cd0f5569742be7d4538bfe791659a12fd693b269e1ebf06a4ca667427bafc612a81af8e50ccd0fc4b6f22480067e68a699396d7e18c78d694331ab7d68fc1ee3aa8eba08ac9ecf56896792dc4ed7bb03a049b461acc6da5b673b95bfbf91bfd1a30508542734bf52e58490e6d12c5bf40a9e8992fa78fcd5ce43434ee601893c131a8719b9636619aaf12f2322b31592643eb18e1bd2f3e8f58baf5b03774174ab6195fb9719e8320", 0xb7}, {&(0x7f0000002a40)="5a4e8f8b169d35d309f68272cc08f06c9f92330af228699978ce7821f00f4085d95fcb3e27f0ffadd7740d8038daead013084482cee9f83f1d94916f19fac21292c46b75896f24a6ca006a27d0144141784a284a6d3fc547e96d4d6108c084250dcdb3391c61a4a33928f611f8d1abdf42d8c9fcd6dbefb2c2917e2fc88427cace7195c9ddf15c2e9a15275ff8392be994dc4c4cfb68a709bc0c8fe93613f8559bd48674", 0xa4}], 0x4}}], 0x5, 0x0) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xe8}}, 0x0) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000140)={0x1, 0x6f7, 0x809d, 0xfff9}) 465.679293ms ago: executing program 8 (id=8311): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x4, @val=@tracing={0x0, 0xff}}, 0x20) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 116.609962ms ago: executing program 5 (id=8312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x84, 0x1}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x6c}}, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0x8, 0x1}, {0x9, 0x4}, {0x3, 0x2}, {0xa, 0x5}]}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @ptr={0x10}, @struct={0x7, 0x6, 0x0, 0x4, 0x1, 0x9, [{0x1, 0x5}, {0xa, 0x0, 0x101}, {0xb, 0x5, 0x8}, {0x9, 0x3, 0xfffffffb}, {0x10, 0x4, 0xace1}, {0x3, 0x3, 0xd}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61, 0x61, 0x0]}}, &(0x7f0000000540)=""/105, 0xe1, 0x69, 0x0, 0x8}, 0x28) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x101, 0x5, 0x4, 0x71180, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r8, 0x7, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x9549}, 0xc) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r10, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @ldst={0x1, 0x3, 0x2, 0x5, 0x5, 0xffffffffffffffff, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0xfffffffd, 0x48, &(0x7f00000003c0)=""/72, 0x40f00, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000600)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0xffffffffffffffff, r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000940)=[{0x0, 0x4, 0x0, 0xb}, {0x1, 0x1, 0x2, 0x9}, {0x2, 0x3, 0xc, 0xc}, {0x5, 0x4, 0x4, 0x5}, {0x2, 0x1, 0x1, 0xc}, {0x2, 0x3, 0xe, 0xc}, {0x1, 0x1, 0x8, 0x3}], 0x10, 0x12fecdf6}, 0x94) 116.203037ms ago: executing program 5 (id=8313): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = getpid() arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) (async) getpriority(0x1, r1) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) r3 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) (async, rerun: 64) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r2}}, 0x18) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r2, 0x10, 0x0, @ib={0x1b, 0x9da4, 0xfffffff7, {"bc4047a08da5488d8dfbbc24a43591be"}, 0x10000, 0x8000000000000001, 0x7}}}, 0xa0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5e00000000000000ca00000000000000000000007137a186dede11339c3f0482a8e4cbf2df86d025a277f1058c7e59fb00ff932062785a20940964b907d142a11c5e26d616c9c26d143313fdb6e6a1f04d78f97b3a1dc60488fab0d7dc1b0601393a1c5ba5cd900663ec11904529d1a4672085cf03d2a4ac06a2ea8c851c74329fcbd01ef95a5a0dd4947414de3ddcd7e5751344af1772aab9b3b933379deff97ed367c6eae95300ed46e4762e4b632d8180173c398492", @ANYRES32=0x1, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff0300000000000089000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080010001874b1e727b3e19701ec620997bf49301a31249ddf54aceaaa3ed74f85a9882a6217fd2a5dddcebc1920e3c4c9f964a8008f9ef77c8fe44e105a31c959dc01c4f52fa73da042517fc855d3c970ad04e285ef211704788a8e76fa9ebba167eca4e6be0f6513d865086c516165", @ANYRES32=r2, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x30}, 0x94) fcntl$setstatus(r6, 0x4, 0x2800) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) 65.475459ms ago: executing program 5 (id=8314): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000001a40)=[{0x68d, 0x229, 0x0, 0x0}], 0x1}) 65.020437ms ago: executing program 9 (id=8315): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x6, 0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x0, 0x1, {0x4, 0x1}, {0x2a, 0xffff}, @cond=[{0x10, 0x10, 0xcf, 0x8, 0x1, 0x3}, {0x271e, 0x4, 0x1, 0x7f, 0xfffe, 0x7ff}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r6, &(0x7f0000000040)="ec", 0x15ee) sendmsg$NFT_BATCH(r3, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x2d0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0xcd, 0x6, "d9513c95006f9e0ff3704e198662db69cdaa2031a61473e988cb2faa68fa3301dc0901d4fc9356ded30116c0e337813fb946c72d79e8c9920aeacbe95aa11a77a47ff39d32b1ddc2583b3d72785f92fef5b6cb0cf5b6ccfc41116f85ed14f24c57ba6a9ff1c1d92bfcaba82c937099cd5b4ffe5bb0d1628728ffa17284d5e770a5db496f576a391f540237c9abae7fed52cf67a700d88d2aa6c16084a66c7f380240541fb2b37980bb4fe4dbf8a64c86bf2ec8b5079e6c6f6269141401578a0279c64f696153eeceec"}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "95a37a9f49b8a1de40e3edd006a6188ca22100e05fcce4a4bc58436a16b86f7c8ff6ce7cb9045c2103aa6dec67a29eba47bcb118c7e4e328fdd1e8cc0e8775aab7376fbe49305ed0b6c64c138e7c7f4c808427b95ffa588b8363d39c905d6af6655116b5697aecae4ee3cbbbf8da40264d6dd7f9066312b3de27c508b9d170b834e5b7ac4609ecc7e58720d6b767900d3af4b96113d334fbc27223a17d8bab1172045543d1e6cb66fb6c6f43afba96dc9628fb624d4d7d058d0e9845c000d82362cf58e81b49688fea22b6dd1efaf8a75d4022f9f4830abe2dbff262864761add854be6301e8c4b3a5146f379600f7b902a9e5a0702ae4fb6f"}, @NFTA_TABLE_USERDATA={0x24, 0x6, "80f3ead129b661b12b6f8dbaedb86cfce05886009b24635eb7ec2091a9722e23"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xad, 0x6, "8a3b61f8d8083d10fa88d5d5998b36c19ffed25a54ad694069599383d3138584f959c5f4002adca8e344f6bf21d00cfb54ca8f1f1af5e90242cdb69cc546bf18108ecb41decfd255d00db1fb930d888b82566503a5e27cda40af490a717bb81ce518e03834a1a63992d05eb85a26607587bdbdc6f11c8c9cb18c871b74d852d627c59e67112d537b30fa50225d56744a16e087ef59f8f3e7da787ca3556c8a9af90bc1cb28952f3cb1"}]}, @NFT_MSG_DELSETELEM={0x58, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xec, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ed8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x305, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xae, 0xc, "5acd124021998eacea07a7f1d8312941ccc3d6138233cd262ebb5747bef9565dd75dcabeafb561b1c45793ac615b02b39486c1f149ebfe4c97cdbf34e2178a60ebe4bc41bef23ec36a228a05bcbc85c497f0410e2dcf91f1bc3e0b647b036352e3eed83f1b93577ece6bff165f54b27f8aa5f2c0d76a405733601404ffee40f40ae3e67cc9127bf70e5fd6838422368b14b450b39f7334f6c2ef8dd970a32a3e2117a26ae913cae04f7f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5ac}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20020804) 0s ago: executing program 7 (id=8316): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000001a40)=[{0x68d, 0x200, 0x0, 0x0}], 0x1}) (fail_nth: 4) kernel console output (not intermixed with test programs): idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 896.346858][T26785] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.349299][T26785] usb 14-1: Product: syz [ 896.350615][T26785] usb 14-1: Manufacturer: syz [ 896.352060][T26785] usb 14-1: SerialNumber: syz [ 896.516453][T31546] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7986'. [ 896.762033][T26785] legousbtower 14-1:14.57: interrupt endpoints not found [ 896.964749][T26785] legousbtower 14-1:14.228: get version request failed: -71 [ 896.967246][T26785] legousbtower 14-1:14.228: probe with driver legousbtower failed with error -71 [ 896.973277][T26785] usb 14-1: USB disconnect, device number 8 [ 897.054151][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 897.264280][T23565] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 897.394112][T23565] usb 10-1: device descriptor read/64, error -71 [ 897.403227][T31555] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7989'. [ 897.469177][ T40] audit: type=1400 audit(1780015806.828:69670): avc: denied { append } for pid=31558 comm="syz.8.7991" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 897.476248][ T40] audit: type=1400 audit(1780015806.828:69671): avc: denied { map } for pid=31558 comm="syz.8.7991" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 897.535837][T31565] syzkaller0: entered promiscuous mode [ 897.537596][T31565] syzkaller0: entered allmulticast mode [ 897.540669][T31565] TC_ACT_REPEAT abuse ? [ 897.571117][T31567] input: syz0 as /devices/virtual/input/input62 [ 897.634066][T23565] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 897.784015][T23565] usb 10-1: device descriptor read/64, error -71 [ 897.894434][T23565] usb usb10-port1: attempt power cycle [ 897.954029][ T6184] usb 14-1: new full-speed USB device number 9 using dummy_hcd [ 898.094037][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 898.116391][ T6184] usb 14-1: unable to get BOS descriptor or descriptor too short [ 898.120366][ T6184] usb 14-1: not running at top speed; connect to a high speed hub [ 898.124743][ T6184] usb 14-1: config 14 has an invalid interface number: 57 but max is 1 [ 898.127456][ T6184] usb 14-1: config 14 has an invalid interface number: 228 but max is 1 [ 898.130067][ T6184] usb 14-1: config 14 has no interface number 0 [ 898.132004][ T6184] usb 14-1: config 14 has no interface number 1 [ 898.134005][ T6184] usb 14-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 898.137292][ T6184] usb 14-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 898.140811][ T6184] usb 14-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 898.144260][ T6184] usb 14-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.148251][ T6184] usb 14-1: config 14 interface 57 has no altsetting 0 [ 898.150319][ T6184] usb 14-1: config 14 interface 228 has no altsetting 0 [ 898.154124][ T6184] usb 14-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 898.156917][ T6184] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.159337][ T6184] usb 14-1: Product: syz [ 898.160639][ T6184] usb 14-1: Manufacturer: syz [ 898.162084][ T6184] usb 14-1: SerialNumber: syz [ 898.234077][T23565] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 898.254532][T23565] usb 10-1: device descriptor read/8, error -71 [ 898.470517][T31590] syzkaller0: entered promiscuous mode [ 898.472249][T31590] syzkaller0: entered allmulticast mode [ 898.494157][T23565] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 898.515406][T23565] usb 10-1: device descriptor read/8, error -71 [ 898.549061][T31594] FAULT_INJECTION: forcing a failure. [ 898.549061][T31594] name failslab, interval 1, probability 0, space 0, times 0 [ 898.552948][T31594] CPU: 2 UID: 0 PID: 31594 Comm: syz.7.8006 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.552966][T31594] Tainted: [L]=SOFTLOCKUP [ 898.552970][T31594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 898.552977][T31594] Call Trace: [ 898.552982][T31594] [ 898.552987][T31594] dump_stack_lvl+0x100/0x190 [ 898.553004][T31594] should_fail_ex.cold+0x5/0xa [ 898.553020][T31594] ? tomoyo_encode2+0xfb/0x3c0 [ 898.553036][T31594] should_failslab+0xc2/0x120 [ 898.553050][T31594] __kmalloc_noprof+0xe0/0x850 [ 898.553065][T31594] ? d_absolute_path+0x136/0x1b0 [ 898.553079][T31594] tomoyo_encode2+0xfb/0x3c0 [ 898.553098][T31594] tomoyo_encode+0x29/0x50 [ 898.553113][T31594] tomoyo_realpath_from_path+0x18c/0x690 [ 898.553133][T31594] tomoyo_path2_perm+0x29f/0x700 [ 898.553147][T31594] ? tomoyo_path2_perm+0x291/0x700 [ 898.553161][T31594] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 898.553176][T31594] ? current_check_refer_path+0x2ca/0xe00 [ 898.553203][T31594] ? do_raw_spin_lock+0x128/0x260 [ 898.553222][T31594] tomoyo_path_rename+0xfc/0x1a0 [ 898.553233][T31594] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 898.553246][T31594] ? do_raw_spin_unlock+0x145/0x1e0 [ 898.553264][T31594] security_path_rename+0x18e/0x3c0 [ 898.553277][T31594] filename_renameat2+0x731/0xa60 [ 898.553298][T31594] ? __pfx_filename_renameat2+0x10/0x10 [ 898.553335][T31594] ? __might_fault+0xc5/0x140 [ 898.553358][T31594] ? do_getname+0x191/0x390 [ 898.553376][T31594] __x64_sys_rename+0x81/0xb0 [ 898.553392][T31594] do_syscall_64+0x115/0x870 [ 898.553406][T31594] ? clear_bhb_loop+0x40/0x90 [ 898.553419][T31594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.553431][T31594] RIP: 0033:0x7fb5cdf9ce59 [ 898.553441][T31594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.553451][T31594] RSP: 002b:00007fb5cee80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 898.553462][T31594] RAX: ffffffffffffffda RBX: 00007fb5ce215fa0 RCX: 00007fb5cdf9ce59 [ 898.553469][T31594] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 898.553476][T31594] RBP: 00007fb5cee80090 R08: 0000000000000000 R09: 0000000000000000 [ 898.553482][T31594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 898.553489][T31594] R13: 00007fb5ce216038 R14: 00007fb5ce215fa0 R15: 00007ffd463f92f8 [ 898.553503][T31594] [ 898.553516][T31594] ERROR: Out of memory at tomoyo_realpath_from_path. [ 898.570166][ T6184] legousbtower 14-1:14.57: interrupt endpoints not found [ 898.624322][T23565] usb usb10-port1: unable to enumerate USB device [ 898.679724][T31596] FAULT_INJECTION: forcing a failure. [ 898.679724][T31596] name failslab, interval 1, probability 0, space 0, times 0 [ 898.684886][T31596] CPU: 0 UID: 0 PID: 31596 Comm: syz.8.8007 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.684911][T31596] Tainted: [L]=SOFTLOCKUP [ 898.684917][T31596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 898.684928][T31596] Call Trace: [ 898.684934][T31596] [ 898.684946][T31596] dump_stack_lvl+0x100/0x190 [ 898.684969][T31596] should_fail_ex.cold+0x5/0xa [ 898.684995][T31596] should_failslab+0xc2/0x120 [ 898.685018][T31596] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 898.685045][T31596] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 898.685072][T31596] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 898.685099][T31596] mmu_topup_memory_caches+0x25/0x170 [ 898.685122][T31596] kvm_mmu_load+0xd6/0x23e0 [ 898.685148][T31596] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 898.685176][T31596] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 898.685204][T31596] ? __pfx_kvm_mmu_load+0x10/0x10 [ 898.685222][T31596] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 898.685240][T31596] ? kvm_check_and_inject_events+0x961/0x1070 [ 898.685261][T31596] ? record_steal_time+0x420/0xbc0 [ 898.685280][T31596] vcpu_run+0x39f4/0x5ca0 [ 898.685336][T31596] ? __pfx_vcpu_run+0x10/0x10 [ 898.685371][T31596] ? rcu_is_watching+0x12/0xc0 [ 898.685399][T31596] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 898.685421][T31596] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 898.685449][T31596] kvm_vcpu_ioctl+0x730/0x1720 [ 898.685468][T31596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 898.685490][T31596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 898.685514][T31596] ? do_vfs_ioctl+0x226/0x13e0 [ 898.685532][T31596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 898.685549][T31596] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 898.685581][T31596] ? __fget_files+0x215/0x3d0 [ 898.685601][T31596] ? hook_file_ioctl_common+0x149/0x410 [ 898.685627][T31596] ? selinux_file_ioctl+0x13b/0x290 [ 898.685656][T31596] ? selinux_file_ioctl+0xb6/0x290 [ 898.685681][T31596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 898.685699][T31596] __x64_sys_ioctl+0x18e/0x210 [ 898.685717][T31596] do_syscall_64+0x115/0x870 [ 898.685738][T31596] ? clear_bhb_loop+0x40/0x90 [ 898.685757][T31596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.685777][T31596] RIP: 0033:0x7f64cd79ce59 [ 898.685795][T31596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.685812][T31596] RSP: 002b:00007f64ce739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.685828][T31596] RAX: ffffffffffffffda RBX: 00007f64cda15fa0 RCX: 00007f64cd79ce59 [ 898.685839][T31596] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 898.685848][T31596] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 898.685857][T31596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 898.685866][T31596] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 898.685889][T31596] [ 898.771481][ C3] raw-gadget.1 gadget.9: ignoring, device is not running [ 898.799545][ T6184] legousbtower 14-1:14.228: get version request failed: -71 [ 898.801954][ T6184] legousbtower 14-1:14.228: probe with driver legousbtower failed with error -71 [ 898.807120][ T6184] usb 14-1: USB disconnect, device number 9 [ 899.022445][T31611] __nla_validate_parse: 1 callbacks suppressed [ 899.022464][T31611] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8012'. [ 899.061866][T31613] IPv6: NLM_F_CREATE should be specified when creating new route [ 899.133997][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 899.342178][T31615] syzkaller0: entered promiscuous mode [ 899.344600][T31615] syzkaller0: entered allmulticast mode [ 899.348870][T31615] TC_ACT_REPEAT abuse ? [ 899.794904][ T40] audit: type=1400 audit(1780015809.158:69672): avc: denied { watch_mount } for pid=31625 comm="syz.9.8019" path="/78" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 899.806350][T31070] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 899.918790][T31631] tmpfs: Unknown parameter 'appraise_type' [ 899.927875][T31629] pim6reg: entered allmulticast mode [ 899.935296][T31629] pim6reg: left allmulticast mode [ 899.953995][T31070] usb 12-1: Using ep0 maxpacket: 32 [ 899.957972][T31070] usb 12-1: unable to get BOS descriptor or descriptor too short [ 899.961478][T31070] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 899.965857][T31070] usb 12-1: config 8 has no interface number 0 [ 899.967783][T31070] usb 12-1: config 8 interface 188 has no altsetting 0 [ 899.973480][T31070] usb 12-1: string descriptor 0 read error: -22 [ 899.976453][T31070] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 899.979745][T31070] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.989635][T31070] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 899.992548][T31070] dw2102: su3000_power_ctrl: 1, initialized 0 [ 899.994902][T31070] dvb-usb: bulk message failed: -22 (2/0) [ 900.001508][T31070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 900.005619][T31070] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 900.008851][T31070] usb 12-1: media controller created [ 900.010839][T31070] dvb-usb: bulk message failed: -22 (6/0) [ 900.012920][T31070] dw2102: i2c transfer failed. [ 900.014990][T31070] dvb-usb: bulk message failed: -22 (6/0) [ 900.017114][T31070] dw2102: i2c transfer failed. [ 900.018908][T31070] dvb-usb: bulk message failed: -22 (6/0) [ 900.021025][T31070] dw2102: i2c transfer failed. [ 900.022859][T31070] dvb-usb: bulk message failed: -22 (6/0) [ 900.025088][T31070] dw2102: i2c transfer failed. [ 900.026894][T31070] dvb-usb: bulk message failed: -22 (6/0) [ 900.029056][T31070] dw2102: i2c transfer failed. [ 900.030840][T31070] dvb-usb: bulk message failed: -22 (6/0) [ 900.032938][T31070] dw2102: i2c transfer failed. [ 900.034847][T31070] dvb-usb: MAC address: 02:02:02:02:02:02 [ 900.043602][T31070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.051539][T31638] syzkaller0: entered promiscuous mode [ 900.051996][T31070] dvb-usb: bulk message failed: -22 (3/0) [ 900.053772][T31638] syzkaller0: entered allmulticast mode [ 900.055760][T31070] dw2102: command 0x0e transfer failed. [ 900.059772][T31070] dvb-usb: bulk message failed: -22 (3/0) [ 900.061620][T31070] dw2102: command 0x0e transfer failed. [ 900.174022][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 900.184106][T30729] usb 13-1: new full-speed USB device number 24 using dummy_hcd [ 900.264103][ T1042] usb 14-1: new low-speed USB device number 10 using dummy_hcd [ 900.336372][T30729] usb 13-1: unable to get BOS descriptor or descriptor too short [ 900.339527][T30729] usb 13-1: not running at top speed; connect to a high speed hub [ 900.342952][T30729] usb 13-1: config 14 has an invalid interface number: 57 but max is 1 [ 900.345821][T30729] usb 13-1: config 14 has an invalid interface number: 228 but max is 1 [ 900.349071][T30729] usb 13-1: config 14 has no interface number 0 [ 900.351104][T30729] usb 13-1: config 14 has no interface number 1 [ 900.353179][T30729] usb 13-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 900.356889][T30729] usb 13-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 900.360724][T30729] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 900.364425][T31070] dvb-usb: bulk message failed: -22 (3/0) [ 900.366243][T31070] dw2102: command 0x0e transfer failed. [ 900.368113][T30729] usb 13-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.372305][T31070] dvb-usb: bulk message failed: -22 (3/0) [ 900.374239][T31070] dw2102: command 0x0e transfer failed. [ 900.376239][T30729] usb 13-1: config 14 interface 57 has no altsetting 0 [ 900.378565][T31070] dvb-usb: bulk message failed: -22 (1/0) [ 900.380352][T31070] dw2102: command 0x51 transfer failed. [ 900.382195][T30729] usb 13-1: config 14 interface 228 has no altsetting 0 [ 900.384582][T31620] dvb-usb: bulk message failed: -22 (5/0) [ 900.386106][T30729] usb 13-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 900.389816][T30729] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.390842][T31620] dw2102: i2c transfer failed. [ 900.392412][T30729] usb 13-1: Product: syz [ 900.396526][T30729] usb 13-1: Manufacturer: syz [ 900.398227][T30729] usb 13-1: SerialNumber: syz [ 900.407578][T31070] DVB: Unable to find symbol ds3000_attach() [ 900.409524][T31070] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 900.425432][ T1042] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.428565][ T1042] usb 14-1: config 0 has no interface number 0 [ 900.430519][ T1042] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 900.433694][ T1042] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 900.438985][ T1042] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 900.441877][ T1042] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.446701][ T1042] usb 14-1: config 0 descriptor?? [ 900.448767][T31636] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 900.453503][ T1042] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 900.455472][T31070] rc_core: IR keymap rc-su3000 not found [ 900.458633][T31070] Registered IR keymap rc-empty [ 900.462334][T31070] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 900.467350][T31070] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input63 [ 900.472704][T31070] dvb-usb: schedule remote query interval to 150 msecs. [ 900.475091][T31070] dw2102: su3000_power_ctrl: 0, initialized 1 [ 900.477061][T31070] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 900.481625][T31070] usb 12-1: USB disconnect, device number 28 [ 900.503325][T31070] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 900.715687][ T1042] usb 14-1: USB disconnect, device number 10 [ 900.805603][T30729] legousbtower 13-1:14.57: interrupt endpoints not found [ 901.009057][T30729] legousbtower 13-1:14.228: get version request failed: -71 [ 901.011491][T30729] legousbtower 13-1:14.228: probe with driver legousbtower failed with error -71 [ 901.018615][T30729] usb 13-1: USB disconnect, device number 24 [ 901.080609][T31651] pim6reg: entered allmulticast mode [ 901.083747][T31651] pim6reg: left allmulticast mode [ 901.145880][T31654] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 901.148604][T31654] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 901.152367][T31654] vhci_hcd vhci_hcd.0: Device attached [ 901.156580][T31655] vhci_hcd: connection closed [ 901.157190][T30956] vhci_hcd vhci_hcd.7: stop threads [ 901.161025][T30956] vhci_hcd vhci_hcd.7: release socket [ 901.162709][T30956] vhci_hcd vhci_hcd.7: disconnect device [ 901.199237][T31658] [U]  [ 901.214019][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 901.383548][T31664] Invalid ELF header type: 0 != 1 [ 901.934069][ T3265] usb 12-1: new full-speed USB device number 29 using dummy_hcd [ 902.096408][ T3265] usb 12-1: unable to get BOS descriptor or descriptor too short [ 902.099324][ T3265] usb 12-1: not running at top speed; connect to a high speed hub [ 902.102588][ T3265] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 902.106316][ T3265] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 902.109945][ T3265] usb 12-1: config 14 has no interface number 0 [ 902.112471][ T3265] usb 12-1: config 14 has no interface number 1 [ 902.115005][ T3265] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 902.119672][ T3265] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 902.124345][ T3265] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 902.127902][ T3265] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.131894][ T3265] usb 12-1: config 14 interface 57 has no altsetting 0 [ 902.134088][ T3265] usb 12-1: config 14 interface 228 has no altsetting 0 [ 902.137970][ T3265] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 902.140814][ T3265] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.143541][ T3265] usb 12-1: Product: syz [ 902.145489][ T3265] usb 12-1: Manufacturer: syz [ 902.147579][ T3265] usb 12-1: SerialNumber: syz [ 902.254119][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 902.498546][T31706] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.572650][T31712] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8051'. [ 902.579105][ T3265] legousbtower 12-1:14.57: interrupt endpoints not found [ 902.580865][T31712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1313 sclass=netlink_route_socket pid=31712 comm=syz.8.8051 [ 903.194003][ T6184] usb 10-1: new full-speed USB device number 115 using dummy_hcd [ 903.303994][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 903.321649][ T3265] legousbtower 12-1:14.228: get version request failed: -71 [ 903.332042][ T3265] legousbtower 12-1:14.228: probe with driver legousbtower failed with error -71 [ 903.339563][ T3265] usb 12-1: USB disconnect, device number 29 [ 903.366054][ T6184] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 903.369424][ T6184] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.373486][ T6184] usb 10-1: config 0 has no interfaces? [ 903.376913][ T6184] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 903.380780][ T6184] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.386384][ T6184] usb 10-1: config 0 descriptor?? [ 903.597481][T30977] usb 10-1: USB disconnect, device number 115 [ 903.614034][ T9] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 903.698710][T31734] FAULT_INJECTION: forcing a failure. [ 903.698710][T31734] name failslab, interval 1, probability 0, space 0, times 0 [ 903.702649][T31734] CPU: 1 UID: 0 PID: 31734 Comm: syz.8.8058 Tainted: G L syzkaller #0 PREEMPT(full) [ 903.702667][T31734] Tainted: [L]=SOFTLOCKUP [ 903.702671][T31734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 903.702678][T31734] Call Trace: [ 903.702682][T31734] [ 903.702687][T31734] dump_stack_lvl+0x100/0x190 [ 903.702703][T31734] should_fail_ex.cold+0x5/0xa [ 903.702718][T31734] should_failslab+0xc2/0x120 [ 903.702731][T31734] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 903.702749][T31734] ? skb_clone+0x190/0x400 [ 903.702768][T31734] skb_clone+0x190/0x400 [ 903.702788][T31734] netlink_deliver_tap+0xaed/0xcc0 [ 903.702804][T31734] netlink_unicast+0x6a5/0x850 [ 903.702819][T31734] ? __pfx_netlink_unicast+0x10/0x10 [ 903.702831][T31734] ? genl_rcv_msg+0x4be/0x800 [ 903.702849][T31734] netlink_ack+0x655/0xb80 [ 903.702866][T31734] netlink_rcv_skb+0x333/0x420 [ 903.702879][T31734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 903.702894][T31734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 903.702913][T31734] ? netlink_deliver_tap+0x1ae/0xcc0 [ 903.702927][T31734] genl_rcv+0x28/0x40 [ 903.702940][T31734] netlink_unicast+0x585/0x850 [ 903.702955][T31734] ? __pfx_netlink_unicast+0x10/0x10 [ 903.702972][T31734] netlink_sendmsg+0x8b0/0xda0 [ 903.702987][T31734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.702999][T31734] ? __might_fault+0xa0/0x140 [ 903.703019][T31734] ____sys_sendmsg+0x9e1/0xb70 [ 903.703032][T31734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.703046][T31734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.703064][T31734] ___sys_sendmsg+0x190/0x1e0 [ 903.703078][T31734] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.703108][T31734] __sys_sendmsg+0x170/0x220 [ 903.703124][T31734] ? __pfx___sys_sendmsg+0x10/0x10 [ 903.703146][T31734] ? rcu_is_watching+0x12/0xc0 [ 903.703164][T31734] do_syscall_64+0x115/0x870 [ 903.703178][T31734] ? clear_bhb_loop+0x40/0x90 [ 903.703191][T31734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.703202][T31734] RIP: 0033:0x7f64cd79ce59 [ 903.703211][T31734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.703222][T31734] RSP: 002b:00007f64ce739028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.703237][T31734] RAX: ffffffffffffffda RBX: 00007f64cda15fa0 RCX: 00007f64cd79ce59 [ 903.703244][T31734] RDX: 0000000002000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 903.703250][T31734] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 903.703257][T31734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.703263][T31734] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 903.703276][T31734] [ 903.764070][ T9] usb 14-1: Using ep0 maxpacket: 16 [ 903.793899][ T9] usb 14-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 903.796754][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.799190][ T9] usb 14-1: Product: syz [ 903.800485][ T9] usb 14-1: Manufacturer: syz [ 903.801935][ T9] usb 14-1: SerialNumber: syz [ 903.984012][T30729] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 904.031888][ T9] usb 14-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 904.036080][ T9] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 904.039561][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 904.042228][ T9] usb 14-1: media controller created [ 904.048153][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.134027][T30729] usb 13-1: Using ep0 maxpacket: 16 [ 904.139961][T30729] usb 13-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 904.143603][T30729] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.147062][T30729] usb 13-1: Product: syz [ 904.148537][T30729] usb 13-1: Manufacturer: syz [ 904.150486][T30729] usb 13-1: SerialNumber: syz [ 904.201782][T31747] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.205470][T31747] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.264532][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 904.278205][ T9] dvb_usb_gl861 14-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 904.284229][ T9] usb 14-1: USB disconnect, device number 11 [ 904.322073][T31747] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.326992][T31747] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.334033][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 904.359719][T30729] usb 13-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 904.365099][T30729] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 904.369159][T30729] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 904.372432][T30729] usb 13-1: media controller created [ 904.379165][T30729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.403126][T31747] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.407195][T31747] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.455761][T30977] usb 10-1: new full-speed USB device number 116 using dummy_hcd [ 904.513718][T31747] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.517937][T31747] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.559626][T31740] FAULT_INJECTION: forcing a failure. [ 904.559626][T31740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.563663][T31740] CPU: 2 UID: 0 PID: 31740 Comm: syz.8.8060 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.563681][T31740] Tainted: [L]=SOFTLOCKUP [ 904.563685][T31740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 904.563692][T31740] Call Trace: [ 904.563697][T31740] [ 904.563701][T31740] dump_stack_lvl+0x100/0x190 [ 904.563717][T31740] should_fail_ex.cold+0x5/0xa [ 904.563746][T31740] _copy_from_user+0x2e/0xd0 [ 904.563760][T31740] i2cdev_ioctl+0x10a/0x830 [ 904.563777][T31740] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 904.563793][T31740] ? selinux_file_ioctl+0x13b/0x290 [ 904.563811][T31740] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 904.563826][T31740] __x64_sys_ioctl+0x18e/0x210 [ 904.563839][T31740] do_syscall_64+0x115/0x870 [ 904.563858][T31740] ? clear_bhb_loop+0x40/0x90 [ 904.563871][T31740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.563882][T31740] RIP: 0033:0x7f64cd79ce59 [ 904.563892][T31740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.563903][T31740] RSP: 002b:00007f64ce739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.563915][T31740] RAX: ffffffffffffffda RBX: 00007f64cda15fa0 RCX: 00007f64cd79ce59 [ 904.563922][T31740] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000004 [ 904.563928][T31740] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 904.563935][T31740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.563941][T31740] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 904.563954][T31740] [ 904.612897][T30729] zl10353_read_register: readreg error (reg=127, ret==-110) [ 904.625510][T30977] usb 10-1: config 0 has no interfaces? [ 904.628855][T30977] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 904.629922][T30729] dvb_usb_gl861 13-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 904.632187][T30977] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 904.637528][T30977] usb 10-1: Product: syz [ 904.639043][T30977] usb 10-1: Manufacturer: syz [ 904.639916][T30729] usb 13-1: USB disconnect, device number 25 [ 904.640963][T30977] usb 10-1: SerialNumber: syz [ 904.651605][T30977] usb 10-1: config 0 descriptor?? [ 904.664876][T30956] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.667367][T30956] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.678613][T30956] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.681287][T30956] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.694247][ T6238] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.696693][ T6238] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.706580][T30956] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.708999][T30956] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.752012][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8065'. [ 904.755491][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8065'. [ 904.765665][T31753] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 904.772818][T31753] CPU: 3 UID: 0 PID: 31753 Comm: syz.7.8065 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.772835][T31753] Tainted: [L]=SOFTLOCKUP [ 904.772840][T31753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 904.772846][T31753] Call Trace: [ 904.772850][T31753] [ 904.772855][T31753] dump_stack_lvl+0x100/0x190 [ 904.772871][T31753] sysfs_warn_dup.cold+0x1c/0x28 [ 904.772887][T31753] sysfs_create_dir_ns+0x24b/0x2b0 [ 904.772900][T31753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 904.772913][T31753] ? find_held_lock+0x2b/0x80 [ 904.772922][T31753] ? kobject_add_internal+0x25f/0x930 [ 904.772939][T31753] ? kobject_add_internal+0x25f/0x930 [ 904.772956][T31753] ? class_dir_child_ns_type+0xd/0x60 [ 904.772975][T31753] kobject_add_internal+0x2c8/0x930 [ 904.772994][T31753] kobject_add+0x16a/0x1e0 [ 904.773010][T31753] ? __pfx_kobject_add+0x10/0x10 [ 904.773028][T31753] ? kobject_put+0xb9/0x640 [ 904.773044][T31753] ? device_add+0xc48/0x1950 [ 904.773056][T31753] device_add+0x294/0x1950 [ 904.773066][T31753] ? lockdep_init_map_type+0x5c/0x250 [ 904.773080][T31753] ? __pfx_device_add+0x10/0x10 [ 904.773089][T31753] ? lockdep_init_map_type+0x5c/0x250 [ 904.773103][T31753] ? __init_waitqueue_head+0xca/0x150 [ 904.773122][T31753] tty_register_device_attr+0x388/0x7f0 [ 904.773135][T31753] ? lockdep_init_map_type+0x5c/0x250 [ 904.773255][T31753] ? __pfx_tty_register_device_attr+0x10/0x10 [ 904.773278][T31753] ? tty_port_init+0x156/0x1c0 [ 904.773293][T31753] gsm_activate_mux+0x155/0x2a0 [ 904.773307][T31753] gsmld_ioctl+0xbbc/0x15c0 [ 904.773325][T31753] ? __pfx_gsmld_ioctl+0x10/0x10 [ 904.773341][T31753] ? __ldsem_down_read_nested+0xf3/0x890 [ 904.773358][T31753] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 904.773376][T31753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 904.773390][T31753] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 904.773408][T31753] ? __pfx_gsmld_ioctl+0x10/0x10 [ 904.773421][T31753] tty_ioctl+0x11c2/0x1640 [ 904.773433][T31753] ? __pfx_tty_ioctl+0x10/0x10 [ 904.773445][T31753] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 904.773467][T31753] ? __fget_files+0x215/0x3d0 [ 904.773480][T31753] ? hook_file_ioctl_common+0x149/0x410 [ 904.773495][T31753] ? selinux_file_ioctl+0x13b/0x290 [ 904.773510][T31753] ? selinux_file_ioctl+0xb6/0x290 [ 904.773527][T31753] ? __pfx_tty_ioctl+0x10/0x10 [ 904.773539][T31753] __x64_sys_ioctl+0x18e/0x210 [ 904.773552][T31753] do_syscall_64+0x115/0x870 [ 904.773566][T31753] ? clear_bhb_loop+0x40/0x90 [ 904.773579][T31753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.773590][T31753] RIP: 0033:0x7fb5cdf9ce59 [ 904.773600][T31753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.773611][T31753] RSP: 002b:00007fb5cee5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.773621][T31753] RAX: ffffffffffffffda RBX: 00007fb5ce216090 RCX: 00007fb5cdf9ce59 [ 904.773628][T31753] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 904.773635][T31753] RBP: 00007fb5ce032d6f R08: 0000000000000000 R09: 0000000000000000 [ 904.773641][T31753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.773647][T31753] R13: 00007fb5ce216128 R14: 00007fb5ce216090 R15: 00007ffd463f92f8 [ 904.773667][T31753] [ 904.773682][T31753] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 904.886879][T30729] usb 10-1: USB disconnect, device number 116 [ 905.192299][T31758] syzkaller0: entered promiscuous mode [ 905.194473][T31758] syzkaller0: entered allmulticast mode [ 905.374066][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 905.434054][ T1042] usb 13-1: new full-speed USB device number 26 using dummy_hcd [ 905.587961][ T1042] usb 13-1: unable to get BOS descriptor or descriptor too short [ 905.592938][ T1042] usb 13-1: not running at top speed; connect to a high speed hub [ 905.598749][ T1042] usb 13-1: config 14 has an invalid interface number: 57 but max is 1 [ 905.604156][ T1042] usb 13-1: config 14 has an invalid interface number: 228 but max is 1 [ 905.610304][ T1042] usb 13-1: config 14 has no interface number 0 [ 905.616112][ T1042] usb 13-1: config 14 has no interface number 1 [ 905.618965][ T1042] usb 13-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 905.622980][ T1042] usb 13-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 905.633678][ T1042] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 905.638633][ T1042] usb 13-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.643509][ T1042] usb 13-1: config 14 interface 57 has no altsetting 0 [ 905.645707][ T1042] usb 13-1: config 14 interface 228 has no altsetting 0 [ 905.651868][ T1042] usb 13-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 905.659194][ T1042] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.669505][ T1042] usb 13-1: Product: syz [ 905.671176][ T1042] usb 13-1: Manufacturer: syz [ 905.674073][ T1042] usb 13-1: SerialNumber: syz [ 905.776772][T31787] netlink: 'syz.5.8075': attribute type 8 has an invalid length. [ 905.966420][ T3265] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 905.992474][T31795] FAULT_INJECTION: forcing a failure. [ 905.992474][T31795] name failslab, interval 1, probability 0, space 0, times 0 [ 905.996941][T31795] CPU: 2 UID: 0 PID: 31795 Comm: syz.5.8077 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.996959][T31795] Tainted: [L]=SOFTLOCKUP [ 905.996963][T31795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 905.996970][T31795] Call Trace: [ 905.996974][T31795] [ 905.996979][T31795] dump_stack_lvl+0x100/0x190 [ 905.996995][T31795] should_fail_ex.cold+0x5/0xa [ 905.997009][T31795] should_failslab+0xc2/0x120 [ 905.997023][T31795] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 905.997038][T31795] ? prepare_creds+0x2c/0x950 [ 905.997052][T31795] ? get_random_u64+0x575/0x7c0 [ 905.997071][T31795] prepare_creds+0x2c/0x950 [ 905.997086][T31795] copy_creds+0xa7/0xa50 [ 905.997102][T31795] copy_process+0x1347/0x7ed0 [ 905.997117][T31795] ? _kstrtoull+0x13c/0x1f0 [ 905.997133][T31795] ? __pfx__kstrtoull+0x10/0x10 [ 905.997154][T31795] ? __pfx_copy_process+0x10/0x10 [ 905.997174][T31795] ? _copy_from_user+0x59/0xd0 [ 905.997188][T31795] kernel_clone+0x176/0x9e0 [ 905.997227][T31795] ? get_pid_task+0xfc/0x250 [ 905.997247][T31795] ? __pfx_kernel_clone+0x10/0x10 [ 905.997276][T31795] ? find_held_lock+0x2b/0x80 [ 905.997289][T31795] __do_sys_clone3+0x214/0x290 [ 905.997305][T31795] ? __pfx___do_sys_clone3+0x10/0x10 [ 905.997328][T31795] ? __fget_files+0x21f/0x3d0 [ 905.997352][T31795] ? rcu_is_watching+0x12/0xc0 [ 905.997370][T31795] do_syscall_64+0x115/0x870 [ 905.997385][T31795] ? clear_bhb_loop+0x40/0x90 [ 905.997398][T31795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.997409][T31795] RIP: 0033:0x7fc86279ce59 [ 905.997420][T31795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.997430][T31795] RSP: 002b:00007fc8609f5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 905.997441][T31795] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc86279ce59 [ 905.997448][T31795] RDX: 00007fc8609f5f10 RSI: 0000000000000058 RDI: 00007fc8609f5f10 [ 905.997454][T31795] RBP: 00007fc8609f6090 R08: 0000000000000000 R09: 0000000000000058 [ 905.997461][T31795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.997467][T31795] R13: 00007fc862a16128 R14: 00007fc862a16090 R15: 00007ffeed2f0c58 [ 905.997480][T31795] [ 906.114132][ T3265] usb 14-1: Using ep0 maxpacket: 16 [ 906.120395][ T3265] usb 14-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 906.124654][ T3265] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.125962][ T1042] legousbtower 13-1:14.57: interrupt endpoints not found [ 906.128392][ T3265] usb 14-1: Product: syz [ 906.134524][ T3265] usb 14-1: Manufacturer: syz [ 906.137795][ T3265] usb 14-1: SerialNumber: syz [ 906.351318][ T3265] usb 14-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 906.355549][ T3265] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 906.358923][ T3265] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 906.361545][ T3265] usb 14-1: media controller created [ 906.371861][ T3265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.424051][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 906.604199][ T3265] zl10353_read_register: readreg error (reg=127, ret==-110) [ 906.620104][ T3265] dvb_usb_gl861 14-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 906.624369][ T3265] usb 14-1: USB disconnect, device number 12 [ 906.775355][ T1042] legousbtower 13-1:14.228: get version request failed: -71 [ 906.776842][T31799] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8078'. [ 906.779025][ T1042] legousbtower 13-1:14.228: probe with driver legousbtower failed with error -71 [ 906.785532][ T1042] usb 13-1: USB disconnect, device number 26 [ 907.134172][ T3265] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 907.135450][ T40] audit: type=1804 audit(1780015816.498:69673): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.8082" name="/newroot/93/file0" dev="tmpfs" ino=523 res=1 errno=0 [ 907.144246][ T40] audit: type=1400 audit(1780015816.508:69674): avc: denied { read } for pid=31812 comm="syz.9.8082" path="socket:[185393]" dev="sockfs" ino=185393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 907.285368][ T3265] usb 12-1: Using ep0 maxpacket: 32 [ 907.288601][ T3265] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 907.302763][ T3265] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9923, setting to 1024 [ 907.306318][ T3265] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 907.312364][ T3265] usb 12-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 907.315280][ T3265] usb 12-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 907.317879][ T3265] usb 12-1: Product: syz [ 907.319247][ T3265] usb 12-1: Manufacturer: syz [ 907.320741][ T3265] usb 12-1: SerialNumber: syz [ 907.325664][T31807] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 907.338647][ T3265] input: appletouch as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/input/input64 [ 907.351922][T31820] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8085'. [ 907.359699][T31820] FAULT_INJECTION: forcing a failure. [ 907.359699][T31820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.365357][T31820] CPU: 2 UID: 0 PID: 31820 Comm: syz.8.8085 Tainted: G L syzkaller #0 PREEMPT(full) [ 907.365384][T31820] Tainted: [L]=SOFTLOCKUP [ 907.365392][T31820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 907.365403][T31820] Call Trace: [ 907.365409][T31820] [ 907.365417][T31820] dump_stack_lvl+0x100/0x190 [ 907.365443][T31820] should_fail_ex.cold+0x5/0xa [ 907.365469][T31820] _copy_to_user+0x32/0xd0 [ 907.365495][T31820] simple_read_from_buffer+0xcb/0x170 [ 907.365520][T31820] proc_fail_nth_read+0x1af/0x230 [ 907.365542][T31820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 907.365564][T31820] ? rw_verify_area+0xce/0x6d0 [ 907.365583][T31820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 907.365603][T31820] vfs_read+0x1e4/0xb30 [ 907.365624][T31820] ? __pfx_vfs_read+0x10/0x10 [ 907.365644][T31820] ? __fget_files+0x215/0x3d0 [ 907.365672][T31820] ? __fget_files+0x21f/0x3d0 [ 907.365700][T31820] ksys_read+0x12a/0x250 [ 907.365720][T31820] ? __pfx_ksys_read+0x10/0x10 [ 907.365741][T31820] ? rcu_is_watching+0x12/0xc0 [ 907.365772][T31820] do_syscall_64+0x115/0x870 [ 907.365801][T31820] ? clear_bhb_loop+0x40/0x90 [ 907.365824][T31820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.365843][T31820] RIP: 0033:0x7f64cd75d68e [ 907.365859][T31820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 907.365877][T31820] RSP: 002b:00007f64ce738fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 907.365895][T31820] RAX: ffffffffffffffda RBX: 00007f64ce7396c0 RCX: 00007f64cd75d68e [ 907.365908][T31820] RDX: 000000000000000f RSI: 00007f64ce7390a0 RDI: 0000000000000004 [ 907.365920][T31820] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 907.365932][T31820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.365941][T31820] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 907.365966][T31820] [ 907.454036][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.104222][T26785] usb 10-1: new full-speed USB device number 117 using dummy_hcd [ 908.256118][T26785] usb 10-1: unable to get BOS descriptor or descriptor too short [ 908.260108][T26785] usb 10-1: not running at top speed; connect to a high speed hub [ 908.264243][T26785] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 908.267759][T26785] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 908.271156][T26785] usb 10-1: config 14 has no interface number 0 [ 908.273892][T26785] usb 10-1: config 14 has no interface number 1 [ 908.276778][T26785] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 908.281253][T26785] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 908.286298][T26785] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 908.291261][T26785] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.296515][T26785] usb 10-1: config 14 interface 57 has no altsetting 0 [ 908.299205][T26785] usb 10-1: config 14 interface 228 has no altsetting 0 [ 908.305218][T26785] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 908.309140][T26785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.313360][T26785] usb 10-1: Product: syz [ 908.315455][T26785] usb 10-1: Manufacturer: syz [ 908.317493][T26785] usb 10-1: SerialNumber: syz [ 908.331489][ T40] audit: type=1326 audit(1780015817.688:69675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.338848][ T40] audit: type=1326 audit(1780015817.688:69676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.346615][ T40] audit: type=1326 audit(1780015817.688:69677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.356343][ T40] audit: type=1326 audit(1780015817.688:69678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.366125][ T40] audit: type=1326 audit(1780015817.688:69679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.375868][ T40] audit: type=1326 audit(1780015817.688:69680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.385693][ T40] audit: type=1326 audit(1780015817.688:69681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.395500][ T40] audit: type=1326 audit(1780015817.688:69682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31826 comm="syz.9.8088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98dd9ce59 code=0x7fc00000 [ 908.504025][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.552650][T31850] FAULT_INJECTION: forcing a failure. [ 908.552650][T31850] name failslab, interval 1, probability 0, space 0, times 0 [ 908.559115][T31850] CPU: 0 UID: 0 PID: 31850 Comm: syz.9.8097 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.559134][T31850] Tainted: [L]=SOFTLOCKUP [ 908.559137][T31850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 908.559144][T31850] Call Trace: [ 908.559148][T31850] [ 908.559153][T31850] dump_stack_lvl+0x100/0x190 [ 908.559169][T31850] should_fail_ex.cold+0x5/0xa [ 908.559185][T31850] should_failslab+0xc2/0x120 [ 908.559197][T31850] __kmalloc_cache_noprof+0x7a/0x6f0 [ 908.559212][T31850] ? flow_block_cb_setup_simple+0x57c/0xa20 [ 908.559228][T31850] ? __lock_acquire+0x4a5/0x2630 [ 908.559242][T31850] ? __pfx_nsim_setup_tc_block_cb+0x10/0x10 [ 908.559260][T31850] flow_block_cb_setup_simple+0x57c/0xa20 [ 908.559278][T31850] ? __pfx_nsim_setup_tc+0x10/0x10 [ 908.559292][T31850] nsim_setup_tc+0x66/0x1e0 [ 908.559307][T31850] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 908.559322][T31850] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 908.559340][T31850] ? __pfx_down_write+0x10/0x10 [ 908.559359][T31850] tcf_block_get_ext+0x7ed/0x1950 [ 908.559376][T31850] clsact_init+0x25e/0xda0 [ 908.559391][T31850] ? __pfx_clsact_init+0x10/0x10 [ 908.559405][T31850] qdisc_create+0x47b/0x1070 [ 908.559420][T31850] ? __pfx_clsact_egress_block_set+0x10/0x10 [ 908.559436][T31850] tc_modify_qdisc+0x1350/0x2120 [ 908.559454][T31850] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 908.559469][T31850] ? __lock_acquire+0x4a5/0x2630 [ 908.559509][T31850] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 908.559525][T31850] rtnetlink_rcv_msg+0x3c9/0xe90 [ 908.559537][T31850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 908.559552][T31850] ? ref_tracker_free+0x37e/0x6c0 [ 908.559570][T31850] netlink_rcv_skb+0x159/0x420 [ 908.559585][T31850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 908.559597][T31850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 908.559616][T31850] ? netlink_deliver_tap+0x1ae/0xcc0 [ 908.559632][T31850] netlink_unicast+0x585/0x850 [ 908.559647][T31850] ? __pfx_netlink_unicast+0x10/0x10 [ 908.559665][T31850] netlink_sendmsg+0x8b0/0xda0 [ 908.559680][T31850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.559693][T31850] ? __might_fault+0xa0/0x140 [ 908.559714][T31850] ____sys_sendmsg+0x9e1/0xb70 [ 908.559726][T31850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.559745][T31850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.559764][T31850] ___sys_sendmsg+0x190/0x1e0 [ 908.559779][T31850] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.559810][T31850] __sys_sendmsg+0x170/0x220 [ 908.559827][T31850] ? __pfx___sys_sendmsg+0x10/0x10 [ 908.559850][T31850] ? rcu_is_watching+0x12/0xc0 [ 908.559868][T31850] do_syscall_64+0x115/0x870 [ 908.559882][T31850] ? clear_bhb_loop+0x40/0x90 [ 908.559896][T31850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.559907][T31850] RIP: 0033:0x7fd98dd9ce59 [ 908.559917][T31850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.559927][T31850] RSP: 002b:00007fd98ec85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.559938][T31850] RAX: ffffffffffffffda RBX: 00007fd98e015fa0 RCX: 00007fd98dd9ce59 [ 908.559945][T31850] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 908.559951][T31850] RBP: 00007fd98ec85090 R08: 0000000000000000 R09: 0000000000000000 [ 908.559957][T31850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.559963][T31850] R13: 00007fd98e016038 R14: 00007fd98e015fa0 R15: 00007ffe4a8c1098 [ 908.559978][T31850] [ 908.729979][T26785] legousbtower 10-1:14.57: interrupt endpoints not found [ 908.736342][T26785] legousbtower 10-1:14.228: get version request failed: -71 [ 908.739576][T26785] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 908.748468][T26785] usb 10-1: USB disconnect, device number 117 [ 908.804037][ T1042] usb 13-1: new low-speed USB device number 27 using dummy_hcd [ 908.934001][ T1042] usb 13-1: device descriptor read/64, error -71 [ 909.174086][ T1042] usb 13-1: new low-speed USB device number 28 using dummy_hcd [ 909.265988][T31857] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 909.268973][T31857] SELinux: failed to load policy [ 909.304091][ T1042] usb 13-1: device descriptor read/64, error -71 [ 909.351196][T31861] rdma_rxe: rxe_newlink: failed to add wg2 [ 909.414370][ T1042] usb usb13-port1: attempt power cycle [ 909.454285][T28310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.534033][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 909.643461][T31866] overlayfs: failed lookup in lower (newroot/102, name='file2', err=-40): overlapping layers [ 909.682473][T31868] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8104'. [ 909.764507][ T1042] usb 13-1: new low-speed USB device number 29 using dummy_hcd [ 909.795217][ T1042] usb 13-1: device descriptor read/8, error -71 [ 909.847603][T23565] usb 12-1: USB disconnect, device number 30 [ 909.859265][T23565] appletouch 12-1:1.0: input: appletouch disconnected [ 909.859368][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.948134][T31875] overlayfs: failed to resolve './file0': -2 [ 910.064011][ T1042] usb 13-1: new low-speed USB device number 30 using dummy_hcd [ 910.094805][ T1042] usb 13-1: device descriptor read/8, error -71 [ 910.214310][ T1042] usb usb13-port1: unable to enumerate USB device [ 910.316202][T23565] usb 12-1: new full-speed USB device number 31 using dummy_hcd [ 910.361954][T31885] netlink: 'syz.5.8110': attribute type 1 has an invalid length. [ 910.364367][T31885] netlink: 'syz.5.8110': attribute type 3 has an invalid length. [ 910.366706][T31885] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8110'. [ 910.404273][T31888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.409239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.413041][T31888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.416004][T30967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.424058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.473127][T31889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.476434][T23565] usb 12-1: unable to get BOS descriptor or descriptor too short [ 910.480793][T23565] usb 12-1: not running at top speed; connect to a high speed hub [ 910.484947][T23565] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 910.487538][T23565] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 910.490034][T23565] usb 12-1: config 14 has no interface number 0 [ 910.491950][T23565] usb 12-1: config 14 has no interface number 1 [ 910.494099][T23565] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 910.497513][T23565] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 910.500999][T23565] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 910.504537][T23565] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.508565][T23565] usb 12-1: config 14 interface 57 has no altsetting 0 [ 910.510633][T23565] usb 12-1: config 14 interface 228 has no altsetting 0 [ 910.515429][T23565] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 910.520106][T23565] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.523393][T23565] usb 12-1: Product: syz [ 910.525197][T23565] usb 12-1: Manufacturer: syz [ 910.527135][T23565] usb 12-1: SerialNumber: syz [ 910.614626][T31893] syzkaller0: entered promiscuous mode [ 910.616542][T31893] syzkaller0: entered allmulticast mode [ 910.935834][ C3] raw-gadget.0 gadget.7: ignoring, device is not running [ 910.939028][T23565] legousbtower 12-1:14.57: interrupt endpoints not found [ 910.945569][T23565] legousbtower 12-1:14.228: get version request failed: -71 [ 910.947833][T23565] legousbtower 12-1:14.228: probe with driver legousbtower failed with error -71 [ 910.954842][T23565] usb 12-1: USB disconnect, device number 31 [ 911.323306][T31913] No control pipe specified [ 911.374449][T31917] syzkaller0: entered promiscuous mode [ 911.376803][T31917] syzkaller0: entered allmulticast mode [ 911.381609][T31917] FAULT_INJECTION: forcing a failure. [ 911.381609][T31917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.386320][T31917] CPU: 2 UID: 0 PID: 31917 Comm: syz.5.8122 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.386349][T31917] Tainted: [L]=SOFTLOCKUP [ 911.386355][T31917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 911.386366][T31917] Call Trace: [ 911.386374][T31917] [ 911.386381][T31917] dump_stack_lvl+0x100/0x190 [ 911.386403][T31917] should_fail_ex.cold+0x5/0xa [ 911.386425][T31917] _copy_from_iter+0x43a/0x1690 [ 911.386450][T31917] ? __pfx__copy_from_iter+0x10/0x10 [ 911.386470][T31917] ? _copy_from_iter+0x270/0x1690 [ 911.386497][T31917] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 911.386528][T31917] skb_copy_datagram_from_iter+0x11f/0x720 [ 911.386560][T31917] packet_sendmsg+0x227e/0x5100 [ 911.386592][T31917] ? __lock_acquire+0x4a5/0x2630 [ 911.386617][T31917] ? sock_has_perm+0x25a/0x2f0 [ 911.386637][T31917] ? __pfx_sock_has_perm+0x10/0x10 [ 911.386659][T31917] ? __pfx_packet_sendmsg+0x10/0x10 [ 911.386690][T31917] ____sys_sendmsg+0x9e1/0xb70 [ 911.386711][T31917] ? __pfx_packet_sendmsg+0x10/0x10 [ 911.386737][T31917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 911.386767][T31917] ___sys_sendmsg+0x190/0x1e0 [ 911.386790][T31917] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.386834][T31917] __sys_sendmsg+0x170/0x220 [ 911.386858][T31917] ? __pfx___sys_sendmsg+0x10/0x10 [ 911.386894][T31917] ? rcu_is_watching+0x12/0xc0 [ 911.386922][T31917] do_syscall_64+0x115/0x870 [ 911.386945][T31917] ? clear_bhb_loop+0x40/0x90 [ 911.386965][T31917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.386981][T31917] RIP: 0033:0x7fc86279ce59 [ 911.386994][T31917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.387010][T31917] RSP: 002b:00007fc86357c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.387026][T31917] RAX: ffffffffffffffda RBX: 00007fc862a15fa0 RCX: 00007fc86279ce59 [ 911.387037][T31917] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 911.387049][T31917] RBP: 00007fc86357c090 R08: 0000000000000000 R09: 0000000000000000 [ 911.387059][T31917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.387071][T31917] R13: 00007fc862a16038 R14: 00007fc862a15fa0 R15: 00007ffeed2f0c58 [ 911.387095][T31917] [ 911.604329][T31927] FAULT_INJECTION: forcing a failure. [ 911.604329][T31927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.608397][T31927] CPU: 1 UID: 0 PID: 31927 Comm: syz.8.8127 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.608414][T31927] Tainted: [L]=SOFTLOCKUP [ 911.608418][T31927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 911.608425][T31927] Call Trace: [ 911.608429][T31927] [ 911.608434][T31927] dump_stack_lvl+0x100/0x190 [ 911.608450][T31927] should_fail_ex.cold+0x5/0xa [ 911.608465][T31927] _copy_from_user+0x2e/0xd0 [ 911.608479][T31927] kstrtouint_from_user+0xd6/0x1d0 [ 911.608496][T31927] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 911.608511][T31927] ? __lock_acquire+0x4a5/0x2630 [ 911.608528][T31927] ? lock_acquire+0x1b1/0x370 [ 911.608543][T31927] proc_fail_nth_write+0x83/0x220 [ 911.608556][T31927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 911.608571][T31927] vfs_write+0x2aa/0x1070 [ 911.608584][T31927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 911.608597][T31927] ? __pfx_vfs_write+0x10/0x10 [ 911.608609][T31927] ? __fget_files+0x215/0x3d0 [ 911.608625][T31927] ? __fget_files+0x21f/0x3d0 [ 911.608642][T31927] ksys_write+0x12a/0x250 [ 911.608654][T31927] ? __pfx_ksys_write+0x10/0x10 [ 911.608666][T31927] ? rcu_is_watching+0x12/0xc0 [ 911.608684][T31927] do_syscall_64+0x115/0x870 [ 911.608698][T31927] ? clear_bhb_loop+0x40/0x90 [ 911.608711][T31927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.608722][T31927] RIP: 0033:0x7f64cd75d68e [ 911.608732][T31927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 911.608743][T31927] RSP: 002b:00007f64ce738fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.608753][T31927] RAX: ffffffffffffffda RBX: 00007f64ce7396c0 RCX: 00007f64cd75d68e [ 911.608760][T31927] RDX: 0000000000000001 RSI: 00007f64ce7390a0 RDI: 0000000000000004 [ 911.608766][T31927] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 911.608773][T31927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.608779][T31927] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 911.608793][T31927] [ 911.769161][T31935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8130'. [ 912.164313][ T5841] usb 12-1: new full-speed USB device number 32 using dummy_hcd [ 912.211154][T31961] FAULT_INJECTION: forcing a failure. [ 912.211154][T31961] name failslab, interval 1, probability 0, space 0, times 0 [ 912.216781][T31961] CPU: 2 UID: 0 PID: 31961 Comm: syz.9.8139 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.216799][T31961] Tainted: [L]=SOFTLOCKUP [ 912.216803][T31961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 912.216810][T31961] Call Trace: [ 912.216814][T31961] [ 912.216818][T31961] dump_stack_lvl+0x100/0x190 [ 912.216834][T31961] should_fail_ex.cold+0x5/0xa [ 912.216850][T31961] should_failslab+0xc2/0x120 [ 912.216863][T31961] __kmalloc_cache_noprof+0x7a/0x6f0 [ 912.216878][T31961] ? fuse_dentry_revalidate+0x355/0xbd0 [ 912.216894][T31961] ? try_to_unlazy+0x296/0x910 [ 912.216905][T31961] ? try_to_unlazy+0x296/0x910 [ 912.216917][T31961] fuse_dentry_revalidate+0x355/0xbd0 [ 912.216934][T31961] ? mntput+0x70/0xa0 [ 912.216946][T31961] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 912.216963][T31961] ? __lock_acquire+0x4a5/0x2630 [ 912.216989][T31961] ? __d_lookup+0x266/0x4a0 [ 912.217004][T31961] lookup_dcache+0xf5/0x170 [ 912.217021][T31961] lookup_one_qstr_excl+0x26/0x250 [ 912.217037][T31961] ? mnt_want_write+0x161/0x450 [ 912.217050][T31961] filename_create+0x1cf/0x400 [ 912.217062][T31961] ? __pfx_filename_create+0x10/0x10 [ 912.217079][T31961] filename_linkat+0x18c/0x640 [ 912.217097][T31961] ? __pfx_filename_linkat+0x10/0x10 [ 912.217148][T31961] ? do_getname+0x191/0x390 [ 912.217169][T31961] __x64_sys_link+0x81/0xb0 [ 912.217185][T31961] do_syscall_64+0x115/0x870 [ 912.217199][T31961] ? clear_bhb_loop+0x40/0x90 [ 912.217212][T31961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.217224][T31961] RIP: 0033:0x7fd98dd9ce59 [ 912.217234][T31961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.217244][T31961] RSP: 002b:00007fd98ec64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 912.217255][T31961] RAX: ffffffffffffffda RBX: 00007fd98e016090 RCX: 00007fd98dd9ce59 [ 912.217262][T31961] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 912.217268][T31961] RBP: 00007fd98ec64090 R08: 0000000000000000 R09: 0000000000000000 [ 912.217275][T31961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.217281][T31961] R13: 00007fd98e016128 R14: 00007fd98e016090 R15: 00007ffe4a8c1098 [ 912.217295][T31961] [ 912.365669][ T5841] usb 12-1: unable to get BOS descriptor or descriptor too short [ 912.368489][ T5841] usb 12-1: not running at top speed; connect to a high speed hub [ 912.371764][ T5841] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 912.374359][ T5841] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 912.376850][ T5841] usb 12-1: config 14 has no interface number 0 [ 912.378775][ T5841] usb 12-1: config 14 has no interface number 1 [ 912.380686][ T5841] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 912.383899][ T5841] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 912.387469][ T5841] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 912.390954][ T5841] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.394952][ T5841] usb 12-1: config 14 interface 57 has no altsetting 0 [ 912.396994][ T5841] usb 12-1: config 14 interface 228 has no altsetting 0 [ 912.400821][ T5841] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 912.403550][ T5841] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.406180][ T5841] usb 12-1: Product: syz [ 912.407490][ T5841] usb 12-1: Manufacturer: syz [ 912.408931][ T5841] usb 12-1: SerialNumber: syz [ 912.820269][ C2] raw-gadget.0 gadget.7: ignoring, device is not running [ 912.825637][ T5841] legousbtower 12-1:14.57: interrupt endpoints not found [ 912.830098][ T5841] legousbtower 12-1:14.228: get version request failed: -71 [ 912.832383][ T5841] legousbtower 12-1:14.228: probe with driver legousbtower failed with error -71 [ 912.842675][ T5841] usb 12-1: USB disconnect, device number 32 [ 913.018611][T31983] fuse: Unknown parameter 'rootmmd00000000æpRIÉVVN°3T HÕa0000000040' [ 913.081202][T31988] FAULT_INJECTION: forcing a failure. [ 913.081202][T31988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.086973][T31988] CPU: 2 UID: 0 PID: 31988 Comm: syz.5.8148 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.086991][T31988] Tainted: [L]=SOFTLOCKUP [ 913.086995][T31988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 913.087001][T31988] Call Trace: [ 913.087005][T31988] [ 913.087009][T31988] dump_stack_lvl+0x100/0x190 [ 913.087026][T31988] should_fail_ex.cold+0x5/0xa [ 913.087042][T31988] _copy_from_iter+0x1f4/0x1690 [ 913.087059][T31988] ? __pfx__copy_from_iter+0x10/0x10 [ 913.087073][T31988] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 913.087090][T31988] copy_page_from_iter+0x238/0x300 [ 913.087105][T31988] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 913.087127][T31988] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 913.087143][T31988] ? unwind_get_return_address+0x59/0xa0 [ 913.087160][T31988] ? arch_stack_walk+0xa6/0xf0 [ 913.087183][T31988] ? _kstrtoull+0x13c/0x1f0 [ 913.087198][T31988] ? __pfx__kstrtoull+0x10/0x10 [ 913.087215][T31988] tun_get_user+0x16d6/0x3c20 [ 913.087236][T31988] ? __pfx_tun_get_user+0x10/0x10 [ 913.087253][T31988] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 913.087273][T31988] ? find_held_lock+0x2b/0x80 [ 913.087283][T31988] ? tun_get+0x191/0x370 [ 913.087316][T31988] ? tun_get+0x191/0x370 [ 913.087334][T31988] tun_chr_write_iter+0xdc/0x200 [ 913.087351][T31988] vfs_write+0x6ac/0x1070 [ 913.087364][T31988] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 913.087382][T31988] ? __pfx_vfs_write+0x10/0x10 [ 913.087392][T31988] ? find_held_lock+0x2b/0x80 [ 913.087410][T31988] ksys_write+0x12a/0x250 [ 913.087422][T31988] ? __pfx_ksys_write+0x10/0x10 [ 913.087434][T31988] ? rcu_is_watching+0x12/0xc0 [ 913.087452][T31988] do_syscall_64+0x115/0x870 [ 913.087466][T31988] ? clear_bhb_loop+0x40/0x90 [ 913.087479][T31988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.087490][T31988] RIP: 0033:0x7fc86275d68e [ 913.087499][T31988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 913.087510][T31988] RSP: 002b:00007fc86357bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 913.087521][T31988] RAX: ffffffffffffffda RBX: 00007fc86357c6c0 RCX: 00007fc86275d68e [ 913.087528][T31988] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 00000000000000c8 [ 913.087534][T31988] RBP: 00007fc86357c090 R08: 0000000000000000 R09: 0000000000000000 [ 913.087540][T31988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.087547][T31988] R13: 00007fc862a16038 R14: 00007fc862a15fa0 R15: 00007ffeed2f0c58 [ 913.087560][T31988] [ 913.460955][T32002] input: syz1 as /devices/virtual/input/input67 [ 913.468975][T32002] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8152'. [ 913.479302][T32002] program syz.7.8152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 913.482871][T32002] netlink: 'syz.7.8152': attribute type 12 has an invalid length. [ 913.694112][ C3] net_ratelimit: 10 callbacks suppressed [ 913.694130][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 913.764833][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 913.764848][ T40] audit: type=1400 audit(1780015823.128:69716): avc: denied { append } for pid=32009 comm="syz.5.8156" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 913.774358][T32010] autofs: Unknown parameter 'GPL' [ 913.855368][T32016] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 913.930485][T32029] FAULT_INJECTION: forcing a failure. [ 913.930485][T32029] name failslab, interval 1, probability 0, space 0, times 0 [ 913.935391][T32029] CPU: 3 UID: 0 PID: 32029 Comm: syz.7.8162 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.935419][T32029] Tainted: [L]=SOFTLOCKUP [ 913.935424][T32029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 913.935433][T32029] Call Trace: [ 913.935437][T32029] [ 913.935442][T32029] dump_stack_lvl+0x100/0x190 [ 913.935458][T32029] should_fail_ex.cold+0x5/0xa [ 913.935473][T32029] should_failslab+0xc2/0x120 [ 913.935486][T32029] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 913.935502][T32029] ? __alloc_skb+0x140/0x710 [ 913.935517][T32029] ? __alloc_skb+0x5b7/0x710 [ 913.935534][T32029] __alloc_skb+0x140/0x710 [ 913.935550][T32029] ? __alloc_skb+0x5b7/0x710 [ 913.935565][T32029] ? __pfx___alloc_skb+0x10/0x10 [ 913.935580][T32029] ? up_write+0x28c/0x4f0 [ 913.935597][T32029] alloc_skb_with_frags+0xdd/0x760 [ 913.935612][T32029] sock_alloc_send_pskb+0x801/0x980 [ 913.935627][T32029] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 913.935647][T32029] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 913.935662][T32029] ? find_held_lock+0x2b/0x80 [ 913.935671][T32029] ? dev_get_by_index+0x180/0x380 [ 913.935687][T32029] ? dev_get_by_index+0x180/0x380 [ 913.935705][T32029] packet_sendmsg+0x1eda/0x5100 [ 913.935725][T32029] ? __lock_acquire+0x4a5/0x2630 [ 913.935740][T32029] ? sock_has_perm+0x25a/0x2f0 [ 913.935754][T32029] ? __pfx_sock_has_perm+0x10/0x10 [ 913.935769][T32029] ? __pfx_packet_sendmsg+0x10/0x10 [ 913.935789][T32029] ____sys_sendmsg+0x9e1/0xb70 [ 913.935801][T32029] ? __pfx_packet_sendmsg+0x10/0x10 [ 913.935815][T32029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.935833][T32029] ___sys_sendmsg+0x190/0x1e0 [ 913.935847][T32029] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.935875][T32029] __sys_sendmsg+0x170/0x220 [ 913.935891][T32029] ? __pfx___sys_sendmsg+0x10/0x10 [ 913.935913][T32029] ? rcu_is_watching+0x12/0xc0 [ 913.935930][T32029] do_syscall_64+0x115/0x870 [ 913.935944][T32029] ? clear_bhb_loop+0x40/0x90 [ 913.935957][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.935968][T32029] RIP: 0033:0x7fb5cdf9ce59 [ 913.935977][T32029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.935987][T32029] RSP: 002b:00007fb5cee80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.935998][T32029] RAX: ffffffffffffffda RBX: 00007fb5ce215fa0 RCX: 00007fb5cdf9ce59 [ 913.936005][T32029] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 913.936011][T32029] RBP: 00007fb5cee80090 R08: 0000000000000000 R09: 0000000000000000 [ 913.936017][T32029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.936024][T32029] R13: 00007fb5ce216038 R14: 00007fb5ce215fa0 R15: 00007ffd463f92f8 [ 913.936037][T32029] [ 914.046958][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.164004][T23565] usb 10-1: new full-speed USB device number 118 using dummy_hcd [ 914.201906][T32040] openvswitch: netlink: Flow key attr not present in new flow. [ 914.251804][T32044] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 914.253252][ T40] audit: type=1400 audit(1780015823.608:69717): avc: denied { read append } for pid=32043 comm="syz.8.8169" name="usbmon5" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 914.264393][ T40] audit: type=1400 audit(1780015823.608:69718): avc: denied { open } for pid=32043 comm="syz.8.8169" path="/dev/usbmon5" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 914.287130][T32049] Invalid logical block size (5888) [ 914.318141][T23565] usb 10-1: unable to get BOS descriptor or descriptor too short [ 914.322446][T23565] usb 10-1: not running at top speed; connect to a high speed hub [ 914.327741][T23565] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 914.332108][T23565] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 914.335739][T23565] usb 10-1: config 14 has no interface number 0 [ 914.337725][T23565] usb 10-1: config 14 has no interface number 1 [ 914.339692][T23565] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 914.343093][T23565] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 914.348040][T23565] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 914.351627][T23565] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.356380][T23565] usb 10-1: config 14 interface 57 has no altsetting 0 [ 914.358571][T23565] usb 10-1: config 14 interface 228 has no altsetting 0 [ 914.362999][T23565] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 914.366626][T23565] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.369058][T23565] usb 10-1: Product: syz [ 914.370328][T23565] usb 10-1: Manufacturer: syz [ 914.371706][T23565] usb 10-1: SerialNumber: syz [ 914.375033][T30729] usb 14-1: new low-speed USB device number 13 using dummy_hcd [ 914.504018][ T5841] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 914.525360][T30729] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 914.527855][T30729] usb 14-1: config 0 has no interface number 0 [ 914.529744][T30729] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 914.533138][T30729] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 914.536410][T30729] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 914.539117][T30729] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.542693][T30729] usb 14-1: config 0 descriptor?? [ 914.545019][T32035] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 914.550880][T30729] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 914.634017][ T5841] usb 12-1: device descriptor read/64, error -71 [ 914.733985][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 914.748914][T32035] netlink: 7064 bytes leftover after parsing attributes in process `syz.9.8164'. [ 914.751796][T32035] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 914.781705][T23565] legousbtower 10-1:14.57: interrupt endpoints not found [ 914.787646][T23565] legousbtower 10-1:14.228: get version request failed: -71 [ 914.790441][T23565] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 914.796311][T23565] usb 10-1: USB disconnect, device number 118 [ 914.821619][T30977] usb 14-1: USB disconnect, device number 13 [ 914.874009][ T5841] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 915.014028][ T5841] usb 12-1: device descriptor read/64, error -71 [ 915.057917][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.124360][ T5841] usb usb12-port1: attempt power cycle [ 915.321175][T32064] FAULT_INJECTION: forcing a failure. [ 915.321175][T32064] name failslab, interval 1, probability 0, space 0, times 0 [ 915.326127][T32064] CPU: 1 UID: 0 PID: 32064 Comm: syz.8.8174 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.326152][T32064] Tainted: [L]=SOFTLOCKUP [ 915.326158][T32064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 915.326168][T32064] Call Trace: [ 915.326174][T32064] [ 915.326181][T32064] dump_stack_lvl+0x100/0x190 [ 915.326205][T32064] should_fail_ex.cold+0x5/0xa [ 915.326228][T32064] should_failslab+0xc2/0x120 [ 915.326247][T32064] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 915.326271][T32064] ? prepare_creds+0x2c/0x950 [ 915.326298][T32064] prepare_creds+0x2c/0x950 [ 915.326321][T32064] ovl_override_creator_creds+0x110/0x340 [ 915.326349][T32064] ovl_create_or_link+0x18a/0x390 [ 915.326392][T32064] ovl_create_object+0x2bf/0x3b0 [ 915.326419][T32064] ? __pfx_ovl_create_object+0x10/0x10 [ 915.326446][T32064] ? inode_permission+0x374/0x620 [ 915.326476][T32064] ovl_mkdir+0x2a/0x40 [ 915.326500][T32064] vfs_mkdir+0x361/0x850 [ 915.326519][T32064] filename_mkdirat+0x48b/0x5e0 [ 915.326543][T32064] ? __pfx_filename_mkdirat+0x10/0x10 [ 915.326564][T32064] ? strncpy_from_user+0x19d/0x2d0 [ 915.326588][T32064] ? do_getname+0x191/0x390 [ 915.326614][T32064] __x64_sys_mkdirat+0x89/0xc0 [ 915.326635][T32064] do_syscall_64+0x115/0x870 [ 915.326656][T32064] ? clear_bhb_loop+0x40/0x90 [ 915.326676][T32064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.326693][T32064] RIP: 0033:0x7f64cd79ce59 [ 915.326707][T32064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.326722][T32064] RSP: 002b:00007f64ce739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 915.326739][T32064] RAX: ffffffffffffffda RBX: 00007f64cda15fa0 RCX: 00007f64cd79ce59 [ 915.326750][T32064] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 915.326760][T32064] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 915.326770][T32064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 915.326780][T32064] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 915.326803][T32064] [ 915.332167][T32065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.402396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.405399][T32065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.408757][T30967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.432118][T32068] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 915.464210][ T5841] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 915.484575][ T5841] usb 12-1: device descriptor read/8, error -71 [ 915.605728][T32073] rdma_rxe: rxe_newlink: failed to add wg2 [ 915.641909][ T40] audit: type=1400 audit(1780015824.998:69719): avc: denied { audit_control } for pid=32077 comm="syz.8.8180" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 915.724132][ T5841] usb 12-1: new high-speed USB device number 36 using dummy_hcd [ 915.744930][ T5841] usb 12-1: device descriptor read/8, error -71 [ 915.864702][ T5841] usb usb12-port1: unable to enumerate USB device [ 916.352716][ T40] audit: type=1400 audit(1780015825.708:69720): avc: denied { setattr } for pid=32084 comm="syz.9.8182" name="file0" dev="9p" ino=72877231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 916.421568][T32087] netlink: 868 bytes leftover after parsing attributes in process `syz.5.8184'. [ 916.427572][T32087] binder: BINDER_SET_CONTEXT_MGR already set [ 916.430126][T32087] binder: 32086:32087 ioctl 4018620d 200000000180 returned -16 [ 916.552179][T32092] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8185'. [ 916.774627][ T3265] usb 14-1: new full-speed USB device number 14 using dummy_hcd [ 916.789791][ T40] audit: type=1326 audit(1780015826.148:69721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32095 comm="syz.8.8186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64cd79ce59 code=0x7ffc0000 [ 916.814144][ T40] audit: type=1326 audit(1780015826.148:69722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32095 comm="syz.8.8186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64cd79ce59 code=0x7ffc0000 [ 916.821454][ T40] audit: type=1326 audit(1780015826.148:69723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32095 comm="syz.8.8186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64cd79ce59 code=0x7ffc0000 [ 916.831033][T32096] netlink: 'syz.8.8186': attribute type 1 has an invalid length. [ 916.833990][ T40] audit: type=1326 audit(1780015826.148:69724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32095 comm="syz.8.8186" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f64cd79ce59 code=0x7ffc0000 [ 916.846096][ T40] audit: type=1326 audit(1780015826.148:69725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32095 comm="syz.8.8186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64cd79ce59 code=0x7ffc0000 [ 916.851386][T32096] bond1: entered promiscuous mode [ 916.857249][T32096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 916.926199][T32098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 916.928705][T32098] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 916.931914][T32098] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 916.938018][T32098] bond1: (slave ip6gre1): making interface the new active one [ 916.938277][ T3265] usb 14-1: unable to get BOS descriptor or descriptor too short [ 916.940373][T32098] ip6gre1: entered promiscuous mode [ 916.945999][T32098] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 916.946533][ T3265] usb 14-1: not running at top speed; connect to a high speed hub [ 916.958394][ T3265] usb 14-1: config 14 has an invalid interface number: 57 but max is 1 [ 916.961762][ T3265] usb 14-1: config 14 has an invalid interface number: 228 but max is 1 [ 916.964666][ T3265] usb 14-1: config 14 has no interface number 0 [ 916.966809][ T3265] usb 14-1: config 14 has no interface number 1 [ 916.968920][ T3265] usb 14-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 916.972293][ T3265] usb 14-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 916.977003][ T3265] usb 14-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 916.980737][ T3265] usb 14-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.985517][ T3265] usb 14-1: config 14 interface 57 has no altsetting 0 [ 916.988686][ T3265] usb 14-1: config 14 interface 228 has no altsetting 0 [ 916.994808][ T3265] usb 14-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 916.998964][ T3265] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.002534][ T3265] usb 14-1: Product: syz [ 917.004637][ T3265] usb 14-1: Manufacturer: syz [ 917.006909][ T3265] usb 14-1: SerialNumber: syz [ 917.424129][ T3265] legousbtower 14-1:14.57: interrupt endpoints not found [ 917.438564][ T3265] legousbtower 14-1:14.228: get version request failed: -71 [ 917.441896][ T3265] legousbtower 14-1:14.228: probe with driver legousbtower failed with error -71 [ 917.459910][ T3265] usb 14-1: USB disconnect, device number 14 [ 918.094451][T32111] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8191'. [ 918.263880][T32120] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8195'. [ 918.288924][T32120] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8195'. [ 918.624120][ T5841] usb 12-1: new full-speed USB device number 37 using dummy_hcd [ 918.647043][T32137] FAULT_INJECTION: forcing a failure. [ 918.647043][T32137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.652022][T32137] CPU: 0 UID: 0 PID: 32137 Comm: syz.8.8202 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.652041][T32137] Tainted: [L]=SOFTLOCKUP [ 918.652045][T32137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 918.652051][T32137] Call Trace: [ 918.652056][T32137] [ 918.652061][T32137] dump_stack_lvl+0x100/0x190 [ 918.652076][T32137] should_fail_ex.cold+0x5/0xa [ 918.652093][T32137] _copy_to_user+0x32/0xd0 [ 918.652107][T32137] simple_read_from_buffer+0xcb/0x170 [ 918.652123][T32137] proc_fail_nth_read+0x1af/0x230 [ 918.652137][T32137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 918.652149][T32137] ? rw_verify_area+0xce/0x6d0 [ 918.652160][T32137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 918.652171][T32137] vfs_read+0x1e4/0xb30 [ 918.652184][T32137] ? __pfx_vfs_read+0x10/0x10 [ 918.652196][T32137] ? __fget_files+0x215/0x3d0 [ 918.652212][T32137] ? __fget_files+0x21f/0x3d0 [ 918.652229][T32137] ksys_read+0x12a/0x250 [ 918.652241][T32137] ? __pfx_ksys_read+0x10/0x10 [ 918.652253][T32137] ? rcu_is_watching+0x12/0xc0 [ 918.652271][T32137] do_syscall_64+0x115/0x870 [ 918.652286][T32137] ? clear_bhb_loop+0x40/0x90 [ 918.652299][T32137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.652310][T32137] RIP: 0033:0x7f64cd75d68e [ 918.652319][T32137] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 918.652330][T32137] RSP: 002b:00007f64ce738fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 918.652340][T32137] RAX: ffffffffffffffda RBX: 00007f64ce7396c0 RCX: 00007f64cd75d68e [ 918.652347][T32137] RDX: 000000000000000f RSI: 00007f64ce7390a0 RDI: 0000000000000011 [ 918.652354][T32137] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 918.652360][T32137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.652366][T32137] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 918.652380][T32137] [ 918.758060][T32142] netlink: 'syz.8.8204': attribute type 10 has an invalid length. [ 918.766685][T32142] team0: Failed to send options change via netlink (err -105) [ 918.769757][T32142] team0: Port device dummy0 added [ 918.772141][T32142] netlink: 'syz.8.8204': attribute type 10 has an invalid length. [ 918.778011][T32142] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 918.787717][T32142] team0: Failed to send options change via netlink (err -105) [ 918.791136][T32142] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 918.795860][ T5841] usb 12-1: unable to get BOS descriptor or descriptor too short [ 918.796008][T32142] team0: Port device dummy0 removed [ 918.798922][ T5841] usb 12-1: not running at top speed; connect to a high speed hub [ 918.803887][ T5841] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 918.804155][T32142] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 918.807016][ T5841] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 918.812508][ T5841] usb 12-1: config 14 has no interface number 0 [ 918.815109][ T5841] usb 12-1: config 14 has no interface number 1 [ 918.817607][ T5841] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 918.821606][ T5841] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 918.825355][ T5841] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 918.828850][ T5841] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.832891][ T5841] usb 12-1: config 14 interface 57 has no altsetting 0 [ 918.835201][ T5841] usb 12-1: config 14 interface 228 has no altsetting 0 [ 918.839230][ T5841] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 918.842108][ T5841] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.844744][ T5841] usb 12-1: Product: syz [ 918.846149][ T5841] usb 12-1: Manufacturer: syz [ 918.847582][ T5841] usb 12-1: SerialNumber: syz [ 918.884180][T30977] usb 10-1: new full-speed USB device number 119 using dummy_hcd [ 918.894085][ C3] net_ratelimit: 14 callbacks suppressed [ 918.894101][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 918.975006][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.035774][T30977] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 919.039352][T30977] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.044500][T30977] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 919.047656][T30977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.256955][T30977] usb 10-1: usb_control_msg returned -32 [ 919.258985][T30977] usbtmc 10-1:16.0: can't read capabilities [ 919.263140][ T5841] legousbtower 12-1:14.57: interrupt endpoints not found [ 919.268558][ T5841] legousbtower 12-1:14.228: get version request failed: -71 [ 919.271479][ T5841] legousbtower 12-1:14.228: probe with driver legousbtower failed with error -71 [ 919.282073][ T5841] usb 12-1: USB disconnect, device number 37 [ 919.463558][T32135] syzkaller0: entered promiscuous mode [ 919.465701][T32135] syzkaller0: entered allmulticast mode [ 919.474988][ T3265] usb 10-1: USB disconnect, device number 119 [ 919.774230][ T5841] usb 14-1: new low-speed USB device number 15 using dummy_hcd [ 919.925534][ T5841] usb 14-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 919.929270][ T5841] usb 14-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 919.933998][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 919.938772][ T5841] usb 14-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 919.944526][ T5841] usb 14-1: config 1 interface 0 has no altsetting 0 [ 920.015998][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.093562][T32177] FAULT_INJECTION: forcing a failure. [ 920.093562][T32177] name failslab, interval 1, probability 0, space 0, times 0 [ 920.097586][T32177] CPU: 2 UID: 0 PID: 32177 Comm: syz.7.8217 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.097603][T32177] Tainted: [L]=SOFTLOCKUP [ 920.097607][T32177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 920.097613][T32177] Call Trace: [ 920.097618][T32177] [ 920.097622][T32177] dump_stack_lvl+0x100/0x190 [ 920.097638][T32177] should_fail_ex.cold+0x5/0xa [ 920.097652][T32177] ? qp_host_alloc_queue+0x4e/0x210 [ 920.097665][T32177] should_failslab+0xc2/0x120 [ 920.097677][T32177] __kmalloc_noprof+0xe0/0x850 [ 920.097708][T32177] qp_host_alloc_queue+0x4e/0x210 [ 920.097721][T32177] qp_broker_alloc+0xebd/0x1bc0 [ 920.097739][T32177] ? __pfx_qp_broker_alloc+0x10/0x10 [ 920.097754][T32177] ? find_held_lock+0x2b/0x80 [ 920.097765][T32177] vmci_qp_broker_alloc+0x93/0xc0 [ 920.097783][T32177] vmci_host_do_alloc_queuepair.constprop.0+0x1ad/0x3f0 [ 920.097798][T32177] ? __pfx_vmci_host_do_alloc_queuepair.constprop.0+0x10/0x10 [ 920.097814][T32177] ? kasan_quarantine_put+0x104/0x240 [ 920.097831][T32177] ? find_held_lock+0x2b/0x80 [ 920.097844][T32177] ? tomoyo_path_number_perm+0x188/0x580 [ 920.097862][T32177] vmci_host_unlocked_ioctl+0x697/0x2070 [ 920.097876][T32177] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 920.097889][T32177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 920.097903][T32177] ? do_vfs_ioctl+0x226/0x13e0 [ 920.097914][T32177] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 920.097925][T32177] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 920.097946][T32177] ? __fget_files+0x215/0x3d0 [ 920.097959][T32177] ? hook_file_ioctl_common+0x149/0x410 [ 920.097974][T32177] ? selinux_file_ioctl+0x13b/0x290 [ 920.097989][T32177] ? selinux_file_ioctl+0xb6/0x290 [ 920.098005][T32177] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 920.098019][T32177] __x64_sys_ioctl+0x18e/0x210 [ 920.098031][T32177] do_syscall_64+0x115/0x870 [ 920.098045][T32177] ? clear_bhb_loop+0x40/0x90 [ 920.098058][T32177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.098069][T32177] RIP: 0033:0x7fb5cdf9ce59 [ 920.098078][T32177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.098089][T32177] RSP: 002b:00007fb5cee80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.098100][T32177] RAX: ffffffffffffffda RBX: 00007fb5ce215fa0 RCX: 00007fb5cdf9ce59 [ 920.098106][T32177] RDX: 00002000000000c0 RSI: 00000000000007a8 RDI: 0000000000000003 [ 920.098113][T32177] RBP: 00007fb5cee80090 R08: 0000000000000000 R09: 0000000000000000 [ 920.098119][T32177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.098125][T32177] R13: 00007fb5ce216038 R14: 00007fb5ce215fa0 R15: 00007ffd463f92f8 [ 920.098139][T32177] [ 920.215802][T32181] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 920.218797][T32181] overlayfs: overlapping lowerdir path [ 920.247167][T32185] pim6reg: entered allmulticast mode [ 920.250245][T32185] pim6reg: left allmulticast mode [ 920.314079][ T3265] usb 10-1: new full-speed USB device number 120 using dummy_hcd [ 920.334539][T23565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.478916][ T3265] usb 10-1: unable to get BOS descriptor or descriptor too short [ 920.482999][ T3265] usb 10-1: not running at top speed; connect to a high speed hub [ 920.487430][ T3265] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 920.490690][ T3265] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 920.494203][ T3265] usb 10-1: config 14 has no interface number 0 [ 920.496518][ T3265] usb 10-1: config 14 has no interface number 1 [ 920.498611][ T3265] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 920.501811][ T3265] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 920.505589][ T3265] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 920.509801][ T3265] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.513807][ T3265] usb 10-1: config 14 interface 57 has no altsetting 0 [ 920.516146][ T3265] usb 10-1: config 14 interface 228 has no altsetting 0 [ 920.519799][ T3265] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 920.522520][ T3265] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.525057][ T3265] usb 10-1: Product: syz [ 920.526358][ T3265] usb 10-1: Manufacturer: syz [ 920.527790][ T3265] usb 10-1: SerialNumber: syz [ 920.842663][T32207] bridge0: port 3(syz_tun) entered blocking state [ 920.845456][T32207] bridge0: port 3(syz_tun) entered disabled state [ 920.850204][T32207] syz_tun: entered promiscuous mode [ 920.853028][T32207] bridge0: port 3(syz_tun) entered blocking state [ 920.856438][T32207] bridge0: port 3(syz_tun) entered forwarding state [ 920.934763][T32213] syzkaller0: entered promiscuous mode [ 920.936761][ T3265] legousbtower 10-1:14.57: interrupt endpoints not found [ 920.939407][T32213] syzkaller0: entered allmulticast mode [ 920.974539][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 920.987088][T26785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.054728][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.139272][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 921.142589][ T3265] legousbtower 10-1:14.228: get version request failed: -71 [ 921.146710][ T3265] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 921.151780][ T3265] usb 10-1: USB disconnect, device number 120 [ 921.413985][T30729] usb 12-1: new full-speed USB device number 38 using dummy_hcd [ 921.566177][T30729] usb 12-1: config index 0 descriptor too short (expected 28277, got 36) [ 921.568884][T30729] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.572022][T30729] usb 12-1: config 0 has no interfaces? [ 921.573763][T30729] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 921.576631][T30729] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.580806][T30729] usb 12-1: config 0 descriptor?? [ 921.732175][T31070] IPVS: starting estimator thread 0... [ 921.771947][T32230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.774834][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.824057][T32228] IPVS: using max 46 ests per chain, 110400 per kthread [ 922.234051][T31070] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 922.383992][T31070] usb 13-1: Using ep0 maxpacket: 16 [ 922.388946][T31070] usb 13-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 922.391873][T31070] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.394536][T31070] usb 13-1: Product: syz [ 922.395926][T31070] usb 13-1: Manufacturer: syz [ 922.397489][T31070] usb 13-1: SerialNumber: syz [ 922.534806][ T5841] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.540144][ T5841] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.547634][T32235] 9pnet_virtio: no channels available for device syz [ 922.552854][ T5841] usb 14-1: can't set config #1, error -71 [ 922.556845][ T5841] usb 14-1: USB disconnect, device number 15 [ 922.605610][T31070] usb 13-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 922.612105][T31070] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 922.616130][T31070] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 922.618733][T31070] usb 13-1: media controller created [ 922.625350][T31070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.628083][T32238] pim6reg: entered allmulticast mode [ 922.631142][T32238] pim6reg: left allmulticast mode [ 922.806429][T31070] zl10353_read_register: readreg error (reg=127, ret==-71) [ 922.825101][T31070] dvb_usb_gl861 13-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 922.829769][T31070] usb 13-1: USB disconnect, device number 31 [ 922.967524][ T40] kauditd_printk_skb: 499 callbacks suppressed [ 922.967536][ T40] audit: type=1400 audit(1780015832.328:70225): avc: denied { recv } for pid=26144 comm="udevd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=36536 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 922.977653][ T40] audit: type=1400 audit(1780015832.328:70226): avc: denied { recv } for pid=26144 comm="udevd" saddr=127.0.0.1 src=36536 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 922.984006][T30729] usb 10-1: new full-speed USB device number 121 using dummy_hcd [ 923.136093][T30729] usb 10-1: unable to get BOS descriptor or descriptor too short [ 923.139351][T30729] usb 10-1: not running at top speed; connect to a high speed hub [ 923.143638][T30729] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 923.147219][T30729] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 923.150591][T30729] usb 10-1: config 14 has no interface number 0 [ 923.153169][T30729] usb 10-1: config 14 has no interface number 1 [ 923.155921][T30729] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 923.160385][T30729] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 923.165273][T30729] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 923.169832][T30729] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 923.174852][T30729] usb 10-1: config 14 interface 57 has no altsetting 0 [ 923.177031][T30729] usb 10-1: config 14 interface 228 has no altsetting 0 [ 923.180685][T30729] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 923.183526][T30729] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.186105][T30729] usb 10-1: Product: syz [ 923.187455][T30729] usb 10-1: Manufacturer: syz [ 923.188935][T30729] usb 10-1: SerialNumber: syz [ 923.597175][T30729] legousbtower 10-1:14.57: interrupt endpoints not found [ 923.827188][T30729] legousbtower 10-1:14.228: get version request failed: -71 [ 923.829496][T30729] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 923.835095][T30729] usb 10-1: USB disconnect, device number 121 [ 923.862478][T32262] Cannot find add_set index 0 as target [ 923.893878][T30977] hid_parser_main: 3456 callbacks suppressed [ 923.893898][T30977] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 923.902261][T32264] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8248'. [ 923.903772][T30977] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 923.934822][ T9] net_ratelimit: 14 callbacks suppressed [ 923.934834][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.071944][T32271] syzkaller0: entered promiscuous mode [ 924.074533][T32271] syzkaller0: entered allmulticast mode [ 924.094238][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 924.117220][ T3265] usb 12-1: USB disconnect, device number 38 [ 924.205622][ T40] audit: type=1400 audit(1780015833.568:70227): avc: denied { ioctl } for pid=32279 comm="syz.7.8253" path="socket:[186926]" dev="sockfs" ino=186926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 924.219899][T32280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8253'. [ 924.271686][T32290] syzkaller0: entered promiscuous mode [ 924.273449][T32290] syzkaller0: entered allmulticast mode [ 924.287276][T32292] FAULT_INJECTION: forcing a failure. [ 924.287276][T32292] name failslab, interval 1, probability 0, space 0, times 0 [ 924.291202][T32292] CPU: 0 UID: 0 PID: 32292 Comm: syz.8.8259 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.291219][T32292] Tainted: [L]=SOFTLOCKUP [ 924.291223][T32292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 924.291230][T32292] Call Trace: [ 924.291235][T32292] [ 924.291240][T32292] dump_stack_lvl+0x100/0x190 [ 924.291257][T32292] should_fail_ex.cold+0x5/0xa [ 924.291272][T32292] ? tomoyo_realpath_from_path+0xb6/0x690 [ 924.291290][T32292] should_failslab+0xc2/0x120 [ 924.291302][T32292] __kmalloc_noprof+0xe0/0x850 [ 924.291318][T32292] ? kfree+0x1dd/0x6c0 [ 924.291334][T32292] tomoyo_realpath_from_path+0xb6/0x690 [ 924.291354][T32292] tomoyo_path2_perm+0x366/0x700 [ 924.291369][T32292] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 924.291384][T32292] ? current_check_refer_path+0x2ca/0xe00 [ 924.291410][T32292] ? do_raw_spin_lock+0x128/0x260 [ 924.291430][T32292] tomoyo_path_rename+0xfc/0x1a0 [ 924.291441][T32292] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 924.291454][T32292] ? do_raw_spin_unlock+0x145/0x1e0 [ 924.291475][T32292] security_path_rename+0x18e/0x3c0 [ 924.291488][T32292] filename_renameat2+0x731/0xa60 [ 924.291509][T32292] ? __pfx_filename_renameat2+0x10/0x10 [ 924.291528][T32292] ? __might_fault+0xc5/0x140 [ 924.291552][T32292] ? do_getname+0x191/0x390 [ 924.291569][T32292] __x64_sys_rename+0x81/0xb0 [ 924.291585][T32292] do_syscall_64+0x115/0x870 [ 924.291599][T32292] ? clear_bhb_loop+0x40/0x90 [ 924.291612][T32292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.291623][T32292] RIP: 0033:0x7f64cd79ce59 [ 924.291632][T32292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.291643][T32292] RSP: 002b:00007f64ce739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 924.291654][T32292] RAX: ffffffffffffffda RBX: 00007f64cda15fa0 RCX: 00007f64cd79ce59 [ 924.291661][T32292] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 924.291668][T32292] RBP: 00007f64ce739090 R08: 0000000000000000 R09: 0000000000000000 [ 924.291674][T32292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 924.291680][T32292] R13: 00007f64cda16038 R14: 00007f64cda15fa0 R15: 00007ffdb67e8678 [ 924.291694][T32292] [ 924.291699][T32292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 924.310049][T32294] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 924.390916][T30970] Bluetooth: hci3: Frame reassembly failed (-84) [ 924.407154][T32299] xt_limit: Overflow, try lower: 271964/0 [ 924.425231][T32299] lo speed is unknown, defaulting to 1000 [ 924.433205][T32297] FAULT_INJECTION: forcing a failure. [ 924.433205][T32297] name failslab, interval 1, probability 0, space 0, times 0 [ 924.438386][T32297] CPU: 2 UID: 0 PID: 32297 Comm: syz.5.8261 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.438403][T32297] Tainted: [L]=SOFTLOCKUP [ 924.438407][T32297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 924.438413][T32297] Call Trace: [ 924.438417][T32297] [ 924.438422][T32297] dump_stack_lvl+0x100/0x190 [ 924.438439][T32297] should_fail_ex.cold+0x5/0xa [ 924.438454][T32297] should_failslab+0xc2/0x120 [ 924.438467][T32297] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 924.438483][T32297] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 924.438499][T32297] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 924.438514][T32297] mmu_topup_memory_caches+0x25/0x170 [ 924.438530][T32297] kvm_mmu_load+0xd6/0x23e0 [ 924.438543][T32297] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 924.438562][T32297] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 924.438588][T32297] ? __pfx_kvm_mmu_load+0x10/0x10 [ 924.438608][T32297] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 924.438628][T32297] ? kvm_check_and_inject_events+0x961/0x1070 [ 924.438650][T32297] ? record_steal_time+0x420/0xbc0 [ 924.438671][T32297] vcpu_run+0x39f4/0x5ca0 [ 924.438705][T32297] ? __pfx_vcpu_run+0x10/0x10 [ 924.438737][T32297] ? rcu_is_watching+0x12/0xc0 [ 924.438767][T32297] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 924.438789][T32297] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 924.438929][T32297] kvm_vcpu_ioctl+0x730/0x1720 [ 924.438948][T32297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 924.438966][T32297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.438987][T32297] ? do_vfs_ioctl+0x226/0x13e0 [ 924.439005][T32297] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 924.439023][T32297] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 924.439055][T32297] ? __fget_files+0x215/0x3d0 [ 924.439079][T32297] ? hook_file_ioctl_common+0x149/0x410 [ 924.439103][T32297] ? selinux_file_ioctl+0x13b/0x290 [ 924.439126][T32297] ? selinux_file_ioctl+0xb6/0x290 [ 924.439150][T32297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 924.439168][T32297] __x64_sys_ioctl+0x18e/0x210 [ 924.439187][T32297] do_syscall_64+0x115/0x870 [ 924.439208][T32297] ? clear_bhb_loop+0x40/0x90 [ 924.439228][T32297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.439245][T32297] RIP: 0033:0x7fc86279ce59 [ 924.439260][T32297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.439275][T32297] RSP: 002b:00007fc86357c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.439291][T32297] RAX: ffffffffffffffda RBX: 00007fc862a15fa0 RCX: 00007fc86279ce59 [ 924.439302][T32297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 924.439311][T32297] RBP: 00007fc86357c090 R08: 0000000000000000 R09: 0000000000000000 [ 924.439321][T32297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 924.439330][T32297] R13: 00007fc862a16038 R14: 00007fc862a15fa0 R15: 00007ffeed2f0c58 [ 924.439352][T32297] [ 924.584570][ T40] audit: type=1400 audit(1780015833.948:70228): avc: denied { create } for pid=32304 comm="syz.9.8263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 924.607264][T32305] tls_set_device_offload_rx: netdev not found [ 924.610122][ T40] audit: type=1400 audit(1780015833.968:70229): avc: denied { write } for pid=32304 comm="syz.9.8263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 924.719206][T32308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.724289][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.730414][T32308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.733263][T30970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.754013][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.798931][T32311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.801567][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.809695][T32313] syzkaller0: entered promiscuous mode [ 924.811981][T32313] syzkaller0: entered allmulticast mode [ 924.814887][T32311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.944480][ T40] audit: type=1400 audit(1780015834.308:70230): avc: denied { map } for pid=32314 comm="syz.9.8267" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 925.353596][T30977] usb 14-1: new full-speed USB device number 16 using dummy_hcd [ 925.526026][T30977] usb 14-1: unable to get BOS descriptor or descriptor too short [ 925.529015][T30977] usb 14-1: not running at top speed; connect to a high speed hub [ 925.534662][T30977] usb 14-1: config 14 has an invalid interface number: 57 but max is 1 [ 925.537405][T30977] usb 14-1: config 14 has an invalid interface number: 228 but max is 1 [ 925.540066][T30977] usb 14-1: config 14 has no interface number 0 [ 925.541995][T30977] usb 14-1: config 14 has no interface number 1 [ 925.545219][T30977] usb 14-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 925.548583][T30977] usb 14-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 925.552328][T30977] usb 14-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 925.556011][T30977] usb 14-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.560005][T30977] usb 14-1: config 14 interface 57 has no altsetting 0 [ 925.562099][T30977] usb 14-1: config 14 interface 228 has no altsetting 0 [ 925.569111][T30977] usb 14-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 925.571931][T30977] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.574644][T30977] usb 14-1: Product: syz [ 925.576341][T30977] usb 14-1: Manufacturer: syz [ 925.577847][T30977] usb 14-1: SerialNumber: syz [ 925.603286][T32330] pim6reg: entered allmulticast mode [ 925.606570][T32330] pim6reg: left allmulticast mode [ 925.793007][ T40] audit: type=1400 audit(1780015835.148:70231): avc: denied { connect } for pid=32332 comm="syz.5.8274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 925.985266][T30977] legousbtower 14-1:14.57: interrupt endpoints not found [ 926.008813][T32337] syzkaller0: entered promiscuous mode [ 926.011136][T32337] syzkaller0: entered allmulticast mode [ 926.187439][ C3] raw-gadget.0 gadget.9: ignoring, device is not running [ 926.190839][T30977] legousbtower 14-1:14.228: get version request failed: -71 [ 926.193183][T30977] legousbtower 14-1:14.228: probe with driver legousbtower failed with error -71 [ 926.200302][T30977] usb 14-1: USB disconnect, device number 16 [ 926.336263][ T5736] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 926.378385][T32341] netlink: 'syz.7.8277': attribute type 21 has an invalid length. [ 926.380870][T32341] netlink: 'syz.7.8277': attribute type 6 has an invalid length. [ 926.383280][T32341] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8277'. [ 926.404277][ T3265] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 926.415051][T32341] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 926.420569][T32341] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8277'. [ 926.554074][ T3265] usb 10-1: Using ep0 maxpacket: 32 [ 926.558280][ T3265] usb 10-1: unable to get BOS descriptor or descriptor too short [ 926.562408][ T3265] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 926.565997][ T3265] usb 10-1: config 8 has no interface number 0 [ 926.568572][ T3265] usb 10-1: config 8 interface 188 has no altsetting 0 [ 926.573650][ T3265] usb 10-1: string descriptor 0 read error: -22 [ 926.576808][ T3265] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 926.580992][ T3265] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.595585][ T3265] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 926.598444][ T3265] dw2102: su3000_power_ctrl: 1, initialized 0 [ 926.601035][ T3265] dvb-usb: bulk message failed: -22 (2/0) [ 926.606470][ T3265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 926.608649][T32351] pim6reg: entered allmulticast mode [ 926.613445][T32351] pim6reg: left allmulticast mode [ 926.615355][ T3265] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 926.620429][ T3265] usb 10-1: media controller created [ 926.622880][ T3265] dvb-usb: bulk message failed: -22 (6/0) [ 926.625395][ T3265] dw2102: i2c transfer failed. [ 926.627379][ T3265] dvb-usb: bulk message failed: -22 (6/0) [ 926.629698][ T3265] dw2102: i2c transfer failed. [ 926.632938][ T3265] dvb-usb: bulk message failed: -22 (6/0) [ 926.635434][ T3265] dw2102: i2c transfer failed. [ 926.637375][ T3265] dvb-usb: bulk message failed: -22 (6/0) [ 926.639710][ T3265] dw2102: i2c transfer failed. [ 926.641642][ T3265] dvb-usb: bulk message failed: -22 (6/0) [ 926.643896][ T3265] dw2102: i2c transfer failed. [ 926.647141][ T3265] dvb-usb: bulk message failed: -22 (6/0) [ 926.649409][ T3265] dw2102: i2c transfer failed. [ 926.651314][ T3265] dvb-usb: MAC address: 02:02:02:02:02:02 [ 926.660885][ T3265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 926.682067][ T3265] dvb-usb: bulk message failed: -22 (3/0) [ 926.694159][ T3265] dw2102: command 0x0e transfer failed. [ 926.696414][ T3265] dvb-usb: bulk message failed: -22 (3/0) [ 926.698708][ T3265] dw2102: command 0x0e transfer failed. [ 926.780312][T32366] IPv6: NLM_F_CREATE should be specified when creating new route [ 926.964043][ T10] usb 14-1: new low-speed USB device number 17 using dummy_hcd [ 927.004002][ T3265] dvb-usb: bulk message failed: -22 (3/0) [ 927.006195][ T3265] dw2102: command 0x0e transfer failed. [ 927.007982][ T3265] dvb-usb: bulk message failed: -22 (3/0) [ 927.009874][ T3265] dw2102: command 0x0e transfer failed. [ 927.011678][ T3265] dvb-usb: bulk message failed: -22 (1/0) [ 927.013541][ T3265] dw2102: command 0x51 transfer failed. [ 927.017380][T32339] dvb-usb: bulk message failed: -22 (5/0) [ 927.019836][T32339] dw2102: i2c transfer failed. [ 927.033543][ T3265] DVB: Unable to find symbol ds3000_attach() [ 927.035486][ T3265] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 927.084027][ T3265] rc_core: IR keymap rc-su3000 not found [ 927.085917][ T3265] Registered IR keymap rc-empty [ 927.089327][ T3265] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 927.095357][ T3265] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input69 [ 927.099808][ T3265] dvb-usb: schedule remote query interval to 150 msecs. [ 927.102207][ T3265] dw2102: su3000_power_ctrl: 0, initialized 1 [ 927.105622][ T3265] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 927.111925][ T3265] usb 10-1: USB disconnect, device number 122 [ 927.115811][ T10] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 927.118458][ T10] usb 14-1: config 0 has no interface number 0 [ 927.121229][ T10] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 927.124881][ T10] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 927.128273][ T10] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 927.131209][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.140280][ T10] usb 14-1: config 0 descriptor?? [ 927.142357][T32361] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 927.147823][ T3265] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 927.152743][ T10] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 927.423871][T30729] usb 14-1: USB disconnect, device number 17 [ 927.653163][ T40] audit: type=1400 audit(1780015837.008:70232): avc: denied { write } for pid=32383 comm="syz.8.8290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 927.717632][T32392] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 927.924051][T23565] usb 12-1: new full-speed USB device number 39 using dummy_hcd [ 928.031781][T32412] vlan2: entered allmulticast mode [ 928.034026][T32412] bond0: entered allmulticast mode [ 928.036210][T32412] bond_slave_0: entered allmulticast mode [ 928.038548][T32412] bond_slave_1: entered allmulticast mode [ 928.085927][T23565] usb 12-1: unable to get BOS descriptor or descriptor too short [ 928.088818][T23565] usb 12-1: not running at top speed; connect to a high speed hub [ 928.092168][T23565] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 928.095644][T23565] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 928.098242][T23565] usb 12-1: config 14 has no interface number 0 [ 928.100152][T23565] usb 12-1: config 14 has no interface number 1 [ 928.102220][T23565] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 928.105530][T23565] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 928.109097][T23565] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 928.112462][T23565] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.116441][T23565] usb 12-1: config 14 interface 57 has no altsetting 0 [ 928.118443][T23565] usb 12-1: config 14 interface 228 has no altsetting 0 [ 928.122150][T23565] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 928.124971][T23565] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.127351][T23565] usb 12-1: Product: syz [ 928.128640][T23565] usb 12-1: Manufacturer: syz [ 928.130114][T23565] usb 12-1: SerialNumber: syz [ 928.192422][T32419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1313 sclass=netlink_route_socket pid=32419 comm=syz.5.8303 [ 928.541682][T23565] legousbtower 12-1:14.57: interrupt endpoints not found [ 928.745065][T32440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8310'. [ 928.749632][T32440] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8310'. [ 928.752331][T23565] legousbtower 12-1:14.228: get version request failed: -71 [ 928.752400][T23565] legousbtower 12-1:14.228: probe with driver legousbtower failed with error -71 [ 928.768726][T23565] usb 12-1: USB disconnect, device number 39 [ 928.781571][T32440] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8310'. [ 928.785432][T32440] Unknown options in mask b7f2 [ 929.114063][T30977] usb 13-1: new full-speed USB device number 32 using dummy_hcd [ 929.145356][ T1042] net_ratelimit: 14 callbacks suppressed [ 929.145368][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.169917][T32447] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 929.268060][T30977] usb 13-1: config index 0 descriptor too short (expected 28277, got 36) [ 929.304214][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 929.310767][T30977] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.315579][T30977] usb 13-1: config 0 has no interfaces? [ 929.318458][T30977] usb 13-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 929.322125][T30977] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.330469][T30977] usb 13-1: config 0 descriptor?? [ 929.455069][T23565] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 929.514071][ T1042] usb 12-1: new high-speed USB device number 40 using dummy_hcd [ 929.534906][T30729] usb 13-1: USB disconnect, device number 32 [ 929.624430][T23565] usb 10-1: Using ep0 maxpacket: 16 [ 929.628760][T23565] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 929.631554][T23565] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.634328][T23565] usb 10-1: Product: syz [ 929.635634][T23565] usb 10-1: Manufacturer: syz [ 929.637109][T23565] usb 10-1: SerialNumber: syz [ 929.664089][ T1042] usb 12-1: Using ep0 maxpacket: 16 [ 929.670370][ T1042] usb 12-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 929.674277][ T1042] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.677559][ T1042] usb 12-1: Product: syz [ 929.679352][ T1042] usb 12-1: Manufacturer: syz [ 929.681328][ T1042] usb 12-1: SerialNumber: syz [ 929.845027][T23565] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 929.849271][T23565] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 929.852498][T23565] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 929.855076][T23565] usb 10-1: media controller created [ 929.860989][T23565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 929.888460][ T1042] usb 12-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 929.892529][ T1042] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 929.895911][ T1042] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 929.898407][ T1042] usb 12-1: media controller created [ 929.904367][ T1042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 929.935442][T30729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.076724][T23565] zl10353_read_register: readreg error (reg=127, ret==-110) [ 930.077017][T32453] ------------[ cut here ]------------ [ 930.081470][T32453] usb 10-1: BOGUS control dir, pipe 80007b80 doesn't match bRequestType c0 [ 930.084056][T32453] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.5.8314/32453 [ 930.087183][T32453] Modules linked in: [ 930.088965][T32453] CPU: 0 UID: 0 PID: 32453 Comm: syz.5.8314 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.092219][T32453] Tainted: [L]=SOFTLOCKUP [ 930.095090][T32453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 930.098719][T32453] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 930.100382][T32453] Code: d2 74 5d 48 89 54 24 40 e8 cf b8 b0 fa 4c 89 ef e8 97 99 dd fe 48 89 c6 48 8d 3d 8d fe 8b 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 a3 b8 b0 fa 89 ee bf ff 00 00 00 [ 930.106365][T32453] RSP: 0018:ffffc90005b5f918 EFLAGS: 00010283 [ 930.108160][T32453] RAX: ffffffff8c82db40 RBX: ffff88802bff6300 RCX: 0000000080007b80 [ 930.110467][T32453] RDX: ffff888038c6b9a0 RSI: ffffffff8c82db40 RDI: ffffffff90e3e6f0 [ 930.112834][T32453] RBP: ffff88805d0ab058 R08: 00000000000000c0 R09: 0000000000000000 [ 930.115525][T32453] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888054320280 [ 930.117953][T32453] R13: ffff88805d0ab0b0 R14: 0000000080007b80 R15: 00000000000000c0 [ 930.120534][T32453] FS: 00007fc86357c6c0(0000) GS:ffff8880d6386000(0000) knlGS:0000000000000000 [ 930.123197][T32453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 930.125258][T32453] CR2: 000000110c3a7cc5 CR3: 00000000663bb000 CR4: 0000000000352ef0 [ 930.127651][T32453] Call Trace: [ 930.128645][T32453] [ 930.129554][T32453] ? __init_swait_queue_head+0xca/0x150 [ 930.131180][T32453] usb_start_wait_urb+0x10e/0x580 [ 930.132665][T32453] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 930.134481][T32453] ? __asan_memset+0x23/0x50 [ 930.135917][T32453] usb_control_msg+0x328/0x4b0 [ 930.137378][T32453] ? __pfx_usb_control_msg+0x10/0x10 [ 930.138927][T32453] ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0 [ 930.140891][T32453] ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0 [ 930.142834][T32453] gl861_ctrl_msg+0x1a5/0x4a0 [ 930.144299][T32453] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 930.145849][T32453] gl861_i2c_master_xfer+0x545/0x690 [ 930.147390][T32453] ? mark_held_locks+0x40/0x70 [ 930.148786][T32453] __i2c_transfer+0x5e9/0x1780 [ 930.150221][T32453] ? rt_mutex_slowlock.constprop.0+0x87/0x120 [ 930.152006][T32453] ? __pfx___i2c_transfer+0x10/0x10 [ 930.153567][T32453] i2c_transfer+0x15f/0x380 [ 930.155068][T32453] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 930.156590][T32453] i2cdev_ioctl+0x19d/0x830 [ 930.158002][T32453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 930.159537][T32453] ? selinux_file_ioctl+0x13b/0x290 [ 930.161135][T32453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 930.162663][T32453] __x64_sys_ioctl+0x18e/0x210 [ 930.164189][T32453] do_syscall_64+0x115/0x870 [ 930.165623][T32453] ? clear_bhb_loop+0x40/0x90 [ 930.167065][T32453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.168851][T32453] RIP: 0033:0x7fc86279ce59 [ 930.170234][T32453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.176151][T32453] RSP: 002b:00007fc86357c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.178667][T32453] RAX: ffffffffffffffda RBX: 00007fc862a15fa0 RCX: 00007fc86279ce59 [ 930.181045][T32453] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000004 [ 930.183429][T32453] RBP: 00007fc862832d6f R08: 0000000000000000 R09: 0000000000000000 [ 930.185915][T32453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.188296][T32453] R13: 00007fc862a16038 R14: 00007fc862a15fa0 R15: 00007ffeed2f0c58 [ 930.190691][T32453] [ 930.191646][T32453] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 930.193758][T32453] CPU: 0 UID: 0 PID: 32453 Comm: syz.5.8314 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.197018][T32453] Tainted: [L]=SOFTLOCKUP [ 930.198332][T32453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 930.201355][T32453] Call Trace: [ 930.202417][T32453] [ 930.203402][T32453] dump_stack_lvl+0x100/0x190 [ 930.204937][T32453] vpanic+0x552/0x970 [ 930.206163][T32453] ? __pfx_vpanic+0x10/0x10 [ 930.207552][T32453] panic+0xd1/0xe0 [ 930.208701][T32453] ? __pfx_panic+0x10/0x10 [ 930.210077][T32453] check_panic_on_warn.cold+0x19/0x34 [ 930.211706][T32453] ? usb_submit_urb+0x1573/0x1910 [ 930.213234][T32453] __warn.cold+0x191/0x328 [ 930.214571][T32453] __report_bug+0x296/0x3d0 [ 930.215942][T32453] ? usb_submit_urb+0x1573/0x1910 [ 930.217481][T32453] ? __pfx___report_bug+0x10/0x10 [ 930.219017][T32453] ? mark_held_locks+0x40/0x70 [ 930.220476][T32453] ? stack_depot_save_flags+0x479/0x9d0 [ 930.222170][T32453] report_bug_entry+0xe1/0x290 [ 930.223628][T32453] ? usb_submit_urb+0x157e/0x1910 [ 930.225163][T32453] handle_bug+0x1cd/0x2a0 [ 930.226506][T32453] exc_invalid_op+0x17/0x50 [ 930.227858][T32453] asm_exc_invalid_op+0x1a/0x20 [ 930.229312][T32453] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 930.230985][T32453] Code: d2 74 5d 48 89 54 24 40 e8 cf b8 b0 fa 4c 89 ef e8 97 99 dd fe 48 89 c6 48 8d 3d 8d fe 8b 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 a3 b8 b0 fa 89 ee bf ff 00 00 00 [ 930.236516][T32453] RSP: 0018:ffffc90005b5f918 EFLAGS: 00010283 [ 930.238272][T32453] RAX: ffffffff8c82db40 RBX: ffff88802bff6300 RCX: 0000000080007b80 [ 930.240558][T32453] RDX: ffff888038c6b9a0 RSI: ffffffff8c82db40 RDI: ffffffff90e3e6f0 [ 930.242890][T32453] RBP: ffff88805d0ab058 R08: 00000000000000c0 R09: 0000000000000000 [ 930.245300][T32453] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888054320280 [ 930.247664][T32453] R13: ffff88805d0ab0b0 R14: 0000000080007b80 R15: 00000000000000c0 [ 930.250041][T32453] ? usb_submit_urb+0x1569/0x1910 [ 930.251580][T32453] ? __init_swait_queue_head+0xca/0x150 [ 930.253271][T32453] usb_start_wait_urb+0x10e/0x580 [ 930.254846][T32453] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 930.256518][T32453] ? __asan_memset+0x23/0x50 [ 930.257899][T32453] usb_control_msg+0x328/0x4b0 [ 930.259321][T32453] ? __pfx_usb_control_msg+0x10/0x10 [ 930.260890][T32453] ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0 [ 930.262844][T32453] ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0 [ 930.264832][T32453] gl861_ctrl_msg+0x1a5/0x4a0 [ 930.266219][T32453] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 930.267747][T32453] gl861_i2c_master_xfer+0x545/0x690 [ 930.269306][T32453] ? mark_held_locks+0x40/0x70 [ 930.270727][T32453] __i2c_transfer+0x5e9/0x1780 [ 930.272138][T32453] ? rt_mutex_slowlock.constprop.0+0x87/0x120 [ 930.273980][T32453] ? __pfx___i2c_transfer+0x10/0x10 [ 930.275560][T32453] i2c_transfer+0x15f/0x380 [ 930.276917][T32453] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 930.278374][T32453] i2cdev_ioctl+0x19d/0x830 [ 930.279705][T32453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 930.281182][T32453] ? selinux_file_ioctl+0x13b/0x290 [ 930.282718][T32453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 930.284288][T32453] __x64_sys_ioctl+0x18e/0x210 [ 930.285860][T32453] do_syscall_64+0x115/0x870 [ 930.287275][T32453] ? clear_bhb_loop+0x40/0x90 [ 930.288709][T32453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.290498][T32453] RIP: 0033:0x7fc86279ce59 [ 930.291855][T32453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.297557][T32453] RSP: 002b:00007fc86357c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.300069][T32453] RAX: ffffffffffffffda RBX: 00007fc862a15fa0 RCX: 00007fc86279ce59 [ 930.302448][T32453] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000004 [ 930.304866][T32453] RBP: 00007fc862832d6f R08: 0000000000000000 R09: 0000000000000000 [ 930.307242][T32453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.309620][T32453] R13: 00007fc862a16038 R14: 00007fc862a15fa0 R15: 00007ffeed2f0c58 [ 930.312000][T32453] [ 930.313579][T32453] Kernel Offset: disabled [ 930.314887][T32453] Rebooting in 86400 seconds..