last executing test programs: 5m51.402462389s ago: executing program 3 (id=152): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6d9b3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m51.307909199s ago: executing program 3 (id=153): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900020073797a32000000000900010073797a31000000002400048020000180080001006f73660014000280080001400000000a050002"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000540)={'ip6gretap0\x00', 0x101, 0xfffffff5}) 5m51.307652873s ago: executing program 3 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x104) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'bpf\x00'}]}, 0x209) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000340)='[*.%/:$#&$\x00', &(0x7f0000000380)='./file1/file0\x00', r1) chdir(&(0x7f00000006c0)='./bus\x00') r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x86100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000780)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000008c0)={0x0, {}, 0x0, {}, 0x1, 0x2, 0x16, 0x4, "f4f97ac3d41856156c3b5bac93150b260057f0f721c8a92807e26b773d0fd86de1ff94a1d00e0df3bb3597d129cc5502f78a00fb662fb2facf59d7398bb0081d", "29e846d72690a2ad1cfde639aeec75d7dcc14db5e0a8c071d3b21df658723aaf", [0x4, 0x6]}) write$P9_RFSYNC(r0, &(0x7f0000000440)={0x7, 0x33, 0x1}, 0x7) unlinkat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x200) inotify_add_watch(r3, &(0x7f0000000400)='./file0\x00', 0x1) 5m51.181981201s ago: executing program 3 (id=155): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x11) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000240), 0x200000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f00000002c0)="66c70daf3fb57161cb740a5e987b9aed1c2d71ffa09c2d952041dd919957815e738a1dd3d399ec8cae26b2ac6e954ae36bc053d38b553767f030d86d2f5184bc40b1a3d2aae8d427dfbc99c88823ee0de397f2e14ca23cd90d4ee189e99045a3d99ffc81a73d42e4b2b056dbefc78234abee09cddd2b99dac45c55883f8d662c4177c8b92766c73aa77ebf82729e6c60bde73905584827d99b619046e18669b551f1c2c2b5e86424ef34728c4f938eef0c16f1986343a7786e5ca8ef99620fb723db53dd82673924aa7a5e7a", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="a85528d8f94e12a551dc415f96bd2b1eb0ceb2ea05", &(0x7f0000001400)="400c5b7ad545a8e34f7b00a62e9078a5c891e60a4f824b6ed217fd03ce59a059d46195d96d6d9e0275e172f9f8a9ad7a9f0f2b20", 0x0, r1}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000001480)={0xffffffff, 0x3147504d, 0x1, @discrete={0xffffff9f, 0x2}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f00000014c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r4, 0x400452c8, &(0x7f0000001500)="000000000000000000000000000000000000000001") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x181403, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000001580)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001600)='./dev\x00', &(0x7f0000001640)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./dev/rfcomm0\x00', 0x802, 0x0) write(r8, &(0x7f00000016c0)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@nullb, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000001780)={0x4040411, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) 5m51.131381279s ago: executing program 3 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x20, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/144, 0x7c}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r2, 0x401, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x383, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0) lseek(r5, 0x8002000000006, 0x1) io_submit(0x0, 0x3, &(0x7f00000008c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f00000003c0)="088068a521036946118b676208edb44204554c2ebfd9e572bd69c646034b7a9e7fab4ab6b3c7807e0fa25eda8c", 0x2d, 0x5, 0x0, 0x3, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x40, r3, &(0x7f0000000640)="15737c16dbb80710e774087e8a2e5c817fbc00e180795ea54eda34bcd87921e5fec57eb15a6330bafd567462a4bb8ea125fefcc9617be8af059d5ded87495f9f4bae0f4af961adce29d58f5265f393717b65ab3a8b751010ce3a050412fb68b2ec939ab8ff50d32ba5875cb8cb475cddfac0d0486c1f9e5b425ef6b3dfc2400573e985092c2f06adea56fb157bc2729b0dd8c4638a13cee012db2801e6b860cc4696a8f6692f955144d53eafa15a04cf800538773eb8886455c256f6c9ee7ee6154b697fd6ae734e138089ea0bb16bff0bbe27c9", 0xd4, 0x9, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000780)="11b6ab142617f8076ab5a09542eebd72fe4794597ad35823e94f04a6295d927ef8f29809ea270d0be7eaea40438bd9db30ffdb549fa2639645d4a9f3e6b385eecf36f65fa8ab2794ae21bc4f0c9b8738e97ac0e1137216fd1237169efb7a5348c29bab4c8b77ef7c65854a0ae9bea5b8e5f6ae354b62314f1462247b6f6c90f43c", 0x81, 0x9, 0x0, 0x1, r5}]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYBLOB='B'], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES8=r3, @ANYBLOB="b9cc385fec5aaa141f184941095fd8277ae8c325ecd97809ac1e82966d103152e0d902cb3b0d4eacd47e5b989fc0e21de62f5a18b2f6ad74ae50f89a2afacc317d67bef89838e27d5bd89be216a8b582298711019e8cccfe62fb5f9d7c2cf61bb8b72035596c40c5518432cf9f28a5da045156406a677df8d45dadde114a9ed7ef2ab0dcbdf67bd6c7b3efc51c09457ecdaf4c800566098a7a", @ANYRES16=r0], 0x60}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) 5m50.74314775s ago: executing program 3 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000001380)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x6000a405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 5m50.695214433s ago: executing program 32 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000001380)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x6000a405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3m40.957955158s ago: executing program 0 (id=1839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180500000000000000000000043204321800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000740)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x73, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3m40.957621604s ago: executing program 0 (id=1840): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x100000003, 0x4, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x100000, 0xbc3, 0x0, 0x0, 0x3, 0x2, 0xfffffffffffffffb], 0x26000, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000fc0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = io_uring_setup(0x115c, &(0x7f0000000c80)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000d00)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000e40)=[r1], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./dev\x00', &(0x7f00000010c0)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000001100)=@filename='./dev/sda1\x00', &(0x7f0000001140)='./dev\x00', &(0x7f0000001180)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f00000011c0)='./file0\x00') r5 = open(&(0x7f0000001200)='./bus\x00', 0x1c527e, 0x10) fallocate(r5, 0x8, 0x0, 0x9000fb) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f00000002c0)=[@code={0xa, 0xfde9, {"400f011e36d3e448b8f500c0fe000000000f23d00f21f835300000040f23f848b8c4d42900967a282d0f23c80f21f8350000f0000f23f8b8010000000f01d9c443f917510b2e67470f44947a000000000f01cab8010000000f01d9660fdaf2"}}, @cpuid={0x64, 0x18, {0x3, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xa0, 0x1, 0xffffffff, 0x3}}, @out_dx={0x6a, 0x28, {0xc4ac, 0x4}}, @wrmsr={0x65, 0x20, {0xb3b, 0x9}}, @wrmsr={0x65, 0x20, {0x8a7, 0x3a}}, @cpuid={0x64, 0x18, {0x66, 0x8000}}, @out_dx={0x6a, 0x28, {0x7c5b, 0x5, 0x98ed}}, @in_dx={0x69, 0x20, {0x95ee, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x8}}, @nested_load_code={0x12e, 0x74, {0x1, "c744240000000100c7442402f3660000c7442406000000000f01142466470f3882aa0000000066bad004b8010f0000ef66b8d4000f00d0400f21c166b807010f00d80fc728660f2b5d350f20d835200000000f22d8b92d0900000f32"}}, @nested_load_syzos={0x136, 0xd8, {0x0, 0x6, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x6b, 0x6, 0xfffffffffffff764, 0x101}}, @wr_crn={0x67, 0x20, {0x3, 0x8}}, @in_dx={0x69, 0x20, {0xfb9b, 0x1}}, @nested_set_state_pages={0x140, 0x28, {0x1, 0x28, @gpa=0x6000}}, @nested_vmresume={0x130, 0x18, 0x2}]}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_syzos={0x136, 0x78, {0xfffffffffffffffc, 0xf869, [@set_irq_handler={0xc8, 0x20, {0xe2}}, @cpuid={0x64, 0x18, {0x7, 0x7c}}, @wr_crn={0x67, 0x20, {0x4, 0x81}}]}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x32, @gpa=0x2000}}, @cpuid={0x64, 0x18, {0x100, 0x1}}, @in_dx={0x69, 0x20, {0x8634, 0x2}}, @nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x8f}}, @cpuid={0x64, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xe, 0x4, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xeb, 0x1, 0xd}}, @nested_load_code={0x12e, 0x61, {0x0, "b9550800000f3266b831010f00d00fc75cbdf3450f0d52062e0f7810c4c379046c7003160f01ca66baf80cb84c9cbc80ef66bafc0cb860310000ef470fff8402002000000f9674990b"}}, @rdmsr={0x66, 0x18}, @wrmsr={0x65, 0x20, {0x9e6, 0x8}}, @nested_amd_vmload={0x182, 0x18}], 0x5ad}) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000008c0)={0x94, "3d40800de2a0dc751b47ddfeb22b67a4e13e7e59326f9d8a191aa8c86beaa9c83e67acf93a3323b2ce22ea4da70b076831c84b40706828ac00f96c7a8f2089a2c9769d253be342b4d9c8951a9d008a6419248334335039d2ebb17340a0458a0ae51f03509e6373e1aa8c465bb404aed8f36045d0f4877b695600d192bf966078807411198e4097d76c0393cc1d187327306c6051"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a00)={0x0, 0x74, &(0x7f0000000980)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e24, 0x5, @remote, 0x4b}, @in6={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x80000000}, @in6={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000a40)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000a80)={r7, @in6={{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x42, 0x1ff) 3m40.805351881s ago: executing program 0 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newtfilter={0x73c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x710, 0x2, [@TCA_U32_SEL={0x704, 0x5, {0x1, 0x9, 0x3, 0x7ff, 0xc745, 0x6, 0x1, 0x7, [{0x3, 0x7, 0x32d, 0x9}, {0x81, 0x4, 0x2, 0x3}, {0x69c1, 0x40000000, 0x400, 0x2}, {0x2, 0xe12, 0x6, 0x800}, {0x7, 0x9, 0x1, 0x2}, {0xfffffff9, 0x0, 0x4, 0x10000}, {0x5, 0xfffffff7, 0x3, 0x7}, {0x8c, 0x100, 0x1, 0x5}, {0x3, 0x200, 0xf, 0xfffffffb}, {0x8, 0x1, 0x2, 0xff}, {0x7ff, 0x40, 0x5, 0x5}, {0x453, 0x4, 0xf0e, 0x58d0000}, {0x8000, 0xfffffff0, 0x5, 0x1ff}, {0x10001, 0x1, 0x1, 0x6}, {0x3ff, 0x16e, 0x30bad55b, 0xff}, {0x378, 0x74, 0x8, 0x3}, {0x8, 0x6, 0x0, 0x63c7be11}, {0xffff, 0x470b, 0x9, 0x2}, {0x9c32, 0xfffffff2, 0x81, 0x7}, {0x1, 0xa, 0xe000, 0xc}, {0xf21, 0x4, 0x6, 0x800}, {0x569c97e0, 0x8, 0x75164118, 0x9}, {0x13, 0x10001, 0x4f}, {0x8, 0x5, 0x3, 0x3}, {0x7ff, 0x6, 0x3, 0x8}, {0x81, 0xfffffff8, 0x44}, {0x5, 0x4, 0x0, 0x9}, {0xcc, 0x7, 0x2, 0x40}, {0x0, 0x4, 0x2, 0x8}, {0xcfb, 0x8, 0xd78, 0x8000}, {0xce0, 0x1, 0x5a, 0xfffffff8}, {0x0, 0x1000, 0xf, 0x4}, {0x4, 0x2, 0x5396, 0x6}, {0xd2d, 0x4, 0x1, 0x80000}, {0x8, 0x8, 0x2, 0x4f0d}, {0x0, 0x1, 0x6, 0x9}, {0xc16, 0x0, 0x7, 0xe422}, {0x2, 0x3, 0x0, 0x4}, {0x3, 0x4, 0xc2b, 0x9}, {0xffffffff, 0x7, 0x8, 0x1}, {0x0, 0x8, 0x0, 0xffff}, {0x401, 0xf, 0xcf, 0x3}, {0x3, 0x7, 0x2, 0x18b6}, {0x1, 0x7, 0x8, 0x6}, {0x101, 0x401, 0x7, 0x7}, {0x4, 0x0, 0xee, 0x9}, {0x7ff, 0x8000, 0x1, 0x9}, {0xe, 0x2, 0xf, 0xb}, {0x3800000, 0xcc, 0x2, 0xbb}, {0x6, 0xc0, 0x7f, 0x5}, {0x659, 0x4, 0x9, 0x4}, {0x4, 0x8, 0x6295, 0x74}, {0x8, 0x9, 0x6, 0x81}, {0x100, 0x1, 0xd7, 0x9}, {0x46, 0x6, 0x5, 0x7}, {0x1, 0x3ff, 0x5, 0x5}, {0x2, 0xcb1, 0x10000, 0x9}, {0x3, 0x4, 0x2, 0x8}, {0x7f, 0x1000, 0x3, 0x9d}, {0xb, 0x62, 0x6, 0x7dc}, {0x1, 0x7, 0x1, 0x4}, {0xffff, 0x4975, 0x3ff, 0xffffff74}, {0x400, 0x6, 0x5, 0x4}, {0x10000, 0x9, 0x200, 0x6}, {0x3, 0xc1, 0x6, 0x8}, {0x6, 0x2844, 0x4, 0xff}, {0x8, 0x8, 0x3, 0x1}, {0xe, 0x3, 0x1, 0x9}, {0x1c, 0x4, 0x5, 0x9}, {0x3, 0x53f6, 0xbb51, 0x6}, {0xff, 0xff, 0x9, 0x1ff}, {0x1, 0x2, 0x9, 0x6}, {0x9, 0xa9, 0x2, 0x2}, {0x7, 0x8, 0x8, 0xfffc0000}, {0x3, 0x4, 0x1, 0x8}, {0x8, 0x45ea, 0x47c9, 0x8}, {0x1, 0x903, 0xf, 0x52d9}, {0x5, 0x10000, 0x2c, 0x8}, {0x1ff, 0x6, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x80}, {0x8, 0x101, 0x10000, 0x9}, {0xb91, 0x3, 0x80000001, 0x4}, {0xf4c5, 0xffff4a63, 0x80000000, 0x6}, {0x3e44, 0x8, 0x0, 0xa0d}, {0x81, 0x8, 0x5, 0x6}, {0x6, 0x53a7, 0x1, 0xfffffff8}, {0x8a0f, 0x6, 0x7fffffff, 0x81}, {0x3, 0x226979, 0x325f, 0x27}, {0x2, 0x6, 0x0, 0x9}, {0x1, 0x8d, 0xf4, 0x1}, {0xfffff5e6, 0x22, 0x1, 0x54}, {0x9, 0x9, 0x7, 0x9}, {0x4, 0xa3, 0x9, 0x8}, {0x7, 0x4, 0x1000, 0xec}, {0xbb4a, 0x9, 0x3}, {0x3, 0x7, 0xffff, 0x5}, {0x20ea, 0x2, 0x2, 0xd0da}, {0x401, 0x5, 0x7ff, 0x1}, {0x2, 0x9, 0x5, 0x7}, {0x9, 0x9, 0x4, 0x8}, {0x50, 0x6, 0x3ff, 0x1}, {0x5, 0x56e1, 0x9, 0x8}, {0x80000000, 0x2, 0x690, 0x3}, {0x8001, 0x7, 0x80000001, 0xf}, {0x8, 0x4, 0x5, 0x5}, {0x0, 0x6, 0x5801, 0x8}, {0x7fff, 0x4, 0x800000, 0x7f}, {0xd, 0x4, 0xe, 0x61e}, {0x0, 0x4, 0x7f, 0x7}, {0x3, 0x6, 0x5, 0x1}, {0x4, 0x6, 0x5, 0x7}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x6}}]}}]}, 0x73c}}, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000004440)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x9270, 0x1800}, {0x0, 0x6, 0x1800}], 0x3) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000004500)=[0x6, 0x7fff]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f00)={0x28, r6, 0xd1d, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4d085}, 0x4010) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000044c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004480)={&(0x7f0000000f40)={0x34d0, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x22c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x224, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="96e64922857f"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x204, 0x84, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xe}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="436a9d6033e6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7fffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x40}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xff}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6b4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a71571e91fb1"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="a81efe26ba1975a7494f6a3bdac9"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="9b21a735eed9df400a7ac1c0"}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xcd0e55d16d9acd0a}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4b8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x330, 0x4, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x78, 0x1, "9774806c4080aceaeccc550f1697a8b3bb4d25e82f42e98d417f9ac5ce02974374d6ff7a268e50aa0dbebed33627fa5d0a380c3b318ff9d9505a9d4a69ef539518f085282ddb88ef8452a3bff567262d9acdef5f0e1fbed49bd4444768971f1234a16a0e6f3ad7e789d2aaf3229fc45ebd5eb84b"}, @NL80211_PKTPAT_PATTERN={0x70, 0x2, "40a32854833ab5c9f9a4666fdee3e8855aab524029d15ac97304a263d254477119693c3dd9ab7d163281b4531c53daddad5bfb38c85be7862ffd75da68f982bc2766dd7bc33b17ae812f9405123251d85e746b78bb1dcdae6e913ce7b12a9082fd1cc0983ca25c819f52b811"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x200}, @NL80211_PKTPAT_MASK={0xb1, 0x1, "28848ffdfe8ec57e2e4383fa4b8d9a47ae6f780f0af9248f22475f6ef50e979330046459099ae4c16ed13e185c1658e05c061e2079e661cc110561c6a269b581934c7527369c187e73d05de75ed00d1d781e8be86ef6004a9d8b16dd9ac581156ca023465a84a32749e6c67be2d8dd9d85293c258d5f165f341f3bf32d366e49900e3e4356a994569b1e5ab5c2a96a07fc84867d082f350cab60c5e273489d7e6c2fecce22f251f025d0e6cbb3"}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_MASK={0xe0, 0x1, "8fccf85ff4e1908287f7a87640dc84c413a552884b67bb04d08e860bbc704ba7336f974a8f3871d58b0ad08d77dd80fa823a51ec0078fe4b6f469cbe9d1b5bb79e917f2f07fed726edbe90dfb9cd6bf6b5c637278b61e0c11c605f2cb11be1504505fe2466fcc1839a3719b2767d28f1005b4e65d0756aaad9fd4cd7e82bb776c5fc6d80694f38d95039fd187e8f4deb3c63f5a9ceb764893b0e79bb3dfecabe34009749db452eff586c7856701c4cda0534ec63121ac72bc7a8d6eb5b62ada3a9f63a6d53c4bef39eccfd168cd18eb3a55767f0f43863e04dde23c8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x85, 0x1, "8f8d1759771ebf9dd62ac2b275b663b715cd96ee67b63e53821a5d6d2013f2aac1d0541da74a99ee8543731af99b52f3384c9e945fbf7adc9ff7efba469eed55e8315efd991c01fce29cecf20bc61dfc233ac9b4b72b78986dd2a0539551254cf4f7bad5e4b79e24c07ca5e167d0a9a9e6f6bd3591a70d644767bc91731313f5bf"}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x174, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0xc2, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x101}}, @tim={0x5, 0xb6, {0x5, 0x2c, 0x6, "bc694d388bdefcbe906e37af82441665d4024a1973dfcd21111da3f6a5e16e763364b276133b328a1d191d9002bbf277cd4ae722bd4d2773b3056f99a423d5570b69c503992f0b445f118db538fd12b1816c364c1ac9bcbc14b8a1ec108db690c69137dc14313fa35ee53a7fae085f389ef2894475e3f62387f13180b888a6fe2f5135006a64abb8c5a54fb12eae7b177e21d0fc6882ab40c0845c50e7946d27758bbb77db824f226a03cdaf7553cebaee96a2"}}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x90, 0x84, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a6b274849783"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x19, 0x1, @random="27d342f9a44d5fed92ce779544a199007c45e3d10a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb2c7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7f}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xe}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x12f4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x12d4, 0x4, 0x0, 0x1, [{0x4}, {0x1018, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xe, 0x2, "4d0512cf68f10bbbda17"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4c, 0x1, "0ba8cf44b81d4cc713d8e44b7815ee2d215cc412ad08f9bbbbcc6f5c2ca7e841ba7a5ea88669d4441eef6dc22067a002759e2eae542b3f6dd04d0e47564f8bb767d7d2cdd3580b97"}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf5, 0x2, "ed50570334797daec1576869eb2da687507be85101f176b566ecf492f77f0c2d6b7b654a17a0efd38d74f1f3a092253ca893aa843fcd9f4d5edf878d562fdb806272d1bfcb01d2ad56090a5ecc3c7f52c2f33e11147b63b714e715033d042d7fb5c20ecf9ca80fc44467d12353bd22b5f85eb24bfcd253bb39579ae1e55f72668af64eeae819b481827cfae7150ebda15d3ab09cfd0629c8981e52efe96157315ab59c1879f63b979cc8e1016d41f9f674cad1ed06c5f0dcadfe3ca82aa0c831cc6f9a3563176c37008ab5e9897049cdb7bb2729e92431ad7af0340eaa5dfe5c86878634c113b0d6389a0de4f963d6f6fb"}, @NL80211_PKTPAT_PATTERN={0x25, 0x2, "f565666c8b807f3fcbc20cc4199252e6c5fc4c31beb7b9ee1a260407900ef75696"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_PATTERN={0x4a, 0x2, "1f6e6afa3f0a67dfd855e9ac18ba3bd047fadfa12b0ddeda4218ea0257a679e539b950702439eed42c16fd8fbef7185a9a9bb97f5ab063abfffd520c329821aecc2af1798292"}, @NL80211_PKTPAT_MASK={0x23, 0x1, "9035caf84843596b8c0732cc042db99c3060adae26763eeacf5430e70b799d"}, @NL80211_PKTPAT_PATTERN={0xc7, 0x2, "039b1c06306088a03099935926bfd86da995924d7f1a8acdd53bc9b58eca10af53008963b1a76b3283484cb2bc3a72e79e8eab0ef4879a189c509f3b2843f201a55c5d9909c3bbc5ce256b4ac4027d7b88a4a17e3d5e8d897b75c7d593327ffd84f85740d6b749c57a3b6fc25975ce7ad9bcb6fa56d38b280e0f7b2a10e0a62aca1175611fecd816b32cd30d014bcac3c6f3ad45f836d4a5234b4602fa16cd368c318b61df0cdc7e07033dd757280c1d564135f0b7c445b115e5bd5b633e42cc4fcd97"}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1788, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1778, 0x4, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x87, 0x2, "974a985136dad4f3bad1adb76fca212be1fb98ae8f8e2d20f6298df454fa00a3929e892341f77484215644af18815c2308d50747ca2b4613a6f691679eb6bee43012df4f8a6d169a4dd959ae17b14039450c5cc91f65ab28d8f95e25f69cbdf47eaab18e284ddd2b55c65feb8f35a6cd6e54fdf6257d773db728bcef5634312babd27a"}, @NL80211_PKTPAT_PATTERN={0x2a, 0x2, "3f705b43e3d279fa12dec4324a0283bcaec1703603107321aad6edb62408c99bfe5699752c27"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xed, 0x2, "9e0c0c79aa07ce2d56f0725aea8363cfc583a5771db3aa76e3583c07dc70f3af19099a5668064bf67bff66fab02265feaa664900353ae9996756de7e6cdd2c6e5571c61c6e4d81fb133db7d73b7a6da2278063497e1d2e5e47d8e08373f8dac7125c465cb6056b0bc67ebedb60739e156c3756a605fb0fa02786a537b8b1f6b762fbc62037d5dba5f476abf16b8bfaade6a0a95f39c01623b08b001a4a348886f7c9973b060439d4e6ede5bf0f380d93b9d2f48029f23988eed022a65503cb38b8180074a1061cdf35651a7cdfb0a6f38166ac430c4b9cc5671527a4085d0de8bd6c5393ad23be39b7"}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbb, 0x1, "94e0ef193efd1e42728bdf54bf2b6f316cae8e20373dfb4cd816c5f838ec9923dab03638598e36fd4fd8f186a0a61dabb29573f5e0679b1d82b8f256b00b7d47dd22b7d3e3d8363d73c0ca88bb919ed7df09902d0a83ad33e8b1bc5567cb89fc5f7fa16468068e4fe5515e27360dcf561c1554d679bd7472388c20b93de8838a92583b5b3183ec02ca43ce5f0d4612d2f5d61e08b51afaf285121ad4ce5cd09de9afb966853b7efbf2fbee22454638d783342d7be8d168"}, @NL80211_PKTPAT_MASK={0x87, 0x1, "1fa658256927fa6261db41dfbfb2cbac1ddc14ecf5ae1490cd9ee8a402780ca03f00e32cbab5ac13719d03d13bc4e0b9d2d0f0195aa698751e152dd9e442a31a45868bb93ed6fcb898dcfc31ba5290caa0dae304710c44e09de8ae7718594ea8bd2295afe3ec4548f32d5281094271cbb3b1a8ea7e1e5d78c9ea79e02151ec997e6b4f"}, @NL80211_PKTPAT_PATTERN={0xa5, 0x2, "d7d120932c140087f9336ce5eb53d23a71ab699babe8f7a133889f0b93892f20871ed695a3a6f474d803a6664ecebb5879e83a68b42dedbab34774d0bfcabad2fa7c4fa980d0d34783d9f399a431d630e9e7b2eda8cd0a7490120730bfb86f0bf8785e623e882a3f23ec0c3631b479c3f355366c69914ac5a98156a1638cc3c1b1ec6ec3153d29e065030e2ad532c0e020b6a1535ec738e3738219e7044e3c1672"}, @NL80211_PKTPAT_MASK={0x72, 0x1, "9c06201b01955ba0891c8f6f5c3672c7597c2f2ada70ca49001f2f780e6dc99be3ddc292bd77aae3a57e9b0b69c7e6499d945b0df7ab9433b0c08e047be49106c1bd9736b5ffcc7bad0ea93231b035f2315ff5b4351ae4c48df18e823e2f3aa906d2fefc197451e7aa36d43033b3"}]}, {0x1018, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x101}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x75, 0x1, "2b8ee3af0d5ff8b34f22eff5425e8dabf5d75afe7a258864fc2d9e605d90e9f0cf58b38b85fd081906e00ed89e6cb97c16607c93b697c4bf0b2786039f4b8b22c149c12e0be1298f377c9bc23b1e12d669038fa54129ad5ffe0d0e43198d20070bd696cd0e01b8fdcbe49bc5bc367e7e55"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffd}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xdb, 0x2, "31cbece51c1deb1c818bbfb76590ba51897ecb44c1561d0904cb94b626efce278663bc714ddf15ae5687f6f9f47be28cdcf67f234fa30172e292efe2db4d39405f7d59926a4db1d23d65447ce7a9fc2a009734b15ad58b93e31e4f0c885d99be11a6164d9737b45e7e4cdc6df7a40f0e612c1580f191e5f45b720227508afe52a442fd3a7148d45d41c850e066ba1ac63955af0a06c4443a056dc639d34bb856888b5483bbf8d462e92dd0329d72c0fc09fcf1464fca23357ee771a31af53ed80ef8d9b844d17763ec82d7eb6a82f0b8a0abcd24a1c8a1"}, @NL80211_PKTPAT_MASK={0x86, 0x1, "96cb5360bedf9b398413f8502c5623cab00b0e68b5ceea8a363ca84791b56e2d3783bfeed619c7cd1f4f0cd5f1c4ecc65726c88a22fd98e31c3e87e0432fee9cbdff0e3af3d653ed66d7a86c5e78b4a6e638713447e9873dcd2c6864f944c023b492e30a0990c648153a8ec51ab2168f9ecd1c08f1623e91da40dfea0f2ad51c6da6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffff}, @NL80211_PKTPAT_PATTERN={0x4c, 0x2, "2c7cd65f9eee50a9a8a4bd47f2229c44a7c9fce1923ba34c9fef95c647899b2b59e27af2965362421881eb4a577d1f8ab45de001413bf54f618fffc3b203df2c9bbd9b6b35ad1d4b"}, @NL80211_PKTPAT_MASK={0x102, 0x1, "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"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x224, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x204, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x75}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1a4, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="765bbd95146b"}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xaa3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x940}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8f}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffa1d}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="964b1dfb40d8cfeba881da7a5452a5d013413e77c74c0979"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7f}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x100}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x220}, @NL80211_BAND_LC={0x8, 0x5, 0xfffff457}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xe80}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xf}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1000}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x351}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0c47720eec5b"}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1001}, {0x8, 0x0, 0xff}, {0x8, 0x0, 0xb}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0x7a}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0x40}}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x100, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xec, 0x4, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_PATTERN={0xdb, 0x2, "a1f44a6829b5b35545e9b5913888471c80b2e02fd2737ec95ce7e3a215adbd5bff643494563726568d251858d02c2f26fbbc61470c72a4356403ee0fe79165e4a9dbbdcc506ccdfe012b18d6dfe80e609918de009c7e195f036f017a01122655609b9efda9b882ad660f53711f05eaeb63b985664059fa8c8853849788bc1e198d885c1f3c6f3fd316e1ca9a47b612b01718db29ce48d08212e78373b1b60b948a04ce48c61cd6d6fcefaaed980ae54f5f94ac1e522a25a5bfcc03162dcf017a7be68e5603b9974e36779289879870cfacbe37ba2e4457"}]}, {0x4}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}]}, 0x34d0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x3, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioperm(0x3, 0x80000001, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000004540)=@gettaction={0x134, 0x32, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x99}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x64}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2c}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x134}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)=@can_newroute={0x27c, 0x18, 0x230, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x4, 0x23, 0x1d, 0x5, 0xe, "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", 0x3, "d2a93816afe23fdbecfcdba31fa29d1baef291ac"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x9}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "d61595cc274a92f8"}, 0x6}}, @CGW_SRC_IF={0x8, 0x9, r1}, @CGW_CS_CRC8={0x11e, 0x6, {0x6f, 0x11, 0x46, 0x3, 0x8, "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", 0x2, "6cf683bcdc8b252ea6299cd83adb9c8cf9b53ce4"}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4001}, 0x811) 3m40.632921766s ago: executing program 0 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0/../file0\x00') mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0xd5848, 0x0) write(r0, &(0x7f0000000340)="beb1490ec9f903949578ba4644319c146be53795d97599d36f0654b0a591f272149cc3b955cac7854ba82e11259795064c21172a674ba4d76de8802df61d9c99880dd14980e8dc353af75bc5b314cdd5c7daddda0d5724a43a819f56908daf18b6f4e6ac9f729e", 0x67) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0xffe, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x86dd}}}]}, 0xf860f9890096100d}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 3m40.632594729s ago: executing program 0 (id=1848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x2bd}, {{0x18, 0x1, 0x1, 0x1f, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xfffffff7}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m40.541630521s ago: executing program 0 (id=1850): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x4, 0x200, &(0x7f0000006500)="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"}) 3m40.480718653s ago: executing program 33 (id=1850): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x4, 0x200, &(0x7f0000006500)="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"}) 3m36.92201009s ago: executing program 2 (id=1937): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c0000330001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c0d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}, 0x1, 0x300}, 0x0) 3m36.853216553s ago: executing program 2 (id=1938): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x200, 0x70bd2c, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c851) 3m36.853105025s ago: executing program 2 (id=1939): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x58, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c0d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x58}}, 0x0) 3m36.799534169s ago: executing program 2 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000001ac0)='./file0\x00') (async) mount$bind(&(0x7f0000001b00)='.\x00', &(0x7f0000001b40)='./file0\x00', 0x0, 0x21d000, 0x0) (async) pivot_root(&(0x7f0000001b80)='./file0/../file0/../file0\x00', &(0x7f0000001bc0)='./file0\x00') (async) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB=',rootmode=000000000100000']) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001c00)=""/209, 0xd1}, {&(0x7f0000001d00)=""/76, 0x4c}, {&(0x7f0000001d80)=""/91, 0x5b}, {&(0x7f0000001e00)=""/60, 0x3c}, {&(0x7f0000001e40)=""/177, 0xb1}, {&(0x7f0000001f00)=""/174, 0xae}, {&(0x7f0000001fc0)=""/41, 0x29}, {&(0x7f0000002000)=""/210, 0xd2}, {&(0x7f0000002100)=""/151, 0x97}], 0x9, &(0x7f0000002280)=""/127, 0x7f}, 0x40000020) umount2(&(0x7f0000000040)='./sys_mount\x00', 0x5) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x400000f1, 0x0, 0xfffffffffffffffd}]}) (async) llistxattr(&(0x7f0000000080)='./sys_mount\x00', &(0x7f00000003c0)=""/202, 0xca) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockname$packet(r1, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002740)=0x14) (async) getsockname$packet(r1, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000027c0)=0x14) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002800)={@empty, @multicast2, 0x0}, &(0x7f0000002840)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002b00)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002380)=ANY=[@ANYBLOB="2c0200006ab115e5110c04bdbc6988576bd735ee7490e4bf73d6084068a503851d4c3bef92c3763d5596ff7ace01451c6b226339c2ca769a0c18596edb2f1f46517470ed4044b0c5c24bdaffb8", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004d0b000008000100", @ANYRES32=0x0, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400440c000008000600", @ANYRES32=r5, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000101010108000000ff03060387090000e40c05029c0b0000ff0f02070180000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400de00000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400b0000000"], 0x22c}}, 0x4004005) write(r1, &(0x7f0000000380)='5', 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000002b40)=@newtaction={0x51c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x508, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xfffffff2, 0x652d, 0x1, 0x43b, 0x38, 0x4, 0x4000009, 0xfffffffe, 0x80, 0x80000000, 0x4, 0xfffffff6, 0x7e, 0x68, 0xfadb, 0x10000, 0x9, 0x9, 0x7, 0x9, 0xe3, 0xff, 0xf, 0x4, 0x1, 0x9, 0x4, 0x4, 0x5, 0x100, 0x8, 0xe65, 0x8, 0x400, 0xd66, 0x7fff, 0x6, 0xd, 0x9, 0x883, 0x88, 0x2, 0x47d, 0x8, 0x8000, 0x80000000, 0xffffff5d, 0x81, 0x3ff, 0x3, 0x5, 0xeb, 0x7ff, 0x81, 0x4, 0x4, 0x9000000, 0xfff, 0xfff, 0x3, 0xd61b, 0x2, 0x3f, 0xf9c0, 0x5, 0x5f, 0x6, 0x35, 0x8001, 0x6, 0x1, 0x4, 0x7, 0xfffffffd, 0x9, 0x3e89, 0xbe98, 0x1, 0x1000, 0x3ff, 0x9, 0xf, 0xc, 0x6, 0x2, 0x2, 0x1, 0x33, 0x3, 0x0, 0x4, 0x6, 0x8001, 0xce40, 0x6, 0x7ff, 0xa5, 0x5, 0x1, 0x1, 0x800, 0x6, 0x8, 0x7, 0x3, 0x4, 0x100f0e, 0x0, 0x50d, 0x7fff, 0x10001, 0x1, 0x7, 0xe, 0x3c, 0x3, 0xd154, 0x7f, 0x8, 0x8, 0x3be502a, 0x8, 0x3, 0x100, 0x3, 0x1, 0x2f024d69, 0x7, 0x8, 0x7, 0x0, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x4, 0x0, 0x1, 0xffffff81, 0x3, 0x2, 0x7f, 0x0, 0xffff, 0x8, 0x7, 0x6, 0x4, 0x6, 0x6, 0x5a9, 0xd, 0x3, 0x5, 0x1, 0x3ba6e934, 0x6218, 0x4, 0x4, 0x2, 0x0, 0x2, 0x4, 0x7, 0x7ea, 0x6, 0x7, 0x6, 0x6, 0x100, 0x1, 0x7fff, 0x7, 0x4a08, 0xae45, 0xfffeffff, 0xf, 0xe5e0, 0x6, 0xffffffb8, 0x1, 0x1, 0x0, 0x40, 0xa11, 0xfffffff9, 0xc7, 0xfffffff9, 0x2, 0xf2e, 0x5, 0x8001, 0x1, 0xffffffff, 0x3, 0x3, 0x4, 0x80000001, 0x0, 0xa, 0x3ff, 0x3, 0x1, 0x10, 0x9, 0x0, 0xfff, 0x5, 0x7, 0x401, 0x2, 0xffffffff, 0x7fffffff, 0xf88b, 0x9, 0x9, 0x9, 0x6, 0x8, 0x10001, 0x5, 0x7, 0x4, 0x200, 0x7, 0x3, 0x1, 0x7ff, 0x2, 0x107a, 0xc, 0x1, 0x10001, 0x0, 0x0, 0x6, 0x4cf, 0x7ff7, 0x1, 0x8, 0x59, 0x5, 0xecb, 0x8, 0x1ff, 0x80000000, 0x0, 0x6, 0x88, 0x1, 0xfd, 0x2, 0x289]}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x2}}}}, @m_skbmod={0xd0, 0xa, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x81, 0xffffffffffffffff, 0xb, 0x1}, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffc, 0x637, 0x7, 0x4018fad3, 0x1}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="7ec2bde9a22c"}]}, {0x4f, 0x6, "4f37032dc052e8343bf2426cf305712f90f81edfd355ad1cfa66dace39ae9cc333881932d5ffb53050d72d3f739fe0c908369fa427f7ae7379c0a580eb274ca3f6a2581559beed8a012564"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x51c}}, 0x0) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='syscall\x00') preadv(r9, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4102, 0x1006}], 0x1, 0x0, 0x0) (async) mkdirat(r1, &(0x7f0000001600)='./file0\x00', 0x80) mknod(&(0x7f0000000000)='./sys_mount\x00', 0x8, 0xfffffffa) 3m36.731883015s ago: executing program 2 (id=1941): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@thin_pool={0x0, 0x810, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '64', 0x20, 0xe, ' 1 skip_block_zeroing'}}]}) 3m36.499059805s ago: executing program 2 (id=1942): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="f000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004"], 0x50}}, 0x0) 3m36.448855097s ago: executing program 34 (id=1942): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="f000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004"], 0x50}}, 0x0) 3m28.859307431s ago: executing program 4 (id=2059): r0 = syz_open_dev$swradio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000480)={0x0, 0x80001fd, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x7, 0xfffffe00, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x80, 0x8000, 0x6ee3853a, 0x1}}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)=',1', 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d2bad500442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b0000000000000057000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000400)=0x1, 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r5, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000300)={0x28, 0x5, r5, r5, 0x3, 0xfffffffffffffffb, 0x3ff9}) ioctl(r3, 0x3b81, &(0x7f0000000100)='\f') r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) ioctl(r3, 0x3ba0, &(0x7f0000000180)="480000000200000001") ioctl(r3, 0x3b89, &(0x7f00000001c0)="28000000010000000300000001") 3m28.798945565s ago: executing program 4 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000500000002"], 0x64) 3m28.606945975s ago: executing program 4 (id=2064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0xc}, 0x1c) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0}, 0x20000004) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000440)='$', 0x1, 0x20008005, &(0x7f0000000480)={0x2, 0x4e20}, 0x10) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x5) 3m27.662084215s ago: executing program 4 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000cc0)={{0xffffffffffffffff, &(0x7f0000000180)='802.15.4 MAC\x00', 0x220000, &(0x7f00000001c0)={@_ha_fsid={[0xbe85, 0x2]}, {0x9ef, 0xf, 0x200, 0x48a}}, 0x9, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}, 0x8, &(0x7f0000000bc0)=[{0x1, 0x9, &(0x7f0000000280)='}*\x00', &(0x7f00000002c0)="a5680f03cb3f8ca3afe90e732310a3ecd4680188582c4809eb2990cc74a739eb413368a96c2b1c8e5397276e704db0ce3cc4d341dc6e6d79de72a4fe4c1a05a5d5020c0a499f16fb3a070ac23394890d366b5b05ceafba25b36d2faabf497b01b5c9fc3b979bd9d37c2cd7f71d215a63521af21c410dd699ea4a45a5adf2fadfd60e1a8bf51251dc1f1377646412add64c8967f5ca5a43257bcdce89dda40255883bfb8a1e1eb97ec108", 0xaa, 0x8}, {0x1, 0x1bfc, &(0x7f0000000380)='802.15.4 MAC\x00', &(0x7f00000003c0)="6d3a2af2180562fba1bfbb56e7f93b5c106df7ff1d084482325d5b8cae08b4114fd907d34a988bcfd489702cf333ed272827566ead53b38509b6b5f63cc9c00ebb44fa5859bb81cd6c9fdbd6730d2f4b068691827826820c065dc56fc8d30237854b49e9943ae09cc6fdcef5e69f3237fb80fda4b66464930228ef7d41ac5dea1e28355ca8ae118ade28f779a9e483c91d5caa4150ec12cd574262dd3ac895de1d168469b26430b43d286a5d5613ad432586ca6457c3a4dec0f7f2719cc32704914161cb5e47ae560627fe9fe3b4197b171a69da", 0xd4, 0x22}, {0x1, 0xffffffb8, &(0x7f00000004c0)='\'(\x00', &(0x7f0000000500)="35692e116675da5284cc00b6019ee83f193989281b1f9457233f80486b2a6b4590aa19957dc9e9a8bffb262e8b24628e7663aa9d0d37b59a2ab6cc6449d2156bfbf1629d7757eb8e329bf456a1f35dbbdee618197704e596d5195858d7586109302f7d9050b2e9a7046d52df606e5771f5b877fd44aeb8dff4abba38ae7737938210870033f18997e3878aedfc2dda4a34efce0a3575c62eb9c5e39e4fb9617bd29263ea47cb03da0208f38e28322d607681dc8fc1b766b585eedeb469461f9fdd96fb6e1cddcdf5df0590ffef778e2f369074", 0xd3, 0x2}, {0x1, 0x2, &(0x7f0000000600)='\xef%\x00', &(0x7f0000000640)="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", 0xfb, 0x2a}, {0x3, 0x7, &(0x7f0000000740)='802.15.4 MAC\x00', &(0x7f0000000780)="31c64d83c81d6a016c0c5e6af1332f7521c28585be6d32cc2cf64b7d5c63c8d466293a6404", 0x25}, {0x1, 0x8, &(0x7f0000000940)='\x00\x00', &(0x7f0000000980)="b8c0d11abd43520a35720eec5df190b18d580209b82c115639d1448d295ec4127c35ff2472621d0918fca43d0edf1858305812fe3bcb0f411bb82e3bb52c34d2515bdcba389b0b31e53d35fb5a61a99d9df47afc3fb813aec04c94527f6e16a473e0622e10a01a58fa83ffd7c3db5d4abb9ee4e8521e64e3418eab47a0ee98adec20b968509b48974ffd718038919e8c70481219bb19aa89", 0x98, 0x20}, {0x1, 0x9, &(0x7f0000000a40)='802.15.4 MAC\x00', &(0x7f0000000a80)="1e2b8bae6cf01107d1538fd79222a290c22dc3bf66e5a4ac9ee6522f4ee2b889a279df7db7605d78c8f7f04c420f944362ceae69f0e39b8ea182a7826d96abebe87dbac430f65acebb962f8a622f", 0x4e}, {0x2, 0x8000, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="5e1f3b3f1f0a8ffb39c79847686a75fcc9621544c9303e68c3d34cbabaa4a30b41eab58e67e0a381b625359575836e5201bb766efd929c2793b5fa3180a08269c500e5b2a84a5ea9b4ae6208b5e73623b404b47c4f2e6b3c7e95a82018936e81753c16f3010c8b5ec89d30fa25bed8f8109684f1a170cc0fc01b7aca4f745181", 0x80}]}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d80)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000dc0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4001010}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=@getchain={0x44, 0x66, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0xffe0, 0x2}, {0xe, 0xfff3}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x10) socket$inet6(0xa, 0x1, 0x0) (async) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000000)=0xffdffff9, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000040)) (async) getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000040)) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x200) 3m27.54148594s ago: executing program 4 (id=2081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0105300007002800060000006000000000303a40fe800000000000000000300000000001fe800000000700000000000000000002"], 0x64) 3m27.258488614s ago: executing program 4 (id=2085): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0xffffffffffffffc3}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="410001"], 0x4) 3m27.151053514s ago: executing program 35 (id=2085): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0xffffffffffffffc3}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="410001"], 0x4) 53.703244234s ago: executing program 6 (id=4595): bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="7911a800000000005501020000000000b700000000000000950000000000000085ff80008b000000b70000000000000095"], &(0x7f0000001b40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.616239555s ago: executing program 6 (id=4597): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40c0}, 0x20000080) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000004c0), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b8", @ANYBLOB='R'], 0x97) 53.473967394s ago: executing program 6 (id=4602): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) 53.384405876s ago: executing program 6 (id=4604): bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="7911a800000000005501020000000000b700000000000000950000000000000085ff90008b000000b70000000000000095"], &(0x7f0000001b40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.383026811s ago: executing program 6 (id=4606): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000440), 0x8) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000004c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="a5", 0x1}], 0x1}, 0x8001) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) r2 = socket$tipc(0x1e, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/acpi/parameters/trace_state\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='en', 0x2) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpgid(r9) fcntl$setownex(r8, 0xf, &(0x7f00000002c0)={0x2, r10}) sendmmsg$unix(r7, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="11", 0x1}], 0x1}}], 0x1, 0x40015) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r5, 0xc23, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x8, 0xfffffffd, 0xfefffffd, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x44048014}, 0x4008851) 53.294707977s ago: executing program 6 (id=4608): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv4_newroute={0x34, 0x18, 0x2, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000ac0), 0x4) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/174, 0xae}], 0x1, &(0x7f0000000c40)=""/65, 0x41}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000cc0)={&(0x7f0000000d00)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x1000000003}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}]}, 0x48}, 0x1, 0x0, 0x0, 0xb34c836b5ca33079}, 0x4040) r5 = syz_open_procfs(0x0, &(0x7f0000000740)='net/igmp\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000d40)=0x80000003, 0x4) listen(r6, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000d80)=0x80000003, 0x4) listen(r7, 0xd) preadv(r5, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r8 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) nanosleep(&(0x7f0000000a40)={r9, r10+60000000}, &(0x7f0000000a80)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0xe0, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0xc2, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @default, 0x4803, @val, @val={0x1, 0x5, [{0x16}, {0x12, 0x1}, {0x30, 0x1}, {0x4, 0x1}, {0x6c, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x77, {0x8, 0x31, 0xed, "69867442419cac5d1cb33c03da041a3eb12f7c844164a6f2bd4924bc13d5e0ef773ed19b1be7c0edac49c43c8a5a3329fbd621726c833956edaa00712c7f2f501ee7cb42ec4e195f9ec7e1f6713f89bf46ae40143b28624f718361a624ce4e843fc46eecfdf52fb540b11000812e36708c86797b"}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x68}}, @void}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x880}, 0x20044044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=@framed={{}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000700)='syzkaller\x00', 0xf}, 0x94) 38.16630076s ago: executing program 36 (id=4608): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv4_newroute={0x34, 0x18, 0x2, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000ac0), 0x4) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/174, 0xae}], 0x1, &(0x7f0000000c40)=""/65, 0x41}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000cc0)={&(0x7f0000000d00)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x1000000003}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}]}, 0x48}, 0x1, 0x0, 0x0, 0xb34c836b5ca33079}, 0x4040) r5 = syz_open_procfs(0x0, &(0x7f0000000740)='net/igmp\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000d40)=0x80000003, 0x4) listen(r6, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000d80)=0x80000003, 0x4) listen(r7, 0xd) preadv(r5, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r8 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) nanosleep(&(0x7f0000000a40)={r9, r10+60000000}, &(0x7f0000000a80)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0xe0, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0xc2, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @default, 0x4803, @val, @val={0x1, 0x5, [{0x16}, {0x12, 0x1}, {0x30, 0x1}, {0x4, 0x1}, {0x6c, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x77, {0x8, 0x31, 0xed, "69867442419cac5d1cb33c03da041a3eb12f7c844164a6f2bd4924bc13d5e0ef773ed19b1be7c0edac49c43c8a5a3329fbd621726c833956edaa00712c7f2f501ee7cb42ec4e195f9ec7e1f6713f89bf46ae40143b28624f718361a624ce4e843fc46eecfdf52fb540b11000812e36708c86797b"}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x68}}, @void}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x880}, 0x20044044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=@framed={{}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000700)='syzkaller\x00', 0xf}, 0x94) 3.826342127s ago: executing program 7 (id=5398): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x2bd}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xfffffff7}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.76086752s ago: executing program 7 (id=5401): bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000019000000b70000000000000095"], &(0x7f0000001b40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.715904979s ago: executing program 7 (id=5403): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x105400, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x2, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x6}}, [0x835, 0x2, 0x2c4, 0x0, 0x6, 0x7ff, 0x2, 0x8e1, 0xd97, 0x6a57, 0x7, 0x6, 0x5, 0xe]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x2}]}, &(0x7f0000000200)=0x10) 3.713690926s ago: executing program 7 (id=5405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0105300007002800060000006000000000303a40fe800000000000000000300000000001fe80000000000000003b000000000002"], 0x64) 3.511113176s ago: executing program 7 (id=5408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21}, &(0x7f0000000140)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x416303, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002440)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x400000008000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x110, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002480)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xffffffffffffffce}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000026c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002700)=ANY=[], 0xfdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x180000a) timer_settime(r1, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000002280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r11, &(0x7f00000022c0)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r11, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) 2.768810935s ago: executing program 1 (id=5421): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000ff8c000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004"], 0x50}}, 0x0) 2.768138187s ago: executing program 1 (id=5422): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x8, 0x7, 0x8, @remote, @private0, 0x8, 0x0, 0x8, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x700, 0x80, 0x9, 0x3, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x65, 0x0, 0x6, 0x2f, 0x0, @local, @remote, {[@rr={0x7, 0x13, 0x45, [@broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @local]}, @ra={0x94, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc01, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001580)={0x2, &(0x7f0000001780)=[{0x6, 0x72, 0x0, 0x7fff0000}, {0x8, 0x0, 0x7, 0x4}]}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000001600)=0x9, 0x4) bind$inet6(r6, &(0x7f0000001640)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001680), 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000016c0)=[{&(0x7f0000001700)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r8, r9, 0x25, 0x4, @val=@tcx}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002680)=@deltfilter={0xec4, 0x2d, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xfff2, 0x5}, {0xc, 0xb}, {0xa, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x75c, 0x2, [@TCA_FLOW_ACT={0x740, 0x9, 0x0, 0x1, [@m_connmark={0x188, 0x3, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0xffffffffffffffff, 0x6, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x20000000, 0x4, 0x7}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x5c8, 0x6, 0x6, 0x9f}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xf8, 0x2, 0x0, 0xd}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x4, 0x4, 0x6, 0x5}, 0x2}}]}, {0xcc, 0x6, "cf559379b870806e60fcffad3044cdde61b78da2b0af82b34ed9940ab529bd933a90712ba66455caa525de664047834fde6ed6ffc0d18f6678b765fe9784f14fbea5ef68abc9d371c1fd7aea13c4730859e2735b4f6583b7f20b758b98f28641dc14e321797c6658b6769961298d4f336e81be8d8cb8c6a28a5e4a52d10e42a41d0a9dd3d12cee94f5860f43f8a0cdc1e81ca7661db90b017641709f255fef892b988e31a52742085b3945e5530cbe017eafbeb1bd47512cb405ce112628c6fa9217bce288f1220c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_simple={0x198, 0x10, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3cb, 0x0, 0x0, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xe, 0x2, 0x36, 0x5}}, @TCA_DEF_DATA={0xb, 0x3, 'dummy0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3a9, 0x1ff, 0x7, 0xc1a, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x10001, 0x6, 0x0, 0x9}}, @TCA_DEF_DATA={0x6, 0x3, 'N\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xf0, 0x6, "7c3281b79dd9496b74f435a9eaeba1c9f96f748fb8db68a51bf7cc539458756aae89c3952c8b308ba93065c16a49701b539d2d6220af81b93abb5d5179797dd50f873eb1c81ba5c85dc6a2c3b640f1adf0d220166a273dd72b647266fa924cedc44bac961774bacc7ea0a6390bdd0ff525afcaf15ed93359596e6e9220d43e40a22c4634f38401f325b706cfd9ae3fd28dbb3bdf465560a5527b1cad2f80b6d281e757d36e3989bea3ccf7790558a633ee2352d11f297392ed411a8911b965eed0063b408cd0fd2d2cd9a7ea2367192b2c7e10032c985749fa81c799a635882dff29484dcf97387d3e977c22"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x154, 0x19, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x2, 0x8, 0x4}, @multicast1, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xee4, 0x7f, 0x4, 0x9, 0xb}, @dev={0xac, 0x14, 0x14, 0x34}, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa3, 0x8, 0x2, 0x8, 0x5b}, @empty, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x5, 0x3, 0x4}, @local, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x3, 0x0, 0x7fff, 0xffffffff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xbce, 0x2, 0x2}, @multicast2, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x8, 0x7fff, 0x100}, @empty, @rand_addr=0x64010102, 0xffffff}}]}, {0x11, 0x6, "da2fed9101c23038bf6d67c48a"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_xt={0x2c8, 0x0, 0x0, 0x0, {{0x7}, {0x250, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x37, 0x6, {0x2, 'mangle\x00', 0x0, 0x10, "eccefae1afc764f74f9fb2e705"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x110, 0x6, {0x6, 'mangle\x00', 0xf, 0x9, "7340134006fa70838f3b453d452579fc93f9be77f6ecd0c0bbc4add337f8182d3c2fbe877d13e53023bf906a5b023145f8de28de955e6d15194ecbcfe0edfb9aab504f746021d894de8e6b1ae027e987a60a69f10523d77bb250bdf9a050ff114e10c6a89496a66e1bd4140f2d05acd9a54b5a4d0777d228b0220013b40e7c01e254f8ef4863040a2bdbc5bea495bc8d587de32ec2daf06046f9db590151e29f5d393d5b95eaa778d790a657722542c2ebcd9649253688de2a6f9563189b35d04b653224a1eaf221b74fe2e7a1f7f3e6d8aef1209b27fc8cce03b52a74db792d689ff68b358e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_TARG={0xbe, 0x6, {0x5, 'security\x00', 0x40, 0x3, "2e62b891ab0e5b24e5fc67dce087a82f0a9a42c3d8c0f29154f79f1be0a9451c121c409508732d862275dff6ce7b1db8f533997a6e896136258de93d45a77a32578bb045a88a8f418cd77d0a1f60d0e08b0ae0eaf881be74b4485059dce6ccb10c79ad577f4d7685fd8e01a3fce6ef6a5ca039d3071f1314daa7410702191f14e609f3f455baa03fb7814f12bf37f6b9da4b5d23"}}]}, {0x52, 0x6, "560bd9a3039f03db8210abb436cd77acec3033d7ff382eea41cc97121e7f190b5e890dcd3d1da3d5fd31e070f3ca23614c27635c615859e54278644f5cd5d793946cf48e95ab9c3a0ff4d1511115"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5ee}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ee95}]}}, @filter_kind_options=@f_route={{0xa}, {0x70c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x6e}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_ACT={0x6f0, 0x6, [@m_skbmod={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x8e, 0x6, "b597a14e3805e322e16f3d9ee71c3bcdc6d3d2dce5726393905835f30c0a971681d57dc261be8c60ac8fd085cbab72899b73b6ba4ebf5243eb0c71a49b151fd1577f0939d407861630f65d12a3ee215b30a5de3717cec5f4d11d5379760869a2bbdc6f2b1ad453430422894f2c45c68f726693d172dd22c71bdb8eccbcf25c70f0d5c2623ee432d9a7e4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xbc, 0x13, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1055, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x4000000, 0x3, 0x269, 0x80000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x270b, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe7f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x6, 0xb35, 0x101}}]}, {0x3c, 0x6, "a0011e470ff0ca4290a45501e2d4c790e00ffacf2868c583c2b391e310e3034b7d6c4fe31bbb3792c3e85979c42aeceb9e4dfec6ee4ad1da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x1a8, 0x0, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xa0a, 0x2, 0x2, 0xae4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x576, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ef, 0xe, 0x0, 0x401, 0xe3f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x60000, 0x200, 0x1, 0x0, 0x10}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18c3, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x0, 0x9, 0x3}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xf4, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0xc6, 0x6, "9dc05fe442ecf0dbd9a351c203a38e24e163c5f1b67ca967621c454dc685945c8f8b99e4729c09f35db8714b7e1d9c92d5ee829e6e567d5a9fd8568af8767ff4391595fd7358612aa7e4fb79d7968b41e172f0bdaacb2301053a37039f0c97d8a56341100945406a24e75039ba3bfce3d5886af1688de036df1dbac695489a199c4a889aba4e9db30b673a6b9692b33e7972a064b49ff693e19d6badc2779642d3393cde6d86c4f1ca60d368b6993ba9edee10e41cdbf9c6894ddced14eaa8f9a887"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xd8, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xd24b, 0x4, 0x1, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24aa, 0x1}}]}, {0x86, 0x6, "ca89a6cf803ebf0e5d3e8cfda98cfc57d5e4459e9ccc30635215f149fa3023a7a256bef801a9c69e0ea6aab3804a2f634fb53f2cacb807b652431931a42934b0847ace884f4afc1ba11c377f967c7949c9fb7708d023ff11a07bf346d99ea90024e6153c8480c67bc65c1d73b16c58b2dd8cfd799ba63079899b7049e4c48fcb1e29"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x1c8, 0x2, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x567, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x40, 0x3, 0x765, 0x15}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x9, 0x10000007, 0x99, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x7fff, 0x0, 0x4, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7, 0x6, 0x2, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x7d, 0x4, 0x9, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x4, 0x0, 0x8, 0xf3e}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xf, 0xad}}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r11, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c0002"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x1010000, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/platform_labels\x00', 0x250a01, 0x1a9) write(r12, &(0x7f0000000180)='10', 0x2) write$6lowpan_control(r12, 0x0, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.923719536s ago: executing program 1 (id=5434): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000180000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) 1.871335284s ago: executing program 1 (id=5436): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x7a, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x5, 0x40, 0xa5, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x9, 0x0, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xb0}, @mbim_extended={0x8, 0x24, 0x1c, 0x401, 0xb, 0x20}, @ncm={0x6, 0x24, 0x1a, 0x7fff, 0x28}, @mbim={0xc, 0x24, 0x1b, 0xfffc, 0x2, 0x93, 0x12, 0x6, 0x42}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x8, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x22, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xfd, 0x2}}}}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x300, 0x5c, 0xf, 0xa8, 0x8, 0x1}, 0x1c, &(0x7f0000001680)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x27, "1754e076df2896b321d1c9b03470cbc9"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x448}}, {0x9a, &(0x7f0000001700)=@string={0x9a, 0x3, "3f82cbf670f6bd53d1ed4af202b829126259ef81b0fc8a1557babbeae4151d42271ee93c0abef933da9cea0cf6952a8a975018b31c640cc2308eabded1cab824139aaeb98fb9a27cc8848ac80198804c44cdf62967c2eeca1ccd88d24eb22ba8967def386385bcae6fdab3a3a3abac89230b3b53899256d537662b96c6c7c457cdf717056a033428feea65b7f84a8ac62ec1126657fbb6fe"}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904060000ff4f9b000904b000003a3846000904"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x3, 0xce, &(0x7f0000000300)="dc96377a754071eef21c0785186179a76e9f8b91dbf95387c2e1d45d285c06ee2fa9bf4851c703af39e10ce03a136285f11c4954ccb0a1c2b7f53b7592751380af36f2784cd1ae9d84416b6344d1b1298061e1f468fe5215041819bd9eba3f762374906dd685e80b0a2e15a6298663a49eea2202e6a147645c848cef7fc317aa001db5b57a2fd3d89557a765d36748959f559bf8fd8f8e48f1625aa934e4aeaf6dbd99f51536c7efcdc02b53e91ba53ae84d3e423f25e612ea31e7c149a33d0b968d8c864023c9e405f1e75eb975") syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 699.416127ms ago: executing program 8 (id=5448): bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000001c000000b70000000000000095"], &(0x7f0000001b40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 611.265841ms ago: executing program 8 (id=5449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fcntl$setlease(r2, 0x400, 0x1) sendfile(r2, r2, 0x0, 0x1000000000007) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000780)=0x3) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000800)=0x1) (async) ioctl$PPPIOCSMRU1(r4, 0x80047455, 0x0) (async, rerun: 32) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000840)={0x18, 0x2000000, 0x0, {0x4}}, 0x18) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'syz_tun\x00', 0x0}) (async) prlimit64(0x0, 0x7, &(0x7f00000006c0)={0x3, 0xa5b1}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r5, 0x25, 0x4, @void}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xb}) (async, rerun: 64) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @alu={0x7}, @initr0, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x14}, 0x94) 447.509807ms ago: executing program 8 (id=5453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0105300007002800060000006000000000303a40fe800000000000000000300000000001fe800000000000000000000100000002"], 0x64) 415.410718ms ago: executing program 7 (id=5455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x90078800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=@getsa={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbff, {@in=@loopback, 0x4d4, 0x2, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000280), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000300)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000340)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000003c0)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') readv(r4, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x62181) ioctl$BINDER_VERSION(r4, 0xc0046209, &(0x7f0000000640)) 351.233598ms ago: executing program 5 (id=5456): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80000000000d) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x8c, 0x2, 0x8, 0x80000}}, @cpuid={0x64, 0x18, {0x4, 0x400}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 351.127726ms ago: executing program 5 (id=5457): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01fe0f00ef010101000000000000000000000300080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) 287.654333ms ago: executing program 5 (id=5458): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000a000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000740)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x73, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 287.354893ms ago: executing program 8 (id=5459): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) setpgid(r0, 0xffffffffffffffff) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x44200, 0x11) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x800, 0x0, 0x0, {0x6, 0x6, 0x2}}, {0x1, 0x2, 0x0, {0x4, 0x7ff, 0x2}}], 0x2, 0x20, 0x401, 0x3}) (async) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) (async) r3 = openat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x40801, 0xc2) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000002c0)={0xd3f7, 0x6, {r4}, {r5}, 0x7, 0x9}) (async, rerun: 64) fcntl$setlease(r3, 0x400, 0x1) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x9, 0x8000000000000000, 0x0, 0x10001}) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setlease(r6, 0x400, 0x1) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000380)=[{{0x0, 0xea60}, 0x3, 0xc0}, {{r7, r8/1000+60000}, 0x11, 0x8, 0x2}, {{0x77359400}, 0x4, 0x1, 0x3}], 0x48) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000400)) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) ioctl$VT_ACTIVATE(r9, 0x5606, 0x6) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000480)={{r9}, "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"}) (async, rerun: 64) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (rerun: 64) r10 = open_tree(r1, &(0x7f0000001480)='./file0\x00', 0x9800) (async) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000001500)=0x9) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000001840)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x5b, 0xd, 0x1, 0x0, "0dc52b4b21eb0e6a41d4f18e9113bdeb70288fe26408360840efd79672d08578b3574344ab4be8dd31d6c0f8940d82969d3c2b8fc7809f5cc9bf3ac5f6d8df548b01e7f0a294d8f4030e5ee6a304c801d5369f31db42fa"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x250}, 0x1, 0x0, 0x0, 0x4005}, 0x40) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000001880)) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x1a, 0x11, "b4eecc3fdc2ceb9ae2aa9c70543ac2ea6c809c8ac06bceb4cbd44570b22bfb6529d9f5ce9dd9f36d5fb5e2c307a610cc0ee428e64204918cd37be4772e8864e7", "ce58e2fa357b4943e63ac323895d959d44660f0702471605cc69c12188cf384c0ef362449c88758cedfedf107daed46d72146eb8658551ec7d91d8e5390490c4", "0d05579dfd50f659b518053d0f6c411c4c64a1db89a8a7dc45c727eb91c1339d", [0x1b, 0x5]}) (async) ioctl$TIOCSRS485(r10, 0x542f, &(0x7f00000019c0)={0x762, 0x9, 0x4}) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) 283.43453ms ago: executing program 5 (id=5460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000200)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013df000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004600"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="260f01c3b8010000000f01d90f359d660f38823feaf58ade1b4b0064f6a900900000c4e1be59feea07000000dc00262e0f01cf", 0x33}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 32) 262.404071ms ago: executing program 8 (id=5461): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x2bd}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xfd8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xfffffff7}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 161.022819ms ago: executing program 8 (id=5462): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4044010) r1 = openat(0xffffffffffffffff, 0x0, 0x42, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000600)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8, 0xfff8, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001080)={'lo\x00'}) mount$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@dont_hash}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) socket$nl_route(0x10, 0x3, 0x0) 76.050103ms ago: executing program 5 (id=5463): bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000001d000000b70000000000000095"], &(0x7f0000001b40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 74.961757ms ago: executing program 1 (id=5464): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00', @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) 174.372µs ago: executing program 5 (id=5465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_clone3(&(0x7f0000000000)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0x209, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r6, 0x1, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4004040) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x0, 0x4, 0x0, 0xa3c2, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x1, 0xfffffffe, 0x1, 0x345}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x2, 0xb4}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xfffffffc, 0xfffeffff}}]}}}]}, 0x80}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000001c0)="b0", 0x1, 0x40811, &(0x7f0000000200)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 0s ago: executing program 1 (id=5466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000fff0000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): 483][T21489] ? __pfx_vcpu_run+0x10/0x10 [ 394.521501][T21489] ? lock_acquire+0x1d1/0x380 [ 394.521517][T21489] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 394.521556][T21489] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 394.521568][T21489] ? __local_bh_enable_ip+0xa5/0x120 [ 394.521585][T21489] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 394.521602][T21489] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 394.521623][T21489] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 394.521640][T21489] ? lock_acquire+0x1d1/0x380 [ 394.521655][T21489] ? do_raw_write_lock+0x11e/0x260 [ 394.521667][T21489] ? find_held_lock+0x2b/0x80 [ 394.521679][T21489] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 394.521696][T21489] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 394.521721][T21489] kvm_vcpu_ioctl+0x735/0x17b0 [ 394.521740][T21489] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 394.521758][T21489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 394.521779][T21489] ? do_vfs_ioctl+0x226/0x13e0 [ 394.521802][T21489] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 394.521827][T21489] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 394.521860][T21489] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 394.521894][T21489] ? __fget_files+0x34/0x3d0 [ 394.521930][T21489] ? selinux_file_ioctl+0x1e0/0x290 [ 394.521958][T21489] ? selinux_file_ioctl+0x1e7/0x290 [ 394.521987][T21489] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 394.522016][T21489] __x64_sys_ioctl+0x18e/0x210 [ 394.522051][T21489] do_syscall_64+0x123/0x790 [ 394.522085][T21489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.522106][T21489] RIP: 0033:0x7f50ff99f559 [ 394.522125][T21489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.522145][T21489] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.522166][T21489] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 394.522180][T21489] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 394.522194][T21489] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.522205][T21489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.522217][T21489] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 394.522242][T21489] [ 394.659220][ T1649] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 394.830551][ T1649] usb 6-1: Using ep0 maxpacket: 16 [ 394.831311][ T1649] usb 6-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 394.832467][ T1649] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.832489][ T1649] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.834415][ T1649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.834437][ T1649] usb 6-1: Product: syz [ 394.834452][ T1649] usb 6-1: Manufacturer: syz [ 394.834465][ T1649] usb 6-1: SerialNumber: syz [ 394.841455][ T1649] r8152-cfgselector 6-1: Unknown version 0x0000 [ 394.841471][ T1649] r8152-cfgselector 6-1: config 0 descriptor?? [ 395.045761][ T3415] r8152-cfgselector 6-1: USB disconnect, device number 40 [ 395.091942][T21518] gadgetfs: bound to dummy_udc driver [ 395.144136][T21520] autofs4:pid:21520:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.65408), cmd(0xc018937e) [ 395.144171][T21520] autofs4:pid:21520:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 395.164821][T21520] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 395.223460][T21529] netlink: ':': attribute type 39 has an invalid length. [ 395.268388][T21532] FAULT_INJECTION: forcing a failure. [ 395.268388][T21532] name failslab, interval 1, probability 0, space 0, times 0 [ 395.268410][T21532] CPU: 0 UID: 0 PID: 21532 Comm: syz.8.5082 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.268427][T21532] Tainted: [L]=SOFTLOCKUP [ 395.268432][T21532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.268440][T21532] Call Trace: [ 395.268445][T21532] [ 395.268450][T21532] dump_stack_lvl+0x100/0x190 [ 395.268472][T21532] should_fail_ex.cold+0x5/0xa [ 395.268492][T21532] should_failslab+0xc2/0x120 [ 395.268506][T21532] kmem_cache_alloc_noprof+0x92/0x6a0 [ 395.268525][T21532] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 395.268547][T21532] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 395.268568][T21532] ? kvm_msr_allowed+0x2d0/0x450 [ 395.268587][T21532] kvm_mmu_load+0xe3/0x25b0 [ 395.268603][T21532] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 395.268616][T21532] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 395.268632][T21532] ? __pfx_kvm_mmu_load+0x10/0x10 [ 395.268649][T21532] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 395.268663][T21532] ? kvm_check_and_inject_events+0x896/0x1050 [ 395.268682][T21532] vcpu_run+0x4009/0x60d0 [ 395.268705][T21532] ? __pfx_vcpu_run+0x10/0x10 [ 395.268723][T21532] ? lock_acquire+0x1d1/0x380 [ 395.268739][T21532] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 395.268757][T21532] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 395.268768][T21532] ? __local_bh_enable_ip+0xa5/0x120 [ 395.268785][T21532] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 395.268802][T21532] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 395.268822][T21532] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 395.268839][T21532] ? lock_acquire+0x1d1/0x380 [ 395.268855][T21532] ? do_raw_write_lock+0x11e/0x260 [ 395.268866][T21532] ? find_held_lock+0x2b/0x80 [ 395.268878][T21532] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 395.268896][T21532] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 395.268916][T21532] kvm_vcpu_ioctl+0x735/0x17b0 [ 395.268935][T21532] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 395.268954][T21532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.268974][T21532] ? do_vfs_ioctl+0x226/0x13e0 [ 395.268993][T21532] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 395.269010][T21532] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 395.269031][T21532] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 395.269068][T21532] ? __fget_files+0x34/0x3d0 [ 395.269090][T21532] ? selinux_file_ioctl+0x1e0/0x290 [ 395.269108][T21532] ? selinux_file_ioctl+0x1e7/0x290 [ 395.269130][T21532] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 395.269149][T21532] __x64_sys_ioctl+0x18e/0x210 [ 395.269172][T21532] do_syscall_64+0x123/0x790 [ 395.269203][T21532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.269221][T21532] RIP: 0033:0x7f74d1f9f559 [ 395.269239][T21532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.269258][T21532] RSP: 002b:00007f74d2e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.269279][T21532] RAX: ffffffffffffffda RBX: 00007f74d2225fa0 RCX: 00007f74d1f9f559 [ 395.269289][T21532] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 395.269296][T21532] RBP: 00007f74d2e76090 R08: 0000000000000000 R09: 0000000000000000 [ 395.269304][T21532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.269311][T21532] R13: 00007f74d2226038 R14: 00007f74d2225fa0 R15: 00007ffc87855498 [ 395.269327][T21532] [ 395.281951][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 395.281969][ T43] audit: type=1400 audit(524682.654:3252): avc: denied { write } for pid=21530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.330073][ T43] audit: type=1400 audit(524682.714:3253): avc: denied { write } for pid=21536 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.427990][ T3415] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 395.428359][ C0] gadgetfs: connected [ 395.430540][T21517] gadgetfs: suspended from state 3 [ 395.430651][T21517] gadgetfs: disconnected [ 395.454503][T21542] syzkaller1: entered promiscuous mode [ 395.454519][T21542] syzkaller1: entered allmulticast mode [ 395.493538][T21546] syz_tun: entered allmulticast mode [ 395.499665][ T5794] Bluetooth: hci0: command tx timeout [ 395.638937][T21559] Bluetooth: MGMT ver 1.23 [ 395.686352][T21559] ip_tables: iptables: counters copy to user failed while replacing table [ 395.816068][T21574] FAULT_INJECTION: forcing a failure. [ 395.816068][T21574] name failslab, interval 1, probability 0, space 0, times 0 [ 395.816091][T21574] CPU: 3 UID: 0 PID: 21574 Comm: syz.5.5098 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.816108][T21574] Tainted: [L]=SOFTLOCKUP [ 395.816112][T21574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.816120][T21574] Call Trace: [ 395.816125][T21574] [ 395.816130][T21574] dump_stack_lvl+0x100/0x190 [ 395.816155][T21574] should_fail_ex.cold+0x5/0xa [ 395.816180][T21574] should_failslab+0xc2/0x120 [ 395.816193][T21574] __kvmalloc_node_noprof+0x113/0x9b0 [ 395.816213][T21574] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 395.816236][T21574] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 395.816256][T21574] ? find_held_lock+0x2b/0x80 [ 395.816269][T21574] ? kvm_msr_allowed+0x2d0/0x450 [ 395.816286][T21574] kvm_mmu_load+0xe3/0x25b0 [ 395.816303][T21574] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 395.816315][T21574] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 395.816329][T21574] ? __pfx_kvm_mmu_load+0x10/0x10 [ 395.816344][T21574] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 395.816358][T21574] ? kvm_check_and_inject_events+0x896/0x1050 [ 395.816377][T21574] vcpu_run+0x4009/0x60d0 [ 395.816399][T21574] ? __pfx_vcpu_run+0x10/0x10 [ 395.816417][T21574] ? lock_acquire+0x1d1/0x380 [ 395.816432][T21574] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 395.816451][T21574] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 395.816462][T21574] ? __local_bh_enable_ip+0xa5/0x120 [ 395.816479][T21574] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 395.816495][T21574] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 395.816516][T21574] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 395.816533][T21574] ? lock_acquire+0x1d1/0x380 [ 395.816549][T21574] ? do_raw_write_lock+0x11e/0x260 [ 395.816560][T21574] ? find_held_lock+0x2b/0x80 [ 395.816572][T21574] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 395.816589][T21574] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 395.816610][T21574] kvm_vcpu_ioctl+0x735/0x17b0 [ 395.816629][T21574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 395.816647][T21574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.816669][T21574] ? do_vfs_ioctl+0x226/0x13e0 [ 395.816689][T21574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 395.816716][T21574] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 395.816738][T21574] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 395.816759][T21574] ? __fget_files+0x34/0x3d0 [ 395.816786][T21574] ? selinux_file_ioctl+0x1e0/0x290 [ 395.816812][T21574] ? selinux_file_ioctl+0x1e7/0x290 [ 395.816858][T21574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 395.816892][T21574] __x64_sys_ioctl+0x18e/0x210 [ 395.816920][T21574] do_syscall_64+0x123/0x790 [ 395.816942][T21574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.816954][T21574] RIP: 0033:0x7f50ff99f559 [ 395.816965][T21574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.816977][T21574] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.816990][T21574] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 395.816998][T21574] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 395.817005][T21574] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.817012][T21574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.817019][T21574] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 395.817035][T21574] [ 395.824255][ C2] 0: reclassify loop, rule prio 0, protocol 03 [ 395.868471][ T43] audit: type=1800 audit(524683.244:3254): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=13630 res=0 errno=-22 [ 395.996344][T21583] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.212345][T21605] xt_IDLETIMER: timeout value is too big [ 396.305910][ T43] audit: type=1400 audit(524683.684:3255): avc: denied { write } for pid=21612 comm="syz.5.5110" name="dbroot" dev="configfs" ino=96506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 396.306059][ T43] audit: type=1400 audit(524683.684:3256): avc: denied { open } for pid=21612 comm="syz.5.5110" path="/334/my_configfs/target/dbroot" dev="configfs" ino=96506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 396.306345][ T43] audit: type=1400 audit(524683.684:3257): avc: denied { read } for pid=21612 comm="syz.5.5110" path="/334/my_configfs/target/dbroot" dev="configfs" ino=96506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 396.306491][ T43] audit: type=1800 audit(524683.684:3258): pid=21613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5110" name="dbroot" dev="configfs" ino=96506 res=0 errno=-22 [ 396.398086][ T43] audit: type=1800 audit(524683.774:3259): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=373108 res=0 errno=-22 [ 396.398621][ T43] audit: type=1800 audit(524683.784:3260): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=373112 res=0 errno=-22 [ 396.411338][ T43] audit: type=1800 audit(524683.794:3261): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=373140 res=0 errno=-22 [ 396.533310][T21622] fuse: Unknown parameter 'fd¨0x0000000000000005' [ 396.561777][T21622] bond0: entered promiscuous mode [ 396.561794][T21622] bond_slave_0: entered promiscuous mode [ 396.561916][T21622] bond_slave_1: entered promiscuous mode [ 396.562952][T21622] batadv0: entered promiscuous mode [ 396.564044][T21622] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 396.849017][ T41] usb 12-1: new high-speed USB device number 36 using dummy_hcd [ 396.861550][T21653] FAULT_INJECTION: forcing a failure. [ 396.861550][T21653] name failslab, interval 1, probability 0, space 0, times 0 [ 396.861572][T21653] CPU: 2 UID: 0 PID: 21653 Comm: syz.5.5122 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.861589][T21653] Tainted: [L]=SOFTLOCKUP [ 396.861594][T21653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.861602][T21653] Call Trace: [ 396.861606][T21653] [ 396.861611][T21653] dump_stack_lvl+0x100/0x190 [ 396.861636][T21653] should_fail_ex.cold+0x5/0xa [ 396.861655][T21653] should_failslab+0xc2/0x120 [ 396.861669][T21653] kmem_cache_alloc_noprof+0x92/0x6a0 [ 396.861687][T21653] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 396.861709][T21653] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 396.861729][T21653] ? kvm_msr_allowed+0x2d0/0x450 [ 396.861747][T21653] kvm_mmu_load+0xe3/0x25b0 [ 396.861768][T21653] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 396.861786][T21653] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 396.861806][T21653] ? __pfx_kvm_mmu_load+0x10/0x10 [ 396.861827][T21653] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 396.861844][T21653] ? kvm_check_and_inject_events+0x896/0x1050 [ 396.861863][T21653] vcpu_run+0x4009/0x60d0 [ 396.861886][T21653] ? __pfx_vcpu_run+0x10/0x10 [ 396.861903][T21653] ? lock_acquire+0x1d1/0x380 [ 396.861919][T21653] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 396.861938][T21653] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 396.861949][T21653] ? __local_bh_enable_ip+0xa5/0x120 [ 396.861966][T21653] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 396.861982][T21653] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 396.862002][T21653] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 396.862019][T21653] ? lock_acquire+0x1d1/0x380 [ 396.862035][T21653] ? do_raw_write_lock+0x11e/0x260 [ 396.862045][T21653] ? find_held_lock+0x2b/0x80 [ 396.862058][T21653] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 396.862075][T21653] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 396.862096][T21653] kvm_vcpu_ioctl+0x735/0x17b0 [ 396.862115][T21653] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 396.862134][T21653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.862154][T21653] ? do_vfs_ioctl+0x226/0x13e0 [ 396.862172][T21653] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.862195][T21653] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 396.862217][T21653] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 396.862238][T21653] ? __fget_files+0x34/0x3d0 [ 396.862258][T21653] ? selinux_file_ioctl+0x1e0/0x290 [ 396.862276][T21653] ? selinux_file_ioctl+0x1e7/0x290 [ 396.862295][T21653] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 396.862313][T21653] __x64_sys_ioctl+0x18e/0x210 [ 396.862333][T21653] do_syscall_64+0x123/0x790 [ 396.862353][T21653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.862366][T21653] RIP: 0033:0x7f50ff99f559 [ 396.862377][T21653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.862388][T21653] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.862401][T21653] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 396.862409][T21653] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 396.862416][T21653] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 396.862423][T21653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.862430][T21653] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 396.862446][T21653] [ 396.998013][ T41] usb 12-1: Using ep0 maxpacket: 8 [ 396.998537][ T41] usb 12-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 396.999438][ T41] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.999451][ T41] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 396.999472][ T41] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 396.999490][ T41] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 396.999521][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.003773][ T41] hub 12-1:1.0: bad descriptor, ignoring hub [ 397.003787][ T41] hub 12-1:1.0: probe with driver hub failed with error -5 [ 397.004475][ T41] cdc_wdm 12-1:1.0: skipping garbage [ 397.004485][ T41] cdc_wdm 12-1:1.0: skipping garbage [ 397.005384][ T41] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 397.005395][ T41] cdc_wdm 12-1:1.0: Unknown control protocol [ 397.088525][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 397.115826][T21660] __nla_validate_parse: 21 callbacks suppressed [ 397.115843][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5125'. [ 397.115855][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5125'. [ 397.208125][T21630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.209341][T21630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.212257][T21630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.212483][T21630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.568657][ T5794] Bluetooth: hci0: command tx timeout [ 397.621595][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 397.621616][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 397.621822][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 397.621837][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 397.621888][ T41] usb 12-1: USB disconnect, device number 36 [ 397.622043][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 397.622057][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 397.622069][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 397.623042][T21668] cdc_wdm 12-1:1.0: Tx URB error: -19 [ 397.707754][T21680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5130'. [ 397.765070][T21687] dvmrp6: entered allmulticast mode [ 397.815906][T21693] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5134'. [ 398.694492][T21722] FAULT_INJECTION: forcing a failure. [ 398.694492][T21722] name failslab, interval 1, probability 0, space 0, times 0 [ 398.694522][T21722] CPU: 1 UID: 0 PID: 21722 Comm: syz.1.5144 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.694546][T21722] Tainted: [L]=SOFTLOCKUP [ 398.694553][T21722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.694564][T21722] Call Trace: [ 398.694583][T21722] [ 398.694591][T21722] dump_stack_lvl+0x100/0x190 [ 398.694676][T21722] should_fail_ex.cold+0x5/0xa [ 398.694715][T21722] should_failslab+0xc2/0x120 [ 398.694752][T21722] kmem_cache_alloc_noprof+0x92/0x6a0 [ 398.694780][T21722] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 398.694822][T21722] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 398.694852][T21722] ? kvm_msr_allowed+0x2d0/0x450 [ 398.694895][T21722] kvm_mmu_load+0xe3/0x25b0 [ 398.694921][T21722] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 398.694940][T21722] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 398.694962][T21722] ? __pfx_kvm_mmu_load+0x10/0x10 [ 398.694984][T21722] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 398.695006][T21722] ? kvm_check_and_inject_events+0x896/0x1050 [ 398.695034][T21722] vcpu_run+0x4009/0x60d0 [ 398.695069][T21722] ? __pfx_vcpu_run+0x10/0x10 [ 398.695096][T21722] ? lock_acquire+0x1d1/0x380 [ 398.695119][T21722] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 398.695146][T21722] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 398.695191][T21722] ? __local_bh_enable_ip+0xa5/0x120 [ 398.695225][T21722] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 398.695254][T21722] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 398.695286][T21722] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 398.695311][T21722] ? lock_acquire+0x1d1/0x380 [ 398.695334][T21722] ? do_raw_write_lock+0x11e/0x260 [ 398.695352][T21722] ? find_held_lock+0x2b/0x80 [ 398.695370][T21722] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 398.695395][T21722] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 398.695427][T21722] kvm_vcpu_ioctl+0x735/0x17b0 [ 398.695450][T21722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.695469][T21722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.695490][T21722] ? do_vfs_ioctl+0x226/0x13e0 [ 398.695510][T21722] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 398.695527][T21722] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 398.695579][T21722] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 398.695602][T21722] ? __fget_files+0x34/0x3d0 [ 398.695624][T21722] ? selinux_file_ioctl+0x1e0/0x290 [ 398.695643][T21722] ? selinux_file_ioctl+0x1e7/0x290 [ 398.695663][T21722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.695683][T21722] __x64_sys_ioctl+0x18e/0x210 [ 398.695704][T21722] do_syscall_64+0x123/0x790 [ 398.695778][T21722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.695791][T21722] RIP: 0033:0x7ffaae39f559 [ 398.695802][T21722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.695814][T21722] RSP: 002b:00007ffaaf314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.695826][T21722] RAX: ffffffffffffffda RBX: 00007ffaae625fa0 RCX: 00007ffaae39f559 [ 398.695834][T21722] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 398.695841][T21722] RBP: 00007ffaaf314090 R08: 0000000000000000 R09: 0000000000000000 [ 398.695848][T21722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.695855][T21722] R13: 00007ffaae626038 R14: 00007ffaae625fa0 R15: 00007fff4088ce18 [ 398.695871][T21722] [ 398.775341][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5145'. [ 398.775361][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5145'. [ 399.037986][ T3415] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 399.062786][T21739] FAULT_INJECTION: forcing a failure. [ 399.062786][T21739] name failslab, interval 1, probability 0, space 0, times 0 [ 399.062818][T21739] CPU: 1 UID: 0 PID: 21739 Comm: syz.7.5150 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.062846][T21739] Tainted: [L]=SOFTLOCKUP [ 399.062854][T21739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.062867][T21739] Call Trace: [ 399.062884][T21739] [ 399.062892][T21739] dump_stack_lvl+0x100/0x190 [ 399.062960][T21739] should_fail_ex.cold+0x5/0xa [ 399.063011][T21739] should_failslab+0xc2/0x120 [ 399.063043][T21739] kmem_cache_alloc_noprof+0x92/0x6a0 [ 399.063073][T21739] ? security_file_alloc+0x34/0x2c0 [ 399.063130][T21739] security_file_alloc+0x34/0x2c0 [ 399.063160][T21739] init_file+0x95/0x480 [ 399.063183][T21739] alloc_empty_file_noaccount+0x45/0xd0 [ 399.063210][T21739] alloc_file_pseudo_noaccount+0x17e/0x290 [ 399.063238][T21739] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 399.063267][T21739] ? iput+0x35/0x40 [ 399.063296][T21739] bdev_file_open_by_dev+0x13a/0x210 [ 399.063336][T21739] setup_bdev_super+0x78/0x770 [ 399.063366][T21739] get_tree_bdev_flags+0x363/0x620 [ 399.063395][T21739] ? __pfx_ufs_fill_super+0x10/0x10 [ 399.063434][T21739] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 399.063465][T21739] ? cap_capable+0x107/0x430 [ 399.063491][T21739] ? bpf_lsm_capable+0x9/0x10 [ 399.063507][T21739] ? security_capable+0x80/0x260 [ 399.063533][T21739] vfs_get_tree+0x92/0x320 [ 399.063559][T21739] path_mount+0x7d0/0x2850 [ 399.063594][T21739] ? __pfx_path_mount+0x10/0x10 [ 399.063617][T21739] ? lockdep_hardirqs_on+0x7d/0x110 [ 399.063697][T21739] ? putname+0xb1/0x110 [ 399.063719][T21739] ? kmem_cache_free+0x127/0x6c0 [ 399.063752][T21739] ? __x64_sys_mount+0x293/0x310 [ 399.063778][T21739] __x64_sys_mount+0x293/0x310 [ 399.063805][T21739] ? __pfx___x64_sys_mount+0x10/0x10 [ 399.063839][T21739] do_syscall_64+0x123/0x790 [ 399.063872][T21739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.063891][T21739] RIP: 0033:0x7f9b75d9f559 [ 399.063905][T21739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.063921][T21739] RSP: 002b:00007f9b76c42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 399.063938][T21739] RAX: ffffffffffffffda RBX: 00007f9b76025fa0 RCX: 00007f9b75d9f559 [ 399.063950][T21739] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000280 [ 399.063961][T21739] RBP: 00007f9b75e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 399.063971][T21739] R10: 0000000000204009 R11: 0000000000000246 R12: 0000000000000000 [ 399.063982][T21739] R13: 00007f9b76026038 R14: 00007f9b76025fa0 R15: 00007fffc492f388 [ 399.064007][T21739] [ 399.064209][T21739] /dev/sr0: Can't open blockdev [ 399.218242][ T3415] usb 6-1: Using ep0 maxpacket: 8 [ 399.218900][ T3415] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 399.219871][ T3415] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.219892][ T3415] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 399.219927][ T3415] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 399.219950][ T3415] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 399.219983][ T3415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.228825][ T3415] hub 6-1:1.0: bad descriptor, ignoring hub [ 399.228849][ T3415] hub 6-1:1.0: probe with driver hub failed with error -5 [ 399.229383][ T3415] cdc_wdm 6-1:1.0: skipping garbage [ 399.229400][ T3415] cdc_wdm 6-1:1.0: skipping garbage [ 399.240140][ T3415] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 399.240157][ T3415] cdc_wdm 6-1:1.0: Unknown control protocol [ 399.435239][T21727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.441649][T21727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.443131][T21727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.446052][T21727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.491198][T21757] team0: Device gtp0 is of different type [ 399.541226][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5157'. [ 399.545411][T21761] ifb0: entered allmulticast mode [ 399.864520][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 399.864573][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 399.864799][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 399.864827][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 399.865033][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 399.865052][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 399.869345][ T41] usb 6-1: USB disconnect, device number 42 [ 399.869554][T13581] usb 6-1: Failed to suspend device, error -19 [ 399.984408][T21792] ip_tables: iptables: counters copy to user failed while replacing table [ 400.016687][T21791] FAULT_INJECTION: forcing a failure. [ 400.016687][T21791] name failslab, interval 1, probability 0, space 0, times 0 [ 400.016717][T21791] CPU: 3 UID: 0 PID: 21791 Comm: syz.8.5165 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.016740][T21791] Tainted: [L]=SOFTLOCKUP [ 400.016745][T21791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.016753][T21791] Call Trace: [ 400.016766][T21791] [ 400.016772][T21791] dump_stack_lvl+0x100/0x190 [ 400.016828][T21791] should_fail_ex.cold+0x5/0xa [ 400.016854][T21791] should_failslab+0xc2/0x120 [ 400.016886][T21791] kmem_cache_alloc_noprof+0x92/0x6a0 [ 400.016914][T21791] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.016955][T21791] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.016986][T21791] ? kvm_msr_allowed+0x2d0/0x450 [ 400.017026][T21791] kvm_mmu_load+0xe3/0x25b0 [ 400.017043][T21791] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 400.017055][T21791] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 400.017069][T21791] ? __pfx_kvm_mmu_load+0x10/0x10 [ 400.017084][T21791] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 400.017100][T21791] ? kvm_check_and_inject_events+0x896/0x1050 [ 400.017118][T21791] vcpu_run+0x4009/0x60d0 [ 400.017141][T21791] ? __pfx_vcpu_run+0x10/0x10 [ 400.017159][T21791] ? lock_acquire+0x1d1/0x380 [ 400.017175][T21791] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 400.017193][T21791] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 400.017215][T21791] ? __local_bh_enable_ip+0xa5/0x120 [ 400.017239][T21791] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 400.017255][T21791] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 400.017275][T21791] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 400.017292][T21791] ? lock_acquire+0x1d1/0x380 [ 400.017308][T21791] ? do_raw_write_lock+0x11e/0x260 [ 400.017319][T21791] ? find_held_lock+0x2b/0x80 [ 400.017331][T21791] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 400.017348][T21791] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 400.017368][T21791] kvm_vcpu_ioctl+0x735/0x17b0 [ 400.017387][T21791] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.017406][T21791] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.017426][T21791] ? do_vfs_ioctl+0x226/0x13e0 [ 400.017445][T21791] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 400.017462][T21791] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 400.017523][T21791] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 400.017546][T21791] ? __fget_files+0x34/0x3d0 [ 400.017566][T21791] ? selinux_file_ioctl+0x1e0/0x290 [ 400.017584][T21791] ? selinux_file_ioctl+0x1e7/0x290 [ 400.017602][T21791] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.017621][T21791] __x64_sys_ioctl+0x18e/0x210 [ 400.017640][T21791] do_syscall_64+0x123/0x790 [ 400.017701][T21791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.017714][T21791] RIP: 0033:0x7f74d1f9f559 [ 400.017724][T21791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.017736][T21791] RSP: 002b:00007f74d2e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.017748][T21791] RAX: ffffffffffffffda RBX: 00007f74d2225fa0 RCX: 00007f74d1f9f559 [ 400.017757][T21791] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 400.017764][T21791] RBP: 00007f74d2e76090 R08: 0000000000000000 R09: 0000000000000000 [ 400.017771][T21791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.017778][T21791] R13: 00007f74d2226038 R14: 00007f74d2225fa0 R15: 00007ffc87855498 [ 400.017805][T21791] [ 400.088816][T21795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5167'. [ 400.088837][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5167'. [ 400.191839][T21800] vhci_hcd: pdev 268435455 [ 400.334532][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 400.334562][ T43] audit: type=1800 audit(524687.714:3301): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=374318 res=0 errno=-22 [ 400.336562][ T43] audit: type=1800 audit(524687.714:3302): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=374329 res=0 errno=-22 [ 400.353428][T13581] Bluetooth: hci2: Frame reassembly failed (-84) [ 400.604708][ T43] audit: type=1326 audit(524687.984:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21819 comm="syz.1.5176" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaae39f559 code=0x0 [ 401.067228][ T43] audit: type=1800 audit(524688.444:3304): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=374348 res=0 errno=-22 [ 401.069756][ T43] audit: type=1800 audit(524688.454:3305): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=374352 res=0 errno=-22 [ 401.449515][ T43] audit: type=1800 audit(524688.834:3306): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5182" name="mode" dev="sysfs" ino=6546 res=0 errno=-22 [ 401.709248][ T5960] usb 12-1: new high-speed USB device number 37 using dummy_hcd [ 401.728261][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5187'. [ 401.837708][T21861] FAULT_INJECTION: forcing a failure. [ 401.837708][T21861] name failslab, interval 1, probability 0, space 0, times 0 [ 401.837738][T21861] CPU: 1 UID: 0 PID: 21861 Comm: syz.1.5190 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.837763][T21861] Tainted: [L]=SOFTLOCKUP [ 401.837770][T21861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.837782][T21861] Call Trace: [ 401.837800][T21861] [ 401.837808][T21861] dump_stack_lvl+0x100/0x190 [ 401.837903][T21861] should_fail_ex.cold+0x5/0xa [ 401.837952][T21861] should_failslab+0xc2/0x120 [ 401.837988][T21861] kmem_cache_alloc_noprof+0x92/0x6a0 [ 401.838018][T21861] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 401.838064][T21861] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 401.838106][T21861] ? kvm_msr_allowed+0x2d0/0x450 [ 401.838155][T21861] kvm_mmu_load+0xe3/0x25b0 [ 401.838184][T21861] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 401.838205][T21861] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 401.838228][T21861] ? __pfx_kvm_mmu_load+0x10/0x10 [ 401.838253][T21861] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 401.838275][T21861] ? kvm_check_and_inject_events+0x896/0x1050 [ 401.838302][T21861] vcpu_run+0x4009/0x60d0 [ 401.838338][T21861] ? __pfx_vcpu_run+0x10/0x10 [ 401.838385][T21861] ? lock_acquire+0x1d1/0x380 [ 401.838411][T21861] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 401.838442][T21861] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 401.838472][T21861] ? __local_bh_enable_ip+0xa5/0x120 [ 401.838512][T21861] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 401.838538][T21861] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 401.838570][T21861] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 401.838596][T21861] ? lock_acquire+0x1d1/0x380 [ 401.838622][T21861] ? do_raw_write_lock+0x11e/0x260 [ 401.838638][T21861] ? find_held_lock+0x2b/0x80 [ 401.838657][T21861] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 401.838684][T21861] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 401.838716][T21861] kvm_vcpu_ioctl+0x735/0x17b0 [ 401.838746][T21861] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 401.838773][T21861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.838803][T21861] ? do_vfs_ioctl+0x226/0x13e0 [ 401.838830][T21861] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 401.838854][T21861] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 401.838914][T21861] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 401.838947][T21861] ? __fget_files+0x34/0x3d0 [ 401.838979][T21861] ? selinux_file_ioctl+0x1e0/0x290 [ 401.839005][T21861] ? selinux_file_ioctl+0x1e7/0x290 [ 401.839033][T21861] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 401.839060][T21861] __x64_sys_ioctl+0x18e/0x210 [ 401.839088][T21861] do_syscall_64+0x123/0x790 [ 401.839181][T21861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.839201][T21861] RIP: 0033:0x7ffaae39f559 [ 401.839218][T21861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.839235][T21861] RSP: 002b:00007ffaaf314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.839254][T21861] RAX: ffffffffffffffda RBX: 00007ffaae625fa0 RCX: 00007ffaae39f559 [ 401.839266][T21861] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 401.839277][T21861] RBP: 00007ffaaf314090 R08: 0000000000000000 R09: 0000000000000000 [ 401.839289][T21861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.839299][T21861] R13: 00007ffaae626038 R14: 00007ffaae625fa0 R15: 00007fff4088ce18 [ 401.839328][T21861] [ 401.845434][ T43] audit: type=1400 audit(524689.224:3307): avc: denied { name_bind } for pid=21862 comm="syz.5.5192" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 401.858830][ T5960] usb 12-1: Using ep0 maxpacket: 8 [ 401.859559][ T5960] usb 12-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 401.860619][ T5960] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.860639][ T5960] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 401.860676][ T5960] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 401.860701][ T5960] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 401.860736][ T5960] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.865696][ T43] audit: type=1800 audit(524689.244:3308): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=374510 res=0 errno=-22 [ 401.867696][ T5960] hub 12-1:1.0: bad descriptor, ignoring hub [ 401.867715][ T5960] hub 12-1:1.0: probe with driver hub failed with error -5 [ 401.874083][ T5960] cdc_wdm 12-1:1.0: skipping garbage [ 401.874099][ T5960] cdc_wdm 12-1:1.0: skipping garbage [ 401.874368][ T43] audit: type=1800 audit(524689.254:3309): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=374539 res=0 errno=-22 [ 401.874413][ T43] audit: type=1800 audit(524689.254:3310): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=374517 res=0 errno=-22 [ 401.877027][ T5960] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 401.877043][ T5960] cdc_wdm 12-1:1.0: Unknown control protocol [ 402.080352][T21840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.080651][T21840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.082350][T21840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.082619][T21840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.126498][T21879] syz_tun: entered allmulticast mode [ 402.181118][T21883] device-mapper: ioctl: Invalid geometry supplied. [ 402.181408][T21883] netlink: 'syz.5.5199': attribute type 10 has an invalid length. [ 402.368110][ T5794] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 402.489590][ C1] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 402.489616][ C1] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 402.489847][ C1] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 402.489862][ C1] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 402.490040][ T3415] usb 12-1: USB disconnect, device number 37 [ 402.793917][T21895] __nla_validate_parse: 1 callbacks suppressed [ 402.793932][T21895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5205'. [ 402.793942][T21895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5205'. [ 402.893218][T21898] tmpfs: Bad value for 'mpol' [ 403.018260][T21902] Bluetooth: MGMT ver 1.23 [ 403.119663][T21906] FAULT_INJECTION: forcing a failure. [ 403.119663][T21906] name failslab, interval 1, probability 0, space 0, times 0 [ 403.119692][T21906] CPU: 1 UID: 0 PID: 21906 Comm: syz.5.5210 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.119711][T21906] Tainted: [L]=SOFTLOCKUP [ 403.119716][T21906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.119723][T21906] Call Trace: [ 403.119728][T21906] [ 403.119735][T21906] dump_stack_lvl+0x100/0x190 [ 403.119758][T21906] should_fail_ex.cold+0x5/0xa [ 403.119777][T21906] should_failslab+0xc2/0x120 [ 403.119790][T21906] kmem_cache_alloc_noprof+0x92/0x6a0 [ 403.119808][T21906] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 403.119831][T21906] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 403.119851][T21906] ? kvm_msr_allowed+0x2d0/0x450 [ 403.119870][T21906] kvm_mmu_load+0xe3/0x25b0 [ 403.119886][T21906] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 403.119898][T21906] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 403.119912][T21906] ? __pfx_kvm_mmu_load+0x10/0x10 [ 403.119927][T21906] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 403.119942][T21906] ? kvm_check_and_inject_events+0x896/0x1050 [ 403.119960][T21906] vcpu_run+0x4009/0x60d0 [ 403.119983][T21906] ? __pfx_vcpu_run+0x10/0x10 [ 403.120000][T21906] ? lock_acquire+0x1d1/0x380 [ 403.120016][T21906] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 403.120034][T21906] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 403.120046][T21906] ? __local_bh_enable_ip+0xa5/0x120 [ 403.120062][T21906] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 403.120079][T21906] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 403.120099][T21906] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 403.120116][T21906] ? lock_acquire+0x1d1/0x380 [ 403.120136][T21906] ? do_raw_write_lock+0x11e/0x260 [ 403.120152][T21906] ? find_held_lock+0x2b/0x80 [ 403.120170][T21906] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 403.120195][T21906] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 403.120226][T21906] kvm_vcpu_ioctl+0x735/0x17b0 [ 403.120261][T21906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 403.120289][T21906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.120319][T21906] ? do_vfs_ioctl+0x226/0x13e0 [ 403.120347][T21906] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 403.120372][T21906] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 403.120404][T21906] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 403.120436][T21906] ? __fget_files+0x34/0x3d0 [ 403.120469][T21906] ? selinux_file_ioctl+0x1e0/0x290 [ 403.120495][T21906] ? selinux_file_ioctl+0x1e7/0x290 [ 403.120523][T21906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 403.120551][T21906] __x64_sys_ioctl+0x18e/0x210 [ 403.120580][T21906] do_syscall_64+0x123/0x790 [ 403.120612][T21906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.120631][T21906] RIP: 0033:0x7f50ff99f559 [ 403.120647][T21906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.120664][T21906] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.120682][T21906] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 403.120694][T21906] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 403.120705][T21906] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 403.120731][T21906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.120744][T21906] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 403.120770][T21906] [ 404.192526][T21878] syz_tun: left allmulticast mode [ 404.224486][T21917] device-mapper: table: 248:17: thin-pool: Error setting metadata or data device (-EINVAL) [ 404.224510][T21917] device-mapper: ioctl: error adding target to table [ 404.249146][T21917] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 404.254395][T21917] bond3: (slave lo): Enslaving as an active interface with an up link [ 404.260508][T21917] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 404.264046][T21917] device-mapper: table: 248:17: thin-pool: Error setting metadata or data device (-EINVAL) [ 404.264079][T21917] device-mapper: ioctl: error adding target to table [ 404.264343][T21917] bond3: option mode: unable to set because the bond device has slaves [ 404.265591][T21917] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 404.329978][T21930] nfs4: Bad value for 'source' [ 404.533826][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5224'. [ 404.533842][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5224'. [ 404.547915][ T6755] usb 12-1: new high-speed USB device number 38 using dummy_hcd [ 404.567102][T21923] netlink: 'syz.1.5217': attribute type 9 has an invalid length. [ 404.698105][ T6755] usb 12-1: Using ep0 maxpacket: 8 [ 404.702072][ T6755] usb 12-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 404.703248][ T6755] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.703261][ T6755] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 404.703283][ T6755] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 404.703298][ T6755] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 404.703319][ T6755] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.720299][T21956] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5228'. [ 404.733306][T21958] EXT4-fs (loop1): unable to read superblock [ 404.742387][ T6755] hub 12-1:1.0: bad descriptor, ignoring hub [ 404.742405][ T6755] hub 12-1:1.0: probe with driver hub failed with error -5 [ 404.742647][ T6755] cdc_wdm 12-1:1.0: skipping garbage [ 404.742656][ T6755] cdc_wdm 12-1:1.0: skipping garbage [ 404.746758][ T6755] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 404.746771][ T6755] cdc_wdm 12-1:1.0: Unknown control protocol [ 404.752622][T21958] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 404.897388][T21969] FAULT_INJECTION: forcing a failure. [ 404.897388][T21969] name failslab, interval 1, probability 0, space 0, times 0 [ 404.897420][T21969] CPU: 1 UID: 0 PID: 21969 Comm: syz.5.5233 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.897447][T21969] Tainted: [L]=SOFTLOCKUP [ 404.897454][T21969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.897467][T21969] Call Trace: [ 404.897474][T21969] [ 404.897504][T21969] dump_stack_lvl+0x100/0x190 [ 404.897543][T21969] should_fail_ex.cold+0x5/0xa [ 404.897575][T21969] should_failslab+0xc2/0x120 [ 404.897596][T21969] kmem_cache_alloc_noprof+0x92/0x6a0 [ 404.897626][T21969] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 404.897662][T21969] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 404.897694][T21969] ? kvm_msr_allowed+0x2d0/0x450 [ 404.897724][T21969] kvm_mmu_load+0xe3/0x25b0 [ 404.897751][T21969] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 404.897772][T21969] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 404.897795][T21969] ? __pfx_kvm_mmu_load+0x10/0x10 [ 404.897835][T21969] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 404.897859][T21969] ? kvm_check_and_inject_events+0x896/0x1050 [ 404.897888][T21969] vcpu_run+0x4009/0x60d0 [ 404.897927][T21969] ? __pfx_vcpu_run+0x10/0x10 [ 404.897956][T21969] ? lock_acquire+0x1d1/0x380 [ 404.897983][T21969] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 404.898013][T21969] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 404.898032][T21969] ? __local_bh_enable_ip+0xa5/0x120 [ 404.898059][T21969] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 404.898084][T21969] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 404.898119][T21969] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 404.898147][T21969] ? lock_acquire+0x1d1/0x380 [ 404.898175][T21969] ? do_raw_write_lock+0x11e/0x260 [ 404.898195][T21969] ? find_held_lock+0x2b/0x80 [ 404.898220][T21969] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 404.898250][T21969] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 404.898285][T21969] kvm_vcpu_ioctl+0x735/0x17b0 [ 404.898317][T21969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 404.898347][T21969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.898379][T21969] ? do_vfs_ioctl+0x226/0x13e0 [ 404.898408][T21969] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 404.898435][T21969] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 404.898469][T21969] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 404.898503][T21969] ? __fget_files+0x34/0x3d0 [ 404.898538][T21969] ? selinux_file_ioctl+0x1e0/0x290 [ 404.898567][T21969] ? selinux_file_ioctl+0x1e7/0x290 [ 404.898598][T21969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 404.898624][T21969] __x64_sys_ioctl+0x18e/0x210 [ 404.898654][T21969] do_syscall_64+0x123/0x790 [ 404.898687][T21969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.898706][T21969] RIP: 0033:0x7f50ff99f559 [ 404.898725][T21969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.898743][T21969] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.898763][T21969] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 404.898777][T21969] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 404.898788][T21969] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.898799][T21969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.898812][T21969] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 404.898839][T21969] [ 404.930851][T21932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.932296][T21932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.937048][T21932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.937375][T21932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.004886][ T41] input: syz1 as /devices/virtual/misc/uhid/0005:0B05:0200.0008/input/input42 [ 405.014727][ T41] hid-generic 0005:0B05:0200.0008: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz1] on syz0 [ 405.137087][T21975] fido_id[21975]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 405.270588][T21980] xt_IDLETIMER: timeout value is zero [ 405.341170][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 405.341184][ T43] audit: type=1800 audit(524692.724:3346): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=375687 res=0 errno=-22 [ 405.351906][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.353095][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 405.353117][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 405.353130][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.353346][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 405.353365][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 405.353381][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 405.353386][ T1649] usb 12-1: USB disconnect, device number 38 [ 405.361465][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.367912][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.371168][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.383885][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5240'. [ 405.383899][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5240'. [ 405.388817][ T43] audit: type=1800 audit(524692.764:3347): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=375706 res=0 errno=-22 [ 405.419209][ T43] audit: type=1800 audit(524692.804:3348): pid=18890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=375717 res=0 errno=-22 [ 405.444895][T21990] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.5241'. [ 405.545000][ T43] audit: type=1400 audit(524692.924:3349): avc: denied { read } for pid=22000 comm="syz.5.5244" name="trace_pipe_raw" dev="tracefs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 405.545327][ T43] audit: type=1400 audit(524692.924:3350): avc: denied { open } for pid=22000 comm="syz.5.5244" path="/382/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 405.545874][ T43] audit: type=1400 audit(524692.924:3351): avc: denied { ioctl } for pid=22000 comm="syz.5.5244" path="/382/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=533 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 405.653530][T21982] rxe_eth0 speed is unknown, defaulting to 1000 [ 405.800725][T22018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.806556][T22018] sctp: [Deprecated]: syz.8.5247 (pid 22018) Use of int in maxseg socket option. [ 405.806556][T22018] Use struct sctp_assoc_value instead [ 405.819954][ T43] audit: type=1326 audit(524693.204:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22011 comm="syz.8.5247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d1f9f559 code=0x7ffc0000 [ 405.820085][ T43] audit: type=1326 audit(524693.204:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22011 comm="syz.8.5247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d1f9f559 code=0x7ffc0000 [ 405.914054][T21982] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.914154][T21982] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.914221][T21982] bridge_slave_0: entered allmulticast mode [ 405.915263][T21982] bridge_slave_0: entered promiscuous mode [ 405.917285][T21982] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.917369][T21982] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.917435][T21982] bridge_slave_1: entered allmulticast mode [ 405.919198][T21982] bridge_slave_1: entered promiscuous mode [ 405.939326][T21982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.941561][T21982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.960495][T21982] team0: Port device team_slave_0 added [ 405.962285][T21982] team0: Port device team_slave_1 added [ 405.966260][T22031] FAULT_INJECTION: forcing a failure. [ 405.966260][T22031] name failslab, interval 1, probability 0, space 0, times 0 [ 405.966280][T22031] CPU: 2 UID: 0 PID: 22031 Comm: syz.5.5252 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.966297][T22031] Tainted: [L]=SOFTLOCKUP [ 405.966302][T22031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.966309][T22031] Call Trace: [ 405.966314][T22031] [ 405.966319][T22031] dump_stack_lvl+0x100/0x190 [ 405.966342][T22031] should_fail_ex.cold+0x5/0xa [ 405.966362][T22031] should_failslab+0xc2/0x120 [ 405.966376][T22031] kmem_cache_alloc_noprof+0x92/0x6a0 [ 405.966394][T22031] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 405.966417][T22031] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 405.966437][T22031] ? kvm_msr_allowed+0x2d0/0x450 [ 405.966455][T22031] kvm_mmu_load+0xe3/0x25b0 [ 405.966472][T22031] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 405.966484][T22031] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 405.966498][T22031] ? __pfx_kvm_mmu_load+0x10/0x10 [ 405.966513][T22031] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 405.966531][T22031] ? kvm_check_and_inject_events+0x896/0x1050 [ 405.966549][T22031] vcpu_run+0x4009/0x60d0 [ 405.966572][T22031] ? __pfx_vcpu_run+0x10/0x10 [ 405.966589][T22031] ? lock_acquire+0x1d1/0x380 [ 405.966605][T22031] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 405.966627][T22031] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 405.966644][T22031] ? __local_bh_enable_ip+0xa5/0x120 [ 405.966667][T22031] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 405.966691][T22031] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 405.966721][T22031] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 405.966745][T22031] ? lock_acquire+0x1d1/0x380 [ 405.966766][T22031] ? do_raw_write_lock+0x11e/0x260 [ 405.966778][T22031] ? find_held_lock+0x2b/0x80 [ 405.966790][T22031] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 405.966807][T22031] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 405.966828][T22031] kvm_vcpu_ioctl+0x735/0x17b0 [ 405.966847][T22031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.966866][T22031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.966886][T22031] ? do_vfs_ioctl+0x226/0x13e0 [ 405.966904][T22031] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 405.966922][T22031] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 405.966944][T22031] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 405.966965][T22031] ? __fget_files+0x34/0x3d0 [ 405.966986][T22031] ? selinux_file_ioctl+0x1e0/0x290 [ 405.967004][T22031] ? selinux_file_ioctl+0x1e7/0x290 [ 405.967028][T22031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.967047][T22031] __x64_sys_ioctl+0x18e/0x210 [ 405.967066][T22031] do_syscall_64+0x123/0x790 [ 405.967087][T22031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.967101][T22031] RIP: 0033:0x7f50ff99f559 [ 405.967112][T22031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.967124][T22031] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.967136][T22031] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 405.967144][T22031] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 405.967152][T22031] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.967159][T22031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.967166][T22031] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 405.967181][T22031] [ 405.979864][T21982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.979880][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.979950][T21982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.981269][T21982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.981281][T21982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.981304][T21982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.009175][T21982] hsr_slave_0: entered promiscuous mode [ 406.010019][T21982] hsr_slave_1: entered promiscuous mode [ 406.010593][T21982] debugfs: 'hsr0' already exists in 'hsr' [ 406.010613][T21982] Cannot create hsr debugfs directory [ 406.092251][ T43] audit: type=1800 audit(524693.474:3354): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27357 res=0 errno=-13 [ 406.151152][T22036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5254'. [ 406.159193][T21982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.181767][ T43] audit: type=1800 audit(524693.564:3355): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=384469 res=0 errno=-22 [ 406.262560][T21982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.303733][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5258'. [ 406.357277][T21982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.404150][T21982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.452971][T22053] random: crng reseeded on system resumption [ 406.474027][T22053] Restarting kernel threads ... [ 406.475039][T22053] Done restarting kernel threads. [ 406.579271][T21982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 406.587330][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.610990][T21982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 406.613084][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.613773][T21982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 406.616828][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.617394][T21982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.620479][T21982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.638012][ T5876] usb 12-1: new high-speed USB device number 39 using dummy_hcd [ 406.679417][T21982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.691878][T21982] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.696852][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.696942][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.702692][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.702773][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.788228][ T5876] usb 12-1: Using ep0 maxpacket: 8 [ 406.788704][ T5876] usb 12-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 406.791733][ T5876] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.791747][ T5876] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 406.791768][ T5876] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 406.791783][ T5876] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 406.791804][ T5876] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.794709][ T5876] hub 12-1:1.0: bad descriptor, ignoring hub [ 406.794722][ T5876] hub 12-1:1.0: probe with driver hub failed with error -5 [ 406.794950][ T5876] cdc_wdm 12-1:1.0: skipping garbage [ 406.794958][ T5876] cdc_wdm 12-1:1.0: skipping garbage [ 406.803441][ T5876] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 406.803452][ T5876] cdc_wdm 12-1:1.0: Unknown control protocol [ 406.998066][T22051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.998516][T22051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.000099][T22051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.000291][T22051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.015588][T21982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.051108][T21982] veth0_vlan: entered promiscuous mode [ 407.056895][T21982] veth1_vlan: entered promiscuous mode [ 407.084288][T21982] veth0_macvtap: entered promiscuous mode [ 407.088374][T21982] veth1_macvtap: entered promiscuous mode [ 407.101124][T21982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.106531][T21982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.157991][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.158030][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.158063][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.183175][ T9180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.183193][ T9180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.188585][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.216302][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.216322][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.363256][T22090] 9pnet_virtio: no channels available for device 127.0.0.1 [ 407.405854][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 407.405881][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 407.406105][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 407.406123][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 407.406260][ T6255] usb 12-1: USB disconnect, device number 39 [ 407.406360][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 407.406377][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 407.406392][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 407.418618][ T5794] Bluetooth: hci1: command tx timeout [ 407.527601][T22100] syz_tun: entered allmulticast mode [ 407.534552][T22100] dvmrp6: entered allmulticast mode [ 407.628733][ T6755] usb 10-1: new low-speed USB device number 33 using dummy_hcd [ 407.644977][T22103] FAULT_INJECTION: forcing a failure. [ 407.644977][T22103] name failslab, interval 1, probability 0, space 0, times 0 [ 407.645008][T22103] CPU: 0 UID: 0 PID: 22103 Comm: syz.8.5271 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.645035][T22103] Tainted: [L]=SOFTLOCKUP [ 407.645042][T22103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 407.645053][T22103] Call Trace: [ 407.645061][T22103] [ 407.645069][T22103] dump_stack_lvl+0x100/0x190 [ 407.645105][T22103] should_fail_ex.cold+0x5/0xa [ 407.645136][T22103] should_failslab+0xc2/0x120 [ 407.645158][T22103] kmem_cache_alloc_noprof+0x92/0x6a0 [ 407.645187][T22103] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 407.645222][T22103] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 407.645255][T22103] ? kvm_msr_allowed+0x2d0/0x450 [ 407.645285][T22103] kvm_mmu_load+0xe3/0x25b0 [ 407.645311][T22103] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 407.645331][T22103] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 407.645354][T22103] ? __pfx_kvm_mmu_load+0x10/0x10 [ 407.645378][T22103] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 407.645402][T22103] ? kvm_check_and_inject_events+0x896/0x1050 [ 407.645432][T22103] vcpu_run+0x4009/0x60d0 [ 407.645488][T22103] ? __pfx_vcpu_run+0x10/0x10 [ 407.645519][T22103] ? lock_acquire+0x1d1/0x380 [ 407.645544][T22103] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 407.645573][T22103] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 407.645592][T22103] ? __local_bh_enable_ip+0xa5/0x120 [ 407.645619][T22103] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 407.645646][T22103] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 407.645679][T22103] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 407.645710][T22103] ? lock_acquire+0x1d1/0x380 [ 407.645736][T22103] ? do_raw_write_lock+0x11e/0x260 [ 407.645756][T22103] ? find_held_lock+0x2b/0x80 [ 407.645775][T22103] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 407.645802][T22103] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 407.645835][T22103] kvm_vcpu_ioctl+0x735/0x17b0 [ 407.645867][T22103] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 407.645896][T22103] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 407.645928][T22103] ? do_vfs_ioctl+0x226/0x13e0 [ 407.645958][T22103] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 407.645985][T22103] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 407.646019][T22103] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 407.646053][T22103] ? __fget_files+0x34/0x3d0 [ 407.646100][T22103] ? selinux_file_ioctl+0x1e0/0x290 [ 407.646142][T22103] ? selinux_file_ioctl+0x1e7/0x290 [ 407.646173][T22103] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 407.646203][T22103] __x64_sys_ioctl+0x18e/0x210 [ 407.646235][T22103] do_syscall_64+0x123/0x790 [ 407.646268][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.646289][T22103] RIP: 0033:0x7f74d1f9f559 [ 407.646304][T22103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.646323][T22103] RSP: 002b:00007f74d2e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.646343][T22103] RAX: ffffffffffffffda RBX: 00007f74d2225fa0 RCX: 00007f74d1f9f559 [ 407.646356][T22103] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 407.646368][T22103] RBP: 00007f74d2e76090 R08: 0000000000000000 R09: 0000000000000000 [ 407.646380][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.646391][T22103] R13: 00007f74d2226038 R14: 00007f74d2225fa0 R15: 00007ffc87855498 [ 407.646417][T22103] [ 407.783375][ T6755] usb 10-1: unable to get BOS descriptor or descriptor too short [ 407.783404][ T6755] usb 10-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 407.784204][ T6755] usb 10-1: config index 0 descriptor too short (expected 1060, got 36) [ 407.784218][ T6755] usb 10-1: config 11 has too many interfaces: 251, using maximum allowed: 32 [ 407.784229][ T6755] usb 10-1: config 11 has an invalid descriptor of length 210, skipping remainder of the config [ 407.784240][ T6755] usb 10-1: config 11 has 0 interfaces, different from the descriptor's value: 251 [ 407.786615][ T6755] usb 10-1: string descriptor 0 read error: -22 [ 407.786681][ T6755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.996722][ T5933] usb 10-1: USB disconnect, device number 33 [ 408.142513][T22122] __nla_validate_parse: 1 callbacks suppressed [ 408.142528][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5277'. [ 408.142538][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5277'. [ 408.360113][T22099] syz_tun: left allmulticast mode [ 408.530698][T22191] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x3 [ 408.635959][T22195] FAULT_INJECTION: forcing a failure. [ 408.635959][T22195] name failslab, interval 1, probability 0, space 0, times 0 [ 408.635991][T22195] CPU: 1 UID: 0 PID: 22195 Comm: syz.8.5289 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.636018][T22195] Tainted: [L]=SOFTLOCKUP [ 408.636026][T22195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.636039][T22195] Call Trace: [ 408.636047][T22195] [ 408.636055][T22195] dump_stack_lvl+0x100/0x190 [ 408.636086][T22195] should_fail_ex.cold+0x5/0xa [ 408.636117][T22195] should_failslab+0xc2/0x120 [ 408.636140][T22195] kmem_cache_alloc_noprof+0x92/0x6a0 [ 408.636172][T22195] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 408.636209][T22195] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 408.636244][T22195] ? kvm_msr_allowed+0x2d0/0x450 [ 408.636271][T22195] kvm_mmu_load+0xe3/0x25b0 [ 408.636297][T22195] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 408.636320][T22195] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 408.636344][T22195] ? __pfx_kvm_mmu_load+0x10/0x10 [ 408.636371][T22195] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 408.636396][T22195] ? kvm_check_and_inject_events+0x896/0x1050 [ 408.636427][T22195] vcpu_run+0x4009/0x60d0 [ 408.636465][T22195] ? __pfx_vcpu_run+0x10/0x10 [ 408.636494][T22195] ? lock_acquire+0x1d1/0x380 [ 408.636525][T22195] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 408.636555][T22195] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 408.636576][T22195] ? __local_bh_enable_ip+0xa5/0x120 [ 408.636606][T22195] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 408.636631][T22195] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 408.636660][T22195] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 408.636686][T22195] ? lock_acquire+0x1d1/0x380 [ 408.636713][T22195] ? do_raw_write_lock+0x11e/0x260 [ 408.636731][T22195] ? find_held_lock+0x2b/0x80 [ 408.636752][T22195] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 408.636781][T22195] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 408.636814][T22195] kvm_vcpu_ioctl+0x735/0x17b0 [ 408.636848][T22195] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 408.636880][T22195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.636914][T22195] ? do_vfs_ioctl+0x226/0x13e0 [ 408.636944][T22195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 408.636972][T22195] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 408.637022][T22195] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 408.637059][T22195] ? __fget_files+0x34/0x3d0 [ 408.637096][T22195] ? selinux_file_ioctl+0x1e0/0x290 [ 408.637128][T22195] ? selinux_file_ioctl+0x1e7/0x290 [ 408.637159][T22195] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 408.637189][T22195] __x64_sys_ioctl+0x18e/0x210 [ 408.637220][T22195] do_syscall_64+0x123/0x790 [ 408.637253][T22195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.637273][T22195] RIP: 0033:0x7f74d1f9f559 [ 408.637291][T22195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.637311][T22195] RSP: 002b:00007f74d2e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.637330][T22195] RAX: ffffffffffffffda RBX: 00007f74d2225fa0 RCX: 00007f74d1f9f559 [ 408.637343][T22195] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 408.637356][T22195] RBP: 00007f74d2e76090 R08: 0000000000000000 R09: 0000000000000000 [ 408.637368][T22195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.637379][T22195] R13: 00007f74d2226038 R14: 00007f74d2225fa0 R15: 00007ffc87855498 [ 408.637407][T22195] [ 408.728161][ T63] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 408.747441][T22212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22212 comm=syz.5.5292 [ 408.887900][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 408.888533][ T63] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 408.889746][ T63] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.889760][ T63] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 408.889783][ T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 408.889799][ T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 408.889821][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.895565][ T63] hub 6-1:1.0: bad descriptor, ignoring hub [ 408.895579][ T63] hub 6-1:1.0: probe with driver hub failed with error -5 [ 408.896650][ T63] cdc_wdm 6-1:1.0: skipping garbage [ 408.896660][ T63] cdc_wdm 6-1:1.0: skipping garbage [ 408.901083][ T63] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 408.901095][ T63] cdc_wdm 6-1:1.0: Unknown control protocol [ 408.906768][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5296'. [ 408.906788][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5296'. [ 408.980173][T22124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.982729][T22238] vivid-000: disconnect [ 408.984163][T22238] netlink: 'syz.5.5298': attribute type 1 has an invalid length. [ 409.000609][T22238] bond3: entered promiscuous mode [ 409.000643][T22238] bond3: entered allmulticast mode [ 409.000936][T22238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 409.011137][T22238] erspan1: entered allmulticast mode [ 409.015381][T22238] bond3: (slave erspan1): making interface the new active one [ 409.015396][T22238] erspan1: entered promiscuous mode [ 409.020301][T22238] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 409.022839][T22237] vivid-000: reconnect [ 409.099609][T22184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.099930][T22184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.102191][T22184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.102599][T22184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.250501][T22249] loop5: detected capacity change from 0 to 7 [ 409.252405][T22249] Dev loop5: unable to read RDB block 7 [ 409.252422][T22249] loop5: AHDI p1 [ 409.252434][T22249] loop5: partition table partially beyond EOD, truncated [ 409.292053][T13581] IPVS: starting estimator thread 0... [ 409.378289][T22260] IPVS: using max 43 ests per chain, 103200 per kthread [ 409.488247][ T5794] Bluetooth: hci1: command tx timeout [ 409.515738][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 409.515757][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 409.515950][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 409.515961][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 409.515969][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 409.515969][ T6755] usb 6-1: USB disconnect, device number 43 [ 409.518554][T22246] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 409.611279][T22276] FAULT_INJECTION: forcing a failure. [ 409.611279][T22276] name failslab, interval 1, probability 0, space 0, times 0 [ 409.611311][T22276] CPU: 0 UID: 0 PID: 22276 Comm: syz.8.5311 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.611336][T22276] Tainted: [L]=SOFTLOCKUP [ 409.611342][T22276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.611352][T22276] Call Trace: [ 409.611359][T22276] [ 409.611366][T22276] dump_stack_lvl+0x100/0x190 [ 409.611398][T22276] should_fail_ex.cold+0x5/0xa [ 409.611427][T22276] should_failslab+0xc2/0x120 [ 409.611451][T22276] kmem_cache_alloc_noprof+0x92/0x6a0 [ 409.611481][T22276] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 409.611514][T22276] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 409.611543][T22276] ? kvm_msr_allowed+0x2d0/0x450 [ 409.611569][T22276] kvm_mmu_load+0xe3/0x25b0 [ 409.611598][T22276] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 409.611621][T22276] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 409.611642][T22276] ? __pfx_kvm_mmu_load+0x10/0x10 [ 409.611664][T22276] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 409.611686][T22276] ? kvm_check_and_inject_events+0x896/0x1050 [ 409.611713][T22276] vcpu_run+0x4009/0x60d0 [ 409.611751][T22276] ? __pfx_vcpu_run+0x10/0x10 [ 409.611780][T22276] ? lock_acquire+0x1d1/0x380 [ 409.611802][T22276] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 409.611829][T22276] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 409.611849][T22276] ? __local_bh_enable_ip+0xa5/0x120 [ 409.611875][T22276] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 409.611905][T22276] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 409.611940][T22276] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 409.611966][T22276] ? lock_acquire+0x1d1/0x380 [ 409.611991][T22276] ? do_raw_write_lock+0x11e/0x260 [ 409.612008][T22276] ? find_held_lock+0x2b/0x80 [ 409.612028][T22276] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 409.612055][T22276] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 409.612091][T22276] kvm_vcpu_ioctl+0x735/0x17b0 [ 409.612122][T22276] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 409.612156][T22276] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 409.612186][T22276] ? do_vfs_ioctl+0x226/0x13e0 [ 409.612218][T22276] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 409.612244][T22276] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 409.612278][T22276] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 409.612311][T22276] ? __fget_files+0x34/0x3d0 [ 409.612345][T22276] ? selinux_file_ioctl+0x1e0/0x290 [ 409.612376][T22276] ? selinux_file_ioctl+0x1e7/0x290 [ 409.612407][T22276] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 409.612436][T22276] __x64_sys_ioctl+0x18e/0x210 [ 409.612468][T22276] do_syscall_64+0x123/0x790 [ 409.612498][T22276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.612518][T22276] RIP: 0033:0x7f74d1f9f559 [ 409.612554][T22276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.612574][T22276] RSP: 002b:00007f74d2e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.612596][T22276] RAX: ffffffffffffffda RBX: 00007f74d2225fa0 RCX: 00007f74d1f9f559 [ 409.612611][T22276] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 409.612622][T22276] RBP: 00007f74d2e76090 R08: 0000000000000000 R09: 0000000000000000 [ 409.612634][T22276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.612645][T22276] R13: 00007f74d2226038 R14: 00007f74d2225fa0 R15: 00007ffc87855498 [ 409.612673][T22276] [ 409.749345][T22285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.763862][T22285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.799183][T22287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5316'. [ 409.799209][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5316'. [ 409.876328][T22291] netlink: 'syz.8.5318': attribute type 1 has an invalid length. [ 409.886102][T22291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.904220][T22291] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 410.083400][ C1] sd 6:0:0:0: [sdb] tag#25 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 410.083463][ C1] sd 6:0:0:0: [sdb] tag#25 CDB: ATA command pass through(16) [ 410.083486][ C1] sd 6:0:0:0: [sdb] tag#25 CDB[00]: 85 ac 00 07 00 0c 00 00 00 00 00 00 00 00 00 00 [ 410.083507][ C1] sd 6:0:0:0: [sdb] tag#25 CDB[10]: 00 [ 410.201837][T22321] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5331'. [ 410.202584][T22321] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5331'. [ 410.203126][T22321] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5331'. [ 410.203795][T22321] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5331'. [ 410.311176][T22329] FAULT_INJECTION: forcing a failure. [ 410.311176][T22329] name failslab, interval 1, probability 0, space 0, times 0 [ 410.311207][T22329] CPU: 1 UID: 0 PID: 22329 Comm: syz.1.5333 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.311235][T22329] Tainted: [L]=SOFTLOCKUP [ 410.311241][T22329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.311255][T22329] Call Trace: [ 410.311275][T22329] [ 410.311284][T22329] dump_stack_lvl+0x100/0x190 [ 410.311368][T22329] should_fail_ex.cold+0x5/0xa [ 410.311410][T22329] should_failslab+0xc2/0x120 [ 410.311446][T22329] kmem_cache_alloc_noprof+0x92/0x6a0 [ 410.311474][T22329] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 410.311521][T22329] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 410.311553][T22329] ? kvm_msr_allowed+0x2d0/0x450 [ 410.311603][T22329] kvm_mmu_load+0xe3/0x25b0 [ 410.311630][T22329] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 410.311655][T22329] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 410.311679][T22329] ? __pfx_kvm_mmu_load+0x10/0x10 [ 410.311703][T22329] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 410.311729][T22329] ? kvm_check_and_inject_events+0x896/0x1050 [ 410.311761][T22329] vcpu_run+0x4009/0x60d0 [ 410.311800][T22329] ? __pfx_vcpu_run+0x10/0x10 [ 410.311829][T22329] ? lock_acquire+0x1d1/0x380 [ 410.311855][T22329] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 410.311886][T22329] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 410.311915][T22329] ? __local_bh_enable_ip+0xa5/0x120 [ 410.311954][T22329] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 410.311981][T22329] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 410.312014][T22329] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 410.312041][T22329] ? lock_acquire+0x1d1/0x380 [ 410.312066][T22329] ? do_raw_write_lock+0x11e/0x260 [ 410.312085][T22329] ? find_held_lock+0x2b/0x80 [ 410.312107][T22329] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 410.312135][T22329] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 410.312168][T22329] kvm_vcpu_ioctl+0x735/0x17b0 [ 410.312199][T22329] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.312229][T22329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 410.312261][T22329] ? do_vfs_ioctl+0x226/0x13e0 [ 410.312292][T22329] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 410.312319][T22329] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 410.312383][T22329] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 410.312433][T22329] ? __fget_files+0x34/0x3d0 [ 410.312468][T22329] ? selinux_file_ioctl+0x1e0/0x290 [ 410.312497][T22329] ? selinux_file_ioctl+0x1e7/0x290 [ 410.312527][T22329] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.312557][T22329] __x64_sys_ioctl+0x18e/0x210 [ 410.312589][T22329] do_syscall_64+0x123/0x790 [ 410.312680][T22329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.312700][T22329] RIP: 0033:0x7f2ee9d9f559 [ 410.312718][T22329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.312735][T22329] RSP: 002b:00007f2eeabbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.312755][T22329] RAX: ffffffffffffffda RBX: 00007f2eea025fa0 RCX: 00007f2ee9d9f559 [ 410.312768][T22329] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 410.312780][T22329] RBP: 00007f2eeabbc090 R08: 0000000000000000 R09: 0000000000000000 [ 410.312791][T22329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.312803][T22329] R13: 00007f2eea026038 R14: 00007f2eea025fa0 R15: 00007ffd01f7a1f8 [ 410.312830][T22329] [ 410.405313][T22337] openvswitch: netlink: ct_state flags 05000001 unsupported [ 410.455651][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 410.455671][ T43] audit: type=1400 audit(524697.834:3397): avc: denied { write } for pid=22335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.517058][ T43] audit: type=1400 audit(524697.894:3398): avc: denied { mounton } for pid=22344 comm="syz.8.5338" path="/161/config" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.518377][ T43] audit: type=1400 audit(524697.904:3399): avc: denied { search } for pid=22344 comm="syz.8.5338" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.519659][ T43] audit: type=1400 audit(524697.904:3400): avc: denied { search } for pid=22344 comm="syz.8.5338" name="nullb" dev="configfs" ino=2747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.523891][ T43] audit: type=1400 audit(524697.904:3401): avc: denied { search } for pid=22344 comm="syz.8.5338" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.523936][ T43] audit: type=1400 audit(524697.904:3402): avc: denied { search } for pid=22344 comm="syz.8.5338" name="nullb" dev="configfs" ino=2747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.523975][ T43] audit: type=1400 audit(524697.904:3403): avc: denied { search } for pid=22344 comm="syz.8.5338" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.524014][ T43] audit: type=1400 audit(524697.904:3404): avc: denied { search } for pid=22344 comm="syz.8.5338" name="nullb" dev="configfs" ino=2747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.524049][ T43] audit: type=1400 audit(524697.904:3405): avc: denied { search } for pid=22344 comm="syz.8.5338" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.524082][ T43] audit: type=1400 audit(524697.904:3406): avc: denied { search } for pid=22344 comm="syz.8.5338" name="nullb" dev="configfs" ino=2747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.838303][ T41] usb 12-1: new high-speed USB device number 40 using dummy_hcd [ 410.964897][T22383] netlink: 'syz.1.5349': attribute type 5 has an invalid length. [ 410.998358][ T41] usb 12-1: Using ep0 maxpacket: 8 [ 410.999370][ T41] usb 12-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 411.002649][ T41] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.002672][ T41] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 411.002710][ T41] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 411.002734][ T41] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 411.002770][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.011538][ T41] hub 12-1:1.0: bad descriptor, ignoring hub [ 411.011564][ T41] hub 12-1:1.0: probe with driver hub failed with error -5 [ 411.019581][ T41] cdc_wdm 12-1:1.0: skipping garbage [ 411.019600][ T41] cdc_wdm 12-1:1.0: skipping garbage [ 411.020923][ T41] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 411.020940][ T41] cdc_wdm 12-1:1.0: Unknown control protocol [ 411.086687][ T5794] Bluetooth: min 0 < 6 [ 411.221020][T22358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.221408][T22358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.222200][T22358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.222458][T22358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.431616][T22400] FAULT_INJECTION: forcing a failure. [ 411.431616][T22400] name failslab, interval 1, probability 0, space 0, times 0 [ 411.431648][T22400] CPU: 0 UID: 0 PID: 22400 Comm: syz.1.5356 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.431675][T22400] Tainted: [L]=SOFTLOCKUP [ 411.431684][T22400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.431697][T22400] Call Trace: [ 411.431716][T22400] [ 411.431728][T22400] dump_stack_lvl+0x100/0x190 [ 411.431808][T22400] should_fail_ex.cold+0x5/0xa [ 411.431869][T22400] should_failslab+0xc2/0x120 [ 411.431901][T22400] kmem_cache_alloc_noprof+0x92/0x6a0 [ 411.431932][T22400] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 411.431978][T22400] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 411.432011][T22400] ? kvm_msr_allowed+0x2d0/0x450 [ 411.432058][T22400] kvm_mmu_load+0xe3/0x25b0 [ 411.432085][T22400] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 411.432106][T22400] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 411.432129][T22400] ? __pfx_kvm_mmu_load+0x10/0x10 [ 411.432154][T22400] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 411.432178][T22400] ? kvm_check_and_inject_events+0x896/0x1050 [ 411.432208][T22400] vcpu_run+0x4009/0x60d0 [ 411.432246][T22400] ? __pfx_vcpu_run+0x10/0x10 [ 411.432275][T22400] ? lock_acquire+0x1d1/0x380 [ 411.432301][T22400] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 411.432331][T22400] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 411.432360][T22400] ? __local_bh_enable_ip+0xa5/0x120 [ 411.432397][T22400] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 411.432423][T22400] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 411.432457][T22400] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 411.432483][T22400] ? lock_acquire+0x1d1/0x380 [ 411.432509][T22400] ? do_raw_write_lock+0x11e/0x260 [ 411.432532][T22400] ? find_held_lock+0x2b/0x80 [ 411.432551][T22400] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 411.432579][T22400] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 411.432613][T22400] kvm_vcpu_ioctl+0x735/0x17b0 [ 411.432643][T22400] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 411.432673][T22400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 411.432706][T22400] ? do_vfs_ioctl+0x226/0x13e0 [ 411.432737][T22400] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 411.432764][T22400] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 411.432831][T22400] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 411.432865][T22400] ? __fget_files+0x34/0x3d0 [ 411.432899][T22400] ? selinux_file_ioctl+0x1e0/0x290 [ 411.432927][T22400] ? selinux_file_ioctl+0x1e7/0x290 [ 411.432958][T22400] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 411.432988][T22400] __x64_sys_ioctl+0x18e/0x210 [ 411.433019][T22400] do_syscall_64+0x123/0x790 [ 411.433109][T22400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.433130][T22400] RIP: 0033:0x7f2ee9d9f559 [ 411.433148][T22400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.433167][T22400] RSP: 002b:00007f2eeabbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.433189][T22400] RAX: ffffffffffffffda RBX: 00007f2eea025fa0 RCX: 00007f2ee9d9f559 [ 411.433202][T22400] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 411.433216][T22400] RBP: 00007f2eeabbc090 R08: 0000000000000000 R09: 0000000000000000 [ 411.433228][T22400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.433241][T22400] R13: 00007f2eea026038 R14: 00007f2eea025fa0 R15: 00007ffd01f7a1f8 [ 411.433268][T22400] [ 411.568959][ T5794] Bluetooth: hci1: command tx timeout [ 411.590033][T22405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.601549][T22405] netlink: 'syz.1.5358': attribute type 4 has an invalid length. [ 411.602242][T22405] .`: renamed from tunl0 [ 411.629528][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 411.629544][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 411.629732][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 411.629752][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 411.630008][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 411.630027][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 411.630104][ T5960] usb 12-1: USB disconnect, device number 40 [ 411.630238][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 411.630257][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 411.630271][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 411.632520][T22394] cdc_wdm 12-1:1.0: Tx URB error: -19 [ 411.860959][T22428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=22428 comm=syz.1.5368 [ 411.995502][T22447] syz_tun: entered allmulticast mode [ 412.029997][T22449] FAULT_INJECTION: forcing a failure. [ 412.029997][T22449] name failslab, interval 1, probability 0, space 0, times 0 [ 412.030019][T22449] CPU: 0 UID: 0 PID: 22449 Comm: syz.8.5376 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.030036][T22449] Tainted: [L]=SOFTLOCKUP [ 412.030041][T22449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.030049][T22449] Call Trace: [ 412.030053][T22449] [ 412.030058][T22449] dump_stack_lvl+0x100/0x190 [ 412.030082][T22449] should_fail_ex.cold+0x5/0xa [ 412.030102][T22449] should_failslab+0xc2/0x120 [ 412.030116][T22449] kmem_cache_alloc_noprof+0x92/0x6a0 [ 412.030134][T22449] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 412.030157][T22449] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 412.030178][T22449] ? kvm_msr_allowed+0x2d0/0x450 [ 412.030196][T22449] kvm_mmu_load+0xe3/0x25b0 [ 412.030212][T22449] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 412.030225][T22449] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 412.030239][T22449] ? __pfx_kvm_mmu_load+0x10/0x10 [ 412.030254][T22449] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 412.030269][T22449] ? kvm_check_and_inject_events+0x896/0x1050 [ 412.030287][T22449] vcpu_run+0x4009/0x60d0 [ 412.030309][T22449] ? __pfx_vcpu_run+0x10/0x10 [ 412.030327][T22449] ? lock_acquire+0x1d1/0x380 [ 412.030343][T22449] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 412.030362][T22449] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 412.030373][T22449] ? __local_bh_enable_ip+0xa5/0x120 [ 412.030390][T22449] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 412.030407][T22449] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 412.030428][T22449] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 412.030444][T22449] ? lock_acquire+0x1d1/0x380 [ 412.030461][T22449] ? do_raw_write_lock+0x11e/0x260 [ 412.030471][T22449] ? find_held_lock+0x2b/0x80 [ 412.030483][T22449] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 412.030501][T22449] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 412.030522][T22449] kvm_vcpu_ioctl+0x735/0x17b0 [ 412.030541][T22449] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 412.030565][T22449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.030586][T22449] ? do_vfs_ioctl+0x226/0x13e0 [ 412.030605][T22449] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 412.030622][T22449] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 412.030643][T22449] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 412.030665][T22449] ? __fget_files+0x34/0x3d0 [ 412.030685][T22449] ? selinux_file_ioctl+0x1e0/0x290 [ 412.030702][T22449] ? selinux_file_ioctl+0x1e7/0x290 [ 412.030721][T22449] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 412.030740][T22449] __x64_sys_ioctl+0x18e/0x210 [ 412.030760][T22449] do_syscall_64+0x123/0x790 [ 412.030780][T22449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.030792][T22449] RIP: 0033:0x7f74d1f9f559 [ 412.030803][T22449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.030815][T22449] RSP: 002b:00007f74d2e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.030828][T22449] RAX: ffffffffffffffda RBX: 00007f74d2225fa0 RCX: 00007f74d1f9f559 [ 412.030836][T22449] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 412.030843][T22449] RBP: 00007f74d2e76090 R08: 0000000000000000 R09: 0000000000000000 [ 412.030851][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.030858][T22449] R13: 00007f74d2226038 R14: 00007f74d2225fa0 R15: 00007ffc87855498 [ 412.030873][T22449] [ 412.427293][T22475] overlayfs: conflicting options: userxattr,metacopy=on [ 412.510914][T22484] 0: reclassify loop, rule prio 0, protocol 03 [ 412.570514][T22485] device-mapper: table: 248:17: crypt: Device lookup failed (-ENOENT) [ 412.570535][T22485] device-mapper: ioctl: error adding target to table [ 412.775651][T22503] FAULT_INJECTION: forcing a failure. [ 412.775651][T22503] name failslab, interval 1, probability 0, space 0, times 0 [ 412.775673][T22503] CPU: 1 UID: 0 PID: 22503 Comm: syz.7.5395 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.775689][T22503] Tainted: [L]=SOFTLOCKUP [ 412.775694][T22503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.775701][T22503] Call Trace: [ 412.775705][T22503] [ 412.775711][T22503] dump_stack_lvl+0x100/0x190 [ 412.775735][T22503] should_fail_ex.cold+0x5/0xa [ 412.775755][T22503] should_failslab+0xc2/0x120 [ 412.775768][T22503] kmem_cache_alloc_noprof+0x92/0x6a0 [ 412.775786][T22503] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 412.775809][T22503] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 412.775830][T22503] ? kvm_msr_allowed+0x2d0/0x450 [ 412.775848][T22503] kvm_mmu_load+0xe3/0x25b0 [ 412.775864][T22503] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 412.775877][T22503] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 412.775891][T22503] ? __pfx_kvm_mmu_load+0x10/0x10 [ 412.775906][T22503] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 412.775921][T22503] ? kvm_check_and_inject_events+0x896/0x1050 [ 412.775939][T22503] vcpu_run+0x4009/0x60d0 [ 412.775962][T22503] ? __pfx_vcpu_run+0x10/0x10 [ 412.775980][T22503] ? lock_acquire+0x1d1/0x380 [ 412.775996][T22503] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 412.776014][T22503] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 412.776027][T22503] ? __local_bh_enable_ip+0xa5/0x120 [ 412.776044][T22503] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 412.776060][T22503] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 412.776081][T22503] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 412.776097][T22503] ? lock_acquire+0x1d1/0x380 [ 412.776113][T22503] ? do_raw_write_lock+0x11e/0x260 [ 412.776124][T22503] ? find_held_lock+0x2b/0x80 [ 412.776136][T22503] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 412.776153][T22503] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 412.776173][T22503] kvm_vcpu_ioctl+0x735/0x17b0 [ 412.776192][T22503] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 412.776211][T22503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.776231][T22503] ? do_vfs_ioctl+0x226/0x13e0 [ 412.776250][T22503] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 412.776267][T22503] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 412.776288][T22503] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 412.776309][T22503] ? __fget_files+0x34/0x3d0 [ 412.776329][T22503] ? selinux_file_ioctl+0x1e0/0x290 [ 412.776346][T22503] ? selinux_file_ioctl+0x1e7/0x290 [ 412.776365][T22503] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 412.776384][T22503] __x64_sys_ioctl+0x18e/0x210 [ 412.776403][T22503] do_syscall_64+0x123/0x790 [ 412.776423][T22503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.776436][T22503] RIP: 0033:0x7f9b75d9f559 [ 412.776448][T22503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.776464][T22503] RSP: 002b:00007f9b76c42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.776482][T22503] RAX: ffffffffffffffda RBX: 00007f9b76025fa0 RCX: 00007f9b75d9f559 [ 412.776493][T22503] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 412.776504][T22503] RBP: 00007f9b76c42090 R08: 0000000000000000 R09: 0000000000000000 [ 412.776515][T22503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.776528][T22503] R13: 00007f9b76026038 R14: 00007f9b76025fa0 R15: 00007fffc492f388 [ 412.776558][T22503] [ 412.828559][T22446] syz_tun: left allmulticast mode [ 412.987956][ T3415] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 413.032534][T22522] syz_tun: entered allmulticast mode [ 413.088583][ T5790] Bluetooth: hci3: command tx timeout [ 413.137938][ T3415] usb 13-1: Using ep0 maxpacket: 8 [ 413.138726][ T3415] usb 13-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 413.139788][ T3415] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.139809][ T3415] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.139848][ T3415] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 413.139871][ T3415] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 413.139909][ T3415] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.146515][ T3415] hub 13-1:1.0: bad descriptor, ignoring hub [ 413.146536][ T3415] hub 13-1:1.0: probe with driver hub failed with error -5 [ 413.146940][ T3415] cdc_wdm 13-1:1.0: skipping garbage [ 413.146956][ T3415] cdc_wdm 13-1:1.0: skipping garbage [ 413.182995][ T3415] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 413.183017][ T3415] cdc_wdm 13-1:1.0: Unknown control protocol [ 413.323850][T22541] __nla_validate_parse: 77 callbacks suppressed [ 413.323865][T22541] netlink: 240 bytes leftover after parsing attributes in process `syz.7.5408'. [ 413.364024][T22500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.367285][T22500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.368392][T22500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.368711][T22500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.554809][T22558] FAULT_INJECTION: forcing a failure. [ 413.554809][T22558] name failslab, interval 1, probability 0, space 0, times 0 [ 413.554831][T22558] CPU: 3 UID: 0 PID: 22558 Comm: syz.5.5414 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.554848][T22558] Tainted: [L]=SOFTLOCKUP [ 413.554853][T22558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.554873][T22558] Call Trace: [ 413.554878][T22558] [ 413.554883][T22558] dump_stack_lvl+0x100/0x190 [ 413.554906][T22558] should_fail_ex.cold+0x5/0xa [ 413.554925][T22558] should_failslab+0xc2/0x120 [ 413.554939][T22558] kmem_cache_alloc_noprof+0x92/0x6a0 [ 413.554957][T22558] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 413.554979][T22558] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 413.555000][T22558] ? kvm_msr_allowed+0x2d0/0x450 [ 413.555018][T22558] kvm_mmu_load+0xe3/0x25b0 [ 413.555034][T22558] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 413.555046][T22558] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 413.555061][T22558] ? __pfx_kvm_mmu_load+0x10/0x10 [ 413.555075][T22558] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 413.555090][T22558] ? kvm_check_and_inject_events+0x896/0x1050 [ 413.555109][T22558] vcpu_run+0x4009/0x60d0 [ 413.555131][T22558] ? __pfx_vcpu_run+0x10/0x10 [ 413.555149][T22558] ? lock_acquire+0x1d1/0x380 [ 413.555165][T22558] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 413.555184][T22558] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 413.555195][T22558] ? __local_bh_enable_ip+0xa5/0x120 [ 413.555212][T22558] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 413.555228][T22558] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 413.555249][T22558] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 413.555266][T22558] ? lock_acquire+0x1d1/0x380 [ 413.555282][T22558] ? do_raw_write_lock+0x11e/0x260 [ 413.555293][T22558] ? find_held_lock+0x2b/0x80 [ 413.555306][T22558] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 413.555323][T22558] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 413.555344][T22558] kvm_vcpu_ioctl+0x735/0x17b0 [ 413.555363][T22558] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 413.555381][T22558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.555401][T22558] ? do_vfs_ioctl+0x226/0x13e0 [ 413.555420][T22558] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 413.555437][T22558] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 413.555459][T22558] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 413.555480][T22558] ? __fget_files+0x34/0x3d0 [ 413.555500][T22558] ? selinux_file_ioctl+0x1e0/0x290 [ 413.555518][T22558] ? selinux_file_ioctl+0x1e7/0x290 [ 413.555537][T22558] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 413.555555][T22558] __x64_sys_ioctl+0x18e/0x210 [ 413.555575][T22558] do_syscall_64+0x123/0x790 [ 413.555596][T22558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.555612][T22558] RIP: 0033:0x7f50ff99f559 [ 413.555623][T22558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.555634][T22558] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.555646][T22558] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 413.555654][T22558] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 413.555661][T22558] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.555668][T22558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.555675][T22558] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 413.555690][T22558] [ 413.649801][ T5794] Bluetooth: hci1: command tx timeout [ 413.777042][ C2] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 413.777068][ C2] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 413.777318][ C2] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 413.777336][ C2] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 413.777378][ T6755] usb 13-1: USB disconnect, device number 3 [ 413.777568][ C2] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 413.777586][ C2] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 413.777603][ C2] cdc_wdm 13-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 413.840475][T22582] tmpfs: Bad value for 'mpol' [ 413.865251][T22521] syz_tun: left allmulticast mode [ 413.938845][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5421'. [ 413.938874][T22592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5421'. [ 414.300725][T22603] bridge0: port 1(veth0) entered blocking state [ 414.300825][T22603] bridge0: port 1(veth0) entered disabled state [ 414.300981][T22603] veth0: entered allmulticast mode [ 414.301876][T22603] veth0: entered promiscuous mode [ 414.302212][T22603] bridge0: port 1(veth0) entered blocking state [ 414.302262][T22603] bridge0: port 1(veth0) entered listening state [ 414.403789][T22608] FAULT_INJECTION: forcing a failure. [ 414.403789][T22608] name failslab, interval 1, probability 0, space 0, times 0 [ 414.403822][T22608] CPU: 0 UID: 0 PID: 22608 Comm: syz.5.5427 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.403849][T22608] Tainted: [L]=SOFTLOCKUP [ 414.403857][T22608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.403869][T22608] Call Trace: [ 414.403876][T22608] [ 414.403884][T22608] dump_stack_lvl+0x100/0x190 [ 414.403921][T22608] should_fail_ex.cold+0x5/0xa [ 414.403952][T22608] should_failslab+0xc2/0x120 [ 414.403974][T22608] kmem_cache_alloc_noprof+0x92/0x6a0 [ 414.404005][T22608] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 414.404043][T22608] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 414.404077][T22608] ? kvm_msr_allowed+0x2d0/0x450 [ 414.404107][T22608] kvm_mmu_load+0xe3/0x25b0 [ 414.404135][T22608] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 414.404156][T22608] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 414.404186][T22608] ? __pfx_kvm_mmu_load+0x10/0x10 [ 414.404211][T22608] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 414.404236][T22608] ? kvm_check_and_inject_events+0x896/0x1050 [ 414.404266][T22608] vcpu_run+0x4009/0x60d0 [ 414.404304][T22608] ? __pfx_vcpu_run+0x10/0x10 [ 414.404334][T22608] ? lock_acquire+0x1d1/0x380 [ 414.404360][T22608] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 414.404390][T22608] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 414.404409][T22608] ? __local_bh_enable_ip+0xa5/0x120 [ 414.404437][T22608] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 414.404463][T22608] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 414.404517][T22608] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 414.404544][T22608] ? lock_acquire+0x1d1/0x380 [ 414.404571][T22608] ? do_raw_write_lock+0x11e/0x260 [ 414.404591][T22608] ? find_held_lock+0x2b/0x80 [ 414.404612][T22608] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 414.404640][T22608] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 414.404677][T22608] kvm_vcpu_ioctl+0x735/0x17b0 [ 414.404709][T22608] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 414.404740][T22608] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.404774][T22608] ? do_vfs_ioctl+0x226/0x13e0 [ 414.404807][T22608] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 414.404835][T22608] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 414.404862][T22608] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 414.404884][T22608] ? __fget_files+0x34/0x3d0 [ 414.404904][T22608] ? selinux_file_ioctl+0x1e0/0x290 [ 414.404922][T22608] ? selinux_file_ioctl+0x1e7/0x290 [ 414.404941][T22608] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 414.404960][T22608] __x64_sys_ioctl+0x18e/0x210 [ 414.404980][T22608] do_syscall_64+0x123/0x790 [ 414.405001][T22608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.405014][T22608] RIP: 0033:0x7f50ff99f559 [ 414.405025][T22608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.405036][T22608] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.405049][T22608] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 414.405057][T22608] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 414.405064][T22608] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.405071][T22608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.405078][T22608] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 414.405094][T22608] [ 414.707312][T22622] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 414.709491][T22622] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 414.741023][T22622] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 414.741074][T22622] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 414.742681][T22622] overlayfs: d_ino too big (457, ino=9223372036854778203, xinobits=3) [ 414.743348][T22622] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 414.743657][T22622] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 414.744028][T22622] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 414.744330][T22622] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 414.744643][T22622] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 414.744932][T22622] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 414.746052][T22622] overlayfs: d_ino too big (instances, ino=4611686018427388494, xinobits=3) [ 415.137912][ T63] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 415.307914][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 415.308838][ T63] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 415.309809][ T63] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.309823][ T63] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.309846][ T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 415.309862][ T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 415.309884][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.312646][ T63] hub 6-1:1.0: bad descriptor, ignoring hub [ 415.312660][ T63] hub 6-1:1.0: probe with driver hub failed with error -5 [ 415.312901][ T63] cdc_wdm 6-1:1.0: skipping garbage [ 415.312910][ T63] cdc_wdm 6-1:1.0: skipping garbage [ 415.313934][ T63] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 415.313945][ T63] cdc_wdm 6-1:1.0: Unknown control protocol [ 415.390818][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5437'. [ 415.390843][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5437'. [ 415.515497][T22631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.515722][T22631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.523685][T22631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.523906][T22631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.615706][T22643] sctp: [Deprecated]: syz.8.5439 (pid 22643) Use of int in maxseg socket option. [ 415.615706][T22643] Use struct sctp_assoc_value instead [ 415.774176][T22650] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 415.857691][T22652] FAULT_INJECTION: forcing a failure. [ 415.857691][T22652] name failslab, interval 1, probability 0, space 0, times 0 [ 415.857722][T22652] CPU: 1 UID: 0 PID: 22652 Comm: syz.8.5443 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.857748][T22652] Tainted: [L]=SOFTLOCKUP [ 415.857757][T22652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 415.857781][T22652] Call Trace: [ 415.857790][T22652] [ 415.857797][T22652] dump_stack_lvl+0x100/0x190 [ 415.857833][T22652] should_fail_ex.cold+0x5/0xa [ 415.857863][T22652] should_failslab+0xc2/0x120 [ 415.857887][T22652] kmem_cache_alloc_noprof+0x92/0x6a0 [ 415.857916][T22652] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 415.857953][T22652] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 415.857986][T22652] ? kvm_msr_allowed+0x2d0/0x450 [ 415.858017][T22652] kvm_mmu_load+0xe3/0x25b0 [ 415.858043][T22652] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 415.858065][T22652] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 415.858088][T22652] ? __pfx_kvm_mmu_load+0x10/0x10 [ 415.858111][T22652] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 415.858135][T22652] ? kvm_check_and_inject_events+0x896/0x1050 [ 415.858166][T22652] vcpu_run+0x4009/0x60d0 [ 415.858204][T22652] ? __pfx_vcpu_run+0x10/0x10 [ 415.858233][T22652] ? lock_acquire+0x1d1/0x380 [ 415.858259][T22652] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 415.858288][T22652] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 415.858306][T22652] ? __local_bh_enable_ip+0xa5/0x120 [ 415.858334][T22652] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 415.858360][T22652] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 415.858394][T22652] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 415.858420][T22652] ? lock_acquire+0x1d1/0x380 [ 415.858446][T22652] ? do_raw_write_lock+0x11e/0x260 [ 415.858465][T22652] ? find_held_lock+0x2b/0x80 [ 415.858483][T22652] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 415.858510][T22652] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 415.858549][T22652] kvm_vcpu_ioctl+0x735/0x17b0 [ 415.858581][T22652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 415.858613][T22652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 415.858645][T22652] ? do_vfs_ioctl+0x226/0x13e0 [ 415.858675][T22652] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 415.858702][T22652] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 415.858736][T22652] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 415.858770][T22652] ? __fget_files+0x34/0x3d0 [ 415.858803][T22652] ? selinux_file_ioctl+0x1e0/0x290 [ 415.858832][T22652] ? selinux_file_ioctl+0x1e7/0x290 [ 415.858862][T22652] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 415.858892][T22652] __x64_sys_ioctl+0x18e/0x210 [ 415.858923][T22652] do_syscall_64+0x123/0x790 [ 415.858956][T22652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.858977][T22652] RIP: 0033:0x7f74d1f9f559 [ 415.858995][T22652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.859012][T22652] RSP: 002b:00007f74d2e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.859033][T22652] RAX: ffffffffffffffda RBX: 00007f74d2225fa0 RCX: 00007f74d1f9f559 [ 415.859044][T22652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 415.859058][T22652] RBP: 00007f74d2e76090 R08: 0000000000000000 R09: 0000000000000000 [ 415.859069][T22652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.859081][T22652] R13: 00007f74d2226038 R14: 00007f74d2225fa0 R15: 00007ffc87855498 [ 415.859107][T22652] [ 415.934178][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 415.934205][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 415.934460][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 415.934478][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 415.934690][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 415.934707][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 415.934775][ T3415] usb 6-1: USB disconnect, device number 44 [ 415.934904][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 416.235708][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5451'. [ 416.235732][T22674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5451'. [ 416.450314][ T43] kauditd_printk_skb: 109 callbacks suppressed [ 416.450333][ T43] audit: type=1400 audit(524703.834:3516): avc: denied { lock } for pid=22690 comm="syz.8.5459" path="socket:[104275]" dev="sockfs" ino=104275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.533927][T22696] FAULT_INJECTION: forcing a failure. [ 416.533927][T22696] name failslab, interval 1, probability 0, space 0, times 0 [ 416.533962][T22696] CPU: 2 UID: 0 PID: 22696 Comm: syz.5.5460 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.533993][T22696] Tainted: [L]=SOFTLOCKUP [ 416.534001][T22696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.534016][T22696] Call Trace: [ 416.534039][T22696] [ 416.534047][T22696] dump_stack_lvl+0x100/0x190 [ 416.534128][T22696] should_fail_ex.cold+0x5/0xa [ 416.534169][T22696] should_failslab+0xc2/0x120 [ 416.534206][T22696] kmem_cache_alloc_noprof+0x92/0x6a0 [ 416.534239][T22696] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 416.534287][T22696] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 416.534321][T22696] ? kvm_msr_allowed+0x2d0/0x450 [ 416.534372][T22696] kvm_mmu_load+0xe3/0x25b0 [ 416.534401][T22696] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 416.534423][T22696] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 416.534447][T22696] ? __pfx_kvm_mmu_load+0x10/0x10 [ 416.534473][T22696] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 416.534501][T22696] ? kvm_check_and_inject_events+0x896/0x1050 [ 416.534535][T22696] vcpu_run+0x4009/0x60d0 [ 416.534575][T22696] ? __pfx_vcpu_run+0x10/0x10 [ 416.534606][T22696] ? lock_acquire+0x1d1/0x380 [ 416.534634][T22696] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 416.534671][T22696] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 416.534704][T22696] ? __local_bh_enable_ip+0xa5/0x120 [ 416.534743][T22696] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 416.534772][T22696] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 416.534810][T22696] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 416.534838][T22696] ? lock_acquire+0x1d1/0x380 [ 416.534864][T22696] ? do_raw_write_lock+0x11e/0x260 [ 416.534883][T22696] ? find_held_lock+0x2b/0x80 [ 416.534902][T22696] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 416.534930][T22696] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 416.534965][T22696] kvm_vcpu_ioctl+0x735/0x17b0 [ 416.534996][T22696] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 416.535026][T22696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.535077][T22696] ? do_vfs_ioctl+0x226/0x13e0 [ 416.535109][T22696] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 416.535134][T22696] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 416.535197][T22696] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 416.535222][T22696] ? __fget_files+0x34/0x3d0 [ 416.535254][T22696] ? selinux_file_ioctl+0x1e0/0x290 [ 416.535283][T22696] ? selinux_file_ioctl+0x1e7/0x290 [ 416.535315][T22696] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 416.535346][T22696] __x64_sys_ioctl+0x18e/0x210 [ 416.535374][T22696] do_syscall_64+0x123/0x790 [ 416.535461][T22696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.535481][T22696] RIP: 0033:0x7f50ff99f559 [ 416.535499][T22696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.535517][T22696] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.535539][T22696] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 416.535552][T22696] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 416.535564][T22696] RBP: 00007f51008e6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.535576][T22696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.535588][T22696] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 416.535615][T22696] [ 416.645230][T22701] syzkaller1: entered promiscuous mode [ 416.645262][T22701] syzkaller1: entered allmulticast mode [ 416.741844][T22711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5466'. [ 416.741866][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5466'. [ 416.780261][T22708] [ 416.781096][T22708] ====================================================== [ 416.783865][T22708] WARNING: possible circular locking dependency detected [ 416.786050][T22708] syzkaller #0 Tainted: G L [ 416.788581][T22708] ------------------------------------------------------ [ 416.790860][T22708] syz.5.5465/22708 is trying to acquire lock: [ 416.793200][T22708] ffff8880304b2fd8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 416.796735][T22708] [ 416.796735][T22708] but task is already holding lock: [ 416.799497][T22708] ffffffff91fc46c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.802109][T22708] [ 416.802109][T22708] which lock already depends on the new lock. [ 416.802109][T22708] [ 416.805768][T22708] [ 416.805768][T22708] the existing dependency chain (in reverse order) is: [ 416.809044][T22708] [ 416.809044][T22708] -> #4 (cb_lock){++++}-{4:4}: [ 416.811330][T22708] lock_acquire+0x1d1/0x380 [ 416.813143][T22708] down_read+0x94/0x4c0 [ 416.814996][T22708] genl_release+0x7e/0x1d0 [ 416.816551][T22708] netlink_release+0x104e/0x1fc0 [ 416.818555][T22708] __sock_release+0xb3/0x260 [ 416.820439][T22708] sock_close+0x1c/0x30 [ 416.821937][T22708] __fput+0x3fb/0xb50 [ 416.823708][T22708] fput_close_sync+0x118/0x250 [ 416.825552][T22708] filp_close_sync+0x75/0xa0 [ 416.827159][T22708] __x64_sys_close+0x81/0x110 [ 416.829266][T22708] do_syscall_64+0x123/0x790 [ 416.830964][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.833209][T22708] [ 416.833209][T22708] -> #3 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 416.836311][T22708] lock_acquire+0x1d1/0x380 [ 416.838089][T22708] down_write+0x86/0x1f0 [ 416.839912][T22708] __sock_release+0x86/0x260 [ 416.841560][T22708] sock_close+0x1c/0x30 [ 416.843292][T22708] __fput+0x3fb/0xb50 [ 416.845009][T22708] __fput_sync+0xd7/0x100 [ 416.846546][T22708] nvme_tcp_alloc_queue.isra.0+0xd5a/0x1600 [ 416.848990][T22708] nvme_tcp_configure_admin_queue+0x26/0x530 [ 416.851218][T22708] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 416.853146][T22708] nvme_tcp_create_ctrl+0xacf/0x1080 [ 416.855323][T22708] nvmf_dev_write+0x4ee/0xb60 [ 416.856955][T22708] vfs_write+0x2aa/0x1050 [ 416.858879][T22708] ksys_write+0x12a/0x250 [ 416.860870][T22708] do_syscall_64+0x123/0x790 [ 416.862532][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.864968][T22708] [ 416.864968][T22708] -> #2 (nvmf_dev_mutex){+.+.}-{4:4}: [ 416.867522][T22708] lock_acquire+0x1d1/0x380 [ 416.869500][T22708] __mutex_lock+0x19f/0x1c10 [ 416.871480][T22708] nvmf_dev_show+0x26/0x210 [ 416.873057][T22708] seq_read_iter+0x32f/0x1270 [ 416.875156][T22708] seq_read+0x344/0x4d0 [ 416.876989][T22708] vfs_read+0x1e4/0xb40 [ 416.878482][T22708] ksys_read+0x12a/0x250 [ 416.880268][T22708] do_syscall_64+0x123/0x790 [ 416.882345][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.884330][T22708] [ 416.884330][T22708] -> #1 (&p->lock){+.+.}-{4:4}: [ 416.887047][T22708] lock_acquire+0x1d1/0x380 [ 416.888731][T22708] __mutex_lock+0x19f/0x1c10 [ 416.890550][T22708] seq_read_iter+0xe1/0x1270 [ 416.892612][T22708] kernfs_fop_read_iter+0x46c/0x610 [ 416.894444][T22708] __kernel_read+0x397/0xad0 [ 416.896364][T22708] integrity_kernel_read+0x7e/0xb0 [ 416.898562][T22708] ima_calc_file_hash_tfm+0x25e/0x350 [ 416.900439][T22708] ima_calc_file_hash+0x1e3/0x380 [ 416.902691][T22708] ima_collect_measurement+0x952/0xb30 [ 416.904745][T22708] process_measurement+0xdfe/0x2350 [ 416.906728][T22708] ima_file_check+0xbf/0x110 [ 416.908790][T22708] security_file_post_open+0xc4/0x210 [ 416.910758][T22708] path_openat+0x5d0/0x23f0 [ 416.912612][T22708] do_file_open+0x20e/0x430 [ 416.914603][T22708] do_sys_openat2+0x163/0x1d0 [ 416.916236][T22708] __x64_sys_openat+0x12d/0x210 [ 416.918294][T22708] do_syscall_64+0x123/0x790 [ 416.920201][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.922361][T22708] [ 416.922361][T22708] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 416.925663][T22708] check_prev_add+0xeb/0xe60 [ 416.927343][T22708] __lock_acquire+0x1528/0x1f40 [ 416.929559][T22708] lock_acquire+0x1d1/0x380 [ 416.931320][T22708] __mutex_lock+0x19f/0x1c10 [ 416.933054][T22708] process_measurement+0x5ab/0x2350 [ 416.935344][T22708] ima_file_check+0xbf/0x110 [ 416.937100][T22708] security_file_post_open+0xc4/0x210 [ 416.938976][T22708] path_openat+0x5d0/0x23f0 [ 416.941010][T22708] do_file_open+0x20e/0x430 [ 416.942821][T22708] file_open_name+0x1c3/0x3e0 [ 416.944595][T22708] filp_open+0x2e/0x50 [ 416.946499][T22708] kernel_read_file_from_path_initns+0xec/0x240 [ 416.948755][T22708] _request_firmware+0x6f1/0x1410 [ 416.950837][T22708] request_firmware+0x35/0x50 [ 416.952863][T22708] reg_reload_regdb+0x87/0x540 [ 416.954709][T22708] genl_family_rcv_msg_doit+0x214/0x300 [ 416.957130][T22708] genl_rcv_msg+0x560/0x800 [ 416.958930][T22708] netlink_rcv_skb+0x159/0x420 [ 416.960717][T22708] genl_rcv+0x28/0x40 [ 416.962569][T22708] netlink_unicast+0x668/0x950 [ 416.964411][T22708] netlink_sendmsg+0x9ac/0x10c0 [ 416.966242][T22708] ____sys_sendmsg+0xa99/0xc30 [ 416.968357][T22708] ___sys_sendmsg+0x190/0x1e0 [ 416.970037][T22708] __sys_sendmsg+0x160/0x210 [ 416.971963][T22708] do_syscall_64+0x123/0x790 [ 416.973928][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.976006][T22708] [ 416.976006][T22708] other info that might help us debug this: [ 416.976006][T22708] [ 416.979737][T22708] Chain exists of: [ 416.979737][T22708] &ima_iint_mutex_key[depth] --> &sb->s_type->i_mutex_key#13 --> cb_lock [ 416.979737][T22708] [ 416.984670][T22708] Possible unsafe locking scenario: [ 416.984670][T22708] [ 416.987229][T22708] CPU0 CPU1 [ 416.989183][T22708] ---- ---- [ 416.990892][T22708] rlock(cb_lock); [ 416.992472][T22708] lock(&sb->s_type->i_mutex_key#13); [ 416.995242][T22708] lock(cb_lock); [ 416.997536][T22708] lock(&ima_iint_mutex_key[depth]); [ 416.999469][T22708] [ 416.999469][T22708] *** DEADLOCK *** [ 416.999469][T22708] [ 417.002272][T22708] locks held by syz.5.5465/22708: 1, last CPU#1: [ 417.004566][T22708] #0: ffffffff91fc46c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.007341][T22708] [ 417.007341][T22708] stack backtrace: [ 417.009605][T22708] CPU: 1 UID: 0 PID: 22708 Comm: syz.5.5465 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.013486][T22708] Tainted: [L]=SOFTLOCKUP [ 417.015220][T22708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.018587][T22708] Call Trace: [ 417.019961][T22708] [ 417.021202][T22708] dump_stack_lvl+0x100/0x190 [ 417.022923][T22708] print_circular_bug.cold+0x178/0x1be [ 417.024719][T22708] check_noncircular+0x146/0x160 [ 417.026724][T22708] check_prev_add+0xeb/0xe60 [ 417.028361][T22708] __lock_acquire+0x1528/0x1f40 [ 417.029918][T22708] ? genl_rcv_msg+0x560/0x800 [ 417.031769][T22708] ? netlink_rcv_skb+0x159/0x420 [ 417.033515][T22708] lock_acquire+0x1d1/0x380 [ 417.034947][T22708] ? process_measurement+0x5ab/0x2350 [ 417.036983][T22708] ? __pfx___might_resched+0x10/0x10 [ 417.038922][T22708] __mutex_lock+0x19f/0x1c10 [ 417.040367][T22708] ? process_measurement+0x5ab/0x2350 [ 417.042465][T22708] ? process_measurement+0x5ab/0x2350 [ 417.044576][T22708] ? __pfx___mutex_lock+0x10/0x10 [ 417.046158][T22708] ? rcu_is_watching+0x13/0xc0 [ 417.047936][T22708] ? trace_kmem_cache_alloc+0xdd/0x100 [ 417.050153][T22708] ? __kasan_slab_alloc+0x89/0x90 [ 417.051997][T22708] ? find_held_lock+0x2b/0x80 [ 417.053483][T22708] ? process_measurement+0x5ab/0x2350 [ 417.055584][T22708] process_measurement+0x5ab/0x2350 [ 417.057699][T22708] ? __lock_acquire+0x5c0/0x1f40 [ 417.059307][T22708] ? find_held_lock+0x2b/0x80 [ 417.061047][T22708] ? __pfx_process_measurement+0x10/0x10 [ 417.063328][T22708] ? lock_acquire+0x1d1/0x380 [ 417.064988][T22708] ? fscrypt_file_open+0x48f/0x5c0 [ 417.066818][T22708] ? __pfx___fsnotify_parent+0x10/0x10 [ 417.069020][T22708] ima_file_check+0xbf/0x110 [ 417.070890][T22708] ? __pfx_ima_file_check+0x10/0x10 [ 417.072617][T22708] ? vfs_open_consume+0x334/0x460 [ 417.074482][T22708] security_file_post_open+0xc4/0x210 [ 417.076632][T22708] path_openat+0x5d0/0x23f0 [ 417.078195][T22708] ? __pfx_path_openat+0x10/0x10 [ 417.079850][T22708] ? kasan_save_stack+0x3f/0x50 [ 417.081882][T22708] ? kasan_save_stack+0x30/0x50 [ 417.083729][T22708] ? kasan_save_track+0x14/0x30 [ 417.085270][T22708] ? __kasan_slab_alloc+0x89/0x90 [ 417.087301][T22708] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 417.089572][T22708] ? do_getname_kernel+0x5d/0x250 [ 417.091247][T22708] ? filp_open+0x1d/0x50 [ 417.092907][T22708] do_file_open+0x20e/0x430 [ 417.094760][T22708] ? netlink_unicast+0x668/0x950 [ 417.096626][T22708] ? __pfx_do_file_open+0x10/0x10 [ 417.098307][T22708] file_open_name+0x1c3/0x3e0 [ 417.099905][T22708] ? __pfx_file_open_name+0x10/0x10 [ 417.102020][T22708] ? do_getname_kernel+0x5d/0x250 [ 417.103684][T22708] ? __asan_memcpy+0x3c/0x60 [ 417.105377][T22708] ? do_getname_kernel+0x1be/0x250 [ 417.107429][T22708] filp_open+0x2e/0x50 [ 417.108940][T22708] kernel_read_file_from_path_initns+0xec/0x240 [ 417.111214][T22708] _request_firmware+0x6f1/0x1410 [ 417.113247][T22708] ? __pfx__request_firmware+0x10/0x10 [ 417.115430][T22708] ? lock_acquire+0x1d1/0x380 [ 417.117200][T22708] request_firmware+0x35/0x50 [ 417.118709][T22708] reg_reload_regdb+0x87/0x540 [ 417.120643][T22708] ? __pfx_reg_reload_regdb+0x10/0x10 [ 417.122831][T22708] ? nl80211_pre_doit+0x570/0x1ed0 [ 417.124897][T22708] genl_family_rcv_msg_doit+0x214/0x300 [ 417.127120][T22708] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 417.129207][T22708] ? bpf_lsm_capable+0x9/0x10 [ 417.131116][T22708] ? security_capable+0x80/0x260 [ 417.133107][T22708] genl_rcv_msg+0x560/0x800 [ 417.134951][T22708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.136642][T22708] ? __lock_acquire+0x5c0/0x1f40 [ 417.138551][T22708] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 417.140701][T22708] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 417.143019][T22708] ? __pfx_nl80211_post_doit+0x10/0x10 [ 417.145037][T22708] netlink_rcv_skb+0x159/0x420 [ 417.146707][T22708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.148742][T22708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.150898][T22708] ? netlink_deliver_tap+0x1ae/0xb50 [ 417.152805][T22708] genl_rcv+0x28/0x40 [ 417.154264][T22708] netlink_unicast+0x668/0x950 [ 417.156191][T22708] ? __pfx_netlink_unicast+0x10/0x10 [ 417.158320][T22708] netlink_sendmsg+0x9ac/0x10c0 [ 417.159885][T22708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.161800][T22708] ? selinux_socket_sendmsg+0x198/0x2f0 [ 417.164022][T22708] ? ____sys_sendmsg+0xa99/0xc30 [ 417.166020][T22708] ____sys_sendmsg+0xa99/0xc30 [ 417.167536][T22708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.169680][T22708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.171832][T22708] ___sys_sendmsg+0x190/0x1e0 [ 417.173746][T22708] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.175444][T22708] ? rb_commit+0x129/0x9d0 [ 417.177165][T22708] ? find_held_lock+0x2b/0x80 [ 417.178993][T22708] __sys_sendmsg+0x160/0x210 [ 417.180752][T22708] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.182456][T22708] do_syscall_64+0x123/0x790 [ 417.184342][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.186658][T22708] RIP: 0033:0x7f50ff99f559 [ 417.188064][T22708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.195232][T22708] RSP: 002b:00007f51008e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.198450][T22708] RAX: ffffffffffffffda RBX: 00007f50ffc25fa0 RCX: 00007f50ff99f559 [ 417.201226][T22708] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 417.204293][T22708] RBP: 00007f50ffa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 417.207274][T22708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.210225][T22708] R13: 00007f50ffc26038 R14: 00007f50ffc25fa0 R15: 00007ffd31b42e78 [ 417.213449][T22708]