last executing test programs: 11m37.705463727s ago: executing program 32 (id=1398): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x17) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000540)=""/251, 0xfb}, {&(0x7f0000000440)=""/42, 0x2a}], 0x7) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @private0, @local, {[@hopopts={0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffe}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x4}}}}}}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="27030200590214000600002fb96d", 0x36}], 0x1}, 0x4040080) 11m17.269773341s ago: executing program 33 (id=1709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x20008895}], 0x1, 0x24002894) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000480)="00e88a79f76008c77f19ee3a8a898217187ebc0aa050c39779499861583963a54d23d4868e24a73cea3072be489fe4a80000000e00"/76, 0x4c}, {&(0x7f0000000500)="909dcb6b2ff63f57b07f672dd7a3ca8b94227a5c618d5a442da9c1e9a442c27321f5690de8053f3945c9ae744d1f385c3a6c65eaf1ca23a0da70e987b202e2de5dac48a8d6839fa5855b5aeb3473e85dd24db36da7695c187d21f4fa3f08324826ad75aa3f35876eab89b25ebc0c987d9fc7de06b8a712fc6643ffc6e1193a9c0653273f83a0832322f32ea812d1a5a97dc19fed1b38018a3bbca96d642f7b25fcaa872f01bb2d6756223aefe8dc84d30cb58461", 0xb4}], 0x2}, 0x4c000) 9m43.978762776s ago: executing program 34 (id=2844): r0 = socket$packet(0x11, 0x2, 0x300) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x24000420) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x52, 0x2, 0x1, "8baadc000000000000ffffffff00000000c300f4a100000000001c00", 0x50313459}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r5, &(0x7f0000000000)='./mnt\x00', r5, &(0x7f0000000100)='./mnt\x00', 0x137) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x5c, @remote, 0x4e21, 0x4, 'lc\x00', 0x4, 0xd}, 0x2c) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000c) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x232, 0xffffff01, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x2}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 8m53.632762376s ago: executing program 35 (id=3532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={0x400000, 0x4f, 0x2}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xb, 0x8}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000206050000000000000000ffffffffff04000400000000000900020073797a320000000014000780050015000000000008001240000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6574297e222426b505a6fcba2b0b83f595000000"], 0x64}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x20004004) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m25.439249797s ago: executing program 36 (id=3843): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48880}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380), 0xa, 0x4004000}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x1bbc}, 0x1, 0x0, 0x0, 0x4044095}, 0x24048040) 8m22.401226821s ago: executing program 37 (id=3871): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$alg(r3, &(0x7f0000000100)=""/73, 0x49) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000380)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4880) sendmsg$802154_dgram(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)="d8b8288799f15170d55b58c58eb8e8d7f8bc27c532e3c2a1667744b6b1cca0c579cf5a1c4b1183a0eb100030d6d839fa437e74d0b224eda826478e0a73a84084cf3ba6af3e68e8f02457fcc15e606a2ccb2613cc2ba25ac13bb42c70f1f0bc63b921d75d6a3a7322dd", 0x69}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r5, 0x5411, 0x1000000000000) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, 0x0, 0x0) 7m51.251294357s ago: executing program 38 (id=4407): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x9) fchdir(r3) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x101, 0x1) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r3, &(0x7f0000001a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, r11, {0x80}}, 0x18) (async) sendmmsg(r10, &(0x7f0000000040), 0x400000000000193, 0x40010) (async) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x11, r3, 0x10000) 6m37.493543699s ago: executing program 39 (id=5854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd4}}, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x90482, 0x40) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000004c0)={"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"}) 6m14.655223683s ago: executing program 9 (id=6370): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x45) 6m14.654772356s ago: executing program 9 (id=6371): r0 = socket(0x2c, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044014}, 0x24040090) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044014}, 0x24040090) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x3, 0x40, 0x15, 0x19, 0x15, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) write(r6, &(0x7f0000000140)="24000a321e005f0214ff7f0000000000000000000000000000000009001d00000030000000", 0xfffffdd4) (async) write(r6, &(0x7f0000000140)="24000a321e005f0214ff7f0000000000000000000000000000000009001d00000030000000", 0xfffffdd4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={0x4}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={0x4}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="19922cbd7000fedbdf250100000008455bb96a84d6f166ce8fcc", @ANYRES32=r9, @ANYRESHEX=r7, @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x48801}, 0x400c0) 6m14.465936181s ago: executing program 9 (id=6372): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x51, 0x0, 0x2, "a3493194643d93c6931587b37f269562", "8ac8ff2ab90c070cbae5dced2d243b851dd08aefb6a54f0b4e7be7fb4fa7e8acd08a0adaf572cd9ffdd31438b7726c20e4f545026ebdd004c04fc69c"}, 0x51, 0x0) (async) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@access_client}, {@version_u}]}}) (async) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x440000, 0x63) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x89) 6m14.4652649s ago: executing program 9 (id=6373): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000240)={0x200000, 0xb}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfd, 0x12) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r3, 0x0, 0x7ffff000) (async) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a40c2, 0x0) ioctl$CDROM_MEDIA_CHANGED(r6, 0x5325, 0x100000000) (async) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) 6m14.302980005s ago: executing program 9 (id=6377): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 6m12.712087281s ago: executing program 9 (id=6385): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000007"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "c08294e5"}}}}}, 0x0) 6m12.65595036s ago: executing program 40 (id=6385): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000007"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "c08294e5"}}}}}, 0x0) 5m31.768181244s ago: executing program 2 (id=7056): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="900f38af028691ea2ad3f9b8a06686b6f0e45c8d210c46b8d420d241e4"], 0x125) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0x2c) r3 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffff8, 0x54d002) getresuid(&(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fchown(r0, r4, r5) r6 = syz_open_pts(r3, 0x20080) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000000)={0x6, 0xc, 0x7ff, 0x8e0, 0x8}) 5m31.766696366s ago: executing program 2 (id=7059): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000840000001b0000000000000000000085"], 0x18, 0x10}, 0x8001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x49840}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf250200000008004000050000000400d100080061000200000008000a01e953000008003f000900000008000c0101000080080026006c090000080061000104000005003e00d0000000288625a0be0b654f615bfacf8b955538a16aeb054f19445150e92b6be0456fdc020ad7a50cb34d5bd487f2a4b377e1b3c394850f8ebd0f7c18f50abaae0b717c09badb4946"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) 5m31.725020195s ago: executing program 2 (id=7060): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r1, 0x5501) read$hiddev(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000", @ANYBLOB="0000000000000000b703"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xffffffffffffff04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000822bd7000fddbdf250c0000000c000180080008000700000038000280080003000100000006000e004e24000006000f000300000014000100ff02000000000000000000000000000108000500b90b"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade0132d10139107a3"], 0x9) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff483180799c5fb5ce4995", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000b40)={0x1, 0x4, {0x6, 0xe, 0x9e0, {0x2483, 0x4}, {0x1, 0x4}, @cond=[{0x0, 0x9, 0x7, 0x40, 0xfffd}, {0xb, 0x2, 0x6, 0x3, 0x101, 0x8}]}, {0x54, 0x1, 0xfff8, {0xfff, 0x7}, {0x7, 0xffff}, @rumble={0x3, 0x401}}}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x59, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x103, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}}}, 0x32) 5m31.478851296s ago: executing program 2 (id=7074): socket(0x1e, 0x5, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1b, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="000822bd7000fddbdf250c0000000c000180080008000700000038000280080003000100000006000e004e24000006000f000300000014000100ff020000000000000000000000000001080005"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x100000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000002740)="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", 0xe8f}, {&(0x7f0000000280)}, {&(0x7f00000002c0)}], 0x3, 0x1, 0x3) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000002c0)="0f78c8260f21e90f20de3e64660f3800f73ef30f0966b97d0300000f32baf80c66b86c156e8266efbafc0cb80900ef81c50060ba4000edf00fc15f8e", 0x3c}], 0x1, 0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r6 = open(&(0x7f0000000280)='./bus\x00', 0x404100, 0x1a) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m31.477899604s ago: executing program 2 (id=7076): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 5m31.224549696s ago: executing program 2 (id=7085): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x100004, @private2, 0xd}, 0x1c) close(0x3) 5m31.144655746s ago: executing program 41 (id=7085): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x100004, @private2, 0xd}, 0x1c) close(0x3) 5m30.935325783s ago: executing program 7 (id=7089): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x8, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f00000002c0)='GPL\x00', 0x9, 0xf1, &(0x7f0000000340)=""/241, 0x41000, 0x12, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x4, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)=[r0, 0x1], &(0x7f0000000500)=[{0x1, 0x2, 0xf, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x4, 0x5, 0xd}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r0, 0x1f, 0x4000, 0x0, @void, @value=r2, @void, @void, r1}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000180)=0x4) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0) 5m30.934006528s ago: executing program 7 (id=7090): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000340)="18000000010003", 0x7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 5m30.872168201s ago: executing program 7 (id=7091): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000000)=[@enter_looper, @exit_looper, @acquire, @increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x1}, @increfs_done={0x40106308, 0x1}], 0xd3, 0x0, &(0x7f0000000180)="1ef0e818cf5fdb3523c22d8b00fe89e509cf6b064b027a8b2a109c8c3b03744f15a40c54cc0051cf21d27e24b9d70bda6faabf07da825f6bc33885fc615aa7b1d432ecc2ab25f3ecd341bdd48be91bc18d27e8e63bf9df5f785c1f4a6a4bcf37d54e253df795cf5916d1cd8ccd298ac51685c00195092db973da1455a052105322598bbf3bdbf6e5a1cdf432d07e77ba7e5511645a931a85743c237f3724ef83a81b3e8fb6f4fba7deaa8e29ec4dc6f9ce47bde5a153e58a197d87e04fd0d0ed3dce1bbd2fa9a008985e92fe31cc93808cb466"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') read(r3, &(0x7f0000000140)=""/220, 0xdc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d4, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0xffffffffffffffed, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) r7 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x400c6314, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m30.871785988s ago: executing program 7 (id=7092): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000001e13000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0/file0\x00', 0x1}, 0x18) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 5m30.79743277s ago: executing program 7 (id=7093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x2800}}, 0xf, 0x4, 0x20000, 0x2, 0xe, 0x0, 0x5}, 0x9c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) futex(&(0x7f0000000000), 0x80, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@gettfilter={0x6c, 0x2e, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x10}, {0x2, 0x2}, {0x7}}, [{0x8, 0xb, 0x3}, {0xffffffffffffffda, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x88}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0xf7f}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8848}, 0x24048034) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf2501000000000000000141000000180017000000140088b3aed58bd9b434e1c04986554b9e"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FIONCLEX(r7, 0x5450) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000c, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', r9}, 0x94) 5m30.664472706s ago: executing program 7 (id=7097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=r2], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x3, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ctr-serpent-avx2)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xcbab}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x30, 0x4008000}, 0x80) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000020300000000000000010000840000000400000000010000000e0000000000000000000004"], 0x0, 0x4a}, 0x20) (async, rerun: 32) r8 = accept4(r3, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000400), 0x0, 0x40840) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0xbcd) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (rerun: 64) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) (rerun: 32) 5m30.516172707s ago: executing program 42 (id=7097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=r2], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x3, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ctr-serpent-avx2)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xcbab}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x30, 0x4008000}, 0x80) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000020300000000000000010000840000000400000000010000000e0000000000000000000004"], 0x0, 0x4a}, 0x20) (async, rerun: 32) r8 = accept4(r3, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000400), 0x0, 0x40840) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0xbcd) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (rerun: 64) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) (rerun: 32) 5m6.884504387s ago: executing program 3 (id=7491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @empty}, 0xa2, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfff}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) (async) ioctl$TCSETS(r2, 0x40087101, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async, rerun: 64) getitimer(0x1, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000080900020073797a3100000000050004000000030011000300686173683a6e65742c6e65740000000014000780050015004b0000000800114000000000050005000a0000000500010006"], 0x60}}, 0x0) 5m6.884256097s ago: executing program 3 (id=7492): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x109200) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r4, 0x0, 0x203e17d0) 5m6.799080104s ago: executing program 3 (id=7493): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000", @ANYBLOB="0000000000000000b703"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="000822bd7000fddbdf250c0000000c000180080008000700000038000280080003000100000006000e004e24000006000f000300000014000100ff020000000000000000000000000001080005"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade0132d10139107a3"], 0x9) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x541b, &(0x7f0000000100)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000080)=0x5) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) getsockname$netrom(r7, &(0x7f0000000200)={{0x3, @bcast}, [@remote, @rose, @default, @bcast, @bcast, @remote, @null, @rose]}, &(0x7f00000000c0)=0x48) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x80, 0xc8, 0xb4}}}, 0x7) 5m6.798800761s ago: executing program 3 (id=7494): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x1, 0xffffffff, 0x1, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fcdbdf250500000014001f00ff0100000000000000000000000000010600030005000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'pimreg1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000003, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3e, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc0, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000003, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3e, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc0, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r5, &(0x7f0000000300)) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000)=0x66, 0x4) socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000640)={&(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000380)=""/54, 0x36}], 0x2, &(0x7f00000005c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/121, 0x79}, &(0x7f0000000480), 0x40}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/66, 0x42}, &(0x7f0000000540), 0x40}}], 0x60, 0x40000}, 0x24044011) (async) sendmsg$rds(r6, &(0x7f0000000640)={&(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000380)=""/54, 0x36}], 0x2, &(0x7f00000005c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/121, 0x79}, &(0x7f0000000480), 0x40}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/66, 0x42}, &(0x7f0000000540), 0x40}}], 0x60, 0x40000}, 0x24044011) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) (async) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2) socket$netlink(0x10, 0x3, 0xb) (async) r9 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r4, 0x20018}, [@IFLA_LINKINFO={0x13, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r4, 0x20018}, [@IFLA_LINKINFO={0x13, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) 5m6.136441122s ago: executing program 3 (id=7504): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x1, "da7f5b4c103ebf993ddeaeb558fd61f55a215d92e4b39cdd8152b94fa92da377", 0x0, 0x1}) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x8, 0x10001, {{0x2a, 0x4, 0x1, 0x8, 0xa8, 0x68, 0x0, 0x94, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xd8, 0x0, 0x1, [0x3, 0x1000, 0x5]}, @rr={0x7, 0x13, 0x9b, [@multicast1, @multicast1, @rand_addr=0x64010100, @local]}, @cipso={0x86, 0x15, 0x1, [{0x5, 0x7, "f041712837"}, {0x6, 0x8, "57e32a0d2227"}]}, @ssrr={0x89, 0x1b, 0xce, [@remote, @loopback, @remote, @multicast1, @empty, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0xca, 0x3, 0x7, [{@local, 0x3}, {@broadcast, 0x29}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@empty, 0x6}, {@remote, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast}]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000002c0)={@private2, r4}, 0x14) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=@polexpire={0xcc, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x3ff, 0x2, 0x60, 0x120, 0x73, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x4, 0x10000000000, 0x7fffffff, 0x8, 0x7}, {0x1, 0x4c67, 0x9, 0x449f}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x58}, {r1, 0x100}, {r0, 0x4140}, {r0, 0x1405}, {r0, 0x200}, {r1, 0x1200}, {r0, 0x8080}, {r5, 0x6003}], 0x8, &(0x7f0000000100)={r6, r7+60000000}, &(0x7f0000000140)={[0x28]}, 0x8) close(r0) 5m5.837244934s ago: executing program 3 (id=7508): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 5m5.771669086s ago: executing program 43 (id=7508): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 4m24.37968529s ago: executing program 1 (id=8322): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xdddfa000, 0x8, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x78, '\x00', 0x31}, {0x1, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x81}, {0x5, 0x82, 0x4, '\x00', 0x79}, {0xa, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x5}, {0x54, 0x3, 0x3, '\x00', 0xc}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x7, '\x00', 0x1}, {0x1, 0x1, 0x18, '\x00', 0x4}, {0x8, 0xf, 0x5, '\x00', 0xf8}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x0, '\x00', 0x1}, {0x5, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x9, 0x9, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0x0, '\x00', 0xf7}, {0x6, 0x6, 0x51, '\x00', 0xa}, {0xff, 0x2, 0x3, '\x00', 0x8}, {0x5, 0xe, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x18, 0x0, [{0x40000070, 0x0, 0x6}]}) 4m24.189905577s ago: executing program 1 (id=8325): syz_emit_ethernet(0x5e, &(0x7f0000001900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "786284", 0x28, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @generic={0x3, 0x4, "2215fffb"}]}]}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000001000038000000"], 0x28}, 0x1, 0x0, 0x0, 0x1c0c0}, 0x8825) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1}, 0x2}], 0x1, 0x40000060, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x1006, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x7, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x10001, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x3b9, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x2, 0x7, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xfffffffe, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200", @ANYBLOB="0000000000000000b703"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000822bd7000fddbdf250c0000000c000180080008000700000038000280080003000100000006000e004e24000006000f000300000014000100ff02000000000000000000000000000108000500b90b"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade0132d10139107a3"], 0x9) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 4m23.856589639s ago: executing program 1 (id=8329): madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lremovexattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='system.sockprotoname\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r0, &(0x7f00000088c0)=""/48, 0x30) getdents(r0, 0xffffffffffffffff, 0x5a) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) r2 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m23.8561966s ago: executing program 1 (id=8330): creat(&(0x7f0000000100)='./file0\x00', 0x15e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xdddfa000, 0x8, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x78, '\x00', 0x31}, {0x1, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x81}, {0x5, 0x82, 0x4, '\x00', 0x79}, {0xa, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x5}, {0x54, 0x3, 0x3, '\x00', 0xc}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x7, '\x00', 0x1}, {0x1, 0x1, 0x18, '\x00', 0x4}, {0x8, 0xf, 0x5, '\x00', 0xf8}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x0, '\x00', 0x1}, {0x5, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x9, 0x9, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0x0, '\x00', 0xf7}, {0x6, 0x6, 0x51, '\x00', 0xa}, {0xff, 0x2, 0x3, '\x00', 0x8}, {0x5, 0xe, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0xa9, 0x80401) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x1, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r5, 0x1}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 4m21.815071122s ago: executing program 1 (id=8346): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) socket(0x5, 0xa, 0x868) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000680)={0x1, 0x0, [{0x4b564d04, 0x0, 0xfff}]}) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 4m21.755477572s ago: executing program 44 (id=8346): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) socket(0x5, 0xa, 0x868) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000680)={0x1, 0x0, [{0x4b564d04, 0x0, 0xfff}]}) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 3m53.970004975s ago: executing program 5 (id=8750): modify_ldt$write2(0x11, &(0x7f0000000000)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x4, 0x28, 0x2f, 0x8001, 0x4, 0xb78, 0x5, 0x3, 0x0, 0x1, 0x8, 0x8000, 0x400000, 0xffffffff, 0x1b, 0x8, 0x7, 0x1f4, 0xf, 0x3, 0x800, 0x3, 0x400, 0x9, 0x5, 0x9, 0x2, 0xffffff21, 0x1, 0x15, 0x101, 0x7, 0x4, 0x9, 0x82, 0xa8, 0xda80, 0x0, 0x2, 0x4, 0x1, 0x0, 0x5, 0xa4, 0x401, 0x2, 0x3, 0x8, 0xfffffffc, 0x6, 0x0, 0x967, 0xffffffff, 0x8, 0x6, 0x6, 0x9, 0x3, 0xff, 0x7e, 0xa, 0x7fff, 0x0, 0xfffffff7, 0x9, 0x8, 0x7, 0x80000000, 0x7fffffff, 0x2, 0x5, 0x1, 0x4, 0x7, 0x10001, 0xb1a, 0x9, 0x9, 0x1, 0x0, 0x7ff, 0x4, 0x8, 0x6, 0xfffff1f0, 0x3, 0x7, 0x0, 0x9, 0xfd, 0x80000000, 0x5, 0x100036, 0x5, 0x8, 0x10, 0x4, 0x2, 0x6a5, 0x6, 0x6, 0x4, 0x4, 0x8, 0x1, 0x3, 0x7fff, 0x5c73, 0x2, 0xe0a, 0xe5, 0x7, 0x9, 0x0, 0x3, 0xfffffff7, 0x1, 0x1, 0x9, 0x80000000, 0xb, 0x5, 0xcc, 0x7fffffff, 0x0, 0xbb, 0x10, 0x7, 0xf, 0x1a, 0x8, 0x2, 0x8, 0xcb0, 0xffffffff, 0x7ff, 0x6017, 0x7ff, 0x4, 0xa9, 0x4, 0x9, 0x1, 0xfffffe01, 0x6, 0x4a032035, 0x6, 0x8, 0x7, 0xd, 0x1, 0x0, 0x8, 0x8000, 0x2000, 0xed0, 0xf62d, 0x2, 0x1ac, 0x9, 0xe, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x72, 0x3, 0x4, 0x6, 0x6, 0x1ff, 0x7, 0x3, 0x9, 0x1, 0x100, 0x6, 0x3, 0x9, 0x0, 0xe, 0x6, 0x4, 0x55, 0x8, 0x3, 0x100, 0x7af, 0x0, 0x201, 0x2, 0x5, 0x9a000000, 0xe5ba, 0x8, 0x2, 0x1ff, 0xfffffffc, 0x4, 0x1, 0x6, 0x8, 0x9, 0x3, 0xe01, 0x6, 0x80, 0x10000006, 0x31b80000, 0x5, 0xfffffeff, 0x9992, 0x3, 0x75, 0x2, 0x48e, 0x4, 0x8, 0x2, 0x0, 0x9ee2, 0xfffffff7, 0x6, 0x3, 0x400, 0x8, 0x5, 0xdc, 0x0, 0x3, 0xc, 0x9, 0x7, 0x8, 0x7a31, 0x3ff, 0xd, 0x1214, 0xffffffff, 0x6, 0x8, 0x76f, 0x4, 0x8, 0x7, 0x0, 0x7, 0xfb, 0x100, 0xe340, 0x4, 0x8, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xb, 0x8001, 0x3, 0xffffffff}, {0x6d, 0x0, 0x86b, 0x7, 0x8, 0x8}, 0x3, 0x7, 0xbbf}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) write$sysctl(r0, &(0x7f0000000500)='2\x00', 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x221a3180, 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0) 3m53.703628084s ago: executing program 5 (id=8751): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r1}, 0x38) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) 3m53.649788632s ago: executing program 5 (id=8753): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000002000040600000008000300", @ANYRES32=r3, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000002000040600000008000300", @ANYRES32=r3, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) 3m53.649354177s ago: executing program 5 (id=8754): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x8000) ioctl$CEC_G_MODE(r0, 0x80046108, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) quotactl$Q_SETINFO(0x1, &(0x7f0000000000)=@md0, r1, &(0x7f0000000140)={0x2, 0xe7a, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x3) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB="7472170b733d76697274696f2c6163636573733d636c69656e742c76657273696f6e3d3970323030302e752c00105400913089725ab1189d121da4ee20393cce86"]) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2040, 0x30) 3m53.553121484s ago: executing program 5 (id=8755): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 3m52.508155459s ago: executing program 5 (id=8761): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x0, &(0x7f0000000240)={0x1, 0x1, 0x804, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x0, &(0x7f0000000240)={0x1, 0x1, 0x804, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f5f6f7468c48fa429985f4bbbb68503f430651e77"]) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f5f6f7468c48fa429985f4bbbb68503f430651e77"]) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) writev(r2, &(0x7f0000001980)=[{&(0x7f0000000340)="cee1", 0x2}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000006ac0)='./file0\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='incremental-fs\x00', 0x1008000, &(0x7f0000000180)='-+\'\x00') 3m52.414293396s ago: executing program 45 (id=8761): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x0, &(0x7f0000000240)={0x1, 0x1, 0x804, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x0, &(0x7f0000000240)={0x1, 0x1, 0x804, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f5f6f7468c48fa429985f4bbbb68503f430651e77"]) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f5f6f7468c48fa429985f4bbbb68503f430651e77"]) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) writev(r2, &(0x7f0000001980)=[{&(0x7f0000000340)="cee1", 0x2}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000006ac0)='./file0\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='incremental-fs\x00', 0x1008000, &(0x7f0000000180)='-+\'\x00') 1.645504511s ago: executing program 4 (id=11156): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.645075889s ago: executing program 6 (id=11157): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x409, 0x80000000, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.591972774s ago: executing program 4 (id=11158): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40) 1.591572431s ago: executing program 6 (id=11159): prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x7ff, 0x2, 0xfffffffc, 0x7, 0x5, 0xb9, 0x8}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) 1.512478126s ago: executing program 4 (id=11160): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x8, [{@multicast1, 0x81}, {@remote, 0x41}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 1.512295518s ago: executing program 4 (id=11161): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)}, 0x0) 1.399840512s ago: executing program 4 (id=11162): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 671.948861ms ago: executing program 6 (id=11164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="040046000500340012990000080026006c090000100051"], 0x40}}, 0x4800) 671.500371ms ago: executing program 6 (id=11165): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="016f08000100000000000800000000000000000000004500002800000000008490783fffffffac1414aa40000020", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5a02070090780014"], 0x3e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlink={0x28, 0x10, 0x409, 0x80000000, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x6}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 590.700804ms ago: executing program 6 (id=11166): write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="016f08000100000000000800000000000000000000004500002800000000008490783fffffffac1414aa40000020", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x3e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x409, 0x80000000, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 590.368055ms ago: executing program 6 (id=11167): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005500010004000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0002065e00000000000000002000ffffe000000108"], 0x38}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r2 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9, 0x0, {}, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=ANY=[@ANYBLOB="14000000360007010300000000010000037c0000"], 0x14}, 0x1, 0x0, 0x0, 0x49018}, 0xc000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x522c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f00000001c0)={0x2, 0x400, 0x0, {0x3d1, 0x5}, 0x1, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 289.645902ms ago: executing program 0 (id=11175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)}, 0x0) (fail_nth: 1) 289.224957ms ago: executing program 8 (id=11176): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="016f08000100000000000800000000000000000000004500002800000000008490783fffffffac1414aa40000020", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5a02070090780014"], 0x3e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x409, 0x80000000, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 289.089598ms ago: executing program 0 (id=11177): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) 214.802531ms ago: executing program 8 (id=11178): ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0xfffffffffffffffa, 0x7}, 0x4}, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000000000000000a0000040900020073797a300000000008000a40fffffffc0900010073797a3100000000080005400000000b200012801c000180090021006c617374000000000c00028008000140fffffffd0800034000000130140000001100010001000000000000000100000a66a9eebb0f90b5fe03f5d31ff5bda824fdde4aee300285589c2d1a713d1fbc16ada03692f4d9209a00cb5fc75dfacf6780d2032509a5750c650d29db6695b155f4fafb287219e9ff85cef2c3964a214498e5e5e958e4367fdd118512"], 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000000a0a0101000000000000000d00000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 213.961614ms ago: executing program 0 (id=11179): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x90, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x1, 0x2209, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x9, 0x21}}, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x90}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206050014000000000000000000000005000400000000000900020073797a320000000014000780050015000200000008001240000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x9) sendmmsg(r0, &(0x7f0000003d00)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2ccf75040d8a25f38e04d9d8e1796bbbb7f5af8fbff962b959a0d6c0484e073c14217bc25ea9170e1b63d1106e0b7ce99b791ba88b268d2388", 0x39}], 0x1, &(0x7f0000000180)=[{0xf0, 0x112, 0x1, "ebf87d4a8596154fab9f068547528e61e54b48ed8804de3049a1c22fdede741709d7b7b10ab508b1aa528a820e23993a6b556e093ea11662a14a403f9a865c232587161a67636bb38d91ccfb210790610790c38d51026b6ccd55f662d919aed15cc5f04a61aa00fdc761e76ceb1361a4228be1de2f959fe4cbda5cc05eee647f09f530f96f920e614f083de571f66c6da7dfa06bb63e53b2cb0206a6d3ebc0d7b2ae8f86f048b1f87abd427fc00cfc9e5bb9390d0bbf1c35201125e93fc4be7b4f7e877562887996cd9d9e6c8e8d157551feb951d978e50cbd"}, {0x40, 0x10e, 0x1ff, "01a861d596cdd391d47f28d783cf2043739469f387c09dd1d25ecd99a1da43eb92ec3633b15fb619fd5646d0cb"}, {0x18, 0x115, 0x7, "35da55e6f2"}, {0x80, 0x118, 0x4, "5951962ef845406d8bbc82f39b0081e559e3ae50d1c660a4673ecd5cb3883cdf9efdfdf021b61e496a1cebbb45fb59d2e11176fcb5555accdf82a213d26fb2b51939f62ec40af508ba24ccb32789d1ac61576b40671828a5638ee77976abc14c3305b980dbb4098c06"}, {0x58, 0x102, 0x6, "81af752e50bf3c4b5ef34ea06e6dc7f34d6b5d420d67d6889d42ab0e763cd0bfec5c66eb089b18a350c50ada822d35c78ef2e3f2ecfafc2c96b6785bd978d55340"}], 0x220}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="a7ef801bbeb6602ee99e180dc5174c8d606710db71ad664d71e7c4b530f0e0e208b84a30bbf8c22544557efde83957cb1905a9b56d413ef1e54aaaa426a47f8af5093dfb5bfe9893af87c8fbe999d08c7946f7e094a480676cf90009b34ce97557fb0f438ba7727c6c2323c4e5961573a8c2ef3dc081be78e8f66e6c3cb45fbac88bc1ca43ac6143f7c144a2de5faa10cc44d5014e91293042cee67614aa106cce1f3eaa98f5469cc2c1ae7056c9bc", 0xaf}, {&(0x7f00000003c0)="bab64648a8562a4096f61b6df7bacec47296daf4da6356d2453dc630bb2b09a0555528ba1c3f23b93eb6beed0d659eea84", 0x31}], 0x2, &(0x7f0000000840)=[{0x70, 0x10b, 0xc, "4c35d49cea5246e67d32e0824aff48e37ba9f526eea97738e0982e9efe0dc844071daa909c7eaa04a92a21d1c0ef0d160319dd347080b73e74c3ddf45f71b2ee99b6a41543fa56b442e304fb7d9f898c48d7ab91fa2a0938d710bf1a"}, {0x50, 0x45d840ea2a79e857, 0xf1ae, "f0c9204c27e05369dfbcac155e0540160dfe67af77834ba75922a656bdd70448b43b99800cf272473427c6001e0247363263906c2ec4ce8bea7ad06aa7e2c0"}, {0x80, 0x116, 0x2, "1fbf8ff1d9f4ec94870f14bd088a22e4baf695e445a6464cf6b53f868ae37514c0cb69bc05515f0c28a009a6b35d3fdc10070b41f3136ee8c333be7911da18c673565bf97944215962f6e0f9108ff95a296ed29bcda02d1b71c97859c62e01e7edc0e6eca188682ca70e"}, {0x80, 0x107, 0xf, "864bf570ab66e451e149c9b907d94f69f105910dda5b08b067c823b7b69db67ecd66a6d0e15a6edf844f2fffefbcd0a9f45978c5efae4e307cc8f369485b59f3d6ef1e84327477a29972ec8577d8b7969004a5f9102d0ae80cb31078a4d8834a95950be7a007439d5150"}, {0x78, 0x11, 0x5, "3e0096e77b853083c599b1b1cfff2d4c2a3cba3e1482cb0f75eb0f4fba5f44c773cd15bf8f6faeab66026e45180f586da52a31b04d12217a77535c2d9cb4b8336a9f40526e37df0478ca00fc13a3af06ffb4b67fa215dd5e99347236e1545ed7dece"}], 0x238}}, {{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x3, 0x1, 0x3, {0xa, 0x4e22, 0x8, @private2, 0xce47}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000a80)="aa5791175c7b5b6a9b09010aa5ff09a666d1b452537a64b75a4ca42d8c2f74a4d493ee726fb99cf64aa70c83b00b2ceb74ee4404e656f3db0352d8e82488b74335350b6c43cc41d0d0b9dbff06434a421f83616d702391f72912c1368a8980207550a528d70b44067134c98cb618935c52fcdda697fa0795296f6a90113de1dba022f79a62b459660563ff8a98d6df75f6d4a17cbb89e167e48edfa2da0d73090359e3e9fe40c68f729399bbcf1ec7c59699642c0cd19b4528019ff1ad9cbcb33182055cfa921cfc991f7c9118407ccc58383bf79cc91cbe344f76ceca4e986a1131037f318499ad5742e0ec5e71746c644d2d87", 0xf4}, {&(0x7f0000000b80)="ad0359b85463488756fa0093c9b6a034bec869e0e39a252bc9cfd255da09fe74d9286eabd88e1e6b6b36adf78a58e7a55d019495d3e3418db0e7a96dd833a5642167c2cba77fb0b4cd9dc2947209c7ac67e6ba97ebedad33305264af53a049904977bf880d628af11dab0b3ea3bbc6ff87e286c0ef0211fb19756764e7079673180f58ed951cfc1888914992009a011ec275fe2fe4d581a026a8294c2d69b35cb161bd6044a149a4680cf84c7ccf68030fbb31b391b166bd5840f775af6383f67e1eb2bad5600cf902ef50c856476dc2305abb891b0de1e745f090ce988f28da160ac2a1e5dc1b26f9687b87075efaee5b8689f029679d12c79ffcbd093d031ac7f44ecffbdb169aaf5e58c63dc6bd1eead511cf98ab8ff98f819a385eb4c4f815943b3ffd984efff50cf3f70eeccd8f719e7375d8e5edf8d07406f6dfe869a4d536fa963c768b8c2e3005225bedf01f3f3003470c903b291b0cb9bab768e043eb2d6d348d0c63a1de88e47b0ccefbb42c5378c92e0c6b3057ee5f5e921d1f7d59d487b34c1e76b6cfac64d9d4a0a38cbebf1cdb9ea149e88d76d64e79578ddc21144de7546d8dc5d55cb49690f9aa832c6b3cbd6688ec8cc4eb6d66bda060602c217d683d1b318733a9e61f4dbba78968b2e83f71eef3684cfeccf65f504f02eba0c54c9a59efbd8767e72a304de98ee07a0a4c3abbbb901ccd09f842904062d2e9662cca36dba7152182e6bb4904928d5a8e0a9f1aa2dc3149c384d20e620246ec75027d3568422a1286f732f0d0c1913411cc583d141a582e48eb93d7098bc4c0154140267d580902788627648116fb1816e7f4adeaf7f17c5d8ccc50639e2399e957aa551892241ba08370589c9f0c540e51ceb2382d71b0ddbe850a43d4dd9aff50584c78d76705e6eab779c37d7fee695a978eac279d781a3c0d7905c5f4808bc45b4e5516854f0b48574004f4c2dcac39d402a0bd18390b0737da8af4faecf3491ff1790937cf2a1121839fe742b3e26c6a4f164afd9a0ecd27e32ebf99c0a07d5c6e077cfa9591cd90616f1178ead0a9221cf91666b1b41593e3a99bef9dda4fee8360239d151986c7ab934f1d049cf7dd31f434e80c96324a3f3f82b13f15646aab14a4cb811119cc3fd1935d027591105f1cad33bbe01f875bcbe7cb54d6f6a873640d82d3b54f498ec564124eb03fa9dd3845f706bf81c32a7e480b49e712c20b489a5649429b53896f4e7435698103394fa713bf54fe373551b13347940ce91cb12e3965a8ecaa529ab4735010d7364544494b6dfbc5d3201d99b37984a5d1221adb57a29b752afd9845f5f7c89854977871233f09c3b03883ef223011394538a37e45fcb517d6328eb64773b622568b22d1f8962ebc2f4001f8bcc9662f8be105e6f66274e26eca70ed7fb69c3f1fa55694f3d0e40a251e3d9125c6d12517afe2ce721a48440e3d67d6062c5b41d7da10240f0a7bd626270bc0719b6dda120eb827ddce2ce3edf1c8a735997e86525e1360a39878706a1b42bd33224f10ea001ca4141ae5106c70e9ab61d6a110b2640381db8cccf8df89f0984d787a7b7685854e667aec7acac8bd0ba39953862d65e879e31ace15aab68cb63ae938e6b76b7c7aba9ab687ef08f6e3e64514ec4afe37095c82513cc3b3de5e75899250fdb49d4e4bc3f32329543719b1ca617953bb190b57b52f68c68e9cbcdede4f72ed6c299c8cc3c27a1b4dd78f443181e0ec7e66152f23ba3b221a076b5146c40e6ece6289d6de81e535f3bd80e72524fdbe3709a35f109e815b7390656d0a7af88d74bcdce3fe193b4a2913006dd2ffa627b76cfa077e227f1f993262c3fa767b3250e347f3391c9c5ac50f4e735308d82a2958b5c2ec9b53c71cb16268d616daf459da0ef6356509d1d92cbaa704cc712ce3178255c82f78f4160bd9493c258f941287a196f41393a373d90e9dea7057ac6ab96d5bfcad36b90a4b6e4ab8fdbd314109b3fbf4339a547b49eab9b07a4945d418af359ab93de2baefc137bc3cbd5fae0cbadd12d19bcb8917f0ac26c83c2e36f995550a45b74ea89d426299dc23859c567055995083f236dc10f2476053ac3d143c5be1c2faaf6cfe0bd7d83d6bfd9dac9f7bd70f658ebccf7bbc611efb53b317aef7d2a45406538c71fa6bcbf520d9136146fb86c97ff4b9865d36a2cf8f06e6df1bedc2ca74ce1836317f0b45dfca36b1f7bc95f9b2ad4f7ad5791ccc065422dcde22f54bdd5bbecb17da8393b92f0f4f1737ce091e380931180515357f4bedcedfda408a280f6a52807929e3200fb18a9d9e0d3eb65bed1105a47dfc6aa43697ac12cb39bbaf344aaa0ac482666492973b87e09a2882b28007c93f501c45a2ad4b74649eb697387d0c08c0654a61782dca1aab26adcc665198d9cdee216330e747aa0ab025bc22656826a13ec1b384600f428510800bb341dcb61f0a886d16398a24affa3a7fec17fa2a2e17be28b7ced71268b202a54fe551ebc4886a34a70921cc14d3196c1b44044fb11baff1026372ebf5cea93d6c3e3b5be51fb139e56a1776644d571bb19864aca8903cb9a273a3de68dd174c5e5c67b25ff7c345e066d4b2f8b813b919a0c19a888b9b69ddf8ba5f072b3e9adca5f13cd841cbc3d26f60b6b82a7dae9d773c93fda3aa3c27d1cdf8168bb43b10d825801f509b8d0ab908bf1d2dd8e8bdb00c7b20af4d4eec2ad1c8ae25ffcafda79eb2e2eeacbf1a5583d7daa7b7dae51b571ea433a9f65498e3b17d3678e351e082d97aed4861e4cef6fa939f3cb9a5af8ebd696201a904c7dc5a3dae24fecbbf50d87e4da97b20df5dbc793f1acb79fefada73514b9221122dbebf04768469a5c7757373ebd7d8ed69904f4a6df26787a28da8233776ef851bf367df5d315cc86bcd8be051a986576eb7a243764680cfd7187f6abb07aa3a0467f95783342ca3e0c4ff54ce51f6fe5465d9174a16583534a51e5c956fe55b3ee4178675e235d602df95db3eb317d5ca5eb30e7ecb0cd711bd31f81ade25186be780381e3634faaddf628da9911b43be8fc28b59cc71415730c5fe1bd13e01769eb8cfda2763932a284827046f2aca4cc7148c81be96158221469c1ebb0e328c51e1f8e0c00cfd206c54247e97c53373233ca545e336d259abbc9bfcfaeb826c043949fb29cbab540bbad3073840b0d9a794f85d584975ca145be4b23c125c663d57a1c1cd4c80c8392a9096ed406d86915d759baf0176ae87dabed56404a20714b7fd16d3440060707cca87675e362f25a48c9b7f96c5ee0c0c4d93d609969af3c7224e2a885d85f72208d8d240345eb36234d6704b26cd0edcbe7d851fcd11bc18dcbd9afba920f92d88913d78072852b731f290273925b4fb45cd411689c0bf2d5c4beb094732f6dce332ff493c8fcf34d754cfce99a6566f9e464c04bf22276ddad7b729d9f3b7288843fb3813b36e56cc89f4c8242eb2b3e490e168e42954f253275e6487515a631160f12b6fe9457b5ea67d3848911e0fff60a668922c8aaef0e155bc5b5379fb572806b4f44289311132b9d9d72674bb0721f363127988cd93c35b00e728ad0307a3cc91953340e50e7ca6e8a39e6c6dd487ea86241e04c8d559ec8f834f28742220ba32fb9c9ab4f3b7bc82d2bdc9d27e738c2e3a916dd3c88b663fe69e6d5ab5c8b4b566531332e2eec8288237f9486d9bf9e46df21eb7d8b83f16129b4182c8955572895e600685cf25229d37c91d65fe80c294fa8f3114624f599207b1944dee539985406303a3a3ccbae05fb26198eadc3a4da48826b80b8172ae5da6aa3def3d4a5824fb3eb7f030ed5e7f1113bef8295776f7cbf5ccaebecbcb04c48df297a7b73243dd63711e3335754583527ef0850a9656697e9a95db77e527f3acb8907cea2721ee1508bd5396148c1877172967082a92fb590c39954c03ff6f9bbf774cbdb0d98d144f515a7082096e4922c3b2ff1de71539c5cf88a4090ff391ec6b4c1efa475baa0db98fbfe92f0bc3711d0b3c9effd5e4b01d8267d7dd779ddab6b43d07e225663121d4db0afbf9510cf1db101ca4aab5f4af3a48f1bb6289df5bdb666aff50935288bab6c49a75ff582c9af87a9e155e1d581325820eb394a4cc5db7f2b99e1ccc94f914479f13fe2823f8ea3378088552cd2b293fd881ba396a2b11990106bcfc2956a740bd3a6528c30f0a5b153dd8fc52ecd90e57ad99a5fb71307fc8aefce75cd5f8f07fff095b33ae3177f27139af5c277a686c2266857e3ac199658b40d26964741e3b9792f204943b0c4e8ec9edc0e72c8acbb5a1bb13627abc99e9c7e30102b97bb6b2532ca1df31e705cce03baeb5e2c2dc6d80a913ee21e8636273e04208d136271ff2f192d4de4a84f64b8b6275eb12622b63eb78d1007f2831e71669f7598e4b997fbfcd19c6b690b0b9298c21bb04b7ff00f5d98370445d8ab9319b98dee75d293610cae2ff856fc725ec3f183e05ed0f981f125e969515520915d9dbe5e24ce0310730fb97495f8d67a733d4e0b2b5f9c8c7dcd95f3d46aaea741af6ae613820ef55324f9904b7b9df753c3f6943813f02fb7e369868bc1cc2a721748a11d775129826be052a0ffac35f37b567ffa2134cf8afcc3372daf614dd7b1708d91aceba5161b98765228c444c53dc13d2c5e6d4822f4fed60088d46b91dad45ab9cdf7399e46ad872888eb575a2cccdbd3f44a4ebd4581275c4683dff6ee42b27462feb712f1e857851e1fd09bbbaedf829d3d7826d7dfc00399afe08def989772bda428d5380fb937a823d20abb6fb58fde759f70b8bcaa044a4000b84fda4c5720021c4a7d9a15759964f89ba3fa2eedaef15a25ce8dc47e019d5de7cff016d11b080b52b4ffd966bf903269740b2c35aeabae8bc6e037a6ec5bf887b0fdedcac0606baa2edf503e7fb9e9aaf63e76ac3c2ff4a3199ba99544b0c672ff20404b881972e9676b0377e1b391aba46f798c46b19dff5deb0bfc92cc758584bfd0713a03b70f09900ac7a6048e209a557e05ad507257d7352896cdf896da3fb1cd00c2a0f98913aab029de08999a5f7bb9d5936856f0b14eaa1208576124b9abc4cbd489fd89905d004e6fe179a26e94c9849adb569abf1b7ea0492b3676d2fd8298fbcc6dc17a9894a8f0288bfef0b83552ccc9555efcd3c957d41653e226531b10b5114fad73c72cf6c25dfaec166c08132f3aa35b2c9c104bacd7792918b75ca0dcce0a8763b32613d2ca5385467116498749cf9862cce25c752106c1df1cffe5ddaa988028324932b28ef4caa371395dbacfbe03d1232538da12d3a338d4b4593fad2ca2c311e296179384b806df8f11351a1aa8d2c0bc689873013f6a0284478f6734ada8d27104d30d3fa2c39feb301db68184950d6465665d463d9b7069001492b3a7416770a424c54c6ac0d3e9e0f0f258dce2aa3671e5f88aa0d2f0893126bceab2e103ffa9be4e4adc8b39a5f6009414ea4cd77aafbfadb93b22fc2676604ff16233357da7748df074380029e10643ef62c040992d8d6bca56c35b72035a0667ac0c83fc42333b7070aef2370f5b03ce853e9b13737aa244e92ec8d07b01e64da53374213e5b7d6324d7f849f9ee54f4e25723b6cfc3c358332dede3c3eda02ef7982bf48a80472bb23184acce6b6d2b513cc2369372b3373494efd8596fc70a3b9de6a8ceadd2ae879d57c2634a89c2fb20978ff423658b44a81da09a19406cdf98ac276c08dadc853a864832e33de2fb9de0895d50cb94f090b15aa", 0x1000}, {&(0x7f0000000680)="0a053f53be42f5ff84c7c122c95201945dd42eafcb564eb483b8b011f71fa73ebb047f612183587a43f005c8cdff2c4ac489dfcf0826633d3df8c6baad009c7932e7a579f10a43dde53809101d3d6e297c8a76bcc3b900b5820360500ec81ffcd030d707a673626f629d28d31056ba10718fab69604a994602a2c73ce0b99488d6ed23ee97354e454b37df85d7b465880fcb0b2246a5", 0x96}, {&(0x7f0000001b80)="6226a9145c64c266f7afbdca6e84fb258fb5330b09d330f2bdb6183c8a0d42942154c9551efab0a9f1869b908e17daf4d90acf2f794132236c7be325596170bc74ef9f89", 0x44}], 0x4, &(0x7f0000001c00)=[{0x30, 0x11, 0x3, "5ce6737e3e8d8df9c8b089c8d0f9cbba22a6c15ed7bce0b2dd7133"}, {0xc8, 0x111, 0x5, "e8d41d3792e15f702f32111206b5c325cbc18ef35711458e9a34f0b1a12448c151cbe80f46eba9b46b70e3194941c372772552b0ef1c38fa5d6a76f779bb8968b4c382beebd056dfa7b69d3e99116768a99d930180ff100dc6628f41fe601deeadcbfbd43f2606fb0c7d92a6bbe67c25653e82cea505452e460fb53c269ce9fbe22da464cde99211e2f77afa47ecdbb47cab4222e5998e85a162c464c4ba789a5bee6b014196a12b2a685a46d568ac6f4ef0bafd7b"}, {0xb8, 0x113, 0x7f, "bdd23ab3666ce16711804ddd1b855bae8ec8dc3093bd3cf88f3d6f42647685a55267f3606ca18bf999244d802e0710b811598e3b8c1ce304ef8d77308dd0acd647a95ef138a2b184a337edc858a2b388c37dbf8a58a9078d383b5d60547ecb07f29a479e42e5b6cbba43b94e8e4a56aa860678577dbf18479d7774a1a230035a46c529f14a67758ba133c31f73ba02d67c2ec656636e78bf08ec13fcc57ecc43cdd64e"}, {0xc0, 0x11, 0x0, "b14a5cf6c27f803efd825a74ba13c7e9ef1e51d6cc68826b3fd570e92639632dcad21d56d82d70f61a018b18845b04300721ffe69e9a4307a4c215738dda746a8cc572a7b4f8108dc8902e572c23bce1dd9b235ec5d5b645b715c0247f528e31cf27803bf3217ffe9d4c663ec6e6d5ede7907ef43461fb75f6e3e50ceba231a95c254370c0ebef86fb57bf05a2f87e72ecbd28f59b66d0d0ad71ac590d8728d97e564766d6c138e512ad"}], 0x270}}, {{&(0x7f0000001e80)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000780)="47cc99a7172c51ae73be6436be1e82b64b5d419c3e388246dc871207344fd7722237e2bf09fb4f3182540e758d048a", 0x2f}, {&(0x7f0000001f00)="84167cf8e8acf490f295b8dc9ef68975817e74cc11debd547124541365e8f88230b4c680e0582792c190489f76eaf02217cc9b382d8aec3ca00d6e0ec6c5ece2364f2b738fee26af88beeeadb8d42794589b9c7fed04a2c408a2fff6ac60a597e5c176907b874065600599adb0058e1f6e4c14d35188fb63ab4128a4f41cc5faf43b5d0e7a35bcd534f569cd04037779989352197a6380300a751883b9035d395aa79f8586fd20145d67da11ec1657e0422c27b112466f2de9396465de7c1e54f2366b60686a2c6b22141aa08927a5c679bf", 0xd2}], 0x2, &(0x7f0000002040)=[{0xd8, 0x104, 0x10, "29e4876eb524f964b69eb17fee57d757dac08cb9b04dec402460c28a638f053bd24d802bdd012e2b561fecf5c3250656274d6ac0414ea719b6127766f6a09103b9bad22c655d885c63bf9bb1a7ceae4deaf87fcf6ea37d3d4797c1f7f4aa0969b44410dad0bbf097e7d39800112d626dd883ef9302a8298604ecb4041c439f536087af7bb3826f07d6784dba3edfb8381ee07dec25398ac256c7182eee03107ae307279a3b7819b5810d91265f5c9a6bde629672a7ff8ff28bce973efb1d7804b017ad1eab"}, {0x60, 0x11, 0xfffffffb, "cd3479f9f089e687051bd22279dee80f99594a6ef4230a5148fe391b2334331517b6bdee993a54ec5d073c2088c5f12cb885e8d7e67c35c569e1c185c369d069d11586b917114a3dd4778aa105eaae"}, {0xd8, 0x10f, 0x81, "935b1100b295e0d4a8055b5776912ce025dbd6d2870a43c689ac066c3ec6d4f1a7aec33a381be50b81a024c1bf1a814252fd04104b8b237ac5acf6b68472976e34192b8cc973b094415c25ca6524eb5e1a55e3b278ead06c9b87939bbe3ee18bab8d92c41ec82c998e3907f3935be9de36b3c0106dfe9fc0d614b8fa1b0bf63e031e101add151b34b2877718272390d456134293ea9651f2859857874de138876b658f7613a12f04b2c06f73442fe7c1126c588de2c55eb0013a56eaeb20b3cbd8b0994d34236d"}, {0x80, 0x0, 0xeac2, "732531f3ab6f6e49562b0b4098025d857fd1004b581786abdeec9bc4e3fdc37808569b84d92c6eb117e663a0f8e62cdbbe0d8fff79598644799b9d43b1af04371df5483ed5707e6c9032b608caa15091890c3d5b2ef37b199d502264943188641ca254c1a69988785ecc0031aad45b"}, {0x38, 0x84, 0x10, "d2c31f665e16f3db71428b50208511e1213f5b3adac65490adea2fac51d1b647824b"}], 0x2c8}}, {{&(0x7f0000002340)=@pptp={0x18, 0x2, {0x1, @multicast2}}, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=[{0xa8, 0x118, 0x5, "f642b2cded32ad287acf2125f5056d770efffabb91e58475af6b6d86e4f42dc2de8c3a953ca3ae05e2d79b51abb8352f7749bd7ca2fff22591abc2434bd63ac41941b239e1badbc113303b4b08e54b830d515a0b1252b27b8906d10997d8f23a62fa18ed69065e11060d9d2defacb6fa4777c090b35c6b044c91ad82508c0ebfb374cdea08dc7ee1f5c634097c832384aa"}, {0x100, 0x11, 0x5, "dbe3e279295ddb73cd533ecdbcce081772e324d864b9e4fa5ed6e5cd649a5a79a35b6cd2f0d65cf0e86d061b596bb768c42209c81eae6c9aabc87de4c3d1fb3eeb9ce0cd9a01e14c6536bcf812e3441d8dde3db4576d7325c35df6458556b164e41bf922ad827ed9954a998914ad991ee0431b242f1668d92101065d39f1ed7fb567512a37dd33eb58d6e6c936ee9a3bda226b88c8801c6dc540c9367323aa0434dfe5bf29c3d2339bb255bf0292904a82195f8e35df2437f13c00cbf59e284b70fd8f5d64ab30e22e61269445662058c38f30307a8743329f58cf95d425a83da2dfb01b293e765f82a320b5f8"}, {0xa8, 0x1, 0xf, "c2b875cb151934dfdde6dbf2d124ba350a97dea05438411ece8f51e873b3067f0deb402b414eda17bd3c3b5f1097d09622b9e291dda3b11527349841a2ee43538966ec483529c5f7c49c624e63280738ef7a2de8fbeff0872a72514b069213026d005e48a36d515be90d302f710bc34727f127ceea7353b8a5c293aa26e04bdac6f46ee5ffb9b1fb0b57b45b09fb9dfcf3c426c49808e15b"}], 0x250}}, {{&(0x7f0000002680)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002700)="0c9b341a52d2b5488ce8ccf1fb455d33cba8248016cace20b7b8cdfdf70db9b192f1857792f12524e92845c4bf4e41756b076c63a6ec7314e69b44b1d4a63db8bcf30f06c2d86f4307d478acc0f9e95a14e09372fcf20181964546a3a8553a33be4ffc3a5d0d08539d7989fc51643cc4286ae8442b2fcd88bc1368a72642d9f7c1c9b3e28ca070", 0x87}, {&(0x7f00000027c0)="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", 0xfc}, {&(0x7f00000028c0)="027988ffead109283b51f6142bf93f1c4021ef77815b7ae09c75f936", 0x1c}], 0x3, &(0x7f0000002940)=[{0x40, 0x1, 0x0, "9e1fdc089a04a6d35dfa43490f2857daf232d7dbe656d707b42a44089963bb8b0f622dfa6d528266ff7b2bd39d71"}, {0x60, 0x26, 0x6, "695220cc2a8302625f42706722d98bcfdc97e0a6c083e7b05e1df08d3f4b706fa7367ce8bbcb9499892ad93a6bd5136c873c21d25cfcb2d00e8523ea01a00aee347109d58fcb1f1817e3a9"}, {0x38, 0x114, 0x8, "159f9c5f6f1afb47e51b7ad99be02d3ecdb935d54475a0c5fe29d0a521456cf3680d"}, {0x20, 0x10f, 0x9, "96cfe4a8dc018b476bc112977333"}, {0xb0, 0x6, 0x7dae, "6d788f60b44d2e3ca28efc374213cf836f011494ece2e960db705b730f71ec37d461eaef2a4c984d1b68dc8168fc2de55b377e2fcfaf5f800e38923f1e1d62a563a3693faeda6d1dff5a2d6f6d9b029e80d84fc99fdef6f59711a83ef753a968f41a1140a9bd8bdc1a73d8096fc42f979a5968ae3aed35a4db2991753f7f688dd5fe4098c46cb285c8c08b3c66c6d0d6e8713a150c8773cf09"}], 0x1a8}}, {{&(0x7f0000002b00)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002b80)="fdd65309b6d3a8155357af2d339dec1cb71fecf870abf1c77f3f4a06911593db90a44d759f1060a4ed01c2285b7f9ac3723a4c", 0x33}, {&(0x7f0000002bc0)="2ed55eb860c3c1d3c9657f1fa1e1196444dc62297475b2a7367cb2c39335bd7505c4f5564b989a4db51bd870b92e3ebac9f24b95193fa1fbf7e5e3147063b69ce9bce97b0bb89cd8c32ff5aefed9b509918e16fac2c6187707e7de5c0ca1db4a77ed7ac996e11771c24d30c5a7594576f49980a6e2c8aec43e2728957e6681c7fbde9d1971b91660517077ad1d372da6750d9da0b582bba5356a9fa276294cccc99c402dc6a97d3745cc320483a7175a4ee3ad05f4c309744be9844b9b9e94c03d296ad83990375a1140c50dcda66443095ac5b8abf95fd80763", 0xda}, {&(0x7f0000002cc0)="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", 0x1000}], 0x3}}], 0x8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)}, 0x0) 150.520494ms ago: executing program 8 (id=11180): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24000041) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 150.096459ms ago: executing program 0 (id=11181): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x409, 0x80000000, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 149.585871ms ago: executing program 8 (id=11182): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="016f08000100000000000800000000000000000000004500002800000000008490783fffffffac1414aa40000020", @ANYRES32=0x41424344, @ANYBLOB="5a02070090780014"], 0x3e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x409, 0x80000000, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 94.396388ms ago: executing program 0 (id=11183): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x8, [{@multicast1, 0x81}, {@remote, 0x41}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980), 0x0, 0x2, 0x0) 93.965237ms ago: executing program 8 (id=11184): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x3e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x409, 0x80000000, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 93.789221ms ago: executing program 0 (id=11185): open(&(0x7f0000000280)='.\x00', 0x80, 0x122) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa7, 0xf3, 0x98, 0x8, 0x547, 0x7303, 0xc4ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0x22, 0xd3}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) epoll_create1(0x80000) socket(0x2, 0x80805, 0x0) open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 11.037229ms ago: executing program 8 (id=11186): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x8}}]}}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept4$netrom(r1, 0x0, &(0x7f0000000040), 0x800) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x220800, 0x22) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0xc0085508, &(0x7f00000000c0)=0x18) symlinkat(&(0x7f0000000200)='./cgroup/file0\x00', r3, &(0x7f0000000280)='./cgroup\x00') 0s ago: executing program 4 (id=11187): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): 14.0 probing 0547:7303 [ 735.727850][ T938] usb 13-1: USB disconnect, device number 21 [ 736.616080][ T6101] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 736.637536][T25534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.649437][T25536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10152'. [ 736.799485][ T6101] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 736.802755][ T6101] usb 13-1: config 0 interface 0 has no altsetting 0 [ 736.806852][ T6101] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 736.811659][ T6101] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 736.814388][ T6101] usb 13-1: Product: syz [ 736.815750][ T6101] usb 13-1: Manufacturer: syz [ 736.817244][ T6101] usb 13-1: SerialNumber: syz [ 736.820483][ T6101] usb 13-1: config 0 descriptor?? [ 736.825074][ T6101] usb 13-1: selecting invalid altsetting 0 [ 737.042129][ T47] usb 13-1: USB disconnect, device number 22 [ 737.595335][ T5938] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 737.636692][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10163'. [ 737.639962][T25594] 8021q: VLANs not supported on nlmon0 [ 740.862590][T25622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10173'. [ 741.116618][ T40] audit: type=1326 audit(699.465:119487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.8.10176" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe171d8f7c9 code=0x0 [ 741.174567][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10176'. [ 741.179323][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10176'. [ 741.792385][ T8354] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 741.952800][ T8354] usb 11-1: Using ep0 maxpacket: 8 [ 741.958800][ T8354] usb 11-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 741.962753][ T8354] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.968876][ T8354] usb 11-1: config 0 descriptor?? [ 741.974140][ T8354] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 742.206001][ T8354] usb 11-1: USB disconnect, device number 33 [ 742.626531][ T938] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 742.795749][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10184'. [ 742.800219][ T938] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 742.803884][ T938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.808016][ T938] usb 9-1: config 0 descriptor?? [ 742.861829][T25684] netlink: 168 bytes leftover after parsing attributes in process `syz.6.10185'. [ 744.599045][ T8354] IPVS: starting estimator thread 0... [ 744.626617][ T7255] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 744.659559][ T938] pegasus 9-1:0.0: probe with driver pegasus failed with error -71 [ 744.669302][ T938] usb 9-1: USB disconnect, device number 60 [ 744.691137][T25715] IPVS: using max 30 ests per chain, 72000 per kthread [ 744.788069][ T7255] usb 5-1: Using ep0 maxpacket: 8 [ 744.793535][ T7255] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 744.797232][ T7255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.804036][ T7255] usb 5-1: config 0 descriptor?? [ 744.808581][ T7255] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 745.028300][ T7255] usb 5-1: USB disconnect, device number 63 [ 745.687098][T25752] kvm_pr_unimpl_wrmsr: 277 callbacks suppressed [ 745.687120][T25752] kvm_intel: kvm [25751]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 746.125167][ T6007] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 746.306031][ T6007] usb 11-1: Using ep0 maxpacket: 32 [ 746.313473][ T6007] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 746.317556][ T6007] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 746.321289][ T6007] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.325462][ T6007] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 746.329169][ T6007] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 746.333094][ T6007] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 746.337128][ T6007] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 746.342550][ T6007] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 746.346118][ T6007] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.397901][ T6007] usb 11-1: config 0 descriptor?? [ 746.616904][ T7255] usb 11-1: USB disconnect, device number 34 [ 746.690715][ T6007] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 746.866008][ T6007] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 746.869604][ T6007] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 746.873054][ T6007] usb 9-1: Product: syz [ 746.874688][ T6007] usb 9-1: Manufacturer: syz [ 746.876687][ T6007] usb 9-1: SerialNumber: syz [ 746.883951][ T6007] usb 9-1: config 0 descriptor?? [ 746.887820][ T6007] ch341 9-1:0.0: ch341-uart converter detected [ 747.616843][T25798] Cannot find set identified by id 65534 to match [ 747.762008][ T6007] usb 9-1: failed to send control message: -71 [ 747.820619][ T6007] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 747.825917][ T6007] usb 9-1: USB disconnect, device number 61 [ 747.828932][ T6007] ch341 9-1:0.0: device disconnected [ 748.006301][ T6101] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 748.166623][ T6101] usb 13-1: Using ep0 maxpacket: 8 [ 748.170650][ T6101] usb 13-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 748.174060][ T6101] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.183290][ T6101] usb 13-1: config 0 descriptor?? [ 748.198372][ T6101] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 748.415313][ T7255] usb 13-1: USB disconnect, device number 23 [ 749.043780][ T8354] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 749.204085][ T8354] usb 9-1: Using ep0 maxpacket: 8 [ 749.209210][ T8354] usb 9-1: config index 0 descriptor too short (expected 12592, got 45) [ 749.212878][ T8354] usb 9-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 749.216537][ T8354] usb 9-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config [ 749.220809][ T8354] usb 9-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 749.224548][ T8354] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 749.236147][ T8354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.348390][T25879] kvm_intel: kvm [25878]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 749.459399][ T8354] usb 9-1: string descriptor 0 read error: -71 [ 749.464155][ T8354] usb 9-1: USB disconnect, device number 62 [ 750.112055][T25905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10229'. [ 750.296412][ T5938] Bluetooth: hci2: command 0x041b tx timeout [ 750.459256][T25915] kvm_intel: kvm [25914]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 751.139977][ T7255] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 751.300489][ T7255] usb 11-1: Using ep0 maxpacket: 8 [ 751.304410][ T7255] usb 11-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 751.308580][ T7255] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.314643][ T7255] usb 11-1: config 0 descriptor?? [ 751.320029][ T7255] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 751.539810][ T5997] usb 11-1: USB disconnect, device number 35 [ 751.660480][T25982] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 751.664970][T25982] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 752.316693][ T40] audit: type=1400 audit(2000000264.327:119488): avc: denied { module_load } for pid=26013 comm="syz.4.10259" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 752.328699][T26014] Invalid ELF header magic: != ELF [ 752.359184][ T7255] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 752.542353][ T7255] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.548074][ T7255] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.554168][ T7255] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 752.558098][ T7255] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 752.563671][ T7255] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 752.566704][ T7255] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.571024][ T7255] usb 13-1: config 0 descriptor?? [ 753.006776][T26041] openvswitch: netlink: IP tunnel dst address not specified [ 753.009287][ T7255] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 753.311121][ T47] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 753.431812][ T40] audit: type=1400 audit(2000000265.365:119489): avc: denied { write } for pid=26061 comm="syz.0.10273" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 753.482233][ T47] usb 11-1: Using ep0 maxpacket: 32 [ 753.485504][ T47] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.489354][ T47] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.492653][ T47] usb 11-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 753.495807][ T47] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.499806][ T47] usb 11-1: config 0 descriptor?? [ 753.503813][ T47] hub 11-1:0.0: USB hub found [ 753.719439][ T47] hub 11-1:0.0: 1 port detected [ 754.000560][ T7255] usb 13-1: USB disconnect, device number 24 [ 754.364673][ T47] hub 11-1:0.0: hub_ext_port_status failed (err = 0) [ 754.691015][ T8354] usb 11-1: USB disconnect, device number 36 [ 754.904766][ T6007] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 754.932840][T26134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26134 comm=syz.8.10288 [ 755.065225][ T6007] usb 9-1: Using ep0 maxpacket: 8 [ 755.068945][ T6007] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 755.072030][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.078433][ T6007] usb 9-1: config 0 descriptor?? [ 755.082097][ T6007] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 755.303951][ T6007] usb 9-1: USB disconnect, device number 63 [ 755.458959][T26166] ntfs3(loop8): try to read out of volume at offset 0x0 [ 755.578225][ T6007] IPVS: starting estimator thread 0... [ 755.696097][T26168] IPVS: using max 49 ests per chain, 117600 per kthread [ 756.108850][T26179] serio: Serial port ptm0 [ 756.742022][T26188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10300'. [ 757.252747][T26202] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10305'. [ 757.782018][ T6007] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 757.942388][ T6007] usb 13-1: Using ep0 maxpacket: 8 [ 757.946409][ T6007] usb 13-1: config index 0 descriptor too short (expected 30, got 18) [ 757.952801][ T6007] usb 13-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 757.961895][ T6007] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.968844][ T6007] usb 13-1: Product: syz [ 757.973037][ T6007] usb 13-1: Manufacturer: syz [ 757.979942][ T6007] usb 13-1: SerialNumber: syz [ 757.984432][ T6007] usb 13-1: config 0 descriptor?? [ 757.989502][ T6007] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 757.993058][ T6007] usb 13-1: setting power ON [ 757.995161][ T6007] dvb-usb: bulk message failed: -22 (2/0) [ 758.000572][ T6007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 758.005098][ T6007] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 758.010215][ T6007] usb 13-1: media controller created [ 758.027311][ T6007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.046148][ T6007] usb 13-1: selecting invalid altsetting 6 [ 758.048748][ T6007] usb 13-1: digital interface selection failed (-22) [ 758.051710][ T6007] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 758.055925][ T6007] usb 13-1: setting power OFF [ 758.060177][ T6007] dvb-usb: bulk message failed: -22 (2/0) [ 758.063834][ T6007] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 758.067809][ T6007] (NULL device *): no alternate interface [ 758.096662][ T6007] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 758.303930][ T47] usb 13-1: USB disconnect, device number 25 [ 758.829760][ T47] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 758.990747][ T47] usb 11-1: Using ep0 maxpacket: 8 [ 758.997631][ T47] usb 11-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 759.002280][ T47] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.009919][ T47] usb 11-1: config 0 descriptor?? [ 759.015579][ T47] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 759.025697][ T40] audit: type=1326 audit(2000000270.591:119490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26270 comm="syz.0.10323" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42b758f7c9 code=0x0 [ 759.149172][T26287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10327'. [ 759.238397][ T6007] usb 11-1: USB disconnect, device number 37 [ 760.013300][T26317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10336'. [ 762.261971][T26378] serio: Serial port ptm0 [ 762.643569][ T40] audit: type=1400 audit(2000000273.976:119491): avc: denied { map } for pid=26395 comm="syz.4.10361" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 762.652701][ T40] audit: type=1400 audit(2000000273.985:119492): avc: denied { call } for pid=26395 comm="syz.4.10361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 763.118671][ T1455] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 763.289641][ T1455] usb 9-1: Using ep0 maxpacket: 16 [ 763.293940][ T1455] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 763.298208][ T1455] usb 9-1: config 0 has no interface number 0 [ 763.301095][ T1455] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 763.307757][ T1455] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 763.311689][ T1455] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.315128][ T1455] usb 9-1: Product: syz [ 763.316904][ T1455] usb 9-1: Manufacturer: syz [ 763.318912][ T1455] usb 9-1: SerialNumber: syz [ 763.323372][ T1455] usb 9-1: config 0 descriptor?? [ 763.326418][T26404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 763.331410][ T1455] asix 9-1:0.251: probe with driver asix failed with error -22 [ 763.549321][ T47] usb 9-1: USB disconnect, device number 64 [ 764.786995][ T6101] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 764.869340][T26465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10377'. [ 764.947440][ T6101] usb 13-1: Using ep0 maxpacket: 32 [ 764.950916][ T6101] usb 13-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 764.954179][ T6101] usb 13-1: config 0 interface 0 has no altsetting 0 [ 764.956472][ T6101] usb 13-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 764.959782][ T6101] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.963867][ T6101] usb 13-1: config 0 descriptor?? [ 764.987895][T26471] could not allocate digest TFM handle [ 765.208349][ T6101] usbhid 13-1:0.0: can't add hid device: -71 [ 765.210412][ T6101] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 765.214387][ T6101] usb 13-1: USB disconnect, device number 26 [ 766.169765][ T47] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 766.349650][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 766.361471][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 766.368108][ T47] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 766.371948][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.375128][ T47] usb 5-1: Product: syz [ 766.376821][ T47] usb 5-1: Manufacturer: syz [ 766.386962][ T47] usb 5-1: SerialNumber: syz [ 766.398542][ T47] usb 5-1: config 0 descriptor?? [ 766.409436][ T47] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 766.419336][ T47] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 766.681395][T26515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10387'. [ 766.753190][T26519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10388'. [ 767.043746][ T7255] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 767.054491][ T47] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 767.210067][ T7255] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 767.214180][ T7255] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.217812][ T7255] usb 9-1: Product: syz [ 767.219749][ T7255] usb 9-1: Manufacturer: syz [ 767.221811][ T7255] usb 9-1: SerialNumber: syz [ 767.229801][ T7255] r8152-cfgselector 9-1: Unknown version 0x0000 [ 767.232713][ T7255] r8152-cfgselector 9-1: config 0 descriptor?? [ 767.453170][ T7255] r8152-cfgselector 9-1: Unknown version 0x0000 [ 767.455640][ T7255] r8152-cfgselector 9-1: bad CDC descriptors [ 767.493010][ T47] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 767.495965][ T47] em28xx 5-1:0.0: board has no eeprom [ 767.670614][T10910] r8152-cfgselector 9-1: USB disconnect, device number 65 [ 767.770975][ T47] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 767.774186][ T47] em28xx 5-1:0.0: dvb set to bulk mode. [ 767.778120][ T7255] em28xx 5-1:0.0: Binding DVB extension [ 767.788924][ T47] usb 5-1: USB disconnect, device number 64 [ 767.791418][ T47] em28xx 5-1:0.0: Disconnecting em28xx [ 767.809290][ T7255] em28xx 5-1:0.0: Registering input extension [ 767.815837][ T47] em28xx 5-1:0.0: Closing input extension [ 767.837327][ T47] em28xx 5-1:0.0: Freeing device [ 768.354681][T26569] serio: Serial port ptm0 [ 768.433014][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10396'. [ 769.279131][T26593] kvm: pic: non byte read [ 769.281620][T26593] kvm: pic: non byte read [ 769.284167][T26593] kvm: pic: single mode not supported [ 769.284175][T26593] kvm: pic: level sensitive irq not supported [ 769.287540][T26593] kvm: pic: non byte read [ 769.292321][T26593] kvm: pic: non byte read [ 769.294751][T26593] kvm: pic: non byte read [ 769.297202][T26593] kvm: pic: non byte read [ 769.299747][T26593] kvm: pic: non byte read [ 769.302456][T26593] kvm: pic: non byte read [ 769.305100][T26593] kvm: pic: non byte read [ 769.482264][ T1455] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 769.738927][ T1455] usb 5-1: Using ep0 maxpacket: 16 [ 769.742722][ T1455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 769.748507][ T1455] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 769.752450][ T1455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.755746][ T1455] usb 5-1: Product: syz [ 769.757483][ T1455] usb 5-1: Manufacturer: syz [ 769.759415][ T1455] usb 5-1: SerialNumber: syz [ 769.763734][ T1455] usb 5-1: config 0 descriptor?? [ 769.769070][ T1455] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 769.773082][ T1455] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 770.424948][ T1455] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 770.865021][ T1455] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 770.870202][ T1455] em28xx 5-1:0.0: board has no eeprom [ 770.947434][ T1455] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 770.950092][ T1455] em28xx 5-1:0.0: dvb set to bulk mode. [ 770.952024][ T8354] em28xx 5-1:0.0: Binding DVB extension [ 770.961372][ T1455] usb 5-1: USB disconnect, device number 65 [ 770.964959][ T1455] em28xx 5-1:0.0: Disconnecting em28xx [ 770.986838][ T8354] em28xx 5-1:0.0: Registering input extension [ 770.988961][ T1455] em28xx 5-1:0.0: Closing input extension [ 771.000886][ T1455] em28xx 5-1:0.0: Freeing device [ 771.194781][T26646] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10409'. [ 771.198683][T26646] netlink: 108 bytes leftover after parsing attributes in process `syz.8.10409'. [ 771.202882][T26646] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10409'. [ 771.207088][T26646] netlink: 108 bytes leftover after parsing attributes in process `syz.8.10409'. [ 771.211227][T26646] netlink: 84 bytes leftover after parsing attributes in process `syz.8.10409'. [ 772.459086][ T6101] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 772.615848][ T6101] usb 13-1: Using ep0 maxpacket: 8 [ 772.619609][ T6101] usb 13-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 772.623301][ T6101] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.629411][ T6101] usb 13-1: config 0 descriptor?? [ 772.634666][ T6101] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 772.852215][ T938] usb 13-1: USB disconnect, device number 27 [ 773.787295][ T40] audit: type=1400 audit(2000000284.392:119493): avc: denied { write } for pid=26727 comm="syz.6.10433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 773.803218][ T6101] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 773.818529][ T5938] Bluetooth: hci0: sending frame failed (-49) [ 773.821594][ T921] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 773.974268][ T6101] usb 13-1: Using ep0 maxpacket: 16 [ 773.978702][ T6101] usb 13-1: config 0 interface 0 altsetting 66 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 773.983621][ T6101] usb 13-1: config 0 interface 0 has no altsetting 0 [ 773.986309][ T6101] usb 13-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 773.989287][ T6101] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.993841][ T6101] usb 13-1: config 0 descriptor?? [ 774.215968][ T6101] usb 13-1: string descriptor 0 read error: -71 [ 774.223239][ T6101] usbhid 13-1:0.0: can't add hid device: -71 [ 774.226490][ T6101] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 774.233014][ T6101] usb 13-1: USB disconnect, device number 28 [ 776.680171][ T6101] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 776.792394][T26821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10460'. [ 776.851223][ T6101] usb 13-1: Using ep0 maxpacket: 16 [ 776.855600][ T6101] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 776.863411][ T6101] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 776.867281][ T6101] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.870511][ T6101] usb 13-1: Product: syz [ 776.872284][ T6101] usb 13-1: Manufacturer: syz [ 776.878660][ T6101] usb 13-1: SerialNumber: syz [ 776.882814][ T6101] usb 13-1: config 0 descriptor?? [ 776.887938][ T6101] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 776.891822][ T6101] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 777.515167][T26829] omfs: Invalid superblock (0) [ 777.536291][ T6101] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 777.703756][T26845] netlink: 'syz.6.10470': attribute type 1 has an invalid length. [ 777.788945][T26881] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 777.978542][ T6101] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 777.984457][ T6101] em28xx 13-1:0.0: board has no eeprom [ 778.025551][ T40] audit: type=1804 audit(2000000288.356:119494): pid=26906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.10477" name="/newroot/248/file0" dev="tmpfs" ino=1356 res=1 errno=0 [ 778.049475][ T6101] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 778.053152][ T6101] em28xx 13-1:0.0: dvb set to bulk mode. [ 778.057262][ T6007] em28xx 13-1:0.0: Binding DVB extension [ 778.063704][ T6101] usb 13-1: USB disconnect, device number 29 [ 778.071005][ T6101] em28xx 13-1:0.0: Disconnecting em28xx [ 778.079917][ T6007] em28xx 13-1:0.0: Registering input extension [ 778.090633][ T6101] em28xx 13-1:0.0: Closing input extension [ 778.106028][ T6101] em28xx 13-1:0.0: Freeing device [ 779.097473][ T6101] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 779.196753][ T40] audit: type=1400 audit(2000000289.460:119495): avc: denied { mounton } for pid=26956 comm="syz.0.10491" path="/253/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 779.257544][ T6101] usb 9-1: Using ep0 maxpacket: 8 [ 779.261478][ T6101] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 779.265122][ T6101] usb 9-1: config 179 has no interface number 0 [ 779.267840][ T6101] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 779.272778][ T6101] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 779.277361][ T6101] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 779.282047][ T6101] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 779.287790][ T6101] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 779.295517][ T6101] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 779.299397][ T6101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.306756][T26947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 779.803027][ T5997] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 779.803292][ T6101] usb 9-1: USB disconnect, device number 66 [ 779.803348][ C3] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 779.810763][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 779.963464][ T5997] usb 5-1: Using ep0 maxpacket: 16 [ 779.966888][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 779.972099][ T5997] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 779.975208][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.977921][ T5997] usb 5-1: Product: syz [ 779.979287][ T5997] usb 5-1: Manufacturer: syz [ 779.980833][ T5997] usb 5-1: SerialNumber: syz [ 779.984009][ T5997] usb 5-1: config 0 descriptor?? [ 779.990811][ T5997] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 779.993982][ T5997] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 780.049045][ T938] usb 13-1: new full-speed USB device number 30 using dummy_hcd [ 780.216219][ T938] usb 13-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 780.219117][ T938] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.222850][ T938] usb 13-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 780.226687][ T938] usb 13-1: config 1 has no interface number 1 [ 780.229791][ T938] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 780.234551][ T938] usb 13-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 780.239861][ T938] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 780.243250][ T938] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.245772][ T938] usb 13-1: Product: syz [ 780.247136][ T938] usb 13-1: Manufacturer: syz [ 780.248783][ T938] usb 13-1: SerialNumber: syz [ 780.648423][ T5997] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 780.653314][ T938] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.655608][ T938] usb 13-1: MIDIStreaming interface descriptor not found [ 780.718126][ T938] usb 13-1: USB disconnect, device number 30 [ 781.116284][ T5997] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 781.120483][ T5997] em28xx 5-1:0.0: board has no eeprom [ 781.183239][ T5997] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 781.185844][ T5997] em28xx 5-1:0.0: dvb set to bulk mode. [ 781.191280][ T5997] usb 5-1: USB disconnect, device number 66 [ 781.194285][ T5997] em28xx 5-1:0.0: Disconnecting em28xx [ 781.196052][ T938] em28xx 5-1:0.0: Binding DVB extension [ 781.341468][ T938] em28xx 5-1:0.0: Registering input extension [ 781.345083][ T5997] em28xx 5-1:0.0: Closing input extension [ 781.361190][ T5997] em28xx 5-1:0.0: Freeing device [ 781.369342][ T40] audit: type=1400 audit(2000000291.489:119496): avc: denied { ioctl } for pid=27064 comm="syz.8.10505" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 784.326851][T27144] input: syz1 as /devices/virtual/input/input97 [ 784.583921][ T7255] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 784.744141][ T7255] usb 13-1: Using ep0 maxpacket: 8 [ 784.747146][ T7255] usb 13-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 784.750824][ T7255] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.760612][ T7255] usb 13-1: config 0 descriptor?? [ 784.766535][ T7255] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 785.034216][ T6007] usb 13-1: USB disconnect, device number 31 [ 786.957099][ T6007] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 787.033013][ T7255] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 787.118616][ T6007] usb 13-1: Using ep0 maxpacket: 16 [ 787.123593][ T6007] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 787.129528][ T6007] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 787.133880][ T6007] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.137687][ T6007] usb 13-1: Product: syz [ 787.140342][ T6007] usb 13-1: Manufacturer: syz [ 787.142535][ T6007] usb 13-1: SerialNumber: syz [ 787.146951][ T6007] usb 13-1: config 0 descriptor?? [ 787.152104][ T6007] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 787.155977][ T6007] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 787.204495][ T7255] usb 5-1: Using ep0 maxpacket: 8 [ 787.207410][ T7255] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 787.210334][ T7255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.215710][ T7255] usb 5-1: config 0 descriptor?? [ 787.220171][ T7255] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 787.447614][ T7255] usb 5-1: USB disconnect, device number 67 [ 787.811904][ T6007] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 788.254368][ T6007] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 788.257715][ T6007] em28xx 13-1:0.0: board has no eeprom [ 788.337829][ T6007] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 788.341284][ T6007] em28xx 13-1:0.0: dvb set to bulk mode. [ 788.347405][ T6007] usb 13-1: USB disconnect, device number 32 [ 788.351580][ T6007] em28xx 13-1:0.0: Disconnecting em28xx [ 788.353706][ T6101] em28xx 13-1:0.0: Binding DVB extension [ 788.375403][ T6101] em28xx 13-1:0.0: Registering input extension [ 788.378403][ T6007] em28xx 13-1:0.0: Closing input extension [ 788.388794][ T6007] em28xx 13-1:0.0: Freeing device [ 788.401928][ T1455] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 788.562379][ T1455] usb 5-1: Using ep0 maxpacket: 8 [ 788.574986][ T1455] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 788.578238][ T1455] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 788.582679][ T1455] usb 5-1: config 6 has no interface number 0 [ 788.586043][ T1455] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 788.590692][ T1455] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 788.596862][ T1455] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.604299][ T1455] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 788.608357][ T1455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.611622][ T1455] usb 5-1: Product: syz [ 788.613370][ T1455] usb 5-1: Manufacturer: syz [ 788.615332][ T1455] usb 5-1: SerialNumber: syz [ 788.621783][ T1455] hso 5-1:6.2: Failed to find INT IN ep [ 788.676747][ T40] audit: type=1400 audit(2000000298.314:119497): avc: denied { mount } for pid=27284 comm="syz.6.10559" name="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 788.686926][ T40] audit: type=1400 audit(2000000298.314:119498): avc: denied { search } for pid=27284 comm="syz.6.10559" name="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 788.696555][ T40] audit: type=1400 audit(2000000298.314:119499): avc: denied { search } for pid=27284 comm="syz.6.10559" name="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 788.706170][ T40] audit: type=1400 audit(2000000298.314:119500): avc: denied { read open } for pid=27284 comm="syz.6.10559" path="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 788.715702][ T40] audit: type=1400 audit(2000000298.314:119501): avc: denied { search } for pid=27284 comm="syz.6.10559" name="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 788.883286][ T921] Bluetooth: hci4: command 0x0406 tx timeout [ 789.059229][T27309] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10567'. [ 789.140833][T10910] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 789.229950][ T40] audit: type=1400 audit(2000000298.838:119502): avc: denied { mount } for pid=27324 comm="syz.8.10573" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 789.311272][T10910] usb 11-1: Using ep0 maxpacket: 8 [ 789.314925][T10910] usb 11-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 789.318455][T10910] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.324727][T10910] usb 11-1: config 0 descriptor?? [ 789.330421][T10910] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 789.418209][ T6007] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 789.554557][ T1455] usb 11-1: USB disconnect, device number 38 [ 789.589492][ T6007] usb 9-1: Using ep0 maxpacket: 16 [ 789.594144][ T6007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 789.600998][ T6007] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 789.604796][ T6007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.608131][ T6007] usb 9-1: Product: syz [ 789.609965][ T6007] usb 9-1: Manufacturer: syz [ 789.612902][ T6007] usb 9-1: SerialNumber: syz [ 789.617461][ T6007] usb 9-1: config 0 descriptor?? [ 789.623561][ T6007] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 789.627657][ T6007] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 790.118783][ T40] audit: type=1400 audit(2000000299.661:119503): avc: denied { read } for pid=27345 comm="syz.6.10575" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 790.255657][T27351] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10577'. [ 790.269981][ T6007] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 790.648110][ T1455] usb 13-1: new full-speed USB device number 33 using dummy_hcd [ 790.716370][ T6007] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 790.718938][ T6007] em28xx 9-1:0.0: board has no eeprom [ 790.787197][ T6007] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 790.790528][ T6007] em28xx 9-1:0.0: dvb set to bulk mode. [ 790.792987][ T6101] em28xx 9-1:0.0: Binding DVB extension [ 790.799347][ T6007] usb 9-1: USB disconnect, device number 67 [ 790.802861][ T6007] em28xx 9-1:0.0: Disconnecting em28xx [ 790.824452][ T6101] em28xx 9-1:0.0: Registering input extension [ 790.827228][ T6007] em28xx 9-1:0.0: Closing input extension [ 790.831527][ T1455] usb 13-1: unable to get BOS descriptor or descriptor too short [ 790.835019][ T1455] usb 13-1: not running at top speed; connect to a high speed hub [ 790.840193][ T1455] usb 13-1: config 0 has an invalid interface number: 88 but max is 0 [ 790.841272][ T6007] em28xx 9-1:0.0: Freeing device [ 790.843143][ T1455] usb 13-1: config 0 has no interface number 0 [ 790.847334][ T1455] usb 13-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 790.850573][ T1455] usb 13-1: config 0 interface 88 has no altsetting 0 [ 790.854502][ T1455] usb 13-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 790.857537][ T1455] usb 13-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 790.860165][ T1455] usb 13-1: Product: syz [ 790.861639][ T1455] usb 13-1: Manufacturer: syz [ 790.863487][ T1455] usb 13-1: SerialNumber: syz [ 790.866487][ T1455] usb 13-1: config 0 descriptor?? [ 791.091702][ T1455] usb 13-1: USB disconnect, device number 33 [ 791.247841][ T6007] usb 5-1: USB disconnect, device number 68 [ 791.643190][ T6007] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 791.803070][ T6007] usb 9-1: Using ep0 maxpacket: 8 [ 791.808574][ T6007] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 791.812562][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.822585][ T6007] usb 9-1: config 0 descriptor?? [ 791.828074][ T6007] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 791.974146][ T7255] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 792.051381][ T325] usb 9-1: USB disconnect, device number 68 [ 792.149358][ T7255] usb 13-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 792.152307][ T7255] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.155039][ T7255] usb 13-1: Product: syz [ 792.156491][ T7255] usb 13-1: Manufacturer: syz [ 792.158397][ T7255] usb 13-1: SerialNumber: syz [ 792.161360][ T7255] usb 13-1: config 0 descriptor?? [ 792.382903][ T7255] usb-storage 13-1:0.0: USB Mass Storage device detected [ 792.705417][ T7255] usb 13-1: USB disconnect, device number 34 [ 793.610834][ T6007] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 793.772714][ T40] audit: type=1400 audit(2000000303.083:119504): avc: denied { unmount } for pid=17391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 793.781753][ T6007] usb 5-1: Using ep0 maxpacket: 16 [ 793.787250][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 793.793860][ T6007] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 793.797925][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.801466][ T6007] usb 5-1: Product: syz [ 793.803881][ T6007] usb 5-1: Manufacturer: syz [ 793.806392][ T6007] usb 5-1: SerialNumber: syz [ 793.810849][ T6007] usb 5-1: config 0 descriptor?? [ 793.817060][ T6007] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 793.821646][ T6007] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 793.864280][T27491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10598'. [ 793.886764][T27493] overlayfs: failed to resolve './bus': -2 [ 794.564257][T27501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 794.625070][ T6007] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 794.815749][T27515] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10606'. [ 795.025721][ T921] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 795.236494][T27536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 795.488464][T27546] fuse: Bad value for 'fd' [ 795.990522][ T40] audit: type=1400 audit(2000000304.971:119505): avc: denied { bind } for pid=27547 comm="syz.8.10616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 796.169226][ T6007] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 796.172216][ T6007] em28xx 5-1:0.0: board has no eeprom [ 796.582061][ T6007] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 796.585079][ T6007] em28xx 5-1:0.0: dvb set to bulk mode. [ 796.587777][ T6101] em28xx 5-1:0.0: Binding DVB extension [ 796.591594][ T6007] usb 5-1: USB disconnect, device number 69 [ 796.594416][ T6007] em28xx 5-1:0.0: Disconnecting em28xx [ 796.642610][ T6101] em28xx 5-1:0.0: Registering input extension [ 796.649304][ T6007] em28xx 5-1:0.0: Closing input extension [ 796.662816][ T6007] em28xx 5-1:0.0: Freeing device [ 797.039612][T27592] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10625'. [ 797.073319][ T40] audit: type=1400 audit(2000000306.168:119506): avc: denied { map } for pid=27597 comm="syz.6.10626" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.092243][ T40] audit: type=1400 audit(2000000306.168:119507): avc: denied { execute } for pid=27597 comm="syz.6.10626" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.114341][ T40] audit: type=1400 audit(2000000306.206:119508): avc: denied { watch_reads } for pid=27604 comm="syz.6.10629" path="/330" dev="tmpfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 798.112277][T27622] netlink: 'syz.4.10635': attribute type 4 has an invalid length. [ 798.128357][T27624] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10636'. [ 798.284402][ T6007] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 798.412629][ T6101] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 798.446988][ T6007] usb 5-1: config 4 has an invalid interface number: 118 but max is 0 [ 798.451093][ T6007] usb 5-1: config 4 has no interface number 0 [ 798.453746][ T6007] usb 5-1: config 4 interface 118 has no altsetting 0 [ 798.459195][ T6007] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.71 [ 798.463080][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 798.466551][ T6007] usb 5-1: Manufacturer: syz [ 798.573121][ T6101] usb 9-1: Using ep0 maxpacket: 8 [ 798.578886][ T6101] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 798.582819][ T6101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.589590][ T6101] usb 9-1: config 0 descriptor?? [ 798.595562][ T6101] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 798.598656][ T6101] videodev: could not get a free minor [ 798.601087][ T6101] gspca_main: video_register_device err -23 [ 798.603839][ T6101] dtcs033 9-1:0.0: probe with driver dtcs033 failed with error -23 [ 798.692279][ T8354] usb 5-1: USB disconnect, device number 70 [ 798.820543][ T1455] usb 9-1: USB disconnect, device number 69 [ 799.567899][ T6101] usb 11-1: new full-speed USB device number 39 using dummy_hcd [ 799.835227][T27678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10647'. [ 799.924817][ T40] audit: type=1400 audit(2000000308.833:119509): avc: denied { cmd } for pid=27681 comm="syz.4.10649" path="socket:[229609]" dev="sockfs" ino=229609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 800.629632][ T6101] usb 11-1: config 0 has an invalid interface number: 49 but max is 0 [ 800.633250][ T6101] usb 11-1: config 0 has no interface number 0 [ 800.636026][ T6101] usb 11-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 800.646590][ T6101] usb 11-1: config 0 interface 49 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 800.652204][ T6101] usb 11-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 800.655155][ T6101] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.657735][ T6101] usb 11-1: Product: syz [ 800.659242][ T6101] usb 11-1: Manufacturer: syz [ 800.660766][ T6101] usb 11-1: SerialNumber: syz [ 800.663655][ T6101] usb 11-1: config 0 descriptor?? [ 800.889298][ T6101] usb 11-1: USB disconnect, device number 39 [ 801.604015][T10910] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 801.781756][T10910] usb 13-1: Using ep0 maxpacket: 16 [ 801.804347][T10910] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 801.824544][T10910] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 801.828068][T10910] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.830988][T10910] usb 13-1: Product: syz [ 801.832846][T10910] usb 13-1: Manufacturer: syz [ 801.835271][T10910] usb 13-1: SerialNumber: syz [ 801.851772][T10910] usb 13-1: config 0 descriptor?? [ 801.876560][T10910] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 801.880714][T10910] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 802.220230][ T5997] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 802.250965][T27737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 802.253403][T27737] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 802.259355][T27737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 802.261780][T27737] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 802.266827][T27737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 802.268862][T27737] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 802.274470][T27737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 802.276528][T27737] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 802.412752][ T5997] usb 9-1: Using ep0 maxpacket: 8 [ 802.417418][ T5997] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 802.421110][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.427620][ T5997] usb 9-1: config 0 descriptor?? [ 802.433582][ T5997] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 802.507210][T10910] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 802.518000][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10673'. [ 802.652418][ T8354] usb 9-1: USB disconnect, device number 70 [ 802.843015][T13159] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 802.941567][T10910] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 802.944345][T10910] em28xx 13-1:0.0: board has no eeprom [ 803.002835][T13159] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.006930][T13159] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.011538][T10910] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 803.014109][T10910] em28xx 13-1:0.0: dvb set to bulk mode. [ 803.014125][T13159] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.020414][T13159] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.021231][T10910] usb 13-1: USB disconnect, device number 35 [ 803.023723][T13159] usb 11-1: Product: syz [ 803.027179][T10910] em28xx 13-1:0.0: Disconnecting em28xx [ 803.028066][T13159] usb 11-1: Manufacturer: syz [ 803.030354][ T5997] em28xx 13-1:0.0: Binding DVB extension [ 803.032301][T13159] usb 11-1: SerialNumber: syz [ 803.039472][T13159] cdc_mbim 11-1:1.0: skipping garbage [ 803.053814][ T5997] em28xx 13-1:0.0: Registering input extension [ 803.056135][T10910] em28xx 13-1:0.0: Closing input extension [ 803.067024][T10910] em28xx 13-1:0.0: Freeing device [ 803.813823][ T40] audit: type=1400 audit(2000000312.405:119510): avc: denied { setattr } for pid=27826 comm="syz.8.10680" name="ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 803.956835][T27832] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10681'. [ 804.222058][T27838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10682'. [ 804.276472][T13159] cdc_mbim 11-1:1.0: bind() failure [ 804.281768][T13159] usbtest 11-1:1.1: probe with driver usbtest failed with error -71 [ 804.287250][T13159] usb 11-1: USB disconnect, device number 40 [ 804.573241][ T5997] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 804.990199][ T5997] usb 9-1: Using ep0 maxpacket: 8 [ 804.994080][ T5997] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 804.997424][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.002381][ T5997] usb 9-1: config 0 descriptor?? [ 805.006517][ T5997] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 805.234338][T13159] usb 9-1: USB disconnect, device number 71 [ 805.542052][T27888] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.10689'. [ 805.545258][T27888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10689'. [ 805.600140][T13159] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 805.781921][T13159] usb 13-1: Using ep0 maxpacket: 16 [ 805.789435][T13159] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.802628][T13159] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 805.809382][T13159] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.816313][T13159] usb 13-1: Product: syz [ 805.820688][T13159] usb 13-1: Manufacturer: syz [ 805.825190][T13159] usb 13-1: SerialNumber: syz [ 805.833736][T13159] usb 13-1: config 0 descriptor?? [ 805.849970][T13159] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 805.854292][T13159] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 805.935058][T27895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10691'. [ 806.505913][T13159] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 806.867544][T27917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10700'. [ 806.943923][T13159] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 806.953236][T13159] em28xx 13-1:0.0: board has no eeprom [ 807.032986][T13159] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 807.036247][T13159] em28xx 13-1:0.0: dvb set to bulk mode. [ 807.040971][T13159] usb 13-1: USB disconnect, device number 36 [ 807.050320][T13159] em28xx 13-1:0.0: Disconnecting em28xx [ 807.052796][ T8354] em28xx 13-1:0.0: Binding DVB extension [ 807.074535][ T8354] em28xx 13-1:0.0: Registering input extension [ 807.078572][T13159] em28xx 13-1:0.0: Closing input extension [ 807.089574][T13159] em28xx 13-1:0.0: Freeing device [ 807.272643][T27952] kvm_intel: kvm [27951]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 807.307241][T27963] loop5: detected capacity change from 0 to 7 [ 807.310083][T27963] Dev loop5: unable to read RDB block 7 [ 807.312819][T27963] loop5: unable to read partition table [ 807.314879][T27963] loop5: partition table beyond EOD, truncated [ 807.316712][T27963] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 807.488359][T27973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10709'. [ 807.814579][ T6101] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 807.984859][ T6101] usb 9-1: Using ep0 maxpacket: 8 [ 807.991222][ T6101] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 807.995129][ T6101] usb 9-1: config 16 has an invalid interface number: 13 but max is 0 [ 807.999368][ T6101] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 808.004038][ T6101] usb 9-1: config 16 has no interface number 0 [ 808.007821][ T6101] usb 9-1: too many endpoints for config 16 interface 13 altsetting 170: 97, using maximum allowed: 30 [ 808.012412][ T6101] usb 9-1: config 16 interface 13 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 808.012578][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10721'. [ 808.021122][ T6101] usb 9-1: config 16 interface 13 has no altsetting 0 [ 808.024129][ T6101] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 808.029067][ T6101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.348747][ T6101] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 808.509497][ T6101] usb 5-1: Using ep0 maxpacket: 16 [ 808.513214][ T6101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 808.519067][ T6101] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 808.522906][ T6101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.526014][ T6101] usb 5-1: Product: syz [ 808.527620][ T6101] usb 5-1: Manufacturer: syz [ 808.529686][ T6101] usb 5-1: SerialNumber: syz [ 808.533898][ T6101] usb 5-1: config 0 descriptor?? [ 808.537733][ T6101] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 808.541447][ T6101] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 808.544302][T28027] fuse: Bad value for 'fd' [ 808.776339][ T8354] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 808.840493][ T6007] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 808.959511][ T8354] usb 11-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.963783][ T8354] usb 11-1: config 0 interface 0 has no altsetting 0 [ 808.967692][ T8354] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 808.970880][ T8354] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 808.973783][ T8354] usb 11-1: Product: syz [ 808.975472][ T8354] usb 11-1: Manufacturer: syz [ 808.977053][ T8354] usb 11-1: SerialNumber: syz [ 808.980057][ T8354] usb 11-1: config 0 descriptor?? [ 808.990577][ T8354] snd-usb-audio 11-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 809.000834][ T6007] usb 13-1: Using ep0 maxpacket: 8 [ 809.004567][ T6007] usb 13-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 809.008559][ T6007] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.014355][ T6007] usb 13-1: config 0 descriptor?? [ 809.020166][ T6007] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 809.183237][ T6101] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 809.199333][ T8354] usb 11-1: USB disconnect, device number 41 [ 809.251417][ T325] usb 13-1: USB disconnect, device number 37 [ 809.621275][ T6101] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 809.624815][ T6101] em28xx 5-1:0.0: board has no eeprom [ 809.685505][ T6101] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 809.685937][T29367] wlan1: Trigger new scan to find an IBSS to join [ 809.688966][ T6101] em28xx 5-1:0.0: dvb set to bulk mode. [ 809.693274][ T6007] em28xx 5-1:0.0: Binding DVB extension [ 809.708796][ T6101] usb 5-1: USB disconnect, device number 71 [ 809.714703][ T6101] em28xx 5-1:0.0: Disconnecting em28xx [ 809.721655][ T6007] em28xx 5-1:0.0: Registering input extension [ 809.727044][ T6101] em28xx 5-1:0.0: Closing input extension [ 809.740665][ T6101] em28xx 5-1:0.0: Freeing device [ 809.997201][T28095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10730'. [ 810.252335][ T5997] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 810.423423][ T5997] usb 13-1: Using ep0 maxpacket: 8 [ 810.426676][ T5997] usb 13-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 810.429670][ T5997] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.435923][ T5997] usb 13-1: config 0 descriptor?? [ 810.439416][ T5997] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 810.669608][ T6101] usb 13-1: USB disconnect, device number 38 [ 810.779926][ T5997] usb 9-1: USB disconnect, device number 72 [ 810.826078][T28131] netlink: 312 bytes leftover after parsing attributes in process `syz.4.10734'. [ 810.880075][T28133] FAULT_INJECTION: forcing a failure. [ 810.880075][T28133] name failslab, interval 1, probability 0, space 0, times 0 [ 810.885978][T28133] CPU: 1 UID: 0 PID: 28133 Comm: syz.4.10735 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.886006][T28133] Tainted: [L]=SOFTLOCKUP [ 810.886013][T28133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 810.886024][T28133] Call Trace: [ 810.886040][T28133] [ 810.886048][T28133] dump_stack_lvl+0x16c/0x1f0 [ 810.886095][T28133] should_fail_ex+0x512/0x640 [ 810.886128][T28133] ? kmem_cache_alloc_noprof+0x62/0x760 [ 810.886154][T28133] should_failslab+0xc2/0x120 [ 810.886171][T28133] kmem_cache_alloc_noprof+0x75/0x760 [ 810.886192][T28133] ? getname_flags.part.0+0x4c/0x550 [ 810.886220][T28133] ? getname_flags.part.0+0x4c/0x550 [ 810.886241][T28133] getname_flags.part.0+0x4c/0x550 [ 810.886267][T28133] getname_flags+0x93/0xf0 [ 810.886292][T28133] user_path_at+0x24/0x60 [ 810.886309][T28133] __x64_sys_umount+0x10a/0x1a0 [ 810.886329][T28133] ? __pfx___x64_sys_umount+0x10/0x10 [ 810.886352][T28133] ? rcu_is_watching+0x12/0xc0 [ 810.886378][T28133] do_syscall_64+0xcd/0xf80 [ 810.886405][T28133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.886423][T28133] RIP: 0033:0x7f5ca978f7c9 [ 810.886437][T28133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.886454][T28133] RSP: 002b:00007f5caa6c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 810.886472][T28133] RAX: ffffffffffffffda RBX: 00007f5ca99e5fa0 RCX: 00007f5ca978f7c9 [ 810.886483][T28133] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 810.886495][T28133] RBP: 00007f5caa6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 810.886504][T28133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.886514][T28133] R13: 00007f5ca99e6038 R14: 00007f5ca99e5fa0 R15: 00007ffe4bddb868 [ 810.886540][T28133] [ 811.030074][T28138] pimreg: entered allmulticast mode [ 811.459480][ T40] audit: type=1400 audit(2000000319.613:119511): avc: denied { read } for pid=28184 comm="syz.6.10754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 811.561622][T28196] FAULT_INJECTION: forcing a failure. [ 811.561622][T28196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.565969][T28196] CPU: 1 UID: 0 PID: 28196 Comm: syz.4.10757 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.565987][T28196] Tainted: [L]=SOFTLOCKUP [ 811.565991][T28196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 811.565998][T28196] Call Trace: [ 811.566002][T28196] [ 811.566006][T28196] dump_stack_lvl+0x16c/0x1f0 [ 811.566027][T28196] should_fail_ex+0x512/0x640 [ 811.566046][T28196] _copy_from_iter+0x2a4/0x16c0 [ 811.566067][T28196] ? __pfx__copy_from_iter+0x10/0x10 [ 811.566083][T28196] ? _parse_integer_limit+0x17f/0x1d0 [ 811.566097][T28196] ? _kstrtoull+0x145/0x200 [ 811.566110][T28196] tun_get_user+0x26d/0x3cc0 [ 811.566131][T28196] ? __lock_acquire+0x433/0x22f0 [ 811.566148][T28196] ? __pfx_tun_get_user+0x10/0x10 [ 811.566165][T28196] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 811.566180][T28196] ? find_held_lock+0x2b/0x80 [ 811.566192][T28196] ? tun_get+0x191/0x370 [ 811.566210][T28196] tun_chr_write_iter+0xdc/0x210 [ 811.566227][T28196] vfs_write+0x7d3/0x11d0 [ 811.566238][T28196] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 811.566256][T28196] ? __pfx_vfs_write+0x10/0x10 [ 811.566264][T28196] ? find_held_lock+0x2b/0x80 [ 811.566283][T28196] ksys_write+0x12a/0x250 [ 811.566292][T28196] ? __pfx_ksys_write+0x10/0x10 [ 811.566306][T28196] do_syscall_64+0xcd/0xf80 [ 811.566323][T28196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.566335][T28196] RIP: 0033:0x7f5ca978f7c9 [ 811.566344][T28196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.566354][T28196] RSP: 002b:00007f5caa6c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 811.566365][T28196] RAX: ffffffffffffffda RBX: 00007f5ca99e5fa0 RCX: 00007f5ca978f7c9 [ 811.566372][T28196] RDX: 0000000000000fb5 RSI: 0000200000002780 RDI: 0000000000000004 [ 811.566378][T28196] RBP: 00007f5caa6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 811.566385][T28196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.566391][T28196] R13: 00007f5ca99e6038 R14: 00007f5ca99e5fa0 R15: 00007ffe4bddb868 [ 811.566405][T28196] [ 812.305703][ T6101] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 812.466208][ T6101] usb 9-1: Using ep0 maxpacket: 8 [ 812.470174][ T6101] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 812.473447][ T6101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.486822][ T6101] usb 9-1: config 0 descriptor?? [ 812.502470][ T6101] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 812.563514][T28237] x_tables: duplicate underflow at hook 1 [ 812.572144][T28238] x_tables: duplicate underflow at hook 1 [ 812.686706][T28249] FAULT_INJECTION: forcing a failure. [ 812.686706][T28249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.691854][T28249] CPU: 1 UID: 0 PID: 28249 Comm: syz.0.10772 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.691880][T28249] Tainted: [L]=SOFTLOCKUP [ 812.691885][T28249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 812.691895][T28249] Call Trace: [ 812.691901][T28249] [ 812.691908][T28249] dump_stack_lvl+0x16c/0x1f0 [ 812.691936][T28249] should_fail_ex+0x512/0x640 [ 812.691961][T28249] _copy_from_user+0x2e/0xd0 [ 812.691984][T28249] copy_msghdr_from_user+0x98/0x160 [ 812.692001][T28249] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 812.692015][T28249] ? __lock_acquire+0x433/0x22f0 [ 812.692046][T28249] ___sys_sendmsg+0xfe/0x1d0 [ 812.692063][T28249] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.692077][T28249] ? __lock_acquire+0x433/0x22f0 [ 812.692122][T28249] __sys_sendmsg+0x16d/0x220 [ 812.692139][T28249] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.692168][T28249] do_syscall_64+0xcd/0xf80 [ 812.692191][T28249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.692207][T28249] RIP: 0033:0x7f42b758f7c9 [ 812.692220][T28249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.692235][T28249] RSP: 002b:00007f42b84ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.692251][T28249] RAX: ffffffffffffffda RBX: 00007f42b77e5fa0 RCX: 00007f42b758f7c9 [ 812.692261][T28249] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 812.692270][T28249] RBP: 00007f42b84ee090 R08: 0000000000000000 R09: 0000000000000000 [ 812.692279][T28249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.692288][T28249] R13: 00007f42b77e6038 R14: 00007f42b77e5fa0 R15: 00007ffce0c15878 [ 812.692310][T28249] [ 812.732590][ T6101] usb 9-1: USB disconnect, device number 73 [ 813.364557][ T325] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 813.441200][ T40] audit: type=1400 audit(2000000321.474:119512): avc: denied { read } for pid=28296 comm="syz.4.10785" laddr=fe80::e030:3bff:feef:dac2 lport=45330 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 813.524972][ T8354] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 813.525054][ T325] usb 11-1: Using ep0 maxpacket: 8 [ 813.531233][ T325] usb 11-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 813.534591][ T325] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.540219][ T325] usb 11-1: config 0 descriptor?? [ 813.543721][ T325] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 813.712603][ T8354] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 813.716122][ T8354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.722161][ T8354] usb 5-1: Product: syz [ 813.724024][ T8354] usb 5-1: Manufacturer: syz [ 813.725927][ T8354] usb 5-1: SerialNumber: syz [ 813.769953][T13159] usb 11-1: USB disconnect, device number 42 [ 813.949334][ T40] audit: type=1400 audit(2000000321.942:119513): avc: denied { ioctl } for pid=28276 comm="syz.0.10779" path="socket:[232023]" dev="sockfs" ino=232023 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 814.020341][T28278] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10779'. [ 814.136917][ T8354] rtl8150 5-1:1.0: couldn't reset the device [ 814.139045][ T8354] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 814.151054][ T8354] usb 5-1: USB disconnect, device number 72 [ 814.362253][T28342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10792'. [ 814.403666][T28346] FAULT_INJECTION: forcing a failure. [ 814.403666][T28346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.409080][T28346] CPU: 2 UID: 0 PID: 28346 Comm: syz.6.10793 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.409107][T28346] Tainted: [L]=SOFTLOCKUP [ 814.409113][T28346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 814.409122][T28346] Call Trace: [ 814.409139][T28346] [ 814.409146][T28346] dump_stack_lvl+0x16c/0x1f0 [ 814.409194][T28346] should_fail_ex+0x512/0x640 [ 814.409228][T28346] _copy_to_user+0x32/0xd0 [ 814.409255][T28346] simple_read_from_buffer+0xcb/0x170 [ 814.409277][T28346] proc_fail_nth_read+0x197/0x240 [ 814.409301][T28346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.409324][T28346] ? rw_verify_area+0xcf/0x6c0 [ 814.409349][T28346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.409372][T28346] vfs_read+0x1e4/0xcf0 [ 814.409399][T28346] ? __pfx___mutex_lock+0x10/0x10 [ 814.409419][T28346] ? __pfx_vfs_read+0x10/0x10 [ 814.409450][T28346] ? __fget_files+0x20e/0x3c0 [ 814.409475][T28346] ksys_read+0x12a/0x250 [ 814.409490][T28346] ? __pfx_ksys_read+0x10/0x10 [ 814.409508][T28346] ? fput+0x70/0xf0 [ 814.409557][T28346] do_syscall_64+0xcd/0xf80 [ 814.409598][T28346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.409619][T28346] RIP: 0033:0x7f86d998e1dc [ 814.409633][T28346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 814.409650][T28346] RSP: 002b:00007f86da889030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 814.409667][T28346] RAX: ffffffffffffffda RBX: 00007f86d9be5fa0 RCX: 00007f86d998e1dc [ 814.409677][T28346] RDX: 000000000000000f RSI: 00007f86da8890a0 RDI: 0000000000000005 [ 814.409687][T28346] RBP: 00007f86da889090 R08: 0000000000000000 R09: 0000000000000000 [ 814.409697][T28346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.409708][T28346] R13: 00007f86d9be6038 R14: 00007f86d9be5fa0 R15: 00007ffdf0d27ee8 [ 814.409731][T28346] [ 814.848740][T28383] FAULT_INJECTION: forcing a failure. [ 814.848740][T28383] name failslab, interval 1, probability 0, space 0, times 0 [ 814.857840][T28383] CPU: 1 UID: 0 PID: 28383 Comm: syz.6.10807 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.857873][T28383] Tainted: [L]=SOFTLOCKUP [ 814.857880][T28383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 814.857891][T28383] Call Trace: [ 814.857900][T28383] [ 814.857908][T28383] dump_stack_lvl+0x16c/0x1f0 [ 814.857939][T28383] should_fail_ex+0x512/0x640 [ 814.857965][T28383] ? __kmalloc_cache_noprof+0x5f/0x800 [ 814.857988][T28383] should_failslab+0xc2/0x120 [ 814.858006][T28383] __kmalloc_cache_noprof+0x72/0x800 [ 814.858029][T28383] ? sctp_datamsg_from_user+0x8d/0x1330 [ 814.858055][T28383] ? sctp_datamsg_from_user+0x8d/0x1330 [ 814.858078][T28383] sctp_datamsg_from_user+0x8d/0x1330 [ 814.858097][T28383] ? __sk_mem_raise_allocated+0x77d/0x14f0 [ 814.858124][T28383] ? __sk_mem_schedule+0xd0/0x100 [ 814.858145][T28383] sctp_sendmsg_to_asoc+0xae2/0x1bd0 [ 814.858172][T28383] ? __lock_acquire+0x433/0x22f0 [ 814.858199][T28383] ? __lock_acquire+0x433/0x22f0 [ 814.858229][T28383] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 814.858255][T28383] ? do_raw_spin_lock+0x12c/0x2b0 [ 814.858275][T28383] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 814.858296][T28383] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 814.858323][T28383] sctp_sendmsg+0xe99/0x1e00 [ 814.858346][T28383] ? __lock_acquire+0x433/0x22f0 [ 814.858370][T28383] ? __pfx_sctp_sendmsg+0x10/0x10 [ 814.858391][T28383] ? __pfx_sock_has_perm+0x10/0x10 [ 814.858421][T28383] ? __mutex_lock+0x27b/0x1b10 [ 814.858439][T28383] ? __pfx_sctp_sendmsg+0x10/0x10 [ 814.858457][T28383] inet_sendmsg+0x11c/0x140 [ 814.858478][T28383] sock_sendmsg+0x37f/0x470 [ 814.858500][T28383] ? __pfx_sock_sendmsg+0x10/0x10 [ 814.858540][T28383] splice_to_socket+0xaf4/0x1110 [ 814.858574][T28383] ? __pfx_splice_to_socket+0x10/0x10 [ 814.858602][T28383] ? inode_has_perm+0x16d/0x1d0 [ 814.858658][T28383] ? bpf_lsm_file_permission+0x9/0x10 [ 814.858679][T28383] ? security_file_permission+0x71/0x210 [ 814.858704][T28383] ? rw_verify_area+0xcf/0x6c0 [ 814.858724][T28383] ? __pfx_splice_to_socket+0x10/0x10 [ 814.858752][T28383] do_splice+0x1478/0x1fc0 [ 814.858775][T28383] ? __lock_acquire+0x433/0x22f0 [ 814.858804][T28383] ? __pfx_do_splice+0x10/0x10 [ 814.858823][T28383] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 814.858842][T28383] ? find_held_lock+0x2b/0x80 [ 814.858863][T28383] __do_splice+0x32a/0x360 [ 814.858884][T28383] ? __pfx___do_splice+0x10/0x10 [ 814.858901][T28383] ? __pfx_fput+0x10/0x10 [ 814.858928][T28383] __x64_sys_splice+0x187/0x250 [ 814.858950][T28383] do_syscall_64+0xcd/0xf80 [ 814.858976][T28383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.858994][T28383] RIP: 0033:0x7f86d998f7c9 [ 814.859009][T28383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.859026][T28383] RSP: 002b:00007f86da868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 814.859042][T28383] RAX: ffffffffffffffda RBX: 00007f86d9be6090 RCX: 00007f86d998f7c9 [ 814.859055][T28383] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000005 [ 814.859064][T28383] RBP: 00007f86da868090 R08: 0020000000000002 R09: 0000000000000002 [ 814.859074][T28383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.859086][T28383] R13: 00007f86d9be6128 R14: 00007f86d9be6090 R15: 00007ffdf0d27ee8 [ 814.859111][T28383] [ 815.065095][T29401] wlan1: Trigger new scan to find an IBSS to join [ 815.311398][ T8354] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 815.471546][ T8354] usb 5-1: Using ep0 maxpacket: 8 [ 815.475963][ T8354] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 815.479885][ T8354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.485745][ T8354] usb 5-1: config 0 descriptor?? [ 815.490808][ T8354] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 815.710552][ T8354] usb 5-1: USB disconnect, device number 73 [ 815.833427][T28420] all: renamed from lo (while UP) [ 815.963538][ T325] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 816.071525][T29369] wlan1: Creating new IBSS network, BSSID ce:9b:c0:b1:d5:98 [ 816.123888][ T325] usb 9-1: Using ep0 maxpacket: 16 [ 816.127838][ T325] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 816.133215][ T325] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 816.136569][ T325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.138980][ T325] usb 9-1: Product: syz [ 816.140599][ T325] usb 9-1: Manufacturer: syz [ 816.142298][ T325] usb 9-1: SerialNumber: syz [ 816.146467][ T325] usb 9-1: config 0 descriptor?? [ 816.151591][ T325] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 816.154709][ T325] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 816.459197][ T40] audit: type=1400 audit(2000000324.298:119514): avc: denied { mounton } for pid=28444 comm="syz.8.10826" path="/file0" dev="ramfs" ino=233544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 816.469383][T28454] overlayfs: workdir and upperdir must be separate subtrees [ 816.475161][T28446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 816.477933][T28446] overlayfs: failed to set xattr on upper [ 816.480112][T28446] overlayfs: ...falling back to redirect_dir=nofollow. [ 816.482368][T28446] overlayfs: ...falling back to index=off. [ 816.484340][T28446] overlayfs: ...falling back to uuid=null. [ 816.701536][ T8354] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 816.797109][ T325] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 816.799812][ T7255] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 816.840463][ T8354] usb 5-1: device descriptor read/64, error -71 [ 816.958112][ T7255] usb 13-1: Using ep0 maxpacket: 8 [ 816.962865][ T7255] usb 13-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 816.966957][ T7255] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.973242][ T7255] usb 13-1: config 0 descriptor?? [ 816.978871][ T7255] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 817.097262][ T8354] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 817.204488][ T7255] usb 13-1: USB disconnect, device number 39 [ 817.240853][ T325] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 817.244271][ T325] em28xx 9-1:0.0: board has no eeprom [ 817.246889][ T8354] usb 5-1: device descriptor read/64, error -71 [ 817.321897][ T325] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 817.325317][ T325] em28xx 9-1:0.0: dvb set to bulk mode. [ 817.331661][ T325] usb 9-1: USB disconnect, device number 74 [ 817.335853][ T325] em28xx 9-1:0.0: Disconnecting em28xx [ 817.338717][ T47] em28xx 9-1:0.0: Binding DVB extension [ 817.370521][ T47] em28xx 9-1:0.0: Registering input extension [ 817.372639][ T325] em28xx 9-1:0.0: Closing input extension [ 817.376162][ T8354] usb usb5-port1: attempt power cycle [ 817.377613][ T325] em28xx 9-1:0.0: Freeing device [ 817.749619][ T8354] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 817.782828][ T8354] usb 5-1: device descriptor read/8, error -71 [ 817.817800][ T40] audit: type=1400 audit(2000000325.569:119515): avc: denied { getopt } for pid=28503 comm="syz.4.10832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 817.919922][T28514] netlink: 'syz.8.10836': attribute type 1 has an invalid length. [ 817.924140][T28514] netlink: 'syz.8.10836': attribute type 2 has an invalid length. [ 817.930089][ T40] audit: type=1400 audit(2000000325.663:119516): avc: denied { ioctl } for pid=28513 comm="syz.8.10836" path="socket:[230165]" dev="sockfs" ino=230165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 818.049054][ T8354] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 818.071401][ T8354] usb 5-1: device descriptor read/8, error -71 [ 818.170880][T28530] FAULT_INJECTION: forcing a failure. [ 818.170880][T28530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.176367][T28530] CPU: 3 UID: 0 PID: 28530 Comm: syz.8.10841 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.176394][T28530] Tainted: [L]=SOFTLOCKUP [ 818.176400][T28530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 818.176410][T28530] Call Trace: [ 818.176417][T28530] [ 818.176425][T28530] dump_stack_lvl+0x16c/0x1f0 [ 818.176454][T28530] should_fail_ex+0x512/0x640 [ 818.176481][T28530] _copy_from_iter+0x2a4/0x16c0 [ 818.176510][T28530] ? __pfx__copy_from_iter+0x10/0x10 [ 818.176535][T28530] ? _parse_integer_limit+0x17f/0x1d0 [ 818.176557][T28530] ? _kstrtoull+0x145/0x200 [ 818.176578][T28530] tun_get_user+0x3c7/0x3cc0 [ 818.176614][T28530] ? __pfx_tun_get_user+0x10/0x10 [ 818.176639][T28530] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 818.176664][T28530] ? find_held_lock+0x2b/0x80 [ 818.176683][T28530] ? tun_get+0x191/0x370 [ 818.176725][T28530] tun_chr_write_iter+0xdc/0x210 [ 818.176756][T28530] vfs_write+0x7d3/0x11d0 [ 818.176774][T28530] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 818.176801][T28530] ? __pfx_vfs_write+0x10/0x10 [ 818.176814][T28530] ? find_held_lock+0x2b/0x80 [ 818.176845][T28530] ksys_write+0x12a/0x250 [ 818.176860][T28530] ? __pfx_ksys_write+0x10/0x10 [ 818.176883][T28530] do_syscall_64+0xcd/0xf80 [ 818.176909][T28530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.176926][T28530] RIP: 0033:0x7fe171d8f7c9 [ 818.176940][T28530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.176953][T28530] RSP: 002b:00007fe172d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.176969][T28530] RAX: ffffffffffffffda RBX: 00007fe171fe5fa0 RCX: 00007fe171d8f7c9 [ 818.176981][T28530] RDX: 0000000000000fb5 RSI: 0000200000002780 RDI: 0000000000000004 [ 818.176991][T28530] RBP: 00007fe172d10090 R08: 0000000000000000 R09: 0000000000000000 [ 818.177001][T28530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.177010][T28530] R13: 00007fe171fe6038 R14: 00007fe171fe5fa0 R15: 00007ffe7343b7a8 [ 818.177035][T28530] [ 818.232562][ T8354] usb usb5-port1: unable to enumerate USB device [ 818.402155][ T5997] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 818.541550][T28547] FAULT_INJECTION: forcing a failure. [ 818.541550][T28547] name failslab, interval 1, probability 0, space 0, times 0 [ 818.546641][T28547] CPU: 2 UID: 0 PID: 28547 Comm: syz.8.10847 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.546669][T28547] Tainted: [L]=SOFTLOCKUP [ 818.546675][T28547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 818.546686][T28547] Call Trace: [ 818.546693][T28547] [ 818.546701][T28547] dump_stack_lvl+0x16c/0x1f0 [ 818.546731][T28547] should_fail_ex+0x512/0x640 [ 818.546761][T28547] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 818.546786][T28547] should_failslab+0xc2/0x120 [ 818.546804][T28547] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 818.546825][T28547] ? __alloc_skb+0x156/0x410 [ 818.546855][T28547] ? __alloc_skb+0x156/0x410 [ 818.546878][T28547] __alloc_skb+0x156/0x410 [ 818.546901][T28547] ? __alloc_skb+0x35d/0x410 [ 818.546925][T28547] ? __pfx___alloc_skb+0x10/0x10 [ 818.546950][T28547] ? netlink_autobind.isra.0+0x158/0x370 [ 818.546980][T28547] netlink_alloc_large_skb+0x69/0x140 [ 818.547004][T28547] netlink_sendmsg+0x698/0xdd0 [ 818.547031][T28547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.547063][T28547] ____sys_sendmsg+0xa5d/0xc30 [ 818.547086][T28547] ? copy_msghdr_from_user+0x10a/0x160 [ 818.547117][T28547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.547145][T28547] ? __pfx__kstrtoull+0x10/0x10 [ 818.547171][T28547] ___sys_sendmsg+0x134/0x1d0 [ 818.547190][T28547] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.547220][T28547] ? find_held_lock+0x2b/0x80 [ 818.547256][T28547] __sys_sendmmsg+0x200/0x420 [ 818.547276][T28547] ? __pfx___sys_sendmmsg+0x10/0x10 [ 818.547302][T28547] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 818.547339][T28547] ? fput+0x70/0xf0 [ 818.547359][T28547] ? ksys_write+0x1ac/0x250 [ 818.547375][T28547] ? __pfx_ksys_write+0x10/0x10 [ 818.547389][T28547] ? fput+0x70/0xf0 [ 818.547411][T28547] __x64_sys_sendmmsg+0x9c/0x100 [ 818.547428][T28547] ? lockdep_hardirqs_on+0x7c/0x110 [ 818.547453][T28547] do_syscall_64+0xcd/0xf80 [ 818.547479][T28547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.547495][T28547] RIP: 0033:0x7fe171d8f7c9 [ 818.547509][T28547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.547526][T28547] RSP: 002b:00007fe172d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.547543][T28547] RAX: ffffffffffffffda RBX: 00007fe171fe5fa0 RCX: 00007fe171d8f7c9 [ 818.547555][T28547] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 818.547565][T28547] RBP: 00007fe172d10090 R08: 0000000000000000 R09: 0000000000000000 [ 818.547576][T28547] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 818.547586][T28547] R13: 00007fe171fe6038 R14: 00007fe171fe5fa0 R15: 00007ffe7343b7a8 [ 818.547612][T28547] [ 818.583796][ T5997] usb 9-1: Using ep0 maxpacket: 16 [ 818.666940][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 818.672812][ T5997] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 818.675725][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.678894][ T5997] usb 9-1: Product: syz [ 818.680735][ T5997] usb 9-1: Manufacturer: syz [ 818.682230][ T5997] usb 9-1: SerialNumber: syz [ 818.686951][ T5997] usb 9-1: config 0 descriptor?? [ 818.691976][ T5997] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 818.695298][ T5997] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 818.929609][T28558] FAULT_INJECTION: forcing a failure. [ 818.929609][T28558] name failslab, interval 1, probability 0, space 0, times 0 [ 818.933876][T28558] CPU: 0 UID: 0 PID: 28558 Comm: syz.8.10851 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.933899][T28558] Tainted: [L]=SOFTLOCKUP [ 818.933902][T28558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 818.933909][T28558] Call Trace: [ 818.933914][T28558] [ 818.933919][T28558] dump_stack_lvl+0x16c/0x1f0 [ 818.933940][T28558] should_fail_ex+0x512/0x640 [ 818.933957][T28558] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 818.933973][T28558] should_failslab+0xc2/0x120 [ 818.933985][T28558] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 818.933998][T28558] ? __alloc_skb+0x156/0x410 [ 818.934017][T28558] ? __alloc_skb+0x156/0x410 [ 818.934032][T28558] __alloc_skb+0x156/0x410 [ 818.934047][T28558] ? __alloc_skb+0x35d/0x410 [ 818.934062][T28558] ? __pfx___alloc_skb+0x10/0x10 [ 818.934079][T28558] ? netlink_autobind.isra.0+0x158/0x370 [ 818.934097][T28558] netlink_alloc_large_skb+0x69/0x140 [ 818.934112][T28558] netlink_sendmsg+0x698/0xdd0 [ 818.934128][T28558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.934147][T28558] ____sys_sendmsg+0xa5d/0xc30 [ 818.934162][T28558] ? copy_msghdr_from_user+0x10a/0x160 [ 818.934172][T28558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.934185][T28558] ? __lock_acquire+0x433/0x22f0 [ 818.934206][T28558] ___sys_sendmsg+0x134/0x1d0 [ 818.934218][T28558] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.934228][T28558] ? __lock_acquire+0x433/0x22f0 [ 818.934258][T28558] __sys_sendmsg+0x16d/0x220 [ 818.934269][T28558] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.934288][T28558] do_syscall_64+0xcd/0xf80 [ 818.934305][T28558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.934316][T28558] RIP: 0033:0x7fe171d8f7c9 [ 818.934326][T28558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.934336][T28558] RSP: 002b:00007fe172d10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.934347][T28558] RAX: ffffffffffffffda RBX: 00007fe171fe5fa0 RCX: 00007fe171d8f7c9 [ 818.934354][T28558] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 818.934360][T28558] RBP: 00007fe172d10090 R08: 0000000000000000 R09: 0000000000000000 [ 818.934366][T28558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.934373][T28558] R13: 00007fe171fe6038 R14: 00007fe171fe5fa0 R15: 00007ffe7343b7a8 [ 818.934386][T28558] [ 819.079790][T28562] netlink: 56 bytes leftover after parsing attributes in process `syz.8.10852'. [ 819.338007][ T5997] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 819.778687][ T5997] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 819.792283][ T5997] em28xx 9-1:0.0: board has no eeprom [ 819.856647][ T5997] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 819.860250][ T5997] em28xx 9-1:0.0: dvb set to bulk mode. [ 819.862725][T15770] em28xx 9-1:0.0: Binding DVB extension [ 819.870942][ T5997] usb 9-1: USB disconnect, device number 75 [ 819.874300][ T5997] em28xx 9-1:0.0: Disconnecting em28xx [ 819.878617][T28609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10865'. [ 819.891337][T15770] em28xx 9-1:0.0: Registering input extension [ 819.894296][ T5997] em28xx 9-1:0.0: Closing input extension [ 819.905952][ T5997] em28xx 9-1:0.0: Freeing device [ 820.198834][ T325] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 820.303098][T28651] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10875'. [ 820.328755][ T40] audit: type=1400 audit(2000000327.916:119517): avc: denied { ioctl } for pid=28650 comm="syz.8.10875" path="socket:[232258]" dev="sockfs" ino=232258 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 820.359283][ T325] usb 5-1: Using ep0 maxpacket: 8 [ 820.364003][ T325] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 820.367939][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.374532][ T325] usb 5-1: config 0 descriptor?? [ 820.376814][T28653] FAULT_INJECTION: forcing a failure. [ 820.376814][T28653] name failslab, interval 1, probability 0, space 0, times 0 [ 820.381312][ T325] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 820.383191][T28653] CPU: 3 UID: 0 PID: 28653 Comm: syz.6.10876 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.383217][T28653] Tainted: [L]=SOFTLOCKUP [ 820.383223][T28653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 820.383233][T28653] Call Trace: [ 820.383252][T28653] [ 820.383259][T28653] dump_stack_lvl+0x16c/0x1f0 [ 820.383306][T28653] should_fail_ex+0x512/0x640 [ 820.383337][T28653] ? fs_reclaim_acquire+0xae/0x150 [ 820.383355][T28653] should_failslab+0xc2/0x120 [ 820.383373][T28653] __kmalloc_noprof+0xdd/0x8f0 [ 820.383415][T28653] ? tomoyo_encode2+0x100/0x3e0 [ 820.383443][T28653] ? tomoyo_encode2+0x100/0x3e0 [ 820.383463][T28653] tomoyo_encode2+0x100/0x3e0 [ 820.383486][T28653] tomoyo_encode+0x29/0x50 [ 820.383508][T28653] tomoyo_realpath_from_path+0x18f/0x6e0 [ 820.383533][T28653] ? tomoyo_profile+0x47/0x60 [ 820.383560][T28653] tomoyo_path_number_perm+0x245/0x580 [ 820.383578][T28653] ? tomoyo_path_number_perm+0x237/0x580 [ 820.383600][T28653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 820.383624][T28653] ? find_held_lock+0x2b/0x80 [ 820.383664][T28653] ? find_held_lock+0x2b/0x80 [ 820.383682][T28653] ? hook_file_ioctl_common+0x144/0x410 [ 820.383718][T28653] ? __fget_files+0x20e/0x3c0 [ 820.383741][T28653] security_file_ioctl+0x9b/0x240 [ 820.383769][T28653] __x64_sys_ioctl+0xb7/0x210 [ 820.383796][T28653] do_syscall_64+0xcd/0xf80 [ 820.383822][T28653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.383840][T28653] RIP: 0033:0x7f86d998f7c9 [ 820.383858][T28653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.383874][T28653] RSP: 002b:00007f86da889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.383890][T28653] RAX: ffffffffffffffda RBX: 00007f86d9be5fa0 RCX: 00007f86d998f7c9 [ 820.383901][T28653] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 820.383911][T28653] RBP: 00007f86da889090 R08: 0000000000000000 R09: 0000000000000000 [ 820.383921][T28653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.383932][T28653] R13: 00007f86d9be6038 R14: 00007f86d9be5fa0 R15: 00007ffdf0d27ee8 [ 820.383957][T28653] [ 820.384070][T28653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.599107][ T325] usb 5-1: USB disconnect, device number 78 [ 820.655877][T28686] fuse: Unknown parameter 'grou00000000000000000000' [ 820.763360][ T40] audit: type=1400 audit(2000000328.318:119518): avc: denied { ioctl } for pid=28692 comm="syz.4.10885" path="socket:[230345]" dev="sockfs" ino=230345 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 820.763525][T28693] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10885'. [ 821.024107][ T5997] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 821.206676][ T5997] usb 11-1: Using ep0 maxpacket: 16 [ 821.213981][ T5997] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 821.219912][ T5997] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 821.223492][ T5997] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.227024][ T5997] usb 11-1: Product: syz [ 821.228645][ T5997] usb 11-1: Manufacturer: syz [ 821.230270][ T5997] usb 11-1: SerialNumber: syz [ 821.233881][ T5997] usb 11-1: config 0 descriptor?? [ 821.238520][ T5997] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 821.242707][ T5997] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 821.423192][T28727] fuse: Unknown parameter 'grou00000000000000000000' [ 821.498697][T28733] serio: Serial port ptm0 [ 821.501865][T28736] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10901'. [ 821.676971][T28748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10904'. [ 821.690213][T28750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10904'. [ 821.885033][ T5997] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 822.079764][T28776] mkiss: ax0: crc mode is auto. [ 822.149839][T28776] sp0: Synchronizing with TNC [ 822.263678][ T6101] usb 9-1: new full-speed USB device number 76 using dummy_hcd [ 822.323419][ T5997] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 822.327620][ T5997] em28xx 11-1:0.0: board has no eeprom [ 822.402027][ T5997] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 822.405155][ T5997] em28xx 11-1:0.0: dvb set to bulk mode. [ 822.409762][ T5997] usb 11-1: USB disconnect, device number 43 [ 822.412625][ T5997] em28xx 11-1:0.0: Disconnecting em28xx [ 822.414393][ T938] em28xx 11-1:0.0: Binding DVB extension [ 822.425391][ T6101] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 822.428629][ T6101] usb 9-1: config 0 has no interface number 0 [ 822.431131][ T6101] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 822.435231][ T6101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.440447][ T6101] usb 9-1: config 0 descriptor?? [ 822.448583][ T938] em28xx 11-1:0.0: Registering input extension [ 822.456273][ T5997] em28xx 11-1:0.0: Closing input extension [ 822.465852][ T5997] em28xx 11-1:0.0: Freeing device [ 822.677498][T28826] syzkaller0: entered promiscuous mode [ 822.679656][T28826] syzkaller0: entered allmulticast mode [ 822.733683][ T325] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 822.821785][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10918'. [ 822.906359][ T325] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 822.909489][ T325] usb 13-1: config 0 interface 0 has no altsetting 0 [ 822.913618][ T325] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 822.918718][ T325] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 822.922382][ T325] usb 13-1: Product: syz [ 822.924258][ T325] usb 13-1: Manufacturer: syz [ 822.926463][ T325] usb 13-1: SerialNumber: syz [ 822.931459][ T325] usb 13-1: config 0 descriptor?? [ 822.939005][ T325] usb 13-1: selecting invalid altsetting 0 [ 823.162134][ T325] usb 13-1: USB disconnect, device number 40 [ 823.221833][T28871] syz.6.10925: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 824.045779][T28889] fuse: Unknown parameter 'group_id00000000000000000000' [ 824.284344][ T325] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 824.377407][T28909] FAULT_INJECTION: forcing a failure. [ 824.377407][T28909] name failslab, interval 1, probability 0, space 0, times 0 [ 824.381631][T28909] CPU: 3 UID: 0 PID: 28909 Comm: syz.6.10941 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.381660][T28909] Tainted: [L]=SOFTLOCKUP [ 824.381664][T28909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 824.381671][T28909] Call Trace: [ 824.381675][T28909] [ 824.381680][T28909] dump_stack_lvl+0x16c/0x1f0 [ 824.381722][T28909] should_fail_ex+0x512/0x640 [ 824.381743][T28909] ? fs_reclaim_acquire+0xae/0x150 [ 824.381755][T28909] should_failslab+0xc2/0x120 [ 824.381766][T28909] __kmalloc_noprof+0xdd/0x8f0 [ 824.381778][T28909] ? tomoyo_encode2+0x100/0x3e0 [ 824.381795][T28909] ? tomoyo_encode2+0x100/0x3e0 [ 824.381809][T28909] tomoyo_encode2+0x100/0x3e0 [ 824.381825][T28909] tomoyo_encode+0x29/0x50 [ 824.381838][T28909] tomoyo_realpath_from_path+0x18f/0x6e0 [ 824.381854][T28909] ? tomoyo_profile+0x47/0x60 [ 824.381872][T28909] tomoyo_path_number_perm+0x245/0x580 [ 824.381883][T28909] ? tomoyo_path_number_perm+0x237/0x580 [ 824.381897][T28909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 824.381910][T28909] ? find_held_lock+0x2b/0x80 [ 824.381934][T28909] ? find_held_lock+0x2b/0x80 [ 824.381945][T28909] ? hook_file_ioctl_common+0x144/0x410 [ 824.381965][T28909] ? __fget_files+0x20e/0x3c0 [ 824.381979][T28909] security_file_ioctl+0x9b/0x240 [ 824.381994][T28909] __x64_sys_ioctl+0xb7/0x210 [ 824.382011][T28909] do_syscall_64+0xcd/0xf80 [ 824.382028][T28909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.382039][T28909] RIP: 0033:0x7f86d998f7c9 [ 824.382048][T28909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.382059][T28909] RSP: 002b:00007f86da889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.382069][T28909] RAX: ffffffffffffffda RBX: 00007f86d9be5fa0 RCX: 00007f86d998f7c9 [ 824.382076][T28909] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 824.382082][T28909] RBP: 00007f86da889090 R08: 0000000000000000 R09: 0000000000000000 [ 824.382088][T28909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.382094][T28909] R13: 00007f86d9be6038 R14: 00007f86d9be5fa0 R15: 00007ffdf0d27ee8 [ 824.382109][T28909] [ 824.382157][T28909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 824.455424][ T325] usb 5-1: Using ep0 maxpacket: 8 [ 824.463616][ T325] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 824.467074][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.471658][ T325] usb 5-1: config 0 descriptor?? [ 824.478225][ T325] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 824.564640][T28919] omfs: Invalid superblock (0) [ 824.702589][T19289] usb 5-1: USB disconnect, device number 79 [ 825.230006][ T6101] usb 9-1: string descriptor 0 read error: -71 [ 825.238196][ T6101] usb-storage 9-1:0.168: USB Mass Storage device detected [ 825.253979][ T6101] usb-storage 9-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 825.347608][T28969] geneve3: entered promiscuous mode [ 825.349327][T28969] geneve3: entered allmulticast mode [ 825.350161][ T6101] usb 9-1: USB disconnect, device number 76 [ 825.352329][T29401] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.362406][T29401] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.365984][T29401] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.369704][T29401] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.384624][T28980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10955'. [ 825.758724][T29015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10966'. [ 825.799446][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10967'. [ 825.921088][ T5997] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 825.929483][T29029] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10972'. [ 825.955652][ T40] audit: type=1400 audit(2000000333.171:119519): avc: denied { write } for pid=29025 comm="syz.4.10970" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 826.064217][T29040] fuse: Bad value for 'user_id' [ 826.066134][T29040] fuse: Bad value for 'user_id' [ 826.084044][ T5997] usb 13-1: Using ep0 maxpacket: 32 [ 826.086981][ T5997] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 826.091856][ T5997] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 826.095079][ T5997] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 826.097659][ T5997] usb 13-1: Product: syz [ 826.099007][ T5997] usb 13-1: Manufacturer: syz [ 826.100503][ T5997] usb 13-1: SerialNumber: syz [ 826.104368][ T5997] usb 13-1: config 0 descriptor?? [ 826.106559][T29005] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 826.114350][T29045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10978'. [ 826.181913][T29059] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10982'. [ 826.237297][T29061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10983'. [ 826.307727][T29078] fuse: Bad value for 'fd' [ 826.326100][ T5997] usb 13-1: USB disconnect, device number 41 [ 826.374151][T29091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10990'. [ 826.474006][T29102] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10994'. [ 826.612351][T29113] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10999'. [ 826.973992][ T40] audit: type=1400 audit(2000000334.125:119520): avc: denied { write } for pid=29153 comm="syz.8.11015" name="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 826.987455][ T40] audit: type=1400 audit(2000000334.134:119521): avc: denied { unmount } for pid=17391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 827.060766][T29158] serio: Serial port ptm0 [ 827.204129][ T47] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 827.226210][T29165] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 827.228427][T29165] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 827.231494][T29165] vhci_hcd vhci_hcd.0: Device attached [ 827.234295][T29166] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 827.238852][ T40] audit: type=1400 audit(2000000334.377:119522): avc: denied { read } for pid=29164 comm="syz.8.11019" path="socket:[234955]" dev="sockfs" ino=234955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 827.250288][T29401] vhci_hcd: stop threads [ 827.251679][T29401] vhci_hcd: release socket [ 827.253280][T29401] vhci_hcd: disconnect device [ 827.386355][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 827.390302][ T47] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 827.393497][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.399486][ T47] usb 9-1: config 0 descriptor?? [ 827.403527][ T47] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 827.625299][ T47] usb 9-1: USB disconnect, device number 77 [ 827.637593][T29191] xt_cgroup: invalid path, errno=-2 [ 827.699788][T29200] fuse: Bad value for 'fd' [ 828.053707][T29227] fuse: Bad value for 'fd' [ 828.562664][ T6101] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 828.733773][ T6101] usb 9-1: Using ep0 maxpacket: 8 [ 828.738747][ T6101] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 828.742785][ T6101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.750020][ T6101] usb 9-1: config 0 descriptor?? [ 828.755875][ T6101] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 828.987367][ T6101] usb 9-1: USB disconnect, device number 78 [ 829.281577][T29307] FAULT_INJECTION: forcing a failure. [ 829.281577][T29307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.286925][T29307] CPU: 3 UID: 0 PID: 29307 Comm: syz.8.11062 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.286950][T29307] Tainted: [L]=SOFTLOCKUP [ 829.286956][T29307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 829.286967][T29307] Call Trace: [ 829.286974][T29307] [ 829.286981][T29307] dump_stack_lvl+0x16c/0x1f0 [ 829.287032][T29307] should_fail_ex+0x512/0x640 [ 829.287065][T29307] _copy_from_iter+0x2a4/0x16c0 [ 829.287094][T29307] ? __alloc_skb+0x220/0x410 [ 829.287116][T29307] ? __alloc_skb+0x35d/0x410 [ 829.287138][T29307] ? __pfx__copy_from_iter+0x10/0x10 [ 829.287164][T29307] ? netlink_autobind.isra.0+0x158/0x370 [ 829.287196][T29307] netlink_sendmsg+0x820/0xdd0 [ 829.287222][T29307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.287255][T29307] ____sys_sendmsg+0xa5d/0xc30 [ 829.287277][T29307] ? copy_msghdr_from_user+0x10a/0x160 [ 829.287296][T29307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.287319][T29307] ? __pfx__kstrtoull+0x10/0x10 [ 829.287345][T29307] ___sys_sendmsg+0x134/0x1d0 [ 829.287365][T29307] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.287391][T29307] ? find_held_lock+0x2b/0x80 [ 829.287425][T29307] __sys_sendmmsg+0x200/0x420 [ 829.287446][T29307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 829.287473][T29307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 829.287511][T29307] ? fput+0x70/0xf0 [ 829.287533][T29307] ? ksys_write+0x1ac/0x250 [ 829.287548][T29307] ? __pfx_ksys_write+0x10/0x10 [ 829.287563][T29307] ? fput+0x70/0xf0 [ 829.287584][T29307] __x64_sys_sendmmsg+0x9c/0x100 [ 829.287603][T29307] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.287628][T29307] do_syscall_64+0xcd/0xf80 [ 829.287656][T29307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.287674][T29307] RIP: 0033:0x7fe171d8f7c9 [ 829.287695][T29307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.287712][T29307] RSP: 002b:00007fe172d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 829.287730][T29307] RAX: ffffffffffffffda RBX: 00007fe171fe5fa0 RCX: 00007fe171d8f7c9 [ 829.287742][T29307] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 829.287754][T29307] RBP: 00007fe172d10090 R08: 0000000000000000 R09: 0000000000000000 [ 829.287763][T29307] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 829.287773][T29307] R13: 00007fe171fe6038 R14: 00007fe171fe5fa0 R15: 00007ffe7343b7a8 [ 829.287799][T29307] [ 829.339884][T29313] IPVS: length: 29 != 8 [ 829.341304][ T6007] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 829.535705][ T6007] usb 5-1: device descriptor read/64, error -71 [ 829.606301][T29343] bridge0: entered promiscuous mode [ 829.607949][T29343] macsec1: entered allmulticast mode [ 829.609595][T29343] bridge0: entered allmulticast mode [ 829.621790][T29343] bridge0: port 3(macsec1) entered blocking state [ 829.624038][T29343] bridge0: port 3(macsec1) entered disabled state [ 829.630411][T29343] bridge0: left allmulticast mode [ 829.632233][T29343] bridge0: left promiscuous mode [ 829.688739][T29353] fuse: Bad value for 'rootmode' [ 829.764783][T29361] FAULT_INJECTION: forcing a failure. [ 829.764783][T29361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.770688][T29361] CPU: 3 UID: 0 PID: 29361 Comm: syz.4.11079 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.770723][T29361] Tainted: [L]=SOFTLOCKUP [ 829.770729][T29361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 829.770740][T29361] Call Trace: [ 829.770746][T29361] [ 829.770755][T29361] dump_stack_lvl+0x16c/0x1f0 [ 829.770786][T29361] should_fail_ex+0x512/0x640 [ 829.770833][T29361] _copy_to_iter+0x29f/0x1710 [ 829.770863][T29361] ? chacha_block_generic+0x211/0x330 [ 829.770891][T29361] ? __pfx__copy_to_iter+0x10/0x10 [ 829.770919][T29361] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.770944][T29361] ? crng_make_state+0x48e/0x6c0 [ 829.770974][T29361] get_random_bytes_user+0x17f/0x3c0 [ 829.771002][T29361] ? __pfx_get_random_bytes_user+0x10/0x10 [ 829.771030][T29361] ? wait_for_random_bytes+0x7c/0x280 [ 829.771055][T29361] ? __pfx_wait_for_random_bytes+0x10/0x10 [ 829.771086][T29361] ? bpf_lsm_file_permission+0x9/0x10 [ 829.771106][T29361] ? security_file_permission+0x71/0x210 [ 829.771133][T29361] random_read_iter+0x11f/0x150 [ 829.771159][T29361] aio_read+0x311/0x4d0 [ 829.771182][T29361] ? __pfx_aio_read+0x10/0x10 [ 829.771219][T29361] ? __might_fault+0xe3/0x190 [ 829.771239][T29361] ? __might_fault+0x13b/0x190 [ 829.771266][T29361] ? io_submit_one+0x1578/0x1df0 [ 829.771287][T29361] io_submit_one+0x1578/0x1df0 [ 829.771316][T29361] ? __pfx_io_submit_one+0x10/0x10 [ 829.771347][T29361] ? __might_fault+0xe3/0x190 [ 829.771366][T29361] ? __might_fault+0x13b/0x190 [ 829.771392][T29361] ? __x64_sys_io_submit+0x1a9/0x350 [ 829.771414][T29361] __x64_sys_io_submit+0x1a9/0x350 [ 829.771439][T29361] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 829.771461][T29361] ? fput+0x70/0xf0 [ 829.771492][T29361] do_syscall_64+0xcd/0xf80 [ 829.771520][T29361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.771538][T29361] RIP: 0033:0x7f5ca978f7c9 [ 829.771553][T29361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.771570][T29361] RSP: 002b:00007f5caa6c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 829.771588][T29361] RAX: ffffffffffffffda RBX: 00007f5ca99e5fa0 RCX: 00007f5ca978f7c9 [ 829.771600][T29361] RDX: 0000200000001580 RSI: 0000000000000001 RDI: 00007f5caa6a7000 [ 829.771610][T29361] RBP: 00007f5caa6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 829.771620][T29361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.771630][T29361] R13: 00007f5ca99e6038 R14: 00007f5ca99e5fa0 R15: 00007ffe4bddb868 [ 829.771656][T29361] [ 829.786213][ T40] audit: type=1400 audit(2000000336.752:119523): avc: denied { write } for pid=29354 comm="syz.6.11078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 829.814793][ T6007] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 830.060948][ T6007] usb 5-1: device descriptor read/64, error -71 [ 830.113371][ T8354] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 830.177659][ T6007] usb usb5-port1: attempt power cycle [ 830.273660][ T8354] usb 13-1: Using ep0 maxpacket: 8 [ 830.277500][ T8354] usb 13-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 830.281122][ T8354] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.286192][ T8354] usb 13-1: config 0 descriptor?? [ 830.290498][ T8354] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 830.512673][T10910] usb 13-1: USB disconnect, device number 42 [ 830.543284][ T6007] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 830.562801][ T6007] usb 5-1: device descriptor read/8, error -71 [ 830.819890][ T6007] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 830.852861][ T6007] usb 5-1: device descriptor read/8, error -71 [ 830.969148][ T6007] usb usb5-port1: unable to enumerate USB device [ 831.210772][T29435] bond1: entered promiscuous mode [ 831.212721][T29435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.221184][T29435] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 831.226851][T29435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.232090][T29435] lo: entered promiscuous mode [ 831.234309][T29435] bond1: (slave lo): Enslaving as a backup interface with an up link [ 831.239548][T29435] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 831.343217][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 831.356416][ T12] bond1: (slave lo): link status up again after 0 ms [ 831.359617][ T12] bond1: (slave lo): failed to get link speed/duplex [ 831.471523][ T12] bond1: (slave lo): failed to get link speed/duplex [ 831.473845][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 831.589831][ T13] bond1: (slave lo): failed to get link speed/duplex [ 831.672883][T29500] fuse: Unknown parameter 'use00000000000000000000' [ 831.685578][ T47] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 831.710350][T29373] bond1: (slave lo): failed to get link speed/duplex [ 831.761570][T29504] serio: Serial port ptm0 [ 831.815042][T29504] FAULT_INJECTION: forcing a failure. [ 831.815042][T29504] name failslab, interval 1, probability 0, space 0, times 0 [ 831.820098][T29504] CPU: 2 UID: 0 PID: 29504 Comm: syz.8.11109 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.820118][T29504] Tainted: [L]=SOFTLOCKUP [ 831.820122][T29504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 831.820129][T29504] Call Trace: [ 831.820134][T29504] [ 831.820139][T29504] dump_stack_lvl+0x16c/0x1f0 [ 831.820160][T29504] should_fail_ex+0x512/0x640 [ 831.820177][T29504] ? fs_reclaim_acquire+0xae/0x150 [ 831.820190][T29504] should_failslab+0xc2/0x120 [ 831.820201][T29504] __kmalloc_cache_noprof+0x72/0x800 [ 831.820215][T29504] ? kobject_uevent_env+0x265/0x1870 [ 831.820227][T29504] ? down_read+0x13d/0x460 [ 831.820239][T29504] ? kobject_uevent_env+0x265/0x1870 [ 831.820250][T29504] kobject_uevent_env+0x265/0x1870 [ 831.820261][T29504] ? __pfx_dev_uevent_name+0x10/0x10 [ 831.820279][T29504] ? kobject_put+0xab/0x590 [ 831.820291][T29504] device_del+0x623/0x9f0 [ 831.820303][T29504] ? __pfx_device_del+0x10/0x10 [ 831.820314][T29504] ? mark_held_locks+0x49/0x80 [ 831.820329][T29504] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 831.820346][T29504] serio_destroy_port+0x52d/0x650 [ 831.820358][T29504] ? serio_disconnect_port+0x123/0x190 [ 831.820370][T29504] serio_unregister_port+0x35/0x70 [ 831.820380][T29504] serport_ldisc_read+0x3c5/0x680 [ 831.820401][T29504] ? __pfx_serport_ldisc_read+0x10/0x10 [ 831.820415][T29504] ? __pfx_autoremove_wake_function+0x10/0x10 [ 831.820435][T29504] tty_read+0x30b/0x5d0 [ 831.820449][T29504] ? __pfx_tty_read+0x10/0x10 [ 831.820465][T29504] ? __lock_acquire+0x433/0x22f0 [ 831.820483][T29504] do_iter_readv_writev+0x743/0x9e0 [ 831.820500][T29504] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 831.820515][T29504] ? __import_iovec+0x1dd/0x650 [ 831.820530][T29504] ? avc_policy_seqno+0x9/0x20 [ 831.820546][T29504] ? selinux_file_permission+0x126/0x660 [ 831.820563][T29504] ? bpf_lsm_file_permission+0x9/0x10 [ 831.820576][T29504] ? security_file_permission+0x71/0x210 [ 831.820597][T29504] ? rw_verify_area+0xcf/0x6c0 [ 831.820613][T29504] vfs_readv+0x4cb/0x8b0 [ 831.820634][T29504] ? __lock_acquire+0x433/0x22f0 [ 831.820649][T29504] ? __pfx_vfs_readv+0x10/0x10 [ 831.820674][T29504] ? __fget_files+0x20e/0x3c0 [ 831.820685][T29504] ? __fget_files+0x200/0x3c0 [ 831.820699][T29504] ? do_readv+0x132/0x340 [ 831.820713][T29504] do_readv+0x132/0x340 [ 831.820727][T29504] ? __pfx_do_readv+0x10/0x10 [ 831.820747][T29504] do_syscall_64+0xcd/0xf80 [ 831.820764][T29504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.820775][T29504] RIP: 0033:0x7fe171d8f7c9 [ 831.820785][T29504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.820796][T29504] RSP: 002b:00007fe172d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 831.820806][T29504] RAX: ffffffffffffffda RBX: 00007fe171fe5fa0 RCX: 00007fe171d8f7c9 [ 831.820813][T29504] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 831.820819][T29504] RBP: 00007fe172d10090 R08: 0000000000000000 R09: 0000000000000000 [ 831.820826][T29504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.820832][T29504] R13: 00007fe171fe6038 R14: 00007fe171fe5fa0 R15: 00007ffe7343b7a8 [ 831.820846][T29504] [ 831.824464][ T12] bond1: (slave lo): failed to get link speed/duplex [ 831.856514][ T47] usb 11-1: Using ep0 maxpacket: 8 [ 831.944648][ T47] usb 11-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 831.947699][ T47] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.952009][ T47] usb 11-1: config 0 descriptor?? [ 831.955296][ T47] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 831.974532][T29401] bond1: (slave lo): failed to get link speed/duplex [ 832.109139][T29526] loop5: detected capacity change from 0 to 7 [ 832.111809][T29526] Dev loop5: unable to read RDB block 7 [ 832.113675][T29526] loop5: unable to read partition table [ 832.115561][T29526] loop5: partition table beyond EOD, truncated [ 832.117507][T29526] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 832.175748][ T6007] usb 11-1: USB disconnect, device number 44 [ 832.190315][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.194114][T29536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.199987][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.202382][T29536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.758585][T29590] fuse: Unknown parameter 'user_i00000000000000000000' [ 832.922224][T29592] __nla_validate_parse: 10 callbacks suppressed [ 832.922236][T29592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11133'. [ 833.311145][ T47] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 833.451035][T29616] fuse: Unknown parameter 'user_id00000000000000000000' [ 833.471443][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 833.483309][ T47] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 833.486252][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.493308][ T47] usb 9-1: config 0 descriptor?? [ 833.498053][ T47] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 833.716351][ T47] usb 9-1: USB disconnect, device number 79 [ 833.839364][T29644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 833.862203][T29644] FAULT_INJECTION: forcing a failure. [ 833.862203][T29644] name failslab, interval 1, probability 0, space 0, times 0 [ 833.868997][T29644] CPU: 3 UID: 0 PID: 29644 Comm: syz.6.11147 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.869026][T29644] Tainted: [L]=SOFTLOCKUP [ 833.869032][T29644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 833.869043][T29644] Call Trace: [ 833.869057][T29644] [ 833.869065][T29644] dump_stack_lvl+0x16c/0x1f0 [ 833.869111][T29644] should_fail_ex+0x512/0x640 [ 833.869143][T29644] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 833.869167][T29644] should_failslab+0xc2/0x120 [ 833.869186][T29644] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 833.869207][T29644] ? copy_process+0x4b5/0x74e0 [ 833.869232][T29644] ? copy_process+0x4b5/0x74e0 [ 833.869248][T29644] copy_process+0x4b5/0x74e0 [ 833.869279][T29644] ? __pfx_copy_process+0x10/0x10 [ 833.869301][T29644] ? lockdep_init_map_type+0x5c/0x270 [ 833.869328][T29644] ? lockdep_init_map_type+0x5c/0x270 [ 833.869380][T29644] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 833.869409][T29644] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 833.869439][T29644] vhost_task_create+0x1d2/0x370 [ 833.869462][T29644] ? __pfx_vhost_task_create+0x10/0x10 [ 833.869484][T29644] ? look_up_lock_class+0x59/0x130 [ 833.869514][T29644] ? __pfx_vhost_task_fn+0x10/0x10 [ 833.869540][T29644] ? __pfx___mutex_lock+0x10/0x10 [ 833.869560][T29644] kvm_mmu_post_init_vm+0x1b7/0x380 [ 833.869581][T29644] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 833.869601][T29644] ? kvm_vcpu_ioctl+0x149a/0x1660 [ 833.869631][T29644] kvm_vcpu_ioctl+0x5eb/0x1660 [ 833.869659][T29644] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 833.869684][T29644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 833.869708][T29644] ? do_vfs_ioctl+0x128/0x14f0 [ 833.869732][T29644] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 833.869754][T29644] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 833.869786][T29644] ? hook_file_ioctl_common+0x144/0x410 [ 833.869819][T29644] ? selinux_file_ioctl+0x180/0x270 [ 833.869840][T29644] ? selinux_file_ioctl+0xb4/0x270 [ 833.869863][T29644] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 833.869890][T29644] __x64_sys_ioctl+0x18e/0x210 [ 833.869916][T29644] do_syscall_64+0xcd/0xf80 [ 833.869943][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.869959][T29644] RIP: 0033:0x7f86d998f7c9 [ 833.869974][T29644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.869990][T29644] RSP: 002b:00007f86da889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.870007][T29644] RAX: ffffffffffffffda RBX: 00007f86d9be5fa0 RCX: 00007f86d998f7c9 [ 833.870019][T29644] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 833.870029][T29644] RBP: 00007f86da889090 R08: 0000000000000000 R09: 0000000000000000 [ 833.870039][T29644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.870049][T29644] R13: 00007f86d9be6038 R14: 00007f86d9be5fa0 R15: 00007ffdf0d27ee8 [ 833.870075][T29644] [ 834.246335][ T40] audit: type=1400 audit(2000000340.922:119524): avc: denied { audit_read } for pid=29664 comm="syz.6.11151" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 834.502956][T29685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11158'. [ 834.926062][ T8354] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 835.022604][ T6101] usb 13-1: new high-speed USB device number 43 using dummy_hcd [ 835.089706][ T8354] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 835.093692][ T8354] usb 9-1: config 0 interface 0 has no altsetting 0 [ 835.100400][ T8354] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 835.104227][ T8354] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 835.108123][ T8354] usb 9-1: Product: syz [ 835.109923][ T8354] usb 9-1: Manufacturer: syz [ 835.111892][ T8354] usb 9-1: SerialNumber: syz [ 835.117377][ T8354] usb 9-1: config 0 descriptor?? [ 835.124476][ T8354] usb 9-1: selecting invalid altsetting 0 [ 835.205583][ T6101] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 835.209158][ T6101] usb 13-1: config 0 interface 0 has no altsetting 0 [ 835.213274][ T6101] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 835.216891][ T6101] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 835.220068][ T6101] usb 13-1: Product: syz [ 835.221788][ T6101] usb 13-1: Manufacturer: syz [ 835.223410][ T6101] usb 13-1: SerialNumber: syz [ 835.226445][ T6101] usb 13-1: config 0 descriptor?? [ 835.230567][ T6101] usb 13-1: selecting invalid altsetting 0 [ 835.338958][ T8354] usb 9-1: USB disconnect, device number 80 [ 835.443574][ T6101] usb 13-1: USB disconnect, device number 43 [ 835.584596][T29761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11168'. [ 835.770471][T29775] fuse: Bad value for 'fd' [ 835.788925][T29777] FAULT_INJECTION: forcing a failure. [ 835.788925][T29777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.794573][T29777] CPU: 3 UID: 0 PID: 29777 Comm: syz.0.11175 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.794600][T29777] Tainted: [L]=SOFTLOCKUP [ 835.794605][T29777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 835.794614][T29777] Call Trace: [ 835.794619][T29777] [ 835.794625][T29777] dump_stack_lvl+0x16c/0x1f0 [ 835.794652][T29777] should_fail_ex+0x512/0x640 [ 835.794680][T29777] _copy_from_user+0x2e/0xd0 [ 835.794702][T29777] copy_msghdr_from_user+0x98/0x160 [ 835.794718][T29777] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 835.794732][T29777] ? __lock_acquire+0x433/0x22f0 [ 835.794762][T29777] ___sys_sendmsg+0xfe/0x1d0 [ 835.794780][T29777] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.794796][T29777] ? __lock_acquire+0x433/0x22f0 [ 835.794842][T29777] __sys_sendmsg+0x16d/0x220 [ 835.794856][T29777] ? __pfx___sys_sendmsg+0x10/0x10 [ 835.794886][T29777] do_syscall_64+0xcd/0xf80 [ 835.794909][T29777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.794925][T29777] RIP: 0033:0x7f42b758f7c9 [ 835.794938][T29777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.794954][T29777] RSP: 002b:00007f42b84ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.794970][T29777] RAX: ffffffffffffffda RBX: 00007f42b77e5fa0 RCX: 00007f42b758f7c9 [ 835.794980][T29777] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 835.794988][T29777] RBP: 00007f42b84ee090 R08: 0000000000000000 R09: 0000000000000000 [ 835.794999][T29777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.795009][T29777] R13: 00007f42b77e6038 R14: 00007f42b77e5fa0 R15: 00007ffce0c15878 [ 835.795029][T29777] [ 835.803022][ T47] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 835.835934][T29781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11177'. [ 836.040943][ T47] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 836.045213][ T47] usb 11-1: config 0 interface 0 has no altsetting 0 [ 836.051516][ T47] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 836.055251][ T47] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 836.058780][ T47] usb 11-1: Product: syz [ 836.061485][ T47] usb 11-1: Manufacturer: syz [ 836.063445][ T47] usb 11-1: SerialNumber: syz [ 836.068601][ T47] usb 11-1: config 0 descriptor?? [ 836.075077][ T47] usb 11-1: selecting invalid altsetting 0 [ 836.085897][T29811] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 836.095445][T29811] netlink: 'syz.8.11186': attribute type 1 has an invalid length. [ 836.098475][T29811] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11186'. [ 836.101719][T29811] NCSI netlink: No device for ifindex 0 [ 836.152808][T29818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11187'. [ 836.290110][ T47] usb 11-1: USB disconnect, device number 45 [ 836.319685][T29811] ------------[ cut here ]------------ [ 836.321997][T29811] WARNING: mm/page_alloc.c:5159 at __alloc_frozen_pages_noprof+0x309/0x2440, CPU#0: syz.8.11186/29811 [ 836.326275][T29811] Modules linked in: [ 836.327194][ T6007] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 836.328177][T29811] CPU: 0 UID: 0 PID: 29811 Comm: syz.8.11186 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.335539][T29811] Tainted: [L]=SOFTLOCKUP [ 836.337381][T29811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 836.340242][ T40] audit: type=1400 audit(2000000342.886:119525): avc: denied { write } for pid=5845 comm="syz-executor" path="pipe:[7365]" dev="pipefs" ino=7365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 836.341497][T29811] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 836.351779][T29811] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 41 96 4f 09 83 fe 0a 0f 86 0c fe ff ff 80 3d c6 cf 55 0e 00 75 0b c6 05 bd cf 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 836.360160][T29811] RSP: 0018:ffffc9000761f9f8 EFLAGS: 00010246 [ 836.362831][T29811] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 836.366241][T29811] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 836.369577][T29811] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 836.373222][T29811] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0 [ 836.377506][T29811] R13: 1ffff92000ec3f55 R14: ffffffff9abd69c4 R15: 0000000000000013 [ 836.381256][T29811] FS: 00007fe172d106c0(0000) GS:ffff8880d6960000(0000) knlGS:0000000000000000 [ 836.385098][T29811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.387908][T29811] CR2: 00007fe172d0efe0 CR3: 0000000031df4000 CR4: 0000000000352ef0 [ 836.391467][T29811] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 836.394906][T29811] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 836.398361][T29811] Call Trace: [ 836.399848][T29811] [ 836.401240][T29811] ? find_held_lock+0x2b/0x80 [ 836.403474][T29811] ? avc_has_extended_perms+0x33a/0x1090 [ 836.405976][T29811] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 836.408718][T29811] ? avc_has_extended_perms+0x47c/0x1090 [ 836.411239][T29811] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 836.414259][T29811] ? lockdep_hardirqs_on+0x7c/0x110 [ 836.416523][T29811] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 836.419075][T29811] ? policy_nodemask+0xea/0x4e0 [ 836.421183][T29811] alloc_pages_mpol+0x1fb/0x550 [ 836.424209][T29811] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 836.426556][T29811] ___kmalloc_large_node+0x130/0x1a0 [ 836.429357][T29811] __kmalloc_large_node_noprof+0x1c/0x70 [ 836.431776][T29811] ? __might_fault+0xe3/0x190 [ 836.434116][T29811] __kmalloc_noprof.cold+0xc/0x62 [ 836.436247][T29811] ? raw_alloc_io_data+0x12c/0x1a0 [ 836.438397][T29811] ? raw_alloc_io_data+0x12c/0x1a0 [ 836.440587][T29811] raw_alloc_io_data+0x12c/0x1a0 [ 836.442723][T29811] raw_ioctl+0x628/0x2bf0 [ 836.445048][T29811] ? __pfx_raw_ioctl+0x10/0x10 [ 836.447104][T29811] ? selinux_file_ioctl+0xb4/0x270 [ 836.449336][T29811] ? __pfx_raw_ioctl+0x10/0x10 [ 836.451397][T29811] __x64_sys_ioctl+0x18e/0x210 [ 836.453619][T29811] do_syscall_64+0xcd/0xf80 [ 836.455759][T29811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.458312][T29811] RIP: 0033:0x7fe171d8f7c9 [ 836.458332][T29811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.458351][T29811] RSP: 002b:00007fe172d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.458373][T29811] RAX: ffffffffffffffda RBX: 00007fe171fe5fa0 RCX: 00007fe171d8f7c9 [ 836.458387][T29811] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000006 [ 836.458398][T29811] RBP: 00007fe171e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 836.458411][T29811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.458423][T29811] R13: 00007fe171fe6038 R14: 00007fe171fe5fa0 R15: 00007ffe7343b7a8 [ 836.458448][T29811] [ 836.458459][T29811] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 836.458476][T29811] CPU: 0 UID: 0 PID: 29811 Comm: syz.8.11186 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.458500][T29811] Tainted: [L]=SOFTLOCKUP [ 836.458507][T29811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 836.458518][T29811] Call Trace: [ 836.458525][T29811] [ 836.458532][T29811] dump_stack_lvl+0x3d/0x1f0 [ 836.458566][T29811] vpanic+0x640/0x6f0 [ 836.458591][T29811] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 836.458613][T29811] panic+0xca/0xd0 [ 836.458635][T29811] ? __pfx_panic+0x10/0x10 [ 836.458667][T29811] check_panic_on_warn+0xab/0xb0 [ 836.458691][T29811] __warn+0x108/0x3c0 [ 836.458716][T29811] __report_bug+0x2a0/0x520 [ 836.458737][T29811] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 836.458762][T29811] ? __pfx___report_bug+0x10/0x10 [ 836.458784][T29811] ? __kernel_text_address+0xd/0x40 [ 836.458810][T29811] ? unwind_get_return_address+0x59/0xa0 [ 836.458836][T29811] ? arch_stack_walk+0xa6/0x100 [ 836.458867][T29811] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 836.458892][T29811] report_bug+0xb2/0x220 [ 836.458915][T29811] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 836.458937][T29811] handle_bug+0x127/0x260 [ 836.458956][T29811] exc_invalid_op+0x17/0x50 [ 836.458973][T29811] asm_exc_invalid_op+0x1a/0x20 [ 836.458991][T29811] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440 [ 836.459015][T29811] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 41 96 4f 09 83 fe 0a 0f 86 0c fe ff ff 80 3d c6 cf 55 0e 00 75 0b c6 05 bd cf 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 836.459030][T29811] RSP: 0018:ffffc9000761f9f8 EFLAGS: 00010246 [ 836.459045][T29811] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 836.459056][T29811] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 836.459067][T29811] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 836.459077][T29811] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0 [ 836.459090][T29811] R13: 1ffff92000ec3f55 R14: ffffffff9abd69c4 R15: 0000000000000013 [ 836.459123][T29811] ? find_held_lock+0x2b/0x80 [ 836.459143][T29811] ? avc_has_extended_perms+0x33a/0x1090 [ 836.459175][T29811] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 836.459200][T29811] ? avc_has_extended_perms+0x47c/0x1090 [ 836.459233][T29811] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 836.459262][T29811] ? lockdep_hardirqs_on+0x7c/0x110 [ 836.459288][T29811] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 836.459314][T29811] ? policy_nodemask+0xea/0x4e0 [ 836.459335][T29811] alloc_pages_mpol+0x1fb/0x550 [ 836.459355][T29811] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 836.459380][T29811] ___kmalloc_large_node+0x130/0x1a0 [ 836.459401][T29811] __kmalloc_large_node_noprof+0x1c/0x70 [ 836.459421][T29811] ? __might_fault+0xe3/0x190 [ 836.459444][T29811] __kmalloc_noprof.cold+0xc/0x62 [ 836.459469][T29811] ? raw_alloc_io_data+0x12c/0x1a0 [ 836.459497][T29811] ? raw_alloc_io_data+0x12c/0x1a0 [ 836.459521][T29811] raw_alloc_io_data+0x12c/0x1a0 [ 836.459548][T29811] raw_ioctl+0x628/0x2bf0 [ 836.459580][T29811] ? __pfx_raw_ioctl+0x10/0x10 [ 836.459603][T29811] ? selinux_file_ioctl+0xb4/0x270 [ 836.459629][T29811] ? __pfx_raw_ioctl+0x10/0x10 [ 836.459654][T29811] __x64_sys_ioctl+0x18e/0x210 [ 836.459681][T29811] do_syscall_64+0xcd/0xf80 [ 836.459709][T29811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.459728][T29811] RIP: 0033:0x7fe171d8f7c9 [ 836.459742][T29811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.459760][T29811] RSP: 002b:00007fe172d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.459775][T29811] RAX: ffffffffffffffda RBX: 00007fe171fe5fa0 RCX: 00007fe171d8f7c9 [ 836.459788][T29811] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000006 [ 836.459799][T29811] RBP: 00007fe171e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 836.459810][T29811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.459820][T29811] R13: 00007fe171fe6038 R14: 00007fe171fe5fa0 R15: 00007ffe7343b7a8 [ 836.459846][T29811] [ 836.460605][T29811] Kernel Offset: disabled